# Deploying Anyscale on a Managed Service for Kubernetes® cluster Source: https://docs.nebius.com/3p-integrations/anyscale [Anyscale](https://www.anyscale.com/) is a platform that helps scale AI workloads. Built on [Ray](https://www.ray.io/), it adds observability, data governance, developer tools and optimization. You can run Anyscale in Nebius AI Cloud, deploying it on a [Managed Service for Kubernetes](/kubernetes/index) cluster. To store application data and artifacts, you can set up a Network File System (NFS) server on a [Compute](/compute/index) virtual machine (VM), and an [Object Storage](/object-storage/index) bucket. ## Costs Nebius AI Cloud charges you for the following billing items: * NFS server: * [Compute VM](/compute/resources/pricing#virtual-machines-gpus-vcpus-ram) (default: Non-GPU AMD EPYC Genoa, `4vcpu-16gb`) * [Compute disk](/compute/resources/pricing#disks) (default: [Network SSD IO M3](/compute/storage/types#disk-types), 93 GiB) * Artifacts storage: [Object Storage bucket](/object-storage/resources/pricing) * Anyscale deployment: * [Compute VMs](/compute/resources/pricing#virtual-machines-gpus-vcpus-ram) as Managed Kubernetes nodes (default: one NVIDIA® H100 NVLink with Intel Sapphire Rapids, `1gpu-16vcpu-200gb` VM; one Non-GPU AMD EPYC Genoa, `4vcpu-16gb` VM) * [Compute disks](/compute/resources/pricing#disks) for the VMs (default: two [Network SSD](/compute/storage/types#disk-types) disks, 1023 GiB and 128 GiB) ## Prerequisites 1. [Create an Anyscale account](https://console.anyscale.com/register/v2). 2. Install and configure the following tools: * [Nebius AI Cloud CLI](/cli/quickstart) * [Python](https://www.python.org/downloads/) and [Anyscale CLI](https://docs.anyscale.com/reference/quickstart-cli) * [Terraform](https://developer.hashicorp.com/terraform/install) * [kubectl](https://kubernetes.io/docs/tasks/tools/#kubectl) and [Helm](https://helm.sh/docs/intro/install/) ## Steps ### Prepare the environment 1. Clone the [GitHub repository](https://github.com/nebius/nebius-solutions-library) and go to the `anyscale` directory: ```bash theme={null} git clone https://github.com/nebius/nebius-solutions-library.git cd nebius-solutions-library/anyscale ``` 2. Edit the `environment.sh` file to add the IDs of your tenant, project and the region of the project to the environment variables at the top of the file. 3. Execute `environment.sh` to export environment variables from it, so they persist for the current shell session: ```bash theme={null} source ./environment.sh ``` 4. Make a copy of the configuration file: ```bash theme={null} cp default.yaml.tpl default.yaml ``` 5. Create an SSH key for the NFS server and Anyscale nodes: ```bash theme={null} ssh-keygen -t ed25519 ``` ### Create storage for Anyscale The Terraform configuration in the `prepare` directory creates an Object Storage bucket to store workload artifacts and an NFS server to store Anyscale workspace data (user code, configuration files, etc.). 1. Edit `default.yaml`: * In `.ssh_public_key`, paste the contents of the public SSH key (`~/.ssh/id_ed25519.pub`). * In `.nfs_server.nfs_size`, set the size of the disk in GiB. It is a [Network SSD IO M3 disk](/compute/storage/types#disk-types), its size must be a multiple of 93 GiB (for example, 1023 GiB). 2. Apply the Terraform configuration from the `prepare` directory: ```bash theme={null} terraform -chdir=prepare init terraform -chdir=prepare apply ``` ### Deploy Anyscale The Terraform configuration in the `deploy` directory creates a Managed Kubernetes cluster and node groups, and deploys the Anyscale application on the cluster. 1. Register the Anyscale cloud: ```bash theme={null} ./register.sh ``` Replace `` with the name for your Anyscale cloud deployment that will be shown in Anyscale console. The output contains a cloud deployment ID that starts with `cldrsrc_`. Save it for the next step. 2. Create an [Anyscale API key](https://docs.anyscale.com/administration/organization/user-auth#api-keys) in [Anyscale console](https://console.anyscale.com/v2/api-keys). 3. Edit `default.yaml`: * In `.anyscale.cloud_deployment_id`, paste the cloud deployment ID that starts with `cldrsrc_` which you obtained from the previous step. * In `.anyscale.anyscale_cli_token`, paste the Anyscale API key. * In `k8s_cluster`, configure the cluster. It should have at least one GPU node group with one node, and at least one non-GPU node. The default configuration creates an NVIDIA H100 node group with one single-GPU node and a non-GPU node group with one node. For details about the parameters, see the following articles and resources: * `{cpu,gpu}_nodes_{platform,preset}`: [Types of virtual machines and GPUs in Nebius AI Cloud](/compute/virtual-machines/types) * `enable_gpu_cluster`, `infiniband_fabric`: [Interconnecting GPUs in Managed Service for Kubernetes® clusters using InfiniBand™](/kubernetes/gpu/clusters) Single-GPU nodes don't support GPU clusters and InfiniBand interconnect. If your preset for GPU nodes is single-GPU, set `enable_gpu_cluster` to `false` and `infiniband_fabric` to an empty string. * `gpu_nodes_driverfull_image`: [GPU drivers and other components](/kubernetes/gpu/set-up#gpu-drivers-and-other-components) * `enable_{prometheus,loki}`: [section about Kubernetes observability](https://github.com/nebius/nebius-solutions-library/tree/main/k8s-training#observability) in the Nebius AI Cloud solution library 4. Apply the Terraform configuration from the `deploy` directory: ```bash theme={null} terraform -chdir=deploy init terraform -chdir=deploy apply ``` ### (Optional) Configure Anyscale You can configure how Anyscale head node and worker nodes are selected. To do this, log in to [Anyscale console](https://console.anyscale.com/v2), go to your workspace and then follow instructions in the next sections. #### Force a non-GPU head node Anyscale head node is a Kubernetes Pod that doesn't use GPUs. However, by default, it can be scheduled on a GPU node or a non-GPU node. You can force the head node to run on non-GPU nodes to save you the costs of provisioning GPU nodes. To do that, perform the following steps in your workspace in Anyscale console: 1. On the **Compute resources** panel, under **Head node**, click . 2. In the window that opens, expand **Advanced config**. 3. Under **Instance config**, paste the node selector specification: ```json theme={null} { "spec": { "nodeSelector": { "node.kubernetes.io/instance-type": "cpu-d3" } } } ``` The value of the `node.kubernetes.io/instance-type` annotation must match the platform specified in the `.k8s_cluster.cpu_nodes_platform` parameter of the `anyscale/default.yaml` file. 4. Click **Save**. #### Configure the selection of worker nodes Anyscale allows automatic and manual modes of selecting worker nodes for your workspaces. To choose between these modes in Anyscale console, on the **Compute resources** panel, under **Worker nodes**, select or clear the **Auto-select worker nodes** checkbox: * When the checkbox is selected, Anyscale tries to provision worker nodes automatically. This works well when you run Anyscale and other workloads at the same time in the Managed Kubernetes cluster, because Anyscale workloads only reserve as many GPUs as they require. However, since the number of worker nodes is scaled on demand, provisioning new worker nodes can take some time. * When the checkbox is not selected, you select worker nodes manually. This is recommended for workloads that need to scale up fast, or if you need granular control over GPU usage. ### Test the deployment For details on testing the Anyscale deployment, see Anyscale resources: * [Tutorial: Create a workspace](https://docs.anyscale.com/get-started/create-workspace) * [Quickstarts for LLM serving](https://console.anyscale.com/template-preview/deployment-serve-llm) ## How to delete the created resources Some of the created resources are chargeable. If you don't need them, delete these resources, so Nebius AI Cloud doesn't charge for them: 1. In Anyscale console, delete all the workloads that use the deployment. 2. [Delete all objects](/object-storage/objects/manage#how-to-delete-objects) from the Anyscale bucket. Its name starts with `anyscale-`. 3. Delete the Managed Kubernetes cluster, NFS server and bucket by running the following commands in the `anyscale` directory of the cloned repository: ```bash theme={null} terraform -chdir=deploy destroy terraform -chdir=prepare destroy ``` # Software compatibility and supported runtimes in Nebius AI Cloud Source: https://docs.nebius.com/3p-integrations/compatibility Nebius AI Cloud supports a wide range of workloads and software stacks, making it easy to run your machine learning jobs, endpoints and applications by using familiar tools and frameworks. ## Runtimes ### Nebius AI Cloud compute You can launch and manage your workloads on compute resources that Nebius AI Cloud offers: * **Compute virtual machines (VMs)** Cloud-hosted VMs with NVIDIA® GPU support for ML/AI workloads. [Web console](https://console.nebius.com/compute) | [Documentation](/compute/index) * **Compute containers over VMs** Containerized applications with fast, flexible setup, deployed directly on VMs. [Web console](https://console.nebius.com/containers) | [Documentation](/compute/virtual-machines/containers) * **Managed Service for Kubernetes® clusters** Fully managed Kubernetes clusters for scalable, containerized workloads. [Web console](https://console.nebius.com/mk8s) | [Documentation](/kubernetes/index) * **Managed Service for Soperator clusters** Slurm-based clusters for distributed ML/AI training, also available as an open-source Kubernetes operator. [Web console](https://console.nebius.com/slurm) | [Documentation](/slurm-soperator/index) ### Third-party orchestrators Nebius AI Cloud integrates with leading open-source orchestrators that help you manage and automate workloads: * **dstack** Flexible workload manager for ML and data science. [Tutorial](/3p-integrations/dstack) * **Metaflow (Outerbounds)** Production-grade workflow management for ML pipelines. [Blog post](https://nebius.com/blog/posts/nebius-outerbounds-strategic-technology-partnership-integration) * **SkyPilot** Unified framework for running AI workloads across clouds, including Nebius AI Cloud. [Tutorial](/3p-integrations/skypilot) ## What you can run in Nebius AI Cloud If your software runs on Ubuntu 20 or higher and supports containers, VMs or Kubernetes clusters, you can use Nebius AI Cloud runtimes to run it. This includes, but is not limited to, the tools, libraries and platforms listed below. Use containerized deployment where possible for better portability, scalability and management. ### ML libraries and frameworks * [Apache MXNet](https://mxnet.apache.org/) * [AutoKeras](https://autokeras.com/) * [auto-sklearn](https://automl.github.io/auto-sklearn) * [Caffe](https://caffe.berkeleyvision.org/) * [Chainer](https://chainer.org/) * [Darknet](https://pjreddie.com/darknet/) * [Eclipse Deeplearning4j](https://deeplearning4j.konduit.ai/) * [JAX](https://docs.jax.dev/en/latest/) * [Keras](https://keras.io/) * [LiteRT](https://ai.google.dev/edge/litert) (TensorFlow Lite) * [MegEngine](https://github.com/MegEngine/MegEngine) * [Microsoft Cognitive Toolkit (CNTK)](https://learn.microsoft.com/en-us/cognitive-toolkit/) * [MindSpore](https://www.mindspore.cn/en) * [MLlib](https://spark.apache.org/mllib/) * [ML.NET](https://dotnet.microsoft.com/en-us/apps/ai/ml-dotnet) * [NVIDIA cuBLAS](https://developer.nvidia.com/cublas) * [NVIDIA CUDA Deep Neural Network (cuDNN)](https://developer.nvidia.com/cudnn) * [OpenVINO](https://www.intel.com/content/www/us/en/developer/tools/openvino-toolkit/overview.html) * [Paxml](https://github.com/google/paxml/tree/main) (Pax), including as a [Rosetta distribution](https://github.com/NVIDIA/JAX-Toolbox/tree/main/rosetta/rosetta/projects/pax) * [PlaidML](https://plaidml.github.io/plaidml/) * [PyTensor](https://pytensor.readthedocs.io/en/latest/) * [PyTorch](https://pytorch.org/) * [TensorFlow](https://www.tensorflow.org/) * [Theano](https://github.com/Theano/Theano) * [Torch](http://torch.ch/) * [TPOT](https://github.com/EpistasisLab/tpot) (Tree-based Pipeline Optimization Tool) * [XGBoost](https://xgboost.readthedocs.io/en/stable/) ### Distributed training frameworks * [BigDL-LLM](https://bigdl.readthedocs.io/en/latest/) * [DeepSpeed](https://www.deepspeed.ai/) * [Horovod](https://horovod.ai/) * [IPEX-LLM](https://github.com/intel/ipex-llm) * [PaddlePaddle](https://www.paddlepaddle.org.cn/en) * [Ray](https://www.ray.io/) * [TorchFT](https://docs.pytorch.org/torchft/) ### Inference runtimes * [NVIDIA TensorRT](https://developer.nvidia.com/tensorrt) * [SGlang](https://docs.sglang.ai/) * [vLLM](https://vllm.ai/) ### Ecosystem AI platforms * [Baseten](https://www.baseten.co/) * [dstack](https://dstack.ai/) — see [tutorial](/3p-integrations/dstack) * [Lightning AI](https://lightning.ai/) * [Mithril](https://mithril.ai/) * [NVIDIA NIM microservices](https://www.nvidia.com/en-us/ai-data-science/products/nim-microservices/) * [NVIDIA DGX Cloud](https://www.nvidia.com/en-us/data-center/dgx-cloud/) * [NVIDIA Run:ai](https://www.nvidia.com/en-us/software/run-ai/) — see [tutorial](/3p-integrations/run-ai) * [Outerbounds](https://outerbounds.com/) ([Metaflow](https://metaflow.org/)) * [SkyPilot](https://docs.skypilot.co/en/latest/overview.html) — see [tutorial](/3p-integrations/skypilot) # Installation of dstack for AI workload orchestration Source: https://docs.nebius.com/3p-integrations/dstack Nebius AI Cloud supports integration with [dstack](https://dstack.ai/docs/). This is an open-source container orchestrator for AI workload management. It is a streamlined alternative to [Slurm](https://slurm.schedmd.com/documentation.html) and [Kubernetes](https://kubernetes.io/docs/home/), and designed especially for AI. For example, by using `dstack` you can develop, train and deploy AI models. To get started with `dstack`, install its server on your local machine. After that, you can create and deploy `dstack` resources, such as tasks or services. If you don't want to use your local machine, you can [create a Compute virtual machine](/compute/virtual-machines/manage) and then [connect to it](/compute/virtual-machines/connect). ## Costs If you install `dstack` on your local machine, Nebius AI Cloud doesn't charge for the resources required for the `dstack` server installation. If you use a VM, see the [Compute pricing](/compute/resources/pricing). ## Steps ### Prepare a service account To configure access to Nebius AI Cloud for the `dstack` server: 1. Make sure you are in a [group](/iam/authorization/groups/index) that has the `admin` role within your tenant or project; for example, the default `admins` group. You can check this in the [Administration → IAM](https://console.nebius.com/iam) section of the web console. 2. [Create a service account](/iam/service-accounts/manage#create-a-service-account). 3. [Add it to a group](/iam/service-accounts/manage#grant-editor-access-to-the-service-account) that has at least the `editor` role within your tenant; for example, the default `editors` group. 4. Upload an authorized key to the created service account: 1. In the sidebar, go to  **Administration** → **IAM**. 2. Go to the **Service accounts** tab. 3. Open the created service account's page. 4. Go to the **Authorized keys** tab and then click  **Upload authorized key**. 5. Generate the key: ```bash theme={null} openssl genrsa -out private.pem 4096 && \ openssl rsa -in private.pem -outform PEM -pubout \ -out public.pem ``` 6. In the web console, attach the generated `public.pem` file to the service account. 7. (Optional) Specify the date when the key should expire. 8. Click the **Upload key** button. After that, the key appears in the list of authorized keys. ### Create a configuration file for the `dstack` server 1. Create the `~/.dstack/server/` directory and go into it: ```bash theme={null} mkdir -p ~/.dstack/server cd ~/.dstack/server ``` 2. Create the following `config.yml` configuration file: ```yml theme={null} projects: - name: main backends: - type: nebius creds: type: service_account service_account_id: serviceaccount-*** public_key_id: publickey-*** private_key_file: ``` Specify the following parameters: * `service_account_id`: ID of the created service account. You can copy the ID from the [Service accounts](https://console.nebius.com/iam/service-accounts) page. * `public_key_id`: ID of the uploaded authorized key. To copy the ID, go to the created service account's page and open the **Authorized keys** tab. * `private_key_file`: Path to the `private.pem` file. It was generated as part of the authorized key. ### Deploy the configuration file and run the server 1. [Install Python](https://www.python.org/downloads/) version 3.10 or higher. 2. Install `dstack`: ```bash theme={null} pip3 install "dstack[nebius]" -U ``` If you receive `error: externally-managed-environment`, create a [virtual Python environment](https://docs.python.org/3/library/venv.html) and run this command there. As a result, you install the package isolated from the basic environment. Alternatively, run the installation command with the `--break-system-packages` parameter. This option is not as secure as a virtual environment, but it can be useful when you work in a dedicated directory with `dstack` commands. The launch-server command runs in a separate terminal tab in the background until you interrupt it. As a result, you may need to have `dstack` commands available in all the tabs, not only on the tab with the virtual environment. 1. Create it: ```bash theme={null} python3 -m venv ``` 2. Activate the environment: ```bash theme={null} source /bin/activate ``` A directory with the environment name is created. Now, you can install required Python packages. When you no longer need the created virtual environment, run the `deactivate` command and delete the environment directory. 3. Run the `dstack` server: ```bash theme={null} dstack server ``` ```text theme={null} ╱╱╭╮╱╱╭╮╱╱╱╱╱╱╭╮ ╱╱┃┃╱╭╯╰╮╱╱╱╱╱┃┃ ╭━╯┣━┻╮╭╋━━┳━━┫┃╭╮ ┃╭╮┃━━┫┃┃╭╮┃╭━┫╰╯╯ ┃╰╯┣━━┃╰┫╭╮┃╰━┫╭╮╮ ╰━━┻━━┻━┻╯╰┻━━┻╯╰╯ ╭━━┳━━┳━┳╮╭┳━━┳━╮ ┃━━┫┃━┫╭┫╰╯┃┃━┫╭╯ ┣━━┃┃━┫┃╰╮╭┫┃━┫┃ ╰━━┻━━┻╯╱╰╯╰━━┻╯ [12:34:23] INFO Applying ~/.dstack/server/config.yml... [12:34:27] INFO dstack._internal.server.services.plugins:77 Found not enabled builtin plugin rest_plugin. Plugin will not be loaded. INFO Configured the main project in ~/.dstack/config.yml INFO The admin token is ****** INFO The dstack server 0.19.17 is running at http://127.0.0.1:3000 ``` You can open the `dstack` web interface by using the provided address and token. The command doesn't finish and keeps the server running until you interrupt the command. 4. Create a dedicated directory to work with `dstack`: ```bash theme={null} mkdir cd ``` 5. Initialize the server: ```bash theme={null} dstack init ``` Now, you can start orchestrating your AI workloads. ## What's next To manage AI workloads, you can configure and operate with `dstack` resources. They allow you to deploy AI models and optimize usage of cloud resources. For more information, see `dstack` documentation for those resources: * [Dev environments](https://dstack.ai/docs/concepts/dev-environments/) * [Tasks](https://dstack.ai/docs/concepts/tasks/) * [Services](https://dstack.ai/docs/concepts/services/) * [Fleets](https://dstack.ai/docs/concepts/fleets/) ## See also * [Protips](https://dstack.ai/docs/guides/protips/) in `dstack` documentation # Third-party integrations with Nebius AI Cloud Source: https://docs.nebius.com/3p-integrations/index Nebius AI Cloud supports several integrations with third-party tools. They enable you to run and orchestrate AI workloads in the Nebius AI Cloud infrastructure. With such integrations, you can flexibly configure the infrastructure and fulfill your key objectives. For example, you can train and deploy AI models, run workloads on virtual machines or launch parallel jobs. Learn about what and how you can run in Nebius AI Cloud Scale AI workloads with Anyscale deployed on a Managed Service for Kubernetes® cluster Install dstack and orchestrate AI workloads Optimize your GPU resources for ML/AI workloads by using Run:ai and Managed Kubernetes Run, manage and scale AI workloads on Nebius AI Cloud by using SkyPilot Configure a Compute GPU cluster and run NCCL tests with MPIrun # Running parallel jobs with MPIrun Source: https://docs.nebius.com/3p-integrations/mpirun This guide explains how to use [Open MPI](https://docs.open-mpi.org/en/v5.0.6/index.html) and [MPIrun](https://docs.open-mpi.org/en/v5.0.6/man-openmpi/man1/mpirun.1.html) to run parallel jobs on Compute virtual machines (VMs) that have GPUs and are added to a GPU cluster. The guide uses the [NCCL tests](https://github.com/NVIDIA/nccl-tests) developed by NVIDIA® as an example of a job that you can run with MPIrun. You can also run these tests by using Slurm, or [in a Managed Service for Kubernetes® cluster](/kubernetes/gpu/nccl-test) with a node group that has a GPU cluster attached. ## Costs Nebius AI Cloud only charges you for running the virtual machines that make up your GPU cluster. For more details, see the [Compute pricing](/compute/resources/pricing). ## Prerequisites 1. [Create](/compute/clusters/gpu/index#how-to-enable-infiniband-for-vms-with-gpus) a GPU cluster if you don't already have one. 2. [Create virtual machines](/compute/virtual-machines/manage) and add them to the cluster. ## Steps ### Install Open MPI on each VM in the cluster For each VM in the GPU cluster: 1. [Get the VM's private IP address](/compute/virtual-machines/network). 2. [Connect to the VM through SSH](/compute/virtual-machines/connect). 3. Install the [Open MPI](https://www.open-mpi.org/) library on the VM: ```bash theme={null} sudo apt-get install openmpi-bin ``` ### Build the tests on one of the VMs Choose one of the VMs as the main VM – you will run the tests from it. Build the tests on the main VM: 1. Clone the NVIDIA repository with the tests: ```bash theme={null} git clone https://github.com/NVIDIA/nccl-tests ``` 2. Build the tests with Open MPI: ```bash theme={null} cd nccl-tests MPI_HOME=/usr/lib/x86_64-linux-gnu/openmpi MPI=1 make ``` 3. Copy the built binary file, `all_reduce_perf`, to the same directory on other VMs. ### Set up SSH connectivity between the VMs in the cluster 1. Generate an [SSH key pair](/compute/virtual-machines/ssh-keys). When generating the key pair, don't configure a passphrase. 2. Copy the generated pair, `~/.ssh/id_ed25519` and `~/.ssh/id_ed25519.pub`, to the same directory on each other VM. 3. On all other VMs, add the public key from the pair to the list of authorized keys: ```bash theme={null} cat ~/.ssh/id_ed25519.pub >> ~/.ssh/authorized_keys ``` For more details, see the [Open MPI documentation](https://docs.open-mpi.org/en/v5.0.x/launching-apps/ssh.html). ### Run the tests Run the tests from the main VM with the `mpirun` command: ```bash theme={null} mpirun --host :8,:8,:8,:8 \ --allow-run-as-root -np 32 \ -mca pml ucx \ ~/nccl-tests/build/all_reduce_perf -b 512M -e 8G -f 2 -g 1 ``` Where: * `IP_address_[1-4]`: IP address of the VM where you want to run the test. * `:8`: Amount of GPUs on the VM. * `-mca pml ucx`: Instruction for MPI communications to go through InfiniBand™ by using [UCX](https://openucx.org/). To use Ethernet instead, replace the parameter with `-mca btl_tcp_if_include eth0`. This doesn't affect InfiniBand data exchanges of the test itself. * `~/nccl-tests/build/all_reduce_perf`: A path to the binary file that should be available on all VMs. In the result, check the average bus bandwith. If its value is higher than 300 GB/s, the connection is stable. Example: ``` ... # size count type redop root time algbw busbw #wrong time algbw busbw #wrong # (B) (elements) (us) (GB/s) (GB/s) (us) (GB/s) (GB/s) 536870912 134217728 float sum -1 3674.4 146.11 283.09 0 3648.4 147.15 285.11 0 1073741824 268435456 float sum -1 6411.6 167.47 324.47 0 6416.7 167.33 324.21 0 2147483648 536870912 float sum -1 12735 168.62 326.71 0 12979 165.45 320.57 0 4294967296 1073741824 float sum -1 25389 169.17 327.76 0 25598 167.79 325.09 0 8589934592 2147483648 float sum -1 50979 168.50 326.47 0 50799 169.10 327.63 0 # Out of bounds values : 0 OK # Avg bus bandwidth : 317.11 ``` The average bus bandwith is not equal to the InfiniBand™ one as some of the NCCL operations it measures use NVLink. Nevertheless, it accurately estimates the connection. ## How to delete the created resources The virtual machines that make up your GPU cluster are chargeable. If you don't need the VMs, delete them, so Nebius AI Cloud doesn't charge for them: 1. In the sidebar, go to  **Compute** → **Virtual machines**. 2. Next to the virtual machine's name, click → **Delete**. 3. Enter the VM name and confirm deletion. Run the following command to delete the VM: ```bash theme={null} nebius compute instance delete --id ``` If you only know the name of the VM, run the following command: ```bash theme={null} nebius compute instance delete --id \ $(nebius compute instance get-by-name \ --name= \ --format json \ | jq -r ".metadata.id") ``` If you don't know either the name or the ID of the VM, you can list all VMs in your project: ```bash theme={null} nebius compute instance list ``` In the output, find the VM you need and get its ID, then use it in the deletion command. *** *InfiniBand and InfiniBand Trade Association are registered trademarks of the InfiniBand Trade Association.* # Configuring a Managed Service for Kubernetes® cluster to work in Run:ai Source: https://docs.nebius.com/3p-integrations/run-ai To optimize your ML/AI workloads, you can use the [Run:ai](https://www.run.ai) management platform. It dynamically allocates GPU resources, prevents idle GPUs and enables GPU sharing across multiple workloads and users, so that all resources are utilized. This guide explains how to configure your Nebius AI Cloud resources for use in Run:ai. ## Costs Nebius AI Cloud charges you for the following billing items: * [Managed Kubernetes cluster](/kubernetes/resources/pricing). * [Run:ai infrastructure](https://www.nvidia.com/en-us/software/run-ai/). * (Optional) [Managed Service for PostgreSQL® cluster](/postgresql/resources/pricing). ## Prerequisites 1. [Get a Run:ai account token](https://docs.run.ai/v2.20/developer/rest-auth/#request-an-api-token). 2. Prepare the environment: 1. [Install and configure the Nebius AI Cloud CLI](/cli/quickstart). 2. [Install Terraform](https://developer.hashicorp.com/terraform/install). 3. [Install kubectl](https://kubernetes.io/docs/tasks/tools/#kubectl) and [Helm](https://helm.sh/docs/intro/install/). 4. Install [jq](https://jqlang.github.io/jq/), to extract IDs and tokens from the JSON data returned by the Nebius AI Cloud CLI. For more details, see the [jq documentation](https://jqlang.github.io/jq/download/). ```bash Ubuntu theme={null} sudo apt-get install jq ``` ```bash macOS theme={null} brew install jq ``` 5. Save the domain name you control to an environment variable: ```bash theme={null} export DOMAIN_NAME= ``` ## Steps ### Set up a Managed Kubernetes cluster For this tutorial, a Managed Kubernetes cluster must have: * A node group with at least three nodes. Each of these nodes must have a public IP address allocated. * A mounted filesystem. * NVIDIA® GPU Operator. To create the necessary resources quickly, use the [k8s-training solution](https://github.com/nebius/nebius-solution-library/tree/main/k8s-training) for Terraform: 1. Clone the [nebius-solution-library](https://github.com/nebius/nebius-solution-library) repository from GitHub and go to the `k8s-training` directory: ```bash theme={null} git clone https://github.com/nebius/nebius-solution-library.git cd nebius-solution-library/k8s-training ``` 2. Generate an [SSH key pair](/compute/virtual-machines/ssh-keys). If you use a custom file name to save the key pair, specify your public key path in [terraform.tfvars](https://github.com/nebius/nebius-solution-library/blob/main/k8s-training/terraform.tfvars#L5). 3. Load the environment variables: ```bash theme={null} source ./environment.sh ``` 4. Initialize Terraform to download providers and modules: ```bash theme={null} terraform init ``` 5. Set `enable_grafana` and `enable_prometheus` to `false`, `gpu_nodes_assign_public_ip` to `true` and enter your project settings in the `k8s-training/terraform.tfvars` file, or overwrite the values while applying the configuration: ```bash theme={null} terraform apply -var enable_grafana=false -var enable_prometheus=false \ -var parent_id= -var subnet_id= \ -var region= -var gpu_nodes_assign_public_ip=true ``` The command contains the following parameters: * `parent_id`: [Project ID](/iam/manage-projects#terraform-3). * `subnet_id`: [Subnet ID](/vpc/networking/resources#how-to-get-a-subnet-id). * `region`: The project region is displayed in the upper-left corner of the web console, next to your project name. 6. When the cluster and the nodes are ready, connect to the cluster: ```bash theme={null} export NEBIUS_CLUSTER_ID=$(terraform output -json kube_cluster | jq -r '.id') nebius mk8s cluster get-credentials --id $NEBIUS_CLUSTER_ID --external kubectl cluster-info ``` ### Configure KServe [KServe](https://kserve.github.io/website/latest/) is an open-source framework for serving ML models on Kubernetes. KServe uses [Knative](https://knative.dev/docs/) for serverless deployment and the auto-scaling of ML models. 1. Knative can only run on nodes with public IP addresses. To ensure this, identify nodes without public IPs and cordon them. 1. Identify nodes: ```bash theme={null} kubectl get nodes -o jsonpath='{range .items[*]}{.metadata.name}{" - InternalIP: "}{.status.addresses[?(@.type=="InternalIP")].address}{" - ExternalIP: "}{.status.addresses[?(@.type=="ExternalIP")].address}{"\n"}{end}' ``` If you earlier created nodes without public IP addresses, they will have only `InternalIP` in the output. 2. If the resulting list contains nodes with `InternalIP` only, cordon these nodes: ```bash theme={null} kubectl cordon ``` 2. Install Knative: ```bash theme={null} kubectl apply -f https://github.com/knative/serving/releases/download/knative-v1.14.1/serving-crds.yaml kubectl apply -f https://github.com/knative/serving/releases/download/knative-v1.14.1/serving-core.yaml kubectl apply -f https://github.com/knative/net-kourier/releases/download/knative-v1.14.0/kourier.yaml kubectl patch configmap/config-network \ --namespace knative-serving \ --type merge \ --patch '{"data":{"ingress-class":"kourier.ingress.networking.knative.dev"}}' kubectl apply -f https://github.com/knative/serving/releases/download/knative-v1.14.1/serving-default-domain.yaml kubectl patch configmap/config-features \ --namespace knative-serving \ --type merge \ --patch '{"data":{"kubernetes.podspec-schedulername":"enabled","kubernetes.podspec-affinity":"enabled","kubernetes.podspec-tolerations":"enabled","kubernetes.podspec-volumes-emptydir":"enabled","kubernetes.podspec-securitycontext":"enabled","kubernetes.podspec-persistent-volume-claim":"enabled","kubernetes.podspec-persistent-volume-write":"enabled","multi-container":"enabled","kubernetes.podspec-init-containers":"enabled"}}' ``` 3. Check the result: ```bash theme={null} kubectl get jobs -n knative-serving kubectl get pods -n kourier-system ``` Make sure that the `default-domain` job reaches the `Complete` status and the `3scale-kourier-gateway` pod is running. ### Install operators 1. Install the [Kubeflow Training Operator](https://www.kubeflow.org/docs/components/trainer/legacy-v1/overview/) (also known as Kubeflow Trainer): ```bash theme={null} kubectl apply -k "github.com/kubeflow/training-operator/manifests/overlays/standalone?ref=v1.7.0" kubectl delete customresourcedefinition mpijobs.kubeflow.org kubectl patch deployment training-operator -n kubeflow \ --type='json' -p='[{"op": "add", "path": "/spec/template/spec/containers/0/args", "value": ["--enable-scheme=tfjob", "--enable-scheme=pytorchjob", "--enable-scheme=xgboostjob", "--enable-scheme=paddlejob"]}]' ``` 2. Install the [MPI Operator](https://github.com/kubeflow/mpi-operator): ```bash theme={null} kubectl apply -f https://raw.githubusercontent.com/kubeflow/mpi-operator/v0.4.0/deploy/v2beta1/mpi-operator.yaml ``` ### (Optional) Prepare nodes for installing other applications If you cordoned nodes without public IP addresses during the [KServe installation](#configure-kserve), uncordon them: ```bash theme={null} kubectl uncordon ``` ### Set up nginx 1. Get the IP addresses of the nodes: ```bash theme={null} export INTERNAL_IPS=$(kubectl get nodes -o jsonpath='{range .items[*]}{.status.addresses[?(@.type=="InternalIP")].address}{","}{end}' | sed 's/,$//') export EXTERNAL_IPS=$(kubectl get nodes -o jsonpath='{range .items[*]}{.status.addresses[?(@.type=="ExternalIP")].address}{","}{end}' | sed 's/,$//') export IPS=$(echo "$INTERNAL_IPS,$EXTERNAL_IPS" | sed 's/,,*/,/g' | sed 's/^,//' | sed 's/,$//') ``` 2. Install nginx: ```bash theme={null} helm repo add ingress-nginx https://kubernetes.github.io/ingress-nginx helm repo update helm upgrade -i nginx-ingress ingress-nginx/ingress-nginx \ --namespace nginx-ingress --create-namespace \ --set controller.kind=DaemonSet \ --set controller.service.externalIPs="{$IPS}" ``` 3. In your DNS provider, link your domain name (`DOMAIN_NAME`) to the public IP address of one of the nodes. ### Install and configure Prometheus ```bash theme={null} helm repo add prometheus-community https://prometheus-community.github.io/helm-charts helm repo update helm install prometheus prometheus-community/kube-prometheus-stack \ -n monitoring --create-namespace --set grafana.enabled=false ``` ### (Optional) Install cert-manager 1. If you don't have public TLS certificates, install cert-manager: ```bash theme={null} helm repo add jetstack https://charts.jetstack.io helm repo update helm install cert-manager jetstack/cert-manager --namespace cert-manager --create-namespace \ --version v1.10.1 --set installCRDs=true \ --set podDnsConfig.nameservers={"1.1.1.1"} ``` 2. Create `certs.yaml` with the certificate resources. You will use it later when you [create a TLS secret](#create-resources): ```yaml theme={null} apiVersion: cert-manager.io/v1 kind: ClusterIssuer metadata: name: letsencrypt-runai spec: acme: server: https://acme-v02.api.letsencrypt.org/directory email: $EMAIL privateKeySecretRef: name: letsencrypt-runai solvers: - http01: ingress: class: nginx --- apiVersion: cert-manager.io/v1 kind: Certificate metadata: name: runai-tls namespace: runai-backend spec: secretName: runai-backend-tls issuerRef: name: letsencrypt-runai kind: ClusterIssuer commonName: $DOMAIN_NAME dnsNames: - $DOMAIN_NAME usages: - digital signature - key encipherment - server auth duration: 2160h # 90 days (default for Let's Encrypt) renewBefore: 360h # Renew 15 days before expiration --- apiVersion: cert-manager.io/v1 kind: Certificate metadata: name: runai-cluster-domain-tls namespace: runai spec: secretName: runai-cluster-domain-tls-secret issuerRef: name: letsencrypt-runai kind: ClusterIssuer commonName: $DOMAIN_NAME dnsNames: - $DOMAIN_NAME - digital signature - key encipherment - server auth duration: 2160h # 90 days (Let's Encrypt's default) renewBefore: 360h # Renew 15 days before expiration ``` ### (Optional) Configure a Managed Service for PostgreSQL cluster Setting up a Managed Service for PostgreSQL cluster is not strictly necessary for using Run:ai, but it's strongly recommended for production environments. Create the Managed Service for PostgreSQL cluster in the same region as the [Managed Kubernetes cluster](#set-up-a-managed-kubernetes-cluster). This way they will have network connectivity between them. 1. [Install the postgresql package](/postgresql/quickstart#install-postgresql-package). 2. Create a Managed PostgreSQL cluster: ```bash theme={null} export PG_PASSWORD="" nebius msp postgresql v1alpha1 cluster create \ --name runai-backend-postgres \ --network-id \ --backup-backup-window-start "01:00:00" \ --backup-retention-policy "7d" \ --bootstrap-user-name "runai" \ --bootstrap-user-password "$PG_PASSWORD" \ --bootstrap-db-name "runai" \ --config-version 16 \ --config-pooler-config-pooling-mode "session" \ --config-template-disk-type "network-ssd" \ --config-template-disk-size-gibibytes 20 \ --config-template-hosts-count 2 \ --config-template-resources-platform "cpu-e2" \ --config-template-resources-preset "4vcpu-16gb" \ --config-postgresql-config-16-max-connections 320 \ --config-public-access ``` In this command, specify the [network ID](/vpc/networking/resources#how-to-get-a-network-id). 3. Configure the Managed Service for PostgreSQL cluster to work with Run:ai: ```bash theme={null} export PG_ENDPOINT=$(nebius msp postgresql v1alpha1 cluster get-by-name --name runai-backend-postgres --format json | jq -r ".status.connection_endpoints.private_read_write") export SQL=$(cat < Make sure that you set up `DOMAIN_NAME` and `EMAIL` variables, and run the following set of commands: ```bash theme={null} envsubst < certs.yaml | kubectl apply -f - kubectl wait --for=condition=Ready certificate/runai-tls -n runai-backend --timeout=300s ``` To be able to log in, upload your existing certificate: ```bash theme={null} kubectl create secret tls runai-backend-tls -n runai-backend \ --cert /path/to/tls.crt --key /path/to/tls.key kubectl create secret tls runai-cluster-domain-tls-secret -n runai \ --cert /path/to/tls.crt --key /path/to/tls.key ``` ### Install Run:ai #### Update CoreDNS configuration Managed Kubernetes uses [Cilium](https://cilium.io/) as it provides eBPF-based networking, load balancing and security policies, and improves overall observability. However, eBPF-based networking can conflict with [CoreDNS](https://coredns.io/) and cause DNS resolution failures. To ensure proper DNS resolution for Kubernetes services, create and apply a custom ConfigMap: 1. Create a custom ConfigMap `coredns-custom.yaml` that rewrites DNS queries to match your `$DOMAIN_NAME`: ```yaml theme={null} apiVersion: v1 kind: ConfigMap metadata: name: coredns-custom namespace: kube-system data: custom.override: | rewrite name exact '$DOMAIN_NAME' nginx-ingress-ingress-nginx-controller.nginx-ingress.svc.cluster.local ``` 2. Make sure that you set up the `DOMAIN_NAME` variable and run the following command: ```bash theme={null} envsubst < coredns-custom.yaml | kubectl apply -f - ``` #### Install control plane 1. Install control plane: ```bash theme={null} helm repo add runai-backend https://runai.jfrog.io/artifactory/cp-charts-prod helm repo update helm upgrade -i runai-backend -n runai-backend runai-backend/control-plane \ --version "~2.18.0" --set global.domain=$DOMAIN_NAME ``` 2. Wait until all pods are ready. You can check their status by running the following command: ```bash theme={null} kubectl get pods ``` 1. Install control plane: ```bash theme={null} helm repo add runai-backend https://runai.jfrog.io/artifactory/cp-charts-prod helm repo update helm upgrade -i runai-backend -n runai-backend runai-backend/control-plane --version "~2.18.0" \ --set global.domain=$DOMAIN_NAME \ --set postgresql.enabled=false \ --set global.postgresql.auth.host="$PG_ENDPOINT" \ --set global.postgresql.auth.database=runai \ --set global.postgresql.auth.username=runai \ --set global.postgresql.auth.existingSecret="postgresql-credentials" \ --set grafana.dbScheme=runai \ --set grafana.db.existingSecret="grafana-postgresql-credentials" ``` 2. Wait until all pods are ready. You can check their status by running the following command: ```bash theme={null} kubectl get pods ``` #### Create a Run:ai cluster 1. Go to `DOMAIN_NAME` in your browser. 2. Log in with the default credentials: * **Username:** `test@run.ai` * **Password:** `Abcd!234` 3. Immediately change the password in the interface. 4. Create a new cluster: 1. In the interface, select the Run:ai version `2.18` and the **Same as the control plane** cluster location. 2. Copy the provided command to install the cluster Helm chart. 3. In your terminal, run the provided command. You have now deployed Run:ai in the Managed Kubernetes cluster and you can work with it in the Run:ai web interface. ## How to delete the created resources Some of the created resources are chargeable. If you don't need them, delete these resources, so Nebius AI Cloud doesn't charge for them: * Delete installed operators: ```bash theme={null} kubectl delete -k "github.com/kubeflow/training-operator/manifests/overlays/standalone?ref=v1.7.0" kubectl delete -f "githubusercontent.com/kubeflow/mpi-operator/v0.4.0/deploy/v2beta1/mpi-operator.yaml" ``` * Delete the Managed Kubernetes cluster: ```bash theme={null} terraform destroy -target=nebius_mk8s_v1_cluster.k8s-cluster ``` * [Delete the Managed PostgreSQL cluster](/postgresql/clusters/manage#how-to-delete-clusters). *** *Postgres, PostgreSQL and the Slonik Logo are trademarks or registered trademarks of the PostgreSQL Community Association of Canada, and used with their permission.* # Managing AI workloads on Compute virtual machines with SkyPilot Source: https://docs.nebius.com/3p-integrations/skypilot Nebius AI Cloud supports integration with [SkyPilot](https://docs.skypilot.co/en/latest/docs/index.html), an open-source framework for running AI workloads on different cloud infrastructures. SkyPilot can create clusters of Compute virtual machines (VMs) and run workloads on them based on task definitions like this: ```yaml theme={null} resources: infra: nebius accelerators: H100:1 run: | nvidia-smi ``` In this tutorial, you will deploy and use the Managed SkyPilot API Server, a [standalone application](/applications/index) available in the Nebius AI Cloud console, to manage your SkyPilot workloads. ## Costs Nebius AI Cloud charges you for the following billing items: * [Managed SkyPilot API Server](/applications/standalone/pricing#standalone-applications) (standalone application) * [Compute virtual machines](/compute/resources/pricing#virtual-machines-gpus-vcpus-ram) * [Compute disks](/compute/resources/pricing#disks) * [Object Storage buckets](/object-storage/resources/pricing) ## Prerequisites 1. Deploy the Managed SkyPilot API Server: 1. In the Nebius AI Cloud console, go to  **AI orchestration** → **SkyPilot**. 2. Enter a name for the application or keep the default one. 3. Select a **Platform** and a **Preset** (vCPUs and RAM) for the API server VM. 4. Click **Deploy application**. 2. Install `uv`, a Python package manager, on your local machine: ```bash theme={null} curl -LsSf https://astral.sh/uv/install.sh | sh ``` 3. Install the SkyPilot CLI: ```bash theme={null} uv tool install --with pip "skypilot[nebius]" ``` 4. Connect to the managed API server. On the application page, click **How to connect** and copy the login command. Run the command in your terminal: ```bash theme={null} sky api login -e "" ``` Replace `` with the public endpoint URL from your deployed application. 5. Verify that SkyPilot can access your project: ```bash theme={null} sky check nebius ``` If the check is successful, the output contains the following: ```text theme={null} Checking credentials to enable infra 'nebius'... Nebius: enabled ``` 6. Clone the [Nebius ML Cookbook](https://github.com/nebius/ml-cookbook) repository and go to the `skypilot` directory: ```bash theme={null} git clone https://github.com/nebius/ml-cookbook.git cd ml-cookbook/skypilot ``` The ML Cookbook contains example task definitions used in this tutorial. 7. If you want to test mounting Object Storage buckets to VMs, [create a bucket](/object-storage/buckets/manage). ## Steps 1. Run SkyPilot tasks from the Nebius ML Cookbook: * [GPU check](#run-a-gpu-check) * [Object Storage check](#run-an-object-storage-check) * [InfiniBand™ check](#run-an-infiniband-check) * [Training task](#run-a-training-task) You can choose to run some or all of these tasks, depending on your use cases. 2. Work with the VMs managed by SkyPilot as part of the tasks: * [Monitor SkyPilot clusters and VMs](#monitor-the-skypilot-clusters-and-vms) * [Connect to the VMs](#connect-to-the-vms) If you face issues when you launch tasks or work with the VMs, see the [troubleshooting section](#troubleshoot-issues). ### Run tasks #### Run a GPU check The GPU check in this tutorial creates a VM with one NVIDIA® H100 GPU and runs the [NVIDIA System Management Interface](https://docs.nvidia.com/deploy/nvidia-smi/index.html) (`nvidia-smi`) on it. `nvidia-smi` outputs the list of GPUs available on the VM and the list of processes running on the GPUs. 1. Launch the task: ```bash theme={null} sky launch -c basic-job examples/basic-job.yaml ``` 2. When SkyPilot displays which resources it is going to create and asks you to confirm the launch, enter `Y` and press **Enter**. If the launch is successful, the output contains the list of GPUs and processes running on them returned by `nvidia-smi`: ```text theme={null} ⚙︎ Launching on Nebius eu-north1. └── Instance is up. ✓ Cluster launched: basic-job. View logs: sky api logs -l sky-2025-02-27-11-36-07-257438/provision.log ⚙︎ Syncing files. ✓ Setup detached. ⚙︎ Job submitted, ID: 1 ├── Waiting for task resources on 1 node. └── Job started. Streaming logs... (Ctrl-C to exit log streaming; job will not be killed) ... (task, pid=7059) +-----------------------------------------------------------------------------------------+ (task, pid=7059) | NVIDIA-SMI 550.127.08 Driver Version: 550.127.08 CUDA Version: 12.4 | (task, pid=7059) |-----------------------------------------+------------------------+----------------------+ (task, pid=7059) | GPU Name Persistence-M | Bus-Id Disp.A | Volatile Uncorr. ECC | (task, pid=7059) | Fan Temp Perf Pwr:Usage/Cap | Memory-Usage | GPU-Util Compute M. | (task, pid=7059) | | | MIG M. | (task, pid=7059) |=========================================+========================+======================| (task, pid=7059) | 0 NVIDIA H100 80GB HBM3 On | 00000000:8D:00.0 Off | 0 | (task, pid=7059) | N/A 29C P0 70W / 700W | 1MiB / 81559MiB | 0% Default | (task, pid=7059) | | | Disabled | (task, pid=7059) +-----------------------------------------+------------------------+----------------------+ ✓ Job finished (status: SUCCEEDED). ``` #### Run an Object Storage check The [Object Storage](/object-storage/index) check creates a VM and mounts a bucket from your project to it. 1. In `examples/test-cloud-bucket.yaml`, find `source: nebius://my-nebius-bucket` under `file_mounts` and replace `my-nebius-bucket` with the name of your bucket. 2. Launch the task: ```bash theme={null} sky launch -c test-cloud-bucket examples/test-cloud-bucket.yaml ``` 3. When SkyPilot displays which resources it is going to create and asks you to confirm the launch, enter `Y` and press **Enter**. If the launch is successful, the output contains the list of objects in the bucket: ```text theme={null} ⚙︎ Launching on Nebius eu-north1. └── Instance is up. ✓ Cluster launched: test-cloud-bucket. View logs: sky api logs -l sky-2025-03-25-13-42-18-045624/provision.log ⚙︎ Syncing files. Mounting (to 1 node): nebius://another-example-bucket -> /my_data ✓ Storage mounted. View logs: sky api logs -l sky-2025-03-25-13-42-18-045624/storage_mounts.log ✓ Setup detached. ⚙︎ Job submitted, ID: 1 ├── Waiting for task resources on 1 node. └── Job started. Streaming logs... (Ctrl-C to exit log streaming; job will not be killed) (setup pid=3963) Setup will be executed on every `sky launch` command on all nodes (task, pid=3963) Run will be executed on every `sky exec` command on all nodes (task, pid=3963) Do we have data? (task, pid=3963) total 4 (task, pid=3963) drwxr-xr-x 2 ubuntu ubuntu 4096 Mar 25 12:44 lorem-ipsum ✓ Job finished (status: SUCCEEDED). ``` #### Run an InfiniBand check The InfiniBand check creates a cluster of two VMs with 8 NVIDIA® H100 GPUs each, connected with InfiniBand, and runs the `ib_send_bw` test from [perftest](https://github.com/linux-rdma/perftest). The test measures bandwidth when sending data between GPUs on different VMs. 1. Launch the task: ```bash theme={null} sky launch -c infiniband-test examples/infiniband-test.yaml ``` 2. When SkyPilot displays which resources it is going to create and asks you to confirm the launch, enter `Y` and press **Enter**. If the launch is successful, the output contains the results of the test: ```text theme={null} ⚙︎ Launching on Nebius eu-north1. └── Instances are up. ✓ Cluster launched: infiniband-test. View logs: sky api logs -l sky-2025-02-27-09-15-19-016219/provision.log ✓ Setup detached. ⚙︎ Job submitted, ID: 14 ├── Waiting for task resources on 2 nodes. └── Job started. Streaming logs... (Ctrl-C to exit log streaming; job will not be killed) ... (worker1, rank=1, pid=33870, ip=192.168.0.15) --------------------------------------------------------------------------------------- (worker1, rank=1, pid=33870, ip=192.168.0.15) Send BW Test (worker1, rank=1, pid=33870, ip=192.168.0.15) Dual-port : OFF Device : mlx5_0 (worker1, rank=1, pid=33870, ip=192.168.0.15) Number of qps : 1 Transport type : IB (worker1, rank=1, pid=33870, ip=192.168.0.15) Connection type : RC Using SRQ : OFF (worker1, rank=1, pid=33870, ip=192.168.0.15) PCIe relax order: ON (worker1, rank=1, pid=33870, ip=192.168.0.15) ibv_wr* API : ON (worker1, rank=1, pid=33870, ip=192.168.0.15) TX depth : 128 (worker1, rank=1, pid=33870, ip=192.168.0.15) CQ Moderation : 1 (worker1, rank=1, pid=33870, ip=192.168.0.15) Mtu : 4096[B] (worker1, rank=1, pid=33870, ip=192.168.0.15) Link type : IB (worker1, rank=1, pid=33870, ip=192.168.0.15) Max inline data : 0[B] (worker1, rank=1, pid=33870, ip=192.168.0.15) rdma_cm QPs : OFF (worker1, rank=1, pid=33870, ip=192.168.0.15) Data ex. method : Ethernet (worker1, rank=1, pid=33870, ip=192.168.0.15) --------------------------------------------------------------------------------------- (worker1, rank=1, pid=33870, ip=192.168.0.15) local address: LID 0x1334 QPN 0x0131 PSN 0xcdddde (worker1, rank=1, pid=33870, ip=192.168.0.15) remote address: LID 0x132f QPN 0x0131 PSN 0x90f79b (worker1, rank=1, pid=33870, ip=192.168.0.15) --------------------------------------------------------------------------------------- (worker1, rank=1, pid=33870, ip=192.168.0.15) #bytes #iterations BW peak[Gb/sec] BW average[Gb/sec] MsgRate[Mpps] (worker1, rank=1, pid=33870, ip=192.168.0.15) 65536 1000 361.82 361.67 0.689839 (worker1, rank=1, pid=33870, ip=192.168.0.15) --------------------------------------------------------------------------------------- ✓ Job finished (status: SUCCEEDED). ``` #### Run a training task The training task adapts a [tutorial](https://pytorch.org/tutorials/intermediate/ddp_series_minGPT.html) from the PyTorch documentation and its [implementation](https://docs.skypilot.co/en/latest/getting-started/tutorial.html) from the SkyPilot documentation. It creates a cluster of two VMs with 8 NVIDIA® H100 GPUs each, connected with InfiniBand. Then, it uses PyTorch to train a GPT-like model with [Distributed Data Parallel](https://pytorch.org/docs/stable/index.html) on the VMs. 1. Launch the task: ```bash theme={null} sky launch distributed-training examples/distributed-training-container.yaml ``` 2. When SkyPilot displays which resources it is going to create and asks you to confirm the launch, enter `Y` and press **Enter**. If the launch is successful, the output contains training logs: ```text theme={null} ⚙︎ Launching on Nebius eu-north1. └── Instances are up. ✓ Cluster launched: distributed-training. View logs: sky api logs -l sky-2025-02-27-11-27-07-706257/provision.log ⚙︎ Syncing files. ✓ Setup detached. ⚙︎ Job submitted, ID: 1 ├── Waiting for task resources on 2 nodes. └── Job started. Streaming logs... (Ctrl-C to exit log streaming; job will not be killed) ... ... (task, pid=8591) [GPU4] Epoch 10 | Iter 0 | Eval Loss 1.94895 (task, pid=8591) [GPU7] Epoch 10 | Iter 0 | Eval Loss 1.93593 (task, pid=8591) [GPU6] Epoch 10 | Iter 0 | Eval Loss 1.95961 (task, pid=8591) I0227 16:33:56.668000 20640 site-packages/torch/distributed/elastic/agent/server/api.py:879] [default] worker group successfully finished. Waiting 300 seconds for other agents to finish. (task, pid=8591) I0227 16:33:56.669000 20640 site-packages/torch/distributed/elastic/agent/server/api.py:932] Local worker group finished (WorkerState.SUCCEEDED). Waiting 300 seconds for other agents to finish (task, pid=8591) I0227 16:33:56.670000 20640 site-packages/torch/distributed/elastic/agent/server/api.py:946] Done waiting for other agents. Elapsed: 0.0005085468292236328 seconds ✓ Job finished (status: SUCCEEDED). ``` The training task also has a single VM (non-distributed) version. To launch it, run `sky launch ai-training examples/ai-training.yaml`. ### Work with the VMs managed by SkyPilot After you created a cluster and launched a task on it, you can use SkyPilot and Nebius AI Cloud tools to monitor the cluster and connect to its VMs. #### Monitor the SkyPilot clusters and VMs To see the statuses of the SkyPilot clusters, run the following command: ```bash theme={null} sky status ``` You can also [monitor individual VMs](/compute/monitoring/virtual-machines) in the Nebius AI Cloud web console. The VMs' names have the cluster name as the prefix. #### Connect to the VMs SkyPilot sets up SSH access to VMs in clusters automatically. * To connect to the main ("head") VM of the cluster, run `ssh `. For example: ```bash theme={null} ssh distributed-training ``` * To connect to other VMs ("workers"), run `ssh -worker`. For example: ```bash theme={null} ssh distributed-training-worker1 ``` For more details, see the [SkyPilot documentation](https://docs.skypilot.co/en/latest/running-jobs/distributed-jobs.html#ssh-into-worker-nodes). ### Troubleshoot issues #### Unavailable resources When you run `sky launch`, you might get the following error: ```text theme={null} sky.exceptions.ResourcesUnavailableError: Failed to provision all possible launchable resources. Relax the task's resource requirements: 2x Nebius({'H100': 8}) To keep retrying until the cluster is up, use the `--retry-until-up` flag. Reasons for provision failures (for details, please check the log above): Resource Reason Nebius(gpu-h100-sxm_8gpu- Failed to acquire resources in all zones in 128vcpu-1600gb, {'H100': 8}) eu-north1 for {Nebius({'H100': 8})}. ``` It means that the resources that you specified in the task definition exceed your [Compute quotas](/compute/resources/quotas-limits). For details on how to view and manage quotas, see [Quotas in Nebius AI Cloud](/overview/quotas). #### Connection errors If SkyPilot commands fail with connection errors, make sure the Managed SkyPilot API Server is running. Check the application status in the Nebius AI Cloud console under  **AI orchestration** → **SkyPilot**. If the server is running, verify your connection by running `sky api login` again with the correct endpoint URL. #### Authentication errors If you get authentication errors when running SkyPilot commands, verify that you are connected to the managed API server by running `sky api login` again with the correct endpoint URL. #### Other issues If you face problems that are not covered by this tutorial, you can create issues in relevant GitHub repositories: * [Nebius ML Cookbook](https://github.com/nebius/ml-cookbook/issues) * [SkyPilot](https://github.com/skypilot-org/skypilot/issues) ## How to delete the created resources Some of the created resources are chargeable. If you don't need them, delete these resources, so Nebius AI Cloud doesn't charge for them: * Delete VMs and GPU clusters that SkyPilot created for all tasks in this tutorial: ```bash theme={null} sky down basic-job test-cloud-bucket infiniband-test distributed-training ai-training ``` * [Delete](/object-storage/buckets/manage#how-to-delete-buckets) the bucket that you used in the [Object Storage task](#run-an-object-storage-check). * If you no longer need the Managed SkyPilot API Server, delete it in the Nebius AI Cloud console. Go to  **AI orchestration** → **SkyPilot**, open the application, go to the **Settings** tab and click **Delete application**. *** *InfiniBand and InfiniBand Trade Association are registered trademarks of the InfiniBand Trade Association.* # Managing AI workloads across Managed Service for Kubernetes® clusters with SkyPilot Source: https://docs.nebius.com/3p-integrations/skypilot-mk8s You can use [SkyPilot](https://docs.skypilot.co/en/latest/docs/index.html) as a single, declarative job surface that runs your AI workloads across one or more [Managed Service for Kubernetes](/kubernetes) clusters. SkyPilot picks the best cluster for each job based on hardware availability and the constraints in the task definition, and ensures fault tolerance across clusters when capacity is tight in the preferred one. The SkyPilot placement logic combines constraint matching with policy: * With *capability match*, SkyPilot filters clusters by whether they meet the requested hardware and features, such as the GPU model, the number of GPUs per node, InfiniBand™ or a shared filesystem. * With *capacity chasing*, SkyPilot chases capacity across other clusters or regions when the preferred cluster has insufficient capacity. * With *failover and retries*, SkyPilot handles provisioning failures, such as preemptions or insufficient capacity, by automatically retrying with other matching clusters. ## Costs Nebius AI Cloud charges you for the following billing items: * [Managed SkyPilot API Server](/applications/standalone/pricing#standalone-applications) (standalone application) * [Managed Kubernetes nodes](/kubernetes/resources/pricing) ## Steps ### Install dependencies 1. Make sure you have Python 3.10 or higher [installed](https://www.python.org/downloads/). 2. Install SkyPilot with Kubernetes and Nebius support: ```bash theme={null} pip3 install "skypilot[kubernetes,nebius]" ``` ### Prepare infrastructure 1. Deploy the Managed SkyPilot API Server: 1. In the Nebius AI Cloud console, go to  **AI orchestration** → **SkyPilot**. 2. Enter a name for the application or keep the default one. 3. Select a **Platform** and a **Preset** (vCPUs and RAM) for the API server virtual machine. 4. Click **Deploy application**. 2. Connect to the SkyPilot API server. On the application page in the web console, click **How to connect** and copy the `sky api login` command. Then run the command in your terminal: ```bash theme={null} sky api login -e "https://.skypilot.gw.msp..nebius.cloud" ``` 3. Check that SkyPilot can reach your project: ```bash theme={null} sky check kubernetes ``` At this stage, no Managed Kubernetes clusters have been added yet, so the output looks similar to the following: ```text theme={null} Checking credentials to enable infra for SkyPilot. Kubernetes: disabled Reason [compute]: No available context found in kubeconfig. 🎉 Enabled infra 🎉 No infra to check/enabled. ``` You will run the same command again later to confirm that the contexts are picked up. 4. [Create](/kubernetes/clusters/manage) at least one Managed Kubernetes cluster with a GPU node group. To demonstrate cross-cluster fault tolerance, create two or more clusters. For more information about how to install SkyPilot and connect to it, see [Managing AI workloads on Compute virtual machines with SkyPilot](/3p-integrations/skypilot). ### Add Managed Kubernetes clusters to SkyPilot The Managed SkyPilot API Server auto-discovers all Managed Kubernetes clusters in the same project. You don't need to add a local kubeconfig or configure a service account. 1. Open the SkyPilot dashboard. On the application page in the web console, click **How to connect** and then click on the public endpoint URL. 2. On the dashboard, go to the **Infra** tab and click **Refresh**. The dashboard lists the Managed Kubernetes clusters available to SkyPilot. 3. Verify that SkyPilot can access the clusters: ```bash theme={null} sky check kubernetes ``` The output lists the enabled contexts: ```text theme={null} Kubernetes: enabled [compute] Allowed contexts: ├── : enabled. └── : enabled. 🎉 Enabled infra 🎉 Kubernetes [compute] Allowed contexts: ├── └── ``` 4. (Optional) For detailed per-cluster and per-node GPU availability, run: ```bash theme={null} sky show-gpus ``` The output shows the available GPUs and per-node availability: ```text theme={null} GPU REQUESTABLE_QTY_PER_NODE UTILIZATION H100 1, 2, 4, 8 24 of 24 free Kubernetes per-node GPU availability CONTEXT NODE vCPU Memory (GB) GPU GPU UTILIZATION NODE STATUS computeinstance- - - H100 8 of 8 free Healthy computeinstance- - - H100 8 of 8 free Healthy ``` ### (Optional) Limit clusters that SkyPilot uses By default, SkyPilot can place jobs on any Managed Kubernetes cluster it discovers. To restrict SkyPilot to a subset of clusters for every user of this Managed SkyPilot API Server, set `kubernetes.allowed_contexts` in the dashboard: 1. In the SkyPilot dashboard, click **Configuration**. 2. In the **Edit SkyPilot API Server Configuration** textbox, paste the following YAML, listing the contexts in the order in which SkyPilot should evaluate them: ```yaml theme={null} kubernetes: allowed_contexts: - - ``` 3. Click **Apply**. To verify which contexts are enabled, run `sky check kubernetes` again. ### Run a job Decide how SkyPilot should choose the target Managed Kubernetes cluster: * **To let SkyPilot fail over across clusters**, run `sky launch` without specifying a cluster: ```bash theme={null} sky launch --gpus H100 --infra k8s echo 'Hello World' ``` SkyPilot picks the first context that satisfies the request and submits the job: ```text theme={null} Considered resources (1 node): ---------------------------------------------------------------------------------------------------- INFRA INSTANCE vCPUs Mem(GB) GPUS COST ($) CHOSEN ---------------------------------------------------------------------------------------------------- Kubernetes () - 4 16 H100:1 0.00 ✔ ---------------------------------------------------------------------------------------------------- Launching a new cluster 'sky-...'. Proceed? [Y/n]: y ``` * **To target a specific Managed Kubernetes cluster**, set `--infra k8s/`: ```bash theme={null} sky launch --gpus H100 --infra k8s/ echo 'Hello World' ``` If the targeted cluster does not have the requested resources, SkyPilot returns an error: ```text theme={null} sky.exceptions.ResourcesUnavailableError: Kubernetes cluster does not contain any instances satisfying the request: 1x Kubernetes({'H100': 1}, region=). To fix: relax or change the resource requirements. ``` In the `--gpus` parameter, set the node group [platform](/compute/virtual-machines/types), such as `H100`, `B300` or `L40S`. Both examples run a Bash command as the entrypoint. You can also pass a YAML task definition instead. For examples, see the [SkyPilot quickstart](https://docs.skypilot.co/en/latest/getting-started/quickstart.html). ### (Optional) Monitor jobs To list all SkyPilot jobs created during this tutorial and their statuses, run: ```bash theme={null} sky status ``` To stream the logs of a job, run: ```bash theme={null} sky logs ``` ## How to delete the created resources Some of the created resources are chargeable. If you don't need them, delete these resources, so Nebius AI Cloud doesn't charge for them: * Delete SkyPilot jobs created during this tutorial: ```bash theme={null} sky down --all -y ``` * [Delete Managed Kubernetes clusters](/kubernetes/clusters/manage#how-to-delete-clusters). * If you no longer need the Managed SkyPilot API Server, delete it in the Nebius AI Cloud console. Go to  **AI orchestration** → **SkyPilot**, open the application, go to the **Settings** tab and click **Delete application**. *** *InfiniBand and InfiniBand Trade Association are registered trademarks of the InfiniBand Trade Association.* # AI services in Nebius AI Cloud Source: https://docs.nebius.com/ai-services/index Nebius AI Cloud offers AI services for containerized inference and training, experiment tracking, integrations with third-party software and orchestration with external tools. Different services can help you achieve different goals: * Use [Serverless AI](/serverless/overview) to run containerized AI workloads either as endpoints that return results immediately, or as background jobs that run in the background and stop when the task is complete. * Use [Managed Service for MLflow](/mlflow) to manage machine learning experiments by tracking runs, organizing models into versions, comparing metrics and deploying customized models. * Use [Applications in Nebius AI Cloud](/applications) to work with third-party software and services that help streamline AI and ML workflows. * Use [third-party integrations](/3p-integrations) to run and orchestrate AI workloads in the Nebius AI Cloud infrastructure. Deploy an interactive endpoint that listens for requests and returns results immediately Run a non-interactive workload in the background and stop it automatically after completion Create your first MLflow cluster and run an experiment in it Browse the marketplace and choose an application to deploy Run, manage and scale AI workloads on Nebius AI Cloud by using SkyPilot Optimize your GPU resources for ML/AI workloads by using Run:ai and Managed Service for Kubernetes® ## Tutorials and examples Follow our Serverless AI tutorials for step-by-step instructions on setting up specific AI workloads, or explore tutorials that combine multiple Nebius AI Cloud services to build complete solutions. Create your first Serverless AI endpoint with an open-source large language model and send a chat request Fine-tune a large language model by using a Serverless AI job with Axolotl Convert text to speech by creating a model, running a fine-tuning job and deploying an endpoint Explore tutorials that show you how to combine Nebius AI Cloud services to build complete solutions Explore runnable examples of Serverless AI workloads on GitHub # Deploying applications in Nebius AI Cloud Source: https://docs.nebius.com/applications/deploy To deploy an application in Nebius AI Cloud, browse the Applications marketplace, find the application you want to use and choose a deployment option that suits your needs. ## Prerequisites Make sure you are in a [group](/iam/authorization/groups/index) that has at least the `editor` role within your tenant or project; for example, the default `editors` group. You can check this in the [Administration → IAM](https://console.nebius.com/iam) section of the web console. For Kubernetes® deployments, you also need a [Managed Kubernetes cluster](/kubernetes/clusters/manage) with at least one [node group](/kubernetes/node-groups/manage). If you do not have them, you can create them when you deploy the application. ## How to find and deploy an application 1. In the [web console](https://console.nebius.com), go to **Applications**. 2. Find the application that you need. You can search applications by name or filter them by category. 3. Open the application page by clicking the application card. 4. Review the available deployment options. Not all applications support all three deployment options. For more information about deployment options, see [Types and stages of applications in Nebius AI Cloud](/applications/types). 5. Click the deployment button for your chosen option. 6. Configure the application according to the deployment option you selected. 7. Complete the deployment process. The setup time varies by deployment option and application configuration. You can deploy each application in a project once per deployment option. To deploy an application again using the same deployment option, delete its previous deployment first. For more information about managing applications after deployment, see: * [Stopping and starting applications](/applications/standalone/stop-start) * [Deleting applications](/applications/standalone/manage) Virtual machine deployments are managed through [Compute](/compute/index). For more information, see the [Virtual machines documentation](/compute/virtual-machines/index). # Applications in Nebius AI Cloud Source: https://docs.nebius.com/applications/index With applications in Nebius AI Cloud, you can use Nebius's comprehensive suite of third-party software and services to streamline your AI and ML workflows. Nebius AI Cloud offers several types of applications. You can browse applications by name or category in the Applications marketplace and choose from available deployment options: * **Virtual machine**: Root access and custom setup with maximum performance tuning * **Standalone**: Managed infrastructure with zero setup time and instant deployment * **Kubernetes**: Auto-scaling and enterprise monitoring on Managed Service for Kubernetes® clusters Not all deployment options are available for every application. Each application page shows which deployment options you can use. *"Jupyter" and the Jupyter logos are trademarks or registered trademarks of LF Charities, used by Nebius B.V. with permission.* Learn about the three deployment options and application stages Step-by-step guide to finding and deploying applications Pause applications to save costs while keeping your data Remove applications and free up resources Learn how much you could pay for running applications View how much resources your applications can use by default # Deploying NVIDIA Blueprint for virtual screening in Nebius AI Cloud Source: https://docs.nebius.com/applications/kubernetes/nvidia-blueprint-virtual-screening/deploy To work with NVIDIA Blueprint for virtual screening in Nebius AI Cloud, you can deploy it as an application in the [web console](https://console.nebius.com). ## Prerequisites 1. Make sure you are in a [group](/iam/authorization/groups/index) that has at least the `editor` role within your tenant or project; for example, the default `editors` group. You can check this in the [Administration → IAM](https://console.nebius.com/iam) section of the web console. 2. Make sure that you have enough quota for GPUs. The Blueprint requires a minimum of four GPUs to run. 3. [Create a Managed Service for Kubernetes® cluster](/kubernetes/clusters/manage#how-to-create-clusters) that meets the following requirements: * A public endpoint is allocated. * [A node group has at least four GPUs](/kubernetes/gpu/set-up#how-to-add-nodes-with-gpus-to-a-cluster). * [NVIDIA® GPU Operator](https://console.nebius.com/applications/overview/nebius/nvidia-gpu-operator) and [NVIDIA® Device Plugin](https://console.nebius.com/applications/overview/nebius/nvidia-device-plugin) are deployed on the cluster. ## How to deploy 1. In the [web console](https://console.nebius.com), go to **Applications**. 2. Find **NVIDIA Blueprint for virtual screening** by searching for it or browsing by category, then open the application page. 3. Click **Deploy on cluster** to deploy using the Kubernetes option. 4. Configure the application: 1. In **Application name** and **Namespace**, enter unique names for your deployment. 2. Enter your NGC API key. If you do not yet have an NGC key, see [How to get an NGC Key](#how-to-get-an-ngc-key). 3. Under **Disk size**, specify a value between `2000 Gi` and `10000 Gi`. At least `2000 Gi` is required to download the models. Disks do not scale automatically, so enter a size that is sufficient for your needs. 4. In **JupyterHub admin password**, click **Generate** to create a secure password, copy it and then select **I saved the password securely**. 5. In **JupyterHub accessibility**, choose how the JupyterHub interface can be accessed. 5. Click **Deploy application**. 6. Wait until the application status becomes `Running`. The deployment might take up to three hours. When deployment completes, a dialog with connection instructions opens. Follow it to get the JupyterHub URL or IP address depending on the selected access method. ## How to get an NGC Key If you do not yet have an NGC key, you can get one by the following steps: 1. Go to [NVIDIA NGC website](https://ngc.nvidia.com/). 2. Enter your email, password and other necessary credentials to create an account. 3. Once registered, go to [build.nvidia.com](https://build.nvidia.com/) and click **Generate API key**. Follow the steps and copy the API key and paste it in the deployment configuration. ## How to access the Blueprint via JupyterHub After the application is deployed, you can access it via JupyterHub by IP or by using port forwarding. ### Access by IP 1. [Install](https://kubernetes.io/docs/tasks/tools/#kubectl) and [configure](/kubernetes/connect) `kubectl`. 2. Run the following command to get the external IP address: ```bash theme={null} kubectl describe svc proxy-public -n | grep "LoadBalancer Ingress:" ``` 3. In your browser, go to `http://` and log in as **admin**. Use the password that you saved during deployment. ### Access by port forwarding 1. [Install](https://kubernetes.io/docs/tasks/tools/#kubectl) and [configure](/kubernetes/connect) `kubectl`. 2. Set up port forwarding: ```bash theme={null} kubectl --namespace port-forward service/proxy-public 8080:http ``` 3. Open [http://localhost:8080](http://localhost:8080) in your browser. On the login screen, enter **admin** as the username and use the password that you saved during deployment. ### Managing users To create and manage users in JupyterHub, do the following: 1. In the JupyterHub top menu, select **File → Hub Control Panel**. 2. Click **Admin → Add Users**. 3. Enter usernames, one per line. To grant a user admin rights, select the **Admin** checkbox. 4. Click **Add Users**. New users create their own passwords the first time they sign in. ## How to delete the Blueprint 1. In the [web console](https://console.nebius.com), go to **Applications**. 2. Find the deployed Blueprint in the list and open it. 3. In the application, go to the **Settings** tab. 4. Under **Delete application**, click **Delete**. 5. Confirm the deletion. ## What's next When the application is running, you can [access it via JupyterHub](#how-to-access-the-blueprint-via-jupyterhub) to run the sample notebook and experiment with the Blueprint. # NVIDIA Blueprint for virtual screening in Nebius AI Cloud Source: https://docs.nebius.com/applications/kubernetes/nvidia-blueprint-virtual-screening/index Nebius AI Cloud offers NVIDIA Blueprint for virtual screening as a Standalone Application. The application is available in the eu-north1 and us-central1 [regions](/overview/regions). ## About the Blueprint [NVIDIA Blueprints](https://build.nvidia.com/blueprints) are pretrained end-to-end reference AI workflows designed for common enterprise use cases. The [NVIDIA Blueprint for generative virtual screening](https://github.com/NVIDIA-BioNeMo-blueprints/generative-virtual-screening) guides researchers through an AI-driven pipeline that designs optimized small molecules efficiently. It orchestrates a suite of GPU-accelerated NIM microservices (including OpenFold2, MSA-Search, GenMol and DiffDock) to predict protein structures, generate drug-like molecules and model their docking without predefined binding pockets. This workflow significantly accelerates hit identification and lead optimization, enabling smarter, faster drug discovery cycles. Within the deployment, we also deploy JupyterHub along with the Python notebook sample to make experimentation with the Blueprint more accessible. For more information about deploying the Blueprint and connecting to it, see [Deploying NVIDIA Blueprint for virtual screening in Nebius AI Cloud](/applications/kubernetes/nvidia-blueprint-virtual-screening/deploy). ## Terms and conditions This application is provided under a bring-your-own-license model. By deploying this application, you represent and warrant that you hold, and will maintain throughout the use of the application, a valid and sufficient NVIDIA AI Enterprise License. Use of the application without such license is strictly prohibited. If you do not currently possess the required license, please refer to [How to get licenses for NVIDIA Blueprint for virtual screening](/applications/kubernetes/nvidia-blueprint-virtual-screening/licenses) for available options. ## Getting started To use NVIDIA Blueprint for virtual screening, [get the licenses](/applications/kubernetes/nvidia-blueprint-virtual-screening/licenses) and [deploy it](/applications/kubernetes/nvidia-blueprint-virtual-screening/deploy). After that, you can access it via [JupyterHub](/applications/kubernetes/nvidia-blueprint-virtual-screening/deploy#how-to-access-the-blueprint-via-jupyterhub) to run the sample notebook. # How to get licenses for NVIDIA Blueprint for virtual screening Source: https://docs.nebius.com/applications/kubernetes/nvidia-blueprint-virtual-screening/licenses The proper license is required to use NIM microservices. If you do not have sufficient licenses, you can either apply to join the NVIDIA Developer Program or ask for a 90-day NVIDIA AI Enterprise License trial. ## NVIDIA Developer Program 1. Go to the [NVIDIA Developer Program page](https://developer.nvidia.com/developer-program). 2. Click **Join** and register. 3. Go to [build.nvidia.com](https://build.nvidia.com/) and generate an API key using the same account. 4. Use the API key to deploy the Blueprint. Participation in the NVIDIA Developer Program permits the use of NIM microservices and Blueprints solely for research, application development and experimentation, and is limited to a maximum of sixteen (16) GPUs. Any use beyond these purposes or limits, including production use or deployment on more than sixteen (16) GPUs, is strictly prohibited and requires a valid NVIDIA AI Enterprise License. ## 90-day NVIDIA AI Enterprise License trial 1. Go to the [NVIDIA AI Enterprise License Trial page](https://enterpriseproductregistration.nvidia.com/?LicType=EVAL\&ProductFamily=NVAIEnterprise). 2. Register and apply for the license. 3. Once approved, go to [build.nvidia.com](https://build.nvidia.com/) and generate an API key by using the same account. 4. Use the API key to deploy the Blueprint. ## What's next After getting the necessary license and API key, you can [deploy the Blueprint](/applications/kubernetes/nvidia-blueprint-virtual-screening/deploy) and start using it for your virtual screening workflows. # Connecting to the ComfyUI application in Nebius AI Cloud Source: https://docs.nebius.com/applications/standalone/comfyui/connect After [deploying](/applications/deploy) the ComfyUI application, you can connect to it in the [web console](https://console.nebius.com). ## Prerequisites 1. Make sure you are in a [group](/iam/authorization/groups/index) that has at least the `editor` role within your tenant or project; for example, the default `editors` group. You can check this in the [Administration → IAM](https://console.nebius.com/iam) section of the web console. 2. Download the [Nebius AI Cloud certificate](https://storage.eu-north1.nebius.cloud/msp-certs/ca.pem) and install it according to your operating system instructions. You only need the certificate in the following cases: * You deployed the application before June 27, 2025, in a project located in the `eu-north1` or `eu-west1` [regions](/overview/regions). * You deployed the application before June 30, 2025, in a project located in the `us-central1` region. You can find the deployment date on your application's page. ## How to connect 1. In the [web console](https://console.nebius.com), go to  **Applications**. 2. Under **Installed applications**, click on your application. 3. Under **Artifacts**, copy the URL from **Public endpoint**. 4. Go to the URL in your web browser. 5. To log in, enter the credentials from the application creation form: the username that you specified and the password that the form generated. # Exporting workflows and images from the ComfyUI application Source: https://docs.nebius.com/applications/standalone/comfyui/export-data You can export workflows that you create in the ComfyUI application and download images that these workflows generate. Before you begin, [connect to the application](/applications/standalone/comfyui/connect). ## Exporting workflows 1. Select the workflow tab. 2. In the **Workflow** menu, select an option, depending on how you want to use the exported file: * **Export** creates a JSON file that you can import back into the web interface (**Workflow** → **Open**). * **Export (API)** creates a JSON file that you can use as a payload for `POST /prompt` API requests to ComfyUI. For more details, see [ComfyUI documentation](https://docs.comfy.org/development/comfyui-server/comms_routes) and an [example](https://github.com/comfyanonymous/ComfyUI/blob/master/script_examples/basic_api_example.py) in ComfyUI's GitHub repository. The file is also compatible with the web interface. 3. Enter the filename and then save the file. ## Downloading images 1. In the menu bar, click **Show Image Feed**. 2. In the image feed, click the image. 3. Save the image that opens. # ComfyUI in Nebius AI Cloud Source: https://docs.nebius.com/applications/standalone/comfyui/index Nebius AI Cloud offers ComfyUI in Standalone Applications. The application is available in the eu-north1 and us-central1 [regions](/overview/regions). ## About the application [ComfyUI](https://docs.comfy.org/) is a flexible, node-based interface designed for crafting and executing AI image generation pipelines. Instead of writing code, you connect building blocks — giving you a clear, visual way to work with models like Stable Diffusion and beyond. For more details, see the [application page](https://console.nebius.com/applications/overview/nebius/comfy-ui) in the web console. ComfyUI is an open-source product distributed under the [GNU General Public License](https://github.com/comfyanonymous/ComfyUI/blob/master/LICENSE) (GPL). ## Getting started To use the ComfyUI application, [deploy it](/applications/deploy) and [connect to it](/applications/standalone/comfyui/connect). # Connecting to the Flowise application in Nebius AI Cloud Source: https://docs.nebius.com/applications/standalone/flowise/connect After [deploying](/applications/deploy) the Flowise application, you can connect to it in the [web console](https://console.nebius.com). ## Prerequisites 1. Make sure you are in a [group](/iam/authorization/groups/index) that has at least the `editor` role within your tenant or project; for example, the default `editors` group. You can check this in the [Administration → IAM](https://console.nebius.com/iam) section of the web console. 2. Download the [Nebius AI Cloud certificate](https://storage.eu-north1.nebius.cloud/msp-certs/ca.pem) and install it according to your operating system instructions. You only need the certificate in the following cases: * You deployed the application before June 27, 2025, in a project located in the `eu-north1` or `eu-west1` [regions](/overview/regions). * You deployed the application before June 30, 2025, in a project located in the `us-central1` region. You can find the deployment date on your application's page. ## How to connect 1. In the [web console](https://console.nebius.com), go to  **Applications**. 2. Under **Installed applications**, click on your application. 3. Under **Artifacts**, copy the URL from **Public endpoint**. 4. Go to the URL in your web browser. 5. To log in, enter the credentials from the application creation form: the username that you specified and the password that the form generated. # Exporting data from the Flowise application Source: https://docs.nebius.com/applications/standalone/flowise/export-data You can export data that you create in the Flowise application: chatflows, agentflows, assistants, tools and variables. Before you begin, [connect to the application](/applications/standalone/flowise/connect). ## Exporting a single flow To export a chatflow or an agentflow: 1. In the sidebar, go to **Chatflows** or **Agentflows**. 2. Click the flow. 3. Click → **Export Chatflow** or **Export Agentflow**. 4. Save the file. ## Exporting a single tool To export a tool: 1. In the sidebar, go to **Tools**. 2. Click on the tool. 3. Click **Export**. 4. Save the file. ## Bulk exporting To export the current user's data in bulk: 1. In the menu bar, click → **Export**. 2. Select the types of resources that you want to export, such as chatflows or agentflows. 3. Click **Export**. 4. Save the file. # Flowise in Nebius AI Cloud Source: https://docs.nebius.com/applications/standalone/flowise/index Nebius AI Cloud offers Flowise in Standalone Applications. The application is available in the eu-north1 and us-central1 [regions](/overview/regions). ## About the application [Flowise](https://flowiseai.com/) is an open-source, low-code platform designed to simplify the creation of customized applications powered by large language models (LLMs). It offers a user-friendly drag-and-drop interface that enables developers to visually design and deploy complex AI workflows without extensive coding knowledge. For more details, see the [application page](https://console.nebius.com/applications/standalone/overview/appkind-e00flowise) in the web console. Flowise is available under the [Apache 2.0 license](https://github.com/FlowiseAI/Flowise/blob/main/LICENSE.md). ## Getting started To use the Flowise application, [deploy it](/applications/deploy) and [connect to it](/applications/standalone/flowise/connect). # Connecting to the JupyterLab® application in Nebius AI Cloud Source: https://docs.nebius.com/applications/standalone/jupyterlab/connect After [deploying the JupyterLab application](/applications/standalone/jupyterlab/deploy), you can connect to it in the [web console](https://console.nebius.com). ## How to connect 1. In the [web console](https://console.nebius.com), go to **Compute** → **Container VMs**. 2. Find and open the container for your application. 3. On the container over VM page, click **Go to Web UI**. ## What's next After connecting to the application, you can [work with notebooks](/applications/standalone/jupyterlab/notebooks). *** *"Jupyter" and the Jupyter logos are trademarks or registered trademarks of LF Charities, used by Nebius B.V. with permission.* # Deploying the JupyterLab® application in Nebius AI Cloud Source: https://docs.nebius.com/applications/standalone/jupyterlab/deploy To work with JupyterLab notebooks in Nebius AI Cloud, you can deploy the JupyterLab application in the [web console](https://console.nebius.com). ## Prerequisites Make sure you are in a [group](/iam/authorization/groups/index) that has at least the `editor` role within your tenant or project; for example, the default `editors` group. You can check this in the [Administration → IAM](https://console.nebius.com/iam) section of the web console. ## How to deploy 1. In the [web console](https://console.nebius.com), go to  **Applications**. 2. Find JupyterLab by searching for it or browsing by category, then open the application page. 3. Deploy the application as a [container over a Compute virtual machine](/compute/virtual-machines/containers). You create the VM from the application page, and the JupyterLab container image is pre-selected: 1. Click **Deploy on VM**. The creation page for a container over VM opens. 2. Select the project and specify the VM name. 3. Configure computing resources: * Select **With GPU** or **Without GPU**, then choose a platform and preset. Available options depend on the region. * In **Local storage**, specify the disk size. 4. In **Access**, add a username and an SSH key. Copy and save any generated password or token shown on the page. 5. (Optional) In advanced settings, configure the network, subnet, public or private IP address, or a service account. 6. Click **Create container over VM**. 7. Wait until the VM is running. It takes about five minutes. ## What's next When the application is running, you can [connect to it](/applications/standalone/jupyterlab/connect). *** *"Jupyter" and the Jupyter logos are trademarks or registered trademarks of LF Charities, used by Nebius B.V. with permission.* # JupyterLab® in Nebius AI Cloud Source: https://docs.nebius.com/applications/standalone/jupyterlab/index The JupyterLab application is available in all Nebius AI Cloud [regions](/overview/regions). ## About the application [JupyterLab](https://jupyterlab.readthedocs.io/en/latest/) is a next-generation web interface for [Project Jupyter](https://docs.jupyter.org/en/latest/). The application provides a flexible and powerful environment for data science, machine learning and scientific computing. It includes [PyTorch](https://pytorch.org/docs/stable/index.html), a popular deep learning framework, and [CUDA®](https://developer.nvidia.com/cuda-zone) support for GPU acceleration. For more details, see the [application page](https://console.nebius.com/applications/standalone/overview/appkind-e00notebook) in the web console. JupyterLab is an open-source product. Its use in source and binary forms is governed by its [license](https://github.com/jupyterlab/jupyterlab/blob/main/LICENSE). ## Getting started To use the JupyterLab application, [deploy it](/applications/standalone/jupyterlab/deploy) and [connect to it](/applications/standalone/jupyterlab/connect). *** *"Jupyter" and the Jupyter logos are trademarks or registered trademarks of LF Charities, used by Nebius B.V. with permission.* # Working with notebooks in the JupyterLab® application in Nebius AI Cloud Source: https://docs.nebius.com/applications/standalone/jupyterlab/notebooks After [deploying the JupyterLab application](/applications/standalone/jupyterlab/deploy) in Nebius AI Cloud and [connecting to it](/applications/standalone/jupyterlab/connect), you can work with JupyterLab notebooks. For more details, see the [JupyterLab documentation](https://jupyterlab.readthedocs.io/en/latest/). ## Dependencies Notebooks in the JupyterLab application include [PyTorch](https://pytorch.org/docs/stable/index.html) by default. To install more Python dependencies in a notebook, run `!pip install ...` in a notebook cell: ```text theme={null} !pip install pandas numpy ``` To install non-Python dependencies, [upload their binaries](#working-with-files) to JupyterLab. The application does not support package manager commands such as `apt install` because they require `sudo`, and the application does not provide a password. ## Working with files You can upload files to your JupyterLab notebooks and download files and notebooks themselves. The recommended method of uploading files depends on the file size. ### Uploading smaller files in the file browser If your files are smaller than 3 GiB, you can upload them directly in the JupyterLab file browser. To open the file browser in your notebook, click in the sidebar. To upload files, drag and drop them onto the file browser or click **Upload**. For more details, see the [JupyterLab documentation](https://jupyterlab.readthedocs.io/en/latest/user/files.html). ### Uploading larger files (3 GiB+) Due to JupyterLab's limitations, when you use the file browser to upload files larger than 3 GiB (datasets, checkpoints, etc.), you may encounter network errors. As a workaround, you can upload them through an S3-compatible object storage, for example, the [Object Storage service](/object-storage/index) in Nebius AI Cloud: 1. If you do not have an Object Storage bucket yet, [create one](/object-storage/buckets/manage). 2. [Upload your object](/object-storage/objects/upload-download) to the bucket. 3. Get the object's URL: 1. In the sidebar, go to  **Storage** → **Object Storage**. 2. Select the bucket in which you uploaded the object. 3. In the object's line, click → **Get link**. The pre-signed URL that includes credentials is copied to the clipboard. It is valid for one hour. 4. In your JupyterLab notebook, use built-in tools like `wget` or `curl` to download the file. For example: ```bash theme={null} wget https://storage.eu-north1.nebius.cloud/my-bucket/test-object?X-Amz-Algorithm=... ``` ### Downloading files and notebooks To download a file or a notebook to your machine: 1. In the sidebar, click to open the file browser. 2. In the file browser, right-click the file or notebook and click **Download**. *** *"Jupyter" and the Jupyter logos are trademarks or registered trademarks of LF Charities, used by Nebius B.V. with permission.* # Deleting applications in Nebius AI Cloud Source: https://docs.nebius.com/applications/standalone/manage When you finish working with an application, you can delete it. When you delete an application, all the data that you stored in it is permanently deleted. For standalone applications, to keep the data and save costs, you can [stop](/applications/standalone/stop-start) the application instead. Standalone applications are subject to [charges](/applications/standalone/pricing) and [quotas](/applications/standalone/quotas). For information about deploying applications, see [Deploying applications in Nebius AI Cloud](/applications/deploy). Deleting an application permanently removes all data stored in it and cannot be undone. To delete an application: 1. In the [web console](https://console.nebius.com), go to  **Applications**. 2. Go to the **Installed** tab to see your deployed applications. 3. Find the application you want to delete and open it. 4. On the application details page, go to the **Settings** tab. 5. Click **Delete application**. 6. To confirm that you want to delete the application, enter its name and click **Delete application**. When you delete an application deployed on a Kubernetes cluster, node groups created with it remain in the cluster and are subject to Managed Kubernetes [charges](/kubernetes/resources/pricing) and [quotas](/kubernetes/resources/quotas-limits). If you do not need these node groups, [delete them](/kubernetes/node-groups/manage#how-to-delete-node-groups). # Connecting to the Open WebUI application in Nebius AI Cloud Source: https://docs.nebius.com/applications/standalone/open-webui/connect After [deploying](/applications/deploy) the Open WebUI application, you can connect to it in the [web console](https://console.nebius.com). ## Prerequisites 1. Make sure you are in a [group](/iam/authorization/groups/index) that has at least the `editor` role within your tenant or project; for example, the default `editors` group. You can check this in the [Administration → IAM](https://console.nebius.com/iam) section of the web console. 2. Download the [Nebius AI Cloud certificate](https://storage.eu-north1.nebius.cloud/msp-certs/ca.pem) and install it according to your operating system instructions. You only need the certificate in the following cases: * You deployed the application before June 27, 2025, in a project located in the `eu-north1` or `eu-west1` [regions](/overview/regions). * You deployed the application before June 30, 2025, in a project located in the `us-central1` region. You can find the deployment date on your application's page. ## How to connect 1. In the [web console](https://console.nebius.com), go to  **Applications**. 2. Switch to the **Installed** tab and open your application. 3. Under **Artifacts**, copy the URL from **Public endpoint**. 4. Go to the URL in your web browser. 5. To log in, enter the `admin@localhost` email address and the password that the application creation form generated. # Exporting data from the Open WebUI application Source: https://docs.nebius.com/applications/standalone/open-webui/export-data You can export a database with your data (for example, chat history and settings) from the Open WebUI application. To do so: 1. [Connect to the application](/applications/standalone/open-webui/connect). 2. In the sidebar, click **Admin** → **Admin panel**. 3. Go to the **Settings** tab. 4. In the sidebar, go to **Database**. 5. Export data: * To export the entire database, click **Download Database**. * To export only the chat history, click **Export All Chats (All Users)**. * To export only the Open WebUI settings, click **Export Config to JSON File**. 6. Save the file. For more details about working with databases, see [Open WebUI documentation](https://docs.openwebui.com/tutorials/database). # Open WebUI in Nebius AI Cloud Source: https://docs.nebius.com/applications/standalone/open-webui/index Nebius AI Cloud offers Open WebUI in Standalone Applications. The application is available in the eu-north1 and us-central1 [regions](/overview/regions). ## About the application [Open WebUI](https://docs.openwebui.com/) is a feature-rich and user-friendly web interface for interacting with large language models (LLMs). It supports various LLM runners, such as Ollama and OpenAI-compatible APIs. Open WebUI also includes a built-in inference engine suitable for retrieval-augmented generation (RAG). For more details, see the [application page](https://console.nebius.com/applications/standalone/overview/appkind-e00openwebui) in the web console. Open WebUI is open-source software distributed under the [Open WebUI License](https://github.com/open-webui/open-webui/blob/main/LICENSE), a revised BSD-3-Clause license. ## Getting started To use the Open WebUI application, [deploy it](/applications/deploy) and [connect to it](/applications/standalone/open-webui/connect). # Standalone Applications pricing in Nebius AI Cloud Source: https://docs.nebius.com/applications/standalone/pricing This article provides pricing information for applications in Nebius AI Cloud. Pricing depends on the deployment option you choose. ## How charges and prices work Each group of chargeable items in this article has two time units associated with it: * **Billing unit**: The minimum unit of usage for which you can be charged. * **Pricing unit**: The unit of usage for which the prices are shown. Charges for units smaller than the pricing unit are calculated proportionally. > For example, for GPUs on running VMs, the **billing unit** is 1 second, and the **pricing unit** is 1 hour (3600 seconds). For 30 minutes of usage, you will be charged half the hourly price. Prices in US dollars (USD, \$) apply to all customers except for companies from Israel, where prices in Israeli shekels (ILS, ₪) apply instead. All prices are shown without any applicable taxes, including VAT. Due to rounding errors, usage costs shown in the web console and final charges may slightly differ from calculations based on the prices in this article. ## GPU prices from June 1, 2026 Starting June 1, 2026, prices for standalone applications with NVIDIA H200 and H100 GPUs are updated. The article lists prices before and from this date. ## Standalone Applications Applications deployed using the **Standalone** deployment option are charged for computing resources and storage. ### Prices Nebius AI Cloud charges you for the computing resources allocated to running applications and the storage size. Public access to applications is free of charge. ### Computing resources You are charged for computing resources in your running applications. You are not charged for computing resources in stopped applications. * **Billing unit**: 1 second * **Pricing unit**: 1 hour (3600 seconds) #### NVIDIA® H200 NVLink with Intel Sapphire Rapids The platform is available in the eu-north1 and us-central1 [regions](/overview/regions). | **Item — from June 1, 2026** | **Price** | **Per** | | ------------------------------------------------------------------------ | --------- | ---------- | | Standalone application on NVIDIA® H200 NVLink with Intel Sapphire Rapids | \$4.50 | 1 GPU hour | | **Item — before June 1, 2026** | **Price** | **Per** | | Standalone application on NVIDIA® H200 NVLink with Intel Sapphire Rapids | \$3.50 | 1 GPU hour | Charges are based on the resource preset that you are using. For example, using a `8gpu-128vcpu-1600gb` application for 1 hour costs 8 × \$4.50 = \$36.00. For 730 hours (\~ 1 month), this amounts to 730 × \$36.00 = \$26,280.00. | **Item — from June 1, 2026** | **Price** | **Per** | | ------------------------------------------------------------------------ | --------- | ---------- | | Standalone application on NVIDIA® H200 NVLink with Intel Sapphire Rapids | ₪13.95 | 1 GPU hour | | **Item — before June 1, 2026** | **Price** | **Per** | | Standalone application on NVIDIA® H200 NVLink with Intel Sapphire Rapids | ₪10.85 | 1 GPU hour | Charges are based on the resource preset that you are using. For example, using a `8gpu-128vcpu-1600gb` application for 1 hour costs 8 × ₪13.95 = ₪111.60. For 730 hours (\~ 1 month), this amounts to 730 × ₪111.60 = ₪81,468.00. #### NVIDIA® H100 NVLink with Intel Sapphire Rapids The platform is only available in the `eu-north1` region. | **Item — from June 1, 2026** | **Price** | **Per** | | ------------------------------------------------------------------------ | --------- | ---------- | | Standalone application on NVIDIA® H100 NVLink with Intel Sapphire Rapids | \$3.85 | 1 GPU hour | | **Item — before June 1, 2026** | **Price** | **Per** | | Standalone application on NVIDIA® H100 NVLink with Intel Sapphire Rapids | \$2.95 | 1 GPU hour | Charges are based on the resource preset that you are using. For example, using a `8gpu-128vcpu-1600gb` application for 1 hour costs 8 × \$3.85 = \$30.80. For 730 hours (\~ 1 month), this amounts to 730 × \$30.80 = \$22,484.00. | **Item — from June 1, 2026** | **Price** | **Per** | | ------------------------------------------------------------------------ | --------- | ---------- | | Standalone application on NVIDIA® H100 NVLink with Intel Sapphire Rapids | ₪11.935 | 1 GPU hour | | **Item — before June 1, 2026** | **Price** | **Per** | | Standalone application on NVIDIA® H100 NVLink with Intel Sapphire Rapids | ₪9.145 | 1 GPU hour | Charges are based on the resource preset that you are using. For example, using a `8gpu-128vcpu-1600gb` application for 1 hour costs 8 × ₪11.935 = ₪95.48. For 730 hours (\~ 1 month), this amounts to 730 × ₪95.48 = ₪69,700.40. #### NVIDIA® L40S PCIe with Intel Ice Lake The platform is only available in the eu-north1 region. | **Item** | **Price** | **Per** | | -------------------------------------------------------------------- | --------- | ---------- | | Standalone application on NVIDIA® L40S PCIe with Intel Ice Lake. GPU | \$1.35 | 1 GPU hour | | Standalone application on NVIDIA® L40S PCIe with Intel Ice Lake. CPU | \$0.012 | 1 CPU hour | | Standalone application on NVIDIA® L40S PCIe with Intel Ice Lake. RAM | \$0.0032 | 1 GiB hour | Charges are based on the resource preset that you are using. For example, using a `1gpu-16vcpu-64gb` application for 1 hour costs \$1.35 + 16 × \$0.012 + 64 × \$0.0032 = \$1.7468. For 730 hours (\~ 1 month), this amounts to 730 × \$1.7468 = \$1275.164. | **Item** | **Price** | **Per** | | -------------------------------------------------------------------- | --------- | ---------- | | Standalone application on NVIDIA® L40S PCIe with Intel Ice Lake. GPU | ₪4.185 | 1 GPU hour | | Standalone application on NVIDIA® L40S PCIe with Intel Ice Lake. CPU | ₪0.0372 | 1 CPU hour | | Standalone application on NVIDIA® L40S PCIe with Intel Ice Lake. RAM | ₪0.00992 | 1 GiB hour | Charges are based on the resource preset that you are using. For example, using a `1gpu-16vcpu-64gb` application for 1 hour costs 1 × ₪4.185 + 16 × ₪0.0372 + 64 × ₪0.00992 = ₪5.41508. For 730 hours (\~ 1 month), this amounts to 730 × ₪5.41508 = ₪3953.0084. #### NVIDIA® L40S PCIe with AMD Epyc Genoa The platform is only available in the eu-north1 region. | **Item** | **Price** | **Per** | | -------------------------------------------------------------------- | --------- | ---------- | | Standalone application on NVIDIA® L40S PCIe with AMD Epyc Genoa. GPU | \$1.35 | 1 GPU hour | | Standalone application on NVIDIA® L40S PCIe with AMD Epyc Genoa. CPU | \$0.01 | 1 CPU hour | | Standalone application on NVIDIA® L40S PCIe with AMD Epyc Genoa. RAM | \$0.0032 | 1 GiB hour | Charges are based on the resource preset that you are using. For example, using a `1gpu-16vcpu-96gb` application for 1 hour costs \$1.35 + 16 × \$0.01 + 96 × \$0.0032 = \$1.8172. For 730 hours (\~ 1 month), this amounts to 730 × \$1.8172 = \$1326.556. | **Item** | **Price** | **Per** | | -------------------------------------------------------------------- | --------- | ---------- | | Standalone application on NVIDIA® L40S PCIe with AMD Epyc Genoa. GPU | ₪4.185 | 1 GPU hour | | Standalone application on NVIDIA® L40S PCIe with AMD Epyc Genoa. CPU | ₪0.031 | 1 CPU hour | | Standalone application on NVIDIA® L40S PCIe with AMD Epyc Genoa. RAM | ₪0.00992 | 1 GiB hour | Charges are based on the resource preset that you are using. For example, using a `1gpu-16vcpu-96gb` application for 1 hour costs 1 × ₪4.185 + 16 × ₪0.031 + 96 × ₪0.00992 = ₪5.63332. For 730 hours (\~ 1 month), this amounts to 730 × ₪5.63332 = ₪4112.3236. #### Non-GPU AMD EPYC Genoa The platform is available in the `eu-north1`, `us-central1` and `uk-south1`*\** regions. | **Item** | **Price** | **Per** | | ----------------------------------------------------- | --------- | ---------- | | Standalone application on Non-GPU AMD Epyc Genoa. CPU | \$0.025 | 1 CPU hour | | Standalone application on Non-GPU AMD Epyc Genoa. RAM | \$0.005 | 1 GiB hour | Charges are based on the resource preset that you are using. For example, using a `4vcpu-16gb` application for 1 hour costs 4 × \$0.025 + 16 × \$0.005 = \$0.18. For 730 hours (\~ 1 month), this amounts to 730 × \$0.18 = \$131.40. | **Item** | **Price** | **Per** | | ----------------------------------------------------- | --------- | ---------- | | Standalone application on Non-GPU AMD Epyc Genoa. CPU | ₪0.0775 | 1 CPU hour | | Standalone application on Non-GPU AMD Epyc Genoa. RAM | ₪0.0155 | 1 GiB hour | Charges are based on the resource preset that you are using. For example, using a `4vcpu-16gb` application for 1 hour costs 4 × ₪0.0775 + 16 × ₪0.0155 = ₪0.558. For 730 hours (\~ 1 month), this amounts to 730 × ₪0.558 = ₪407.34. #### Non-GPU Intel Ice Lake The platform is only available in the `eu-north1` region. | **Item** | **Price** | **Per** | | ----------------------------------------------------- | --------- | ---------- | | Standalone application on Non-GPU Intel Ice Lake. CPU | \$0.025 | 1 CPU hour | | Standalone application on Non-GPU Intel Ice Lake. RAM | \$0.005 | 1 GiB hour | Charges are based on the resource preset that you are using. For example, using a `4vcpu-16gb` application for 1 hour costs 4 × \$0.025 + 16 × \$0.005 = \$0.18. For 730 hours (\~ 1 month), this amounts to 730 × \$0.18 = \$131.40. | **Item** | **Price** | **Per** | | ----------------------------------------------------- | --------- | ---------- | | Standalone application on Non-GPU Intel Ice Lake. CPU | ₪0.0775 | 1 CPU hour | | Standalone application on Non-GPU Intel Ice Lake. RAM | ₪0.0155 | 1 GiB hour | Charges are based on the resource preset that you are using. For example, using a `4vcpu-16gb` application for 1 hour costs 4 × ₪0.0775 + 16 × ₪0.0155 = ₪0.558. For 730 hours (\~ 1 month), this amounts to 730 × ₪0.558 = ₪407.34. ### Storage You are charged for the disks used by deployed applications. Charges are based on disk sizes, regardless of the amount of used space. * **Billing unit**: 1 byte per 1 second * **Pricing unit**: 1 GiB per 730 hours (230 bytes per 2,628,000 seconds \~ 1 month) | **Item** | **Price per 1 GiB per 730 hours** | | ---------------------------------------- | --------------------------------- | | Standalone application. Network SSD disk | \$0.071 | | **Item** | **Price per 1 GiB per 730 hours** | | ---------------------------------------- | --------------------------------- | | Standalone application. Network SSD disk | ₪0.221 | ## Kubernetes Applications deployed by using the **Kubernetes** deployment option run on [Managed Kubernetes clusters](/kubernetes/clusters/manage). Applications themselves are not subject to their own charges. Only Managed Kubernetes [charges](/kubernetes/resources/pricing) apply to clusters and nodes that host the applications. ## Virtual machine Applications deployed by using the **Virtual machine** deployment option run on [Compute virtual machines](/compute/virtual-machines/index). Applications themselves are not subject to their own charges. Only Compute [charges](/compute/resources/pricing) apply to the virtual machines that host the applications. # Connecting to the Qdrant application in Nebius AI Cloud Source: https://docs.nebius.com/applications/standalone/qdrant/connect After [deploying](/applications/deploy) the Qdrant application, you can connect to it in the [web console](https://console.nebius.com). ## Prerequisites 1. Make sure you are in a [group](/iam/authorization/groups/index) that has at least the `editor` role within your tenant or project; for example, the default `editors` group. You can check this in the [Administration → IAM](https://console.nebius.com/iam) section of the web console. 2. Download the [Nebius AI Cloud certificate](https://storage.eu-north1.nebius.cloud/msp-certs/ca.pem) and install it according to your operating system instructions. You only need the certificate in the following cases: * You deployed the application before June 27, 2025, in a project located in the `eu-north1` or `eu-west1` [regions](/overview/regions). * You deployed the application before June 30, 2025, in a project located in the `us-central1` region. You can find the deployment date on your application's page. ## How to connect 1. In the [web console](https://console.nebius.com), go to  **Applications**. 2. Switch to the **Installed** tab and open your application. 3. Under **Artifacts**, copy the URL from **Public endpoint**. 4. Connect to a Qdrant interface of your choice: 1) Go to `https:///dashboard` in your web browser. 2) To log in, enter the API key (regular or read-only) that the application creation form generated. Call the `QdrantClient()` constructor and specify the URL and the API key (regular or read-only) that the application creation form generated. For example: ```python theme={null} from qdrant_client import QdrantClient qdrant_client = QdrantClient( url="https://", api_key="", ) ``` For more details, see the [Python Qdrant client](https://github.com/qdrant/qdrant-client) on GitHub and [Qdrant documentation](https://qdrant.tech/documentation/). Send API requests to `https://` and use the `api-key` HTTP header to specify the API key (regular or read-only) that the application creation form generated. For example: ```bash theme={null} curl -X GET 'https:///collections' \ --header 'api-key: ' ``` For more details, see [Qdrant documentation](https://qdrant.tech/documentation/) and [API reference](https://api.qdrant.tech/). # Exporting data from the Qdrant application Source: https://docs.nebius.com/applications/standalone/qdrant/export-data You can export your [collections](https://qdrant.tech/documentation/concepts/collections/) from the Qdrant application by creating and downloading [snapshots](https://qdrant.tech/documentation/concepts/snapshots/): 1. [Connect to the application](/applications/standalone/qdrant/connect). 2. In the sidebar, click **Collections**. 3. Open the collection and then go to the **Snapshots** tab. 4. Click **Take snapshot**. 5. In the row of the created snapshot, click → **Download**. 6. Save the file. 1. [Get the application's public endpoint](/applications/standalone/qdrant/connect). 2. Create the collection's snapshot: ```bash theme={null} curl -X POST \ 'https:///collections//snapshots' \ --header 'api-key: ' ``` The output contains the snapshot's name: ```json theme={null} { "time": 0.002, "status": "ok", "result": { "name": "", ... } } ``` 3. Get the snapshot: ```bash theme={null} curl -X GET \ 'https:///collections//snapshots/' \ --header 'api-key: ' ``` For more details, see [Qdrant API reference](https://api.qdrant.tech/). # Qdrant in Nebius AI Cloud Source: https://docs.nebius.com/applications/standalone/qdrant/index Nebius AI Cloud offers Qdrant in Standalone Applications. The application is available in the eu-north1 and us-central1 [regions](/overview/regions). ## About the application [Qdrant](https://github.com/qdrant/qdrant) is an open-source vector database and similarity search engine. It is designed for handling high-dimensional vector data efficiently. It enables fast and scalable semantic search, recommendation systems and neural information retrieval through vector similarity. For more details, see the [application page](https://console.nebius.com/applications/standalone/overview/appkind-e00qdrant) in the web console. Qdrant is available under the [Apache 2.0 license](https://github.com/qdrant/qdrant/blob/master/LICENSE). ## Getting started To use the Qdrant application, [deploy it](/applications/deploy) and [connect to it](/applications/standalone/qdrant/connect). # Applications quotas in Nebius AI Cloud Source: https://docs.nebius.com/applications/standalone/quotas Applications are subject to [quotas](/overview/quotas). The quotas that apply to the applications depend on the [deployment option](/applications/types#deployment-options) that you choose. An application and its resources count towards the quotas throughout the application's lifecycle, from its deployment to deletion, regardless of whether it is running or stopped. ## Standalone Applications | Quota name | Default value,
eu-north1 | Default value,
us-central1 | Default value,
uk-south1*\** | | ----------------------------------------------------------------- | ------------------------------------------ | -------------------------------------------- | ----------------------------------------------------------------- | | Deployed standalone applications | 16 | 16 | 16 | | vCPUs in deployed standalone applications | 256 | 272 | 272 | | RAM total size in deployed standalone applications | 3200 GiB | 3264 GiB | 3264 GiB | | NVIDIA® B200 GPUs in deployed standalone applications | *N/A* | *N/A* | *N/A* | | NVIDIA® H200 GPUs in deployed standalone applications | 0 | 16 | *N/A* | | NVIDIA® H100 GPUs in deployed standalone applications | 16 | *N/A* | *N/A* | | NVIDIA® L40S GPUs in deployed standalone applications | 0 | *N/A* | *N/A* | | Network SSD disks total size in deployed standalone applications | 16 TiB | 16 TiB | 16 TiB | | Shared filesystems total size in deployed standalone applications | 16 TiB | 16 TiB | 16 TiB | ## Kubernetes Applications deployed using the **Kubernetes** deployment option are subject to [Managed Kubernetes quotas](/kubernetes/resources/quotas-limits). ## Virtual machine Applications deployed using the **Virtual machine** deployment option are subject to [Compute quotas](/compute/resources/quotas-limits). # Stopping and starting standalone applications in Nebius AI Cloud Source: https://docs.nebius.com/applications/standalone/stop-start If you are not using the application that you have deployed with a **Standalone** option, you can stop it in the [web console](https://console.nebius.com) to save costs. While the application is stopped, you are [charged](/applications/standalone/pricing) for its storage but not for its computing resources (GPUs, vCPUs and RAM). When you need the application again, you can restart it. The application keeps the data that you saved in it, although you can only access it after you restart the application. The restart takes around 15 minutes. Computing and storage resources of a stopped application count towards [Standalone Applications quotas](/applications/standalone/quotas), just like a running application. ## Prerequisites Make sure you are in a [group](/iam/authorization/groups/index) that has at least the `editor` role within your tenant or project; for example, the default `editors` group. You can check this in the [Administration → IAM](https://console.nebius.com/iam) section of the web console. ## How to stop and start an application 1. In the [web console](https://console.nebius.com), go to  **Applications**. 2. Go to the **Installed** tab to see your deployed applications. 3. Find your standalone application and open it. 4. On the application details page, click **Stop** or **Start**. # Types and stages of applications in Nebius AI Cloud Source: https://docs.nebius.com/applications/types Each application in Nebius AI Cloud can be deployed by using different deployment options and goes through the application stages. ## Deployment options Nebius AI Cloud offers three deployment options for applications: * **Virtual machine**: Deploy applications on a [container over virtual machine](/compute/virtual-machines/containers) with root access and custom setup. This option provides maximum performance tuning and direct control over infrastructure. * **Standalone**: Deploy applications on infrastructure managed by Nebius AI Cloud. This option offers zero setup time and instant deployment. The infrastructure is managed for you, but you have control over the application configuration. * **Kubernetes**: Deploy applications on [Managed Service for Kubernetes®](/kubernetes/clusters/manage) clusters. This option provides auto-scaling, multi-model serving and enterprise monitoring capabilities. You need a Managed Kubernetes cluster with at least one [node group](/kubernetes/node-groups/manage). Not all deployment options are available for every application. When you open an application page, you see which deployment options are available for that specific application. ## Stages Each application is either *in preview* (for testing and feedback, free of charge) or *generally available* (for production environments, usually paid). For more information, see [Service and application stages](/overview/services#service-and-application-stages) in the Nebius AI Cloud overview. If an application stage is not explicitly marked as in preview, the application is generally available. # How to export audit events to Object Storage Source: https://docs.nebius.com/audit-logs/events/export *Audit event export* lets you deliver [audit events](/audit-logs/events/view) for a fixed time range to an [Object Storage bucket](/object-storage/overview#buckets). Exports are one-time and run asynchronously, writing files directly to the bucket. This is useful for long-term retention, processing data in external tools and [data portability](/overview/data-portability). After the export completes, you can download the exported objects from the bucket to store them locally or move them to a different provider. ## Prerequisites * [Install and configure the Nebius AI Cloud CLI](/cli/quickstart). * Make sure you are in a [group](/iam/authorization/groups/index) that has the `admin` or `auditlogs.audit-event-exporter` role within your tenant. You can check this in the [Administration → IAM](https://console.nebius.com/iam) section of the web console. * Make sure that you have the `storage.uploader` role for the destination Object Storage bucket. ## How to export events Audit events are stored in the [region](/overview/regions) where the activity occurred, so you must specify `--region` in your command. To cover activity in several regions, repeat the command for each of them. If you omit the region, the command defaults to `eu-north1` until August 13, 2026. After that, setting the region explicitly is required and all events will be stored in the selected region. 1. Copy the ID of the tenant you want to export events for: ```bash theme={null} nebius iam tenant list ``` 2. Select an existing bucket or [create a new one](/object-storage/buckets/manage#how-to-create-buckets) in the region you export events from — the destination bucket must be in the same region as the events. Copy the bucket ID. 3. Start an export: ```bash theme={null} nebius audit v2 audit-event-export start \ --parent-id \ --params-from \ --params-to \ --params-event-type \ --nebius-object-storage-bucket-by-id-id \ --nebius-object-storage-object-prefix \ --params-filter "" \ --region ``` In the command above, specify: * `--parent-id`: Tenant ID that you copied earlier. * `--params-from`: Start time for the export, in the [ISO 8601](https://www.iso.org/iso-8601-date-and-time-format.html) format. * `--params-to`: End time for the export, in the ISO 8601 format. * `--params-event-type` (optional): Type of audit event to export: `control_plane` or `data_plane`. Default: `control_plane`. * **Control plane events** (default): Track management operations on resources, such as creating, updating or deleting virtual machines, clusters or other infrastructure resources. * **Data plane events**: Track data access operations, such as reading or writing objects in Object Storage buckets. * `--nebius-object-storage-bucket-by-id-id`: Destination bucket ID that you copied earlier. The bucket must be in the same region as the exported events. * `--nebius-object-storage-object-prefix` (optional): Object prefix. If you omit it, the `auditlogs` prefix is used by default. * `--params-filter` (optional): Filter expression to narrow down exported events. For more information, see [How to filter audit events](/audit-logs/events/filter). * `--region` (optional): [Region](/overview/regions) to export audit events from. Default: `eu-north1`. The command returns an operation that confirms the export was created. The export itself continues running in the background. ## How to check the status of an export To check the current state and parameters of an export, get it by ID: ```bash theme={null} nebius audit v2 audit-event-export get --id ``` Export lifecycle states include `RUNNING`, `DONE`, `FAILED` and `CANCELED`. ## How to list exports To find a specific export, list all exports created for a tenant: ```bash theme={null} nebius audit v2 audit-event-export list --parent-id --region ``` ## How to download exported events After an export reaches the `DONE` state, the exported audit events are available as objects in the destination bucket. To download these objects to your local machine for data portability or local storage: 1. [View the objects](/object-storage/objects/manage#how-to-view-objects) in the bucket to find the exported files. The objects are stored under the prefix that you specified when you launched the export, or under the default `auditlogs` prefix. 2. [Download the objects](/object-storage/objects/upload-download#how-to-download) from the bucket to your local machine. You can download a single object or all objects with a specific prefix. For example, to download all exported audit events with the default `auditlogs` prefix: ```bash theme={null} aws s3 cp --recursive \ s3:///auditlogs/ \ ``` ## How to cancel an export To stop an active export, run: ```bash theme={null} nebius audit v2 audit-event-export cancel --id ``` The export transitions to the `CANCELED` state. Data that is already written to the bucket is preserved. # How to filter audit events Source: https://docs.nebius.com/audit-logs/events/filter You can filter audit events when [viewing](/audit-logs/events/view) or [exporting](/audit-logs/events/export) them to narrow down the results. The filter syntax is the same for both operations, with one exception: the `authentication.subject.name` filter is not available in exports because it can contain email addresses that are [personally identifiable information (PII)](https://en.wikipedia.org/wiki/Personal_data). ## Filter operators Supported operators include: * `=` equals * `!=` not equals * `:` contains * `regex` regular expression match ## How to filter events in the web console To narrow down the events, you can use the following filters: * **Event JSONs**: Search in JSON field values, but not a full-text search for a substring in the JSON event description. For example, if the JSON contains a `name` field with the value `Test User`, this filter finds `Test User` but cannot find `"name": "Test User"`. * **Action**: Standard actions are `CREATE`, `UPDATE` or `DELETE`. Actions can differ by service. For example, for Compute resources, you can also specify `STOP` and `START`. * **Ancestor ID**: ID of the resource ancestor, starting from the tenant. * **Ancestor name**: Name of the resource ancestor, starting from the tenant. * **Masked token**: [Access token](/iam/authorization/access-tokens) that was used to authorize the event. You can enter a part of the token here. * **Region**: [Nebius AI Cloud region](/overview/regions) in which the event occurred. * **Resource ID**: ID of the resource on which actions were performed. For example, a Compute disk (`computedisk-***`), a service account (`serviceaccount-***`), etc. * **Resource name**: Name of the resource on which actions were performed. * **Resource type**: Type of the resource on which actions were performed. For example, `computedisk` or `mk8scluster`. * **Service**: [Service](/audit-logs/services) in which the actions were performed. * **Event class**: A string in the `ai.nebius...` format. It includes the `ai.nebius` prefix and refers to a Nebius AI Cloud service, type of resource in it and the action performed on this resource, for example, `ai.nebius.compute.computeinstance.delete`. * **Static key ID**: ID of the [static key](/iam/authorization/static-keys/index) that was used to authorize the event. * **Status**: Status of the operation associated with the event. * **Subject ID**: ID of a user account or a service account that performed actions. The formats of user account IDs and service account IDs are `tenantuseraccount-***` and `serviceaccount-***`. * **Subject name**: Name of a user account or a service account that performed actions. This filter is not available for exports. Click `=` in a filter to choose if the events should contain or exclude the values you enter. ## How to filter events by using the CLI Audit events are stored in the [region](/overview/regions) where the activity occurred, so you must specify `--region` in your command. To cover activity in several regions, repeat the command for each of them. If you omit the region, the command defaults to `eu-north1` until August 13, 2026. After that, setting the region explicitly is required and all events will be stored in the selected region. To narrow down the events, you can use one or more of the following filters: * **Resource ID or type** The type or ID of the resource on which actions were performed. ID formats include, for example, a `computeinstance-***` for a Compute virtual machine, `computedisk-***` for a Compute disk, `serviceaccount-***` for a service account. ```bash theme={null} nebius audit v2 audit-event list \ --parent-id \ --start --end \ --filter "resource.metadata.type='computeinstance'" \ --region ``` ```bash theme={null} nebius audit v2 audit-event list \ --parent-id \ --start --end \ --filter "resource.metadata.id='computeinstance-***'" \ --region ``` ```bash theme={null} nebius audit v2 audit-event-export start \ --parent-id \ --params-from --params-to \ --params-event-type \ --nebius-object-storage-bucket-by-id-id \ --nebius-object-storage-object-prefix \ --params-filter "resource.metadata.type='computeinstance'" \ --region ``` ```bash theme={null} nebius audit v2 audit-event-export start \ --parent-id \ --params-from --params-to \ --params-event-type \ --nebius-object-storage-bucket-by-id-id \ --nebius-object-storage-object-prefix \ --params-filter "resource.metadata.id='computeinstance-***'" \ --region ``` * **Resource ancestor ID or name** The ID or name of the resource ancestor, starting from the tenant. For example, you can check all the actions performed on virtual machines in one of your projects by specifying the project ID or name. ```bash theme={null} nebius audit v2 audit-event list \ --parent-id \ --start --end \ --filter "resource.hierarchy.id:''" \ --region ``` ```bash theme={null} nebius audit v2 audit-event list \ --parent-id \ --start --end \ --filter "resource.hierarchy.name:''" \ --region ``` ```bash theme={null} nebius audit v2 audit-event-export start \ --parent-id \ --params-from --params-to \ --params-event-type \ --nebius-object-storage-bucket-by-id-id \ --nebius-object-storage-object-prefix \ --params-filter "resource.hierarchy.id:''" \ --region ``` ```bash theme={null} nebius audit v2 audit-event-export start \ --parent-id \ --params-from --params-to \ --params-event-type \ --nebius-object-storage-bucket-by-id-id \ --nebius-object-storage-object-prefix \ --params-filter "resource.hierarchy.name:''" \ --region ``` * **Event action** Specify the action: `CREATE`, `UPDATE` or `DELETE`. Actions can differ by service. For example, for Compute resources, you can also specify `STOP` and `START`. ```bash theme={null} nebius audit v2 audit-event list \ --parent-id \ --start --end \ --filter "action='DELETE'" \ --region ``` ```bash theme={null} nebius audit v2 audit-event-export start \ --parent-id \ --params-from --params-to \ --params-event-type \ --nebius-object-storage-bucket-by-id-id \ --nebius-object-storage-object-prefix \ --params-filter "action='DELETE'" \ --region ``` * **Service** in which the event occurred. See the [list of services](/audit-logs/services). ```bash theme={null} nebius audit v2 audit-event list \ --parent-id \ --start --end \ --filter "service.name='COMPUTE'" \ --region ``` ```bash theme={null} nebius audit v2 audit-event-export start \ --parent-id \ --params-from --params-to \ --params-event-type \ --nebius-object-storage-bucket-by-id-id \ --nebius-object-storage-object-prefix \ --params-filter "service.name='COMPUTE'" \ --region ``` * **Event class** A string in the `ai.nebius...` format. It includes the `ai.nebius` prefix and refers to a Nebius AI Cloud service, type of resource in it and the action performed on this resource, for example, `ai.nebius.compute.computeinstance.delete`. ```bash theme={null} nebius audit v2 audit-event list \ --parent-id \ --start --end \ --filter "type='ai.nebius.compute.computeinstance.delete'" \ --region ``` ```bash theme={null} nebius audit v2 audit-event-export start \ --parent-id \ --params-from --params-to \ --params-event-type \ --nebius-object-storage-bucket-by-id-id \ --nebius-object-storage-object-prefix \ --params-filter "type='ai.nebius.compute.computeinstance.delete'" \ --region ``` * **Subject name or ID** The name or ID of a user account or a service account that performed actions. The formats of user account IDs and service account IDs are `tenantuseraccount-***` and `serviceaccount-***`. The `authentication.subject.name` filter is not available for exports. ```bash theme={null} nebius audit v2 audit-event list \ --parent-id \ --start --end \ --filter "authentication.subject.name=''" \ --region ``` ```bash theme={null} nebius audit v2 audit-event list \ --parent-id \ --start --end \ --filter "authentication.subject.tenant_user_id='tenantuseraccount-***'" \ --region ``` ```bash theme={null} nebius audit v2 audit-event list \ --parent-id \ --start --end \ --filter "authentication.subject.service_account_id='serviceaccount-***'" \ --region ``` ```bash theme={null} nebius audit v2 audit-event-export start \ --parent-id \ --params-from --params-to \ --params-event-type \ --nebius-object-storage-bucket-by-id-id \ --nebius-object-storage-object-prefix \ --params-filter "authentication.subject.tenant_user_id='tenantuseraccount-***'" \ --region ``` ```bash theme={null} nebius audit v2 audit-event-export start \ --parent-id \ --params-from --params-to \ --params-event-type \ --nebius-object-storage-bucket-by-id-id \ --nebius-object-storage-object-prefix \ --params-filter "authentication.subject.service_account_id='serviceaccount-***'" \ --region ``` * **Subject credentials** For [access tokens](/iam/authorization/access-tokens), use `authentication.token_credential.masked_token` without a signature. For AWS-compatible [access keys](/iam/service-accounts/access-keys), use `authentication.static_key_credential.id`. ```bash theme={null} nebius audit v2 audit-event list \ --parent-id \ --start --end \ --filter "authentication.token_credential.masked_token=''" \ --region ``` ```bash theme={null} nebius audit v2 audit-event list \ --parent-id \ --start --end \ --filter "authentication.static_key_credential.id=''" \ --region ``` ```bash theme={null} nebius audit v2 audit-event-export start \ --parent-id \ --params-from --params-to \ --params-event-type \ --nebius-object-storage-bucket-by-id-id \ --nebius-object-storage-object-prefix \ --params-filter "authentication.token_credential.masked_token=''" \ --region ``` ```bash theme={null} nebius audit v2 audit-event-export start \ --parent-id \ --params-from --params-to \ --params-event-type \ --nebius-object-storage-bucket-by-id-id \ --nebius-object-storage-object-prefix \ --params-filter "authentication.static_key_credential.id=''" \ --region ``` ## How to combine filters To combine filters, use the following options: * `AND` logical operator. * Comparison operators: `=` (equals), `!=` (not equals), `:` (contains). * [Regular expressions](https://en.wikipedia.org/wiki/Regular_expression#Syntax) (for example, `regex(resource.name, '^.*prod.*$')` to show resources with `prod` in their names). ## Examples For example, to view all events where the user `example@nebius.com` deleted virtual machines between April 1 and April 5, run: ```bash theme={null} nebius audit v2 audit-event list \ --parent-id \ --start --end \ --filter "authentication.subject.tenant_user_id='example@nebius.com' \ AND action='DELETE' \ AND resource.metadata.type='computeinstance'" \ --region ``` For example, to export all events where a specific user deleted virtual machines between April 1 and April 5, run: ```bash theme={null} nebius audit v2 audit-event-export start \ --parent-id \ --params-from 2025-04-01T00:00:00Z --params-to 2025-04-06T00:00:00Z \ --params-event-type \ --nebius-object-storage-bucket-by-id-id \ --nebius-object-storage-object-prefix \ --params-filter "authentication.subject.tenant_user_id='' \ AND action='DELETE' \ AND resource.metadata.type='computeinstance'" \ --region ``` For more details about the fields, see [Structure and fields of events in Audit Logs](/audit-logs/events/reference). # Structure and fields of events in Audit Logs Source: https://docs.nebius.com/audit-logs/events/reference Each event in Audit Logs has a JSON representation that conforms to the [CloudEvents specification](https://github.com/cloudevents/spec/blob/main/cloudevents/spec.md). ## JSON structure This JSON is provided for reference purposes and is not a valid example of an event JSON. It contains pairs of fields that cannot occur together in a single event JSON: either `.authentication.subject.tenant_user_id` or `.authentication.subject.service_account_id`, and either `.authentication.token_credential` or `.authentication.static_key`. ```json theme={null} { "id": "ba989c6d-d6fb-***", "source": "nebius.registry.v1.RegistryService/Update", "specversion": "1.0", "type": "ai.nebius.registry.registry.update", "service": { "name": "REGISTRY" }, "action": "UPDATE", "time": "2025-03-25T17:29:22.024775156Z", "event_version": "1.04", "authentication": { "authenticated": true, "subject": { "tenant_user_id": "tenantuseraccount-***", "service_account_id": "serviceaccount-***", "name": "Jane Doe" }, "federation": { "id": "federation-***", "name": "Acme Inc." }, "authentication_type": "ACCESS_TOKEN", "token_credential": { "masked_token": "ne1cV***" }, "static_key": { "id": "NAKI3UCA***" } }, "authorization": { "authorized": true }, "resource": { "metadata": { "id": "registry-***", "name": "test-registry", "type": "registry" }, "hierarchy": [ { "id": "tenant-***", "name": "tenant-***", "type": "tenant" }, { "id": "project-***", "name": "test-project", "type": "project" } ], "state": { "previous": { "metadata": { ... }, "spec": { ... }, "status": { ... } }, "current": { "metadata": { ... }, "spec": { ... }, "status": { ... } } } }, "request": { "request_id": "481f7089-f6b0-***", "parameters": { ... }, "idempotency_id": "38bceb03-610a-***", "trace_id": "313d***" }, "response": { "status_code": "RESOURCE_EXHAUSTED", "error_message": "", "payload": { ... } }, "status": "ERROR" } ``` ## Fields Fields marked with \* are [required context attributes](https://github.com/cloudevents/spec/blob/main/cloudevents/spec.md#required-attributes) from the CloudEvents specification. * `.id`\* The event identifier. * `.source`\* The name of the event source; that is, the [gRPC API](/grpc-api/index) method of Nebius AI Cloud that the subject used to perform the action, for example, `nebius.iam.v1.ServiceAccountService/List`. * `.specversion`\* The version of the [CloudEvents specification](https://github.com/cloudevents/spec) that the event uses. For more details, see [specversion](https://github.com/cloudevents/spec/blob/main/cloudevents/spec.md#specversion) in the list of CloudEvents context attributes. * `.type`\* The event type. All types contain the `ai.nebius` prefix and reference Nebius AI Cloud services, types of resources in them and actions performed on these resources. For example, `ai.nebius.iam.service_account.list`. * `.service.name` The name of the service where the event occurred. For the list of services and their `.service.name` values, see [Nebius AI Cloud services supported by Audit Logs](/audit-logs/services). * `.action` The action type: `CREATE`, `UPDATE`, `DELETE`, etc. * `.time` The timestamp of the event in the [RFC 3339 format](https://datatracker.ietf.org/doc/html/rfc3339#section-5.8). For example, `2025-03-25T17:29:22.024775156Z`. * `.event_version` The version of Audit Logs event specification that the event uses. Format: `.`; for example, `1.04`. Specifications with the same major version and different minor versions are backwards-compatible, but specifications with different major versions are not. * `.authentication` The details about the subject that performed the action and how Nebius AI Cloud authenticated it: * `.authentication.authenticated` A Boolean that shows whether the authentication was successful. * `.authentication.subject` The details about the subject (the user account or the service account): * `.authentication.subject.name` The name of a service account or the email of a user account. If the service account name is `Nebius`, the event was triggered by Nebius as part of maintenance or a support investigation. * `.authentication.subject.tenant_user_id` The user account ID, with the `tenantuseraccount-` prefix. * `.authentication.subject.service_account_id` The service account ID, with the `serviceaccount-` prefix. For the `Nebius` service account, only the name is shown. Only `.authentication.subject.tenant_user_id` or `.authentication.subject.service_account_id` is included, depending on the type of the subject account. * `.authentication.federation` The details about the Nebius AI Cloud federation that the subject user account authenticated with: * `.authentication.federation.id` The federation ID, with the `federation-` prefix. * `.authentication.federation.name` The federation name. * `.authentication.authentication_type` The type of the credentials that the subject authenticated with: `ACCESS_TOKEN` for [access tokens](/iam/authorization/access-tokens) or `STATIC_KEY` for AWS-compatible [access keys](/iam/service-accounts/access-keys). * `.authentication.token_credential.masked_token` The access token without the signature. * `.authentication.static_key.id` The access key ID. Only `.authentication.token_credential` or `.authentication.static_key` is included, depending on the type of the credentials. * `.authorization.authorized` A Boolean that shows whether Nebius AI Cloud successfully authorized the subject to perform the action. * `.resource` The details about the resource on which the action was performed: * `.resource.metadata` The resource metadata: * `.resource.metadata.id` The ID of the resource. * `.resource.metadata.name` The name of the resource. * `.resource.metadata.type` The resource type. For example, `vpcallocation`. * `.resource.hierarchy` The list of the resource's ancestors, from tenant to parent. For example, ancestors of a Managed Service for PostgreSQL® cluster are the tenant and a project in the tenant. Each element of the list has the same fields as `.resource.metadata`: `.id`, `.name` and `.type`. * `.resource.state.previous` The state of the resource before the `UPDATE` or `DELETE` action. The state may contain, for example, the resource's metadata (`.metadata`), specification (`.spec`) and status (`.status`). * `.resource.state.current` The state of the resource after the `CREATE` or `UPDATE` action. For more information about states, see the description of `.resource.state.previous`. * `.request` The metadata of the request from the subject to Nebius AI Cloud: * `.request.request_id` The request UUID. Each request, including requests that retry the same action, has a unique ID. * `.request.parameters` Parameters provided in the API call that triggered the action. * `.request.idempotency_id` The idempotency UUID of the request. When two requests are retries of the same action, they have the same idempotency ID. * `.request.trace_id` The [trace-id](https://www.w3.org/TR/trace-context/#trace-id) of the request. It is used to identify the [distributed trace](https://www.w3.org/TR/trace-context/#dfn-distributed-traces) of the event: a set of calls that were made between Nebius AI Cloud systems and components when the subject requested to perform the action. * `.response` The status of the response from Nebius AI Cloud to the subject: * `.response.status_code` The [gRPC status code](https://grpc.io/docs/guides/status-codes/) returned in the response. * `.response.error_message` The error message. If `.response.status_code` is `OK`, the message is empty. * `.response.payload` Data returned by the system in response to the API call. * `.status` The status of the Nebius AI Cloud operation associated with the event: `STARTED`, `DONE` or `ERROR`. *** *Postgres, PostgreSQL and the Slonik Logo are trademarks or registered trademarks of the PostgreSQL Community Association of Canada, and used with their permission.* # Viewing events in Audit Logs Source: https://docs.nebius.com/audit-logs/events/view An *audit event* is a data record that captures something that happened in Nebius AI Cloud, along with metadata that provides additional context. The metadata shows how events relate to resources or to each other. Each event in Audit Logs has a JSON representation that conforms to the [CloudEvents specification](https://github.com/cloudevents/spec/blob/main/cloudevents/spec.md). You can use the Nebius AI Cloud web console or CLI to view and filter audit events for your [tenant](/iam/overview#tenants). ## Prerequisites Make sure you are in a [group](/iam/authorization/groups/index) that has the `admin` or `auditlogs.audit-event-viewer` role within your tenant. You can check this in the [Administration → IAM](https://console.nebius.com/iam) section of the web console. ## How to view events In the sidebar, go to **Administration** → **Audit Logs**. To work with the events on this page, you can do the following: * On the **Logs** tab: * Select the event type: **Control plane** or **Data plane**. Control plane events track management operations on resources (such as creating or deleting virtual machines). Data plane events track data access operations (such as reading or writing objects in Object Storage). * View event JSONs. To do this, click  in an event's row. * Filter events by period or [by using filters](/audit-logs/events/filter#how-to-filter-events-in-the-web-console). Click  **Filters** and select the filters you need. * On the **Metrics** tab: * Select the event type: **Control plane** or **Data plane**. * View the number of events processed per second in a specific region and time period. * Only for data plane events, view information related to quota usage. For more information, see [Quotas in Audit Logs](/audit-logs/resources/quotas-limits). Audit events are stored in the [region](/overview/regions) where the activity occurred, so you must specify `--region` in your command. To cover activity in several regions, repeat the command for each of them. If you omit the region, the command defaults to `eu-north1` until August 13, 2026. After that, setting the region explicitly is required and all events will be stored in the selected region. 1. To copy the ID of the required tenant, view your list of tenants: ```bash theme={null} nebius iam tenant list ``` 2. Get all events in the tenant: ```bash theme={null} nebius audit v2 audit-event list \ --parent-id \ --start \ --end \ --region ``` Start and end dates are required and must be in the [ISO 8601](https://www.iso.org/iso-8601-date-and-time-format.html) format. For example, to get all the events that happened in March 2025, run the following command: ```bash theme={null} nebius audit v2 audit-event list --parent-id \ --start 2025-03-01T00:00:00Z \ --end 2025-04-01T00:00:00Z \ --region ``` 3. (Optional) By default, only control plane events are shown. * **Control plane events** (default): Track management operations on resources, such as creating, updating or deleting virtual machines, clusters or other infrastructure resources. * **Data plane events**: Track data access operations, such as reading or writing objects in Object Storage buckets. To view data plane events, specify `data_plane` in the `--event-type` parameter: ```bash theme={null} nebius audit v2 audit-event list \ --parent-id \ --start \ --end \ --event-type data_plane \ --region ``` 4. (Optional) To narrow down events, use [filters](/audit-logs/events/filter#how-to-filter-events-by-using-the-cli). # Audit Logs Source: https://docs.nebius.com/audit-logs/index With Audit Logs in Nebius AI Cloud, you can see who did what and when with your resources to ensure security, compliance and accountability. The service is [in preview](/overview/services/#service-and-application-stages) and is available in all [Nebius AI Cloud regions](/overview/regions/). See the list of Nebius AI Cloud services and resources from which you can get events in Audit Logs Learn how to view, search and filter events Learn how to export events to Object Storage Learn how to filter events See what events look like and what information they contain Learn how Audit Logs can help you investigate key events in your tenant, from security issues to resource changes # Pricing in Audit Logs Source: https://docs.nebius.com/audit-logs/resources/pricing Audit Logs in Nebius AI Cloud is provided free of charge. # Quotas in Audit Logs Source: https://docs.nebius.com/audit-logs/resources/quotas-limits Audit Logs has a throughput quota on data plane events ([Object Storage logs](/object-storage/logs) of actions that are performed to objects in buckets). For details on what quotas are and how to manage them, see [Quotas in Nebius AI Cloud](/overview/quotas). ## Data plane events | Quota name | Default value per [region](/overview/regions) | | :------------------------------------- | :-------------------------------------------- | | Number of data plane events per second | 1000 | Events beyond the quota are dropped. To track event rates, quota usage and dropped events, [monitor your data plane events](#monitoring-data-plane-events). ### Monitoring data plane events 1. In the [web console](https://console.nebius.com), in the sidebar, go to **Administration** → **Audit Logs**. 2. Switch to the **Metrics** tab. 3. Select **Data plane** for the event type. 4. Select a region and the period for which you want to view data plane event metrics. The following graphs are available in this view: * **Data plane processed rate** Events processed per second. Use this graph to understand your Object Storage activity. * **Data plane quota usage** Events processed per second against the quota limit for the selected region. Use this graph to see if you are approaching the quota and need a [quota increase](/overview/quotas#change-quotas). * **Data plane events dropped** Events dropped per second due to exceeding the quota. Use this graph to detect periods when events were dropped. # Nebius AI Cloud services supported by Audit Logs Source: https://docs.nebius.com/audit-logs/services Audit Logs creates events for the following [Nebius AI Cloud services and technical resources](/overview/services). Corresponding values of the `.service.name` field in [event JSONs](/audit-logs/events/reference) are given in parentheses: * [Compute](/compute/index) (`COMPUTE`) * [Managed Service for Kubernetes®](/kubernetes/index) (`MK8S`) * [Container Registry](/container-registry/index) (`REGISTRY`) * [Serverless AI](/serverless/index) (`MSP_SERVERLESS`) * [Managed Service for MLflow](/mlflow/index) (`MSP_MLFLOW`) * [Managed Service for PostgreSQL®](/postgresql/index) (`MSP_POSTGRESQL`) * [Object Storage](/object-storage/index) (`STORAGE`) * [Data transfers](/object-storage/transfer/overview) in Object Storage (`DATA_TRANSFER`) * [Virtual Networks](/vpc/index) (`VIRTUAL_NETWORKS`, `VPC` for logs older than June 23, 2025) * [Nebius Tunnels](/tunnels/index) (`MARKETPLACE`) * [Identity and Access Management resources](/iam/index) (`IAM`) * [Key Management Service](/kms/index) (`KMS`) * [MysteryBox](/mysterybox/index) (`MBOX`) *** *Postgres, PostgreSQL and the Slonik Logo are trademarks or registered trademarks of the PostgreSQL Community Association of Canada, and used with their permission.* # When to use Audit Logs Source: https://docs.nebius.com/audit-logs/use-cases Audit Logs allows you to view and filter events for your [tenant](/iam/overview#tenants). This article helps you understand which filters to set when you investigate specific situations, such as: 1. [When you suspect a security incident](#potential-security-incidents). 2. [When resource changes lead to unexpected spending](#unexpected-spending). Audit events are stored per region, so repeat each search in every region where you have resources. ## Potential security incidents If you suspect a security incident in your tenant, Audit Logs can help you track down the events that occurred at the time and investigate possible causes. ### Who made changes to resources, and when? If you encounter a suspicious change in resources of a given type, review the events that involve resource changes: * Enter `CREATE`, `UPDATE` or `DELETE` in the **Action** field to see all resource changes. * Fill in the **Resource type** field to see the changes that concern a specific resource type. For example, enter `DELETE` in the **Action** field and `computeinstance` in the **Resource type** field to find out which Compute virtual machines were deleted. See the **Subject** column to find out who made the change. Set the following filters: * `action` equal to `CREATE`, `UPDATE` or `DELETE`. * `resource.metadata.type` equal to the resource type. For example, `computeinstance` for a Compute virtual machine. For example, to find out which Compute virtual machines were created in the period: ```bash theme={null} nebius audit v2 audit-event list \ --parent-id \ --start --end \ --filter "action='CREATE' AND resource.metadata.type='computeinstance'" \ --region ``` See the `authentication.subject` parameter of the response to find out who made the change. ### What happened at the time of the incident? To gain more context when investigating an incident, create granular filters to review the events: To combine filters, use the following options: * `AND` logical operator. * Comparison operators: `=` (equals), `!=` (not equals), `:` (contains). * [Regular expressions](https://en.wikipedia.org/wiki/Regular_expression#Syntax) (for example, `regex(resource.name, '^.*prod.*$')` to show resources with `prod` in their names). * Limit the number of entries you receive by using the `--page-size` parameter. For example, to view 10 events where the user `example@nebius.com` deleted virtual machines between April 1 and April 5, run: ```bash theme={null} nebius audit v2 audit-event list \ --parent-id \ --start 2025-04-01T00:00:00Z --end 2025-04-06T00:00:00Z \ --filter "authentication.subject.name='example@nebius.com' \ AND action='DELETE' \ AND resource.metadata.type='computeinstance'" \ --page-size=10 \ --region ``` If there are more than 10 events, get the `next_page_token` value from the response and run the same command again with an additional `--page-token=` parameter to get the next batch. ## Unexpected spending If you see a sudden increase in spending, Audit Logs can help you find out more about the resources that are used in your tenant. ### What happened with a specific resource? A particular resource may cause more spending than you expected. Get the events that are associated with this resource: Enter the resource ID in the **Resource ID** field. * If you know the resource name, filter by `resource.metadata.name`. * If you know the resource ID, filter by `resource.metadata.id`. For example: ```bash theme={null} nebius audit v2 audit-event list \ --parent-id \ --start --end \ --filter "resource.metadata.name=''" \ --region ``` ### Who created a new resource? Unexpected spending may be caused by creating more resources than necessary. To investigate who created them, get the resource creation events: Fill in the **Resource type** field and enter `CREATE` in the **Action** field to see when resources of a specific type were created. For example, enter `computeinstance` in the **Resource type** field and `CREATE` in the **Action** field to see all events where a Compute virtual machine was created. See the **Subject** column to find out who made the change. Set the following filters: * `action` equal to `CREATE`. * `resource.metadata.type` equal to the resource type. For example, `computeinstance` for a Compute virtual machine. For example: ```bash theme={null} nebius audit v2 audit-event list \ --parent-id \ --start --end \ --filter "action='CREATE' AND resource.metadata.type='computeinstance'" \ --region ``` See the `authentication.subject` parameter of the response to find out who made the change. # Nebius AI Cloud changelog Source: https://docs.nebius.com/changelog This article lists what has been added, updated, fixed or removed in Nebius AI Cloud services. * *Added:* You can now create [disk snapshots](/compute/storage/disk-snapshots) in Compute to capture a point-in-time copy of a disk. Use snapshots to back up disks before risky operations, clone disk state or restore data from a snapshot. * *Added:* Managed Service for Kubernetes® node groups now integrate with [Virtual Networks security groups](/kubernetes/networking/security-groups). You can [assign security groups](/kubernetes/networking/assign-security-groups) to a node group and control traffic to and from the nodes. * *Updated:* You can now [resize a disk](/postgresql/clusters/manage#how-to-modify-clusters) of a Managed Service for PostgreSQL® cluster without any need to create the cluster again. Disk size can only be increased, not decreased. * *Added:* Managed Service for Soperator now supports [ephemeral nodes](/slurm-soperator/capacity/ephemeral-nodes). You can release specific worker nodes from a Soperator cluster and reuse the same [capacity block group](/overview/limits/capacity-block-groups) for inference workloads in a separate Managed Service for Kubernetes® cluster, without taking down the entire Soperator cluster. * *Added:* Serverless AI [endpoints](/serverless/endpoints/manage) now expose each HTTP port through a managed `https://` URL, and each TCP port through a managed `tls://:443` URL — both encrypted. A public IP address is no longer required to reach an endpoint from the internet. * *Added:* When you create a Serverless AI endpoint, you can now use the `--inject-file` option to [mount local files](/serverless/endpoints/manage) into the endpoint container at launch. Mounted files are read-only and limited to 64 KiB. * *Added:* Object Storage [lifecycle rules](/object-storage/objects/configure-lifecycle-rules) can now filter objects by tags. Use tag-based filters to apply expiration and storage class transitions to a subset of objects in a bucket. * *Added:* New tutorial: [run OpenMM molecular dynamics simulations as a Serverless AI job](/serverless/tutorials/openmm-molecular-dynamics). Package OpenMM in a Docker image, push it to Container Registry and run CUDA®-accelerated protein simulations that read and write results to an Object Storage bucket. * *Updated:* Managed Service for Kubernetes now uses a new default [deployment strategy](/kubernetes/node-groups/manage#deployment-strategy-and-quotas) for node group updates: nodes are replaced one at a time (`max_unavailable=1`, `max_surge=0`), so rolling updates no longer require additional Compute quota by default. To keep the previous behavior of creating a replacement node before removing the existing one, set a non-zero surge value on the node group. * *Added:* [Nebius Tunnels](/tunnels/index) is now available in preview. You can expose local HTTP and TCP services to the internet through an outbound agent connection, without opening inbound firewall ports. * *Added:* You can now use [local SSD disks](/compute/storage/local-disks) for high-performance, low-latency ephemeral storage on supported Compute virtual machines, Managed Service for Kubernetes® node groups and Managed Service for Soperator clusters. * *Added:* You can now use [budgets](/signup-billing/budgets) in Billing to track spending against a target amount and receive alerts when your costs cross configured thresholds. * *Added:* Object Storage now supports the [Intelligent storage class](/object-storage/storage-classes#intelligent-storage-class). It automatically switches rarely accessed objects to a lower-cost tier while keeping objects in the same location and preserving storage performance. * *Added:* Documentation now includes instructions about [how to share an object with a pre-signed URL](/object-storage/objects/manage#how-to-share-an-object-with-a-pre-signed-url) in Object Storage. Pre-signed URLs grant temporary download access without requiring the recipient to have Nebius AI Cloud credentials. * *Added:* You can now [attach a stopped virtual machine's boot disk to another VM](/compute/virtual-machines/inspect-boot-disk) to inspect or repair it when the original VM does not start or you cannot connect to it. * *Updated:* The `uk-south1` region is now [public](/overview/regions#public-regions). Services available in this region are listed in [Regions](/overview/regions#availability-of-services-per-region). * *Updated:* You can now create one-time [usage data exports](/signup-billing/usage/export#one-time-export) with the Nebius AI Cloud CLI. Use the exported FOCUS 1.2 CSV data for cost analysis and reporting in external tools. * *Added:* The [Key Management Service](/kms) is now available to Nebius AI Cloud users. It enables you to issue and store cryptographic keys, so you can protect and secure your applications. * *Added:* Clusters and node groups in Managed Service for Kubernetes® now support [Kubernetes 1.34](https://kubernetes.io/releases/#release-v1-34). It is now the default and recommended [Kubernetes version in Nebius AI Cloud](/kubernetes/versions). * *Added:* If the control plane of your Managed Kubernetes cluster has a public IP address, you can now restrict network access to it by [specifying a list of allowed CIDR blocks](/kubernetes/networking/limit-access-to-public-endpoint) in the cluster's settings. * *Updated:* Time series that you [ingest into the Observability service](/observability/metrics/ingest/index) can now have up to 37 labels, up from the previous limit of 28 labels. * *Added:* A [free trial](/signup-billing/free-trial) is now available for individual users in the `eu-north1` region. The trial includes 30 days of access and \$5 in credit to explore the platform. * *Added:* You can now use the [Nebius AI Cloud SDK for Go](/grpc-api/sdk/go) to interact with Nebius AI Cloud services from Go applications. Manage resources, handle authentication and call Nebius AI Cloud services without building API requests manually. * *Added:* You can now [send traces directly to Nebius AI Cloud](/observability/traces/direct-ingest) from applications that use OpenTelemetry. Configure an OpenTelemetry exporter to write traces to a regional Tracing writer endpoint. * *Added:* Documentation now includes instructions for [checking Object Storage performance by using Warp](/object-storage/performance/benchmark). * *Updated:* You can now run `nebius ai create` to create a Serverless AI [endpoint](/serverless/quickstart/endpoints) or [job](/serverless/quickstart/jobs) through an interactive, step-by-step workflow. The command guides you through the required configuration options and pre-fills common values, making endpoint and job setup easier. * *Updated:* Starting June 1, 2026, prices are updated for Compute virtual machines and for Standalone Applications with NVIDIA® B300, B200, H200 and H100 GPUs. To check prices before and from this date, see [Compute documentation](/compute/resources/pricing#prices) and [Standalone Applications documentation](/applications/standalone/pricing#computing-resources). * *Added:* You can now [use Managed SkyPilot](/3p-integrations/skypilot-mk8s) to orchestrate and run AI workloads across Managed Service for Kubernetes® clusters. Managed SkyPilot selects the best cluster for running workloads, ensures fault tolerance and chases capacity for the required cluster when the capacity is insufficient. * *Added:* Documentation now includes how data that you export from Nebius AI Cloud is [compliant with FinOps Open Cost and Usage Specification (FOCUS) 1.2](/signup-billing/usage/focus-conformance). * *Added:* Documentation now describes how Compute [isolates InfiniBand™ traffic](/compute/clusters/gpu/index#isolation-and-security-of-infiniband-traffic) between GPU clusters by using InfiniBand partition keys. * *Added:* Serverless documentation now includes video guides, for example, about how to [fine-tune a large language model](/serverless/tutorials/fine-tuning) (LLM) or how to [deploy an LLM](/serverless/tutorials/deploy-model). * *Added:* You can now [import your own image into Compute](/compute/storage/import-image) from an Object Storage bucket. Upload a `.vmdk`, `.vhd`, `.raw` or `.qcow2` file to a bucket and create a custom image to launch boot disks and virtual machines from it. * *Added:* Audit Logs supports [two roles](/iam/authorization/roles#audit-logs), `auditlogs.audit-event-viewer` and `auditlogs.audit-event-exporter`. They grant users granular access to view audit events and manage audit log exports. * *Added:* [Topology-aware scheduling](/kubernetes/gpu/topology-aware-scheduling) is now available for GPU workloads in Managed Service for Kubernetes®. Nebius AI Cloud exposes InfiniBand™ topology information as node labels, so schedulers can place workloads on nodes that are physically closer in the network hierarchy. This improves communication performance. * *Added:* Managed Kubernetes documentation now includes the default [kubeReserved values](/kubernetes/node-groups/kube-reserved) applied on worker nodes. For example, you can find out how the `memory` reservation is calculated for GPU nodes based on RAM size. * *Added:* Object Storage now supports [object integrity checks](/object-storage/objects/manage#how-to-verify-object-integrity). When you upload an object to a bucket, send a checksum with your upload. Object Storage verifies the checksum and integrity of the object on receipt. * *Added:* IAM documentation now includes instructions for [managing federations](/iam/federations/manage). You can create, activate and deactivate federations, change their settings, and upload or delete certificates. * *Added:* CLI documentation now includes [filtering output with JSONPath](/cli/jsonpath-output). Use the `--format jsonpath=''` parameter to extract values such as a resource ID, name or IP address without post-processing the full output. * *Added:* Object Storage now supports [data transfers](/object-storage/transfer/overview). Use them to replicate and back up your data from one bucket to another, or to migrate from a particular region or a third-party storage service. * *Updated:* [Tax handling for companies](/signup-billing/payments/taxes) has changed. Reverse charge may now apply to companies that provide a valid VAT ID (EU, UAE, UK) or GSTIN (India, Singapore) in their billing setup. Individuals in Israel are now subject to Israeli VAT, like companies. * *Removed:* [NVIDIA NIM™ microservices](/applications/standalone/nvidia-nim/index) for computational drug discovery are no longer available as standalone applications in Nebius AI Cloud. * *Added:* You can now [access instance metadata from within a Compute virtual machine](/compute/virtual-machines/instance-metadata) (VM) through the HTTP instance metadata service (IMDS). Retrieve instance details, labels, network and user data, service account tokens and live maintenance events without calling the Nebius AI Cloud API from outside the VM. * *Updated:* The legacy `/mnt/cloud-metadata` mount on older VM images is deprecated and will be removed on September 30, 2026. Use the [HTTP instance metadata service](/compute/virtual-machines/instance-metadata) instead. * *Updated:* The `ubuntu22.04-cuda12` and `ubuntu22.04-driverless` [boot disk image families](/compute/storage/boot-disk-images) will be deprecated on June 1, 2026. Existing disks remain available, but you can no longer create new disks from these families after that date. Migrate to Ubuntu 24.04 images before the deadline. * *Updated:* When [setting up GPUs in Managed Kubernetes](/kubernetes/gpu/set-up), the `cuda12.4` driver preset (Ubuntu 22.04) is no longer available. Use `cuda12.8` or `cuda13.0` on Ubuntu 24.04. * *Added:* You can now [create a Compute virtual machine and its disks together](/compute/virtual-machines/manage) in a single CLI command. These *managed disks* share the VM's lifecycle and are deleted automatically with it, which makes them a good fit for ephemeral workloads such as training jobs or inference clusters. * *Added:* You can now [tune TCP window sizes on Linux virtual machines](/compute/virtual-machines/tcp-window-tuning) to improve per-flow throughput on high-bandwidth, high-latency connections. * *Updated:* You can now set the [block size](/compute/storage/manage#volume-parameters) for a disk or shared filesystem when creating it in the web console, in addition to the CLI and Terraform provider. * *Deprecated:* The `nebius storage v1alpha1 transfer` CLI commands and the `nebius_storage_v1alpha1_transfer` Terraform resource are deprecated and supported until 2026-06-01. Use the v1 data transfer API instead; existing transfers remain accessible through the v1 API. See the [CLI release notes](/cli/release-notes) and [Terraform provider release notes](/terraform-provider/reference/release-notes). * *Added:* The [NCCL Inspector](/slurm-soperator/monitoring/nccl-inspector) by NVIDIA® is now available on demand for Soperator clusters in Nebius AI Cloud. When enabled for a job, it collects per-communicator, per-collective performance metrics from NCCL operations and sends them to the Grafana® installation included with your cluster. * *Added:* Soperator clusters now include built-in [health checks and an auto-healing system](/slurm-soperator/worker-nodes-health) for worker nodes. Critical GPU, RAM and network checks run on a schedule, and broken nodes are isolated and replaced automatically. * *Added:* You can now configure single sign-on with [Okta](/iam/federations/configure-sso-okta). * *Added:* Compute virtual machines now expose [maintenance reason codes](/compute/virtual-machines/maintenance-reasons) that explain why a maintenance event was triggered. * *Added:* You can now [retrieve the public IPv4 CIDR blocks](/vpc/addressing/public-address-ranges) available for allocations in a project. The available ranges depend on the project region. * *Added:* You can now collect diagnostic logs from [Compute virtual machines](/compute/virtual-machines/logs) and from [Managed Kubernetes clusters](/kubernetes/troubleshooting/logs), including GPU, InfiniBand™ and node-level logs for troubleshooting. * *Added:* A new [all-reduce NCCL performance test](/slurm-soperator/jobs/examples/nccl-all-reduce) is now included in Soperator. Use the pre-built single-node and multi-node versions to validate collective communication between GPUs over NVLink and InfiniBand and assess network performance. * *Updated:* SkyPilot as a standalone application is now available in the `uk-south1` [region](/overview/regions#availability-of-services-per-region). * *Updated:* The [Observability Overview](/observability/index) page in the web console is now the new entrypoint for monitoring, providing information on firing alerts, key resource metrics and recent logs in a single view. * *Added:* Compute disks and shared filesystems now support [deletion protection](/compute/storage/manage#deletion-protection). Enable it to prevent accidental deletion in automated environments such as CI/CD pipelines or Terraform configurations. * *Added:* The Nebius AI Cloud CLI now supports an [interactive mode](/cli/interactive). To enable it, add `-i` or `--interactive` to a command. The CLI prompts for parameters step by step, validates each value and shows the resulting configuration before you apply it. * *Added:* The [log export to Object Storage](/observability/logs/export) now supports the Nebius AI Cloud CLI. * *Added:* You can now get a [list of public boot disk images](/compute/storage/boot-disk-images#how-to-get-a-list-of-available-public-images) available in a given region. The list includes image families, recommended platforms and unsupported platforms for each image. * *Added:* When Prometheus takes too long to retrieve metrics of large clusters, [shard and split their scraping jobs](/observability/metrics/prometheus#how-to-shard-large-scraping-jobs). * *Updated:* The AWS CLI is now documented as a supported interface for [configuring lifecycle rules](/object-storage/objects/configure-lifecycle-rules) in Object Storage, alongside the Nebius AI Cloud interfaces. * *Added:* The [capacity advisor](/compute/virtual-machines/capacity-advisor) is now available in the web console. It shows GPU capacity availability across regions, platforms and presets so you can check where you can launch virtual machines before creating them. * *Added:* You can now [monitor data plane events](/audit-logs/resources/quotas-limits#monitoring-data-plane-events) for Audit Logs in the web console. Graphs show processed events, quota usage and dropped events so you can detect when Object Storage activity approaches the quota. * *Updated:* You can use the web console to create, configure and delete [Serverless AI endpoints](/serverless/endpoints/manage). * *Updated:* You can manage [authorized keys for service accounts](/iam/service-accounts/authorized-keys) from the web console and the Terraform provider, in addition to the CLI. * *Updated:* The [SkyPilot integration tutorial](/3p-integrations/skypilot) now includes instructions to use the Managed SkyPilot API Server, a standalone application available in the Nebius AI Cloud console. * *Updated:* The [Nebius Service Health Status](https://status.nebius.com) page now displays all timestamps in UTC (GMT+00:00). * *Added:* [Nebius Echo](/overview/nebius-echo), an AI assistant, is now available in the web console. It can explain services and features, inspect project resources and perform actions like creating or stopping virtual machines. * *Added:* You can now view and [reschedule maintenance operations](/mlflow/maintenance) for Managed Service for MLflow clusters. The same capability is available for [Managed Service for PostgreSQL](/postgresql/maintenance). * *Added:* A new [compute.instance-power-operator](/iam/authorization/roles#compute) IAM role lets you start and stop Compute virtual machines without granting broader Compute permissions. * *Added:* You can now [query and stream logs directly from the Nebius AI Cloud CLI](/observability/logs/nebius-cli) using LogQL, without configuring external tools. * *Updated:* [Object Storage monitoring](/object-storage/monitoring) now includes additional bucket metrics: space by storage class, object counts by storage class, API errors and transition lifecycle failures. * *Updated:* Three new ML libraries — AutoKeras, auto-sklearn and TPOT — are now listed on the [third-party compatibility](/3p-integrations/compatibility) page. * *Added:* The [NVIDIA® RTX PRO™ 6000](/compute/virtual-machines/types) virtual machine platform is now available in the `us-central1` region. It features 96 GB of GDDR7 memory per GPU and comes in single-GPU and eight-GPU presets. * *Added:* Serverless AI CLI commands now support [MysteryBox secrets](/cli/release-notes). You can pass secrets as environment variables, registry credentials or tokens when creating endpoints and jobs, without exposing sensitive values in plain text. * *Updated:* You can now manage [capacity reservations](/compute/virtual-machines/reservations) for Compute virtual machines and [Managed Kubernetes node groups](/kubernetes/node-groups/reservations) in the web console. Previously, this required the CLI or Terraform provider. * *Updated:* You can now [export logs](/observability/logs/export) directly from individual resource pages in the web console, in addition to the central Observability Logs page. * *Updated:* The default retention period for [logs in Observability services](/observability/resources/quotas-limits#logs-constraints) is now 14 days. * *Added:* [Object versioning](/object-storage/buckets/versioning) is available in Object Storage. When enabled, each update to an object creates a new version, which protects data from loss and allows you to restore previous versions. * *Added:* You can now create [custom boot disk images](/compute/storage/custom-disk-images) to tailor images to your needs and create multiple virtual machines with custom disk architecture. * *Added:* You can also create custom boot disk images by using the [Nebius Packer plug-in](/compute/storage/packer). Use it to pre-install packages to a disk, prepare versioned images and standardize environments across teams or workloads. * *Added:* You can now use the [Nebius Terraform provider with Pulumi](/terraform-provider/pulumi) to declare your Nebius AI Cloud resources in the preferred programming language instead of using Terraform configuration. * *Added:* You can now [export logs](/observability/logs/export) from Observability to an Object Storage bucket in JSON or Parquet format for long-term retention or analysis in external tools. * *Updated:* You can now [attach and detach disks](/compute/storage/use#how-to-attach-volumes-to-vms) on running Compute virtual machines without stopping them first. * *Added:* You can now [view logs for Managed Kubernetes clusters](/kubernetes/logs) in the web console, including optional audit logs and control plane component logs collected by default. * *Added:* You can now [fine-tune a large language model with Serverless AI jobs](/serverless/tutorials/fine-tuning) by using Axolotl and LoRA, with Object Storage for checkpoints and adapter weights. * *Added:* The NVIDIA B200 platform now includes a public [single-GPU preset](/compute/virtual-machines/types) (`1gpu-20vcpu-224gb`) in addition to the eight-GPU configuration. * *Updated:* Managed Kubernetes now uses [Kubernetes 1.33](/kubernetes/versions) for new clusters and node groups. Older supported versions remain available for existing deployments, but are no longer recommended. * *Updated:* [Preemptible virtual machines](/compute/virtual-machines/preemptible) are supported on all [GPU VM platforms](/compute/virtual-machines/types). [Compute pricing](/compute/resources/pricing) now lists Israeli shekel (ILS) rates for preemptible VMs where that billing currency applies. * *Updated:* You can now query logs only within the [Logs constraints](/observability/resources/quotas-limits#logs-constraints) time range, from three days in the past to one day ahead of the current time. * *Added:* A new legal entity, [Nebius Israel Ltd.](/legal/dpa-il), is launched. Companies from Israel can now only pay by [bank transfers](/signup-billing/payments/bank-transfers) in Israeli shekels (ILS, ₪). * *Added:* You can now configure single sign-on by using [Keycloak](/iam/federations/configure-sso-keycloak). * *Updated:* GPU worker nodes in [Managed Service for Soperator](/slurm-soperator/deploy/overview#managed-service-for-soperator) are only available if you have capacity block groups that reserve GPUs. * *Added:* Virtual machines now support [secondary private IP addresses](./compute/virtual-machines/network#how-to-assign-a-secondary-private-ip-address-to-a-vm) that you can use as a backup option in case of incidents. * *Added:* [Nebius VPN Gateway](./vpc/nebius-vpn-gateway), an open-source, VM-based IPsec gateway provided by Nebius Professional Services, is now available. You can deploy it to establish site-to-site VPN connectivity with external networks in other cloud providers or on-premises data centers. * *Added:* Nebius AI Cloud now calculates [taxes](./signup-billing/payments/taxes#united-states) for the residents of Rhode Island in accordance with the United States tax law. * *Updated:* For [viewing ingested traces from Managed Kubernetes clusters](./observability/traces/grafana) in Grafana®, the connection URL is now `https://read.tracing.api.nebius.cloud/projects//tempo` instead of `https://read.tracing.api.nebius.cloud/tempo/`. * *Added:* [Managed Service for Soperator](./slurm-soperator/deploy/overview#nebius-ai-cloud-managed-solutions) is now generally available. You can create and manage Soperator clusters with just a few clicks. * *Added:* You can now [collect journald logs from Compute virtual machines](./observability/logs/journald) and forward these logs to Logging. * *Updated:* [Audit event export](./audit-logs/events/export) to Object Storage buckets is only supported in the `eu-north1` region. * *Updated:* [Specifications](./compute/storage/types#filesystem-specifications) and [performance numbers](./compute/storage/types#filesystems-performance) for shared filesystems are actualized. * *Added:* [Security groups](/vpc/security-groups/overview) are now available for Virtual Networks. You can use them as a firewall for your Compute virtual machines and control ingress and egress traffic with [security rules](/vpc/security-groups/manage). * *Added:* New [Object Storage roles](/iam/authorization/roles) provide more granular access to buckets and objects. See the list of all [actions supported by Object Storage roles](/object-storage/supported-actions). * *Added:* You can now specify a [service account when creating a Compute virtual machine](/compute/virtual-machines/manage) so that the VM performs actions on your behalf. This setting is available in the [Additional](/compute/virtual-machines/params#additional) section of the VM configuration. * *Added:* You can now use [CLI exit codes](/cli/exit-codes) to interpret command failures and to automate scripts that depend on command outcomes. * *Added:* You can now use [Mountpoint for Amazon S3](/object-storage/interfaces/mountpoint-s3) with Object Storage. Mount buckets as local filesystems on your machines or on Compute virtual machines and use the recommendations for use cases, limitations and performance. * *Added:* You can now [deploy applications on containers over virtual machines](/compute/virtual-machines/applications). This option provides maximum performance tuning and direct control over infrastructure. See all available [deployment options](/applications/types). * *Added:* [Network SSD NRD and Network SSD IO M3](./compute/storage/types#disk-types) boot disks now support [encryption](./compute/storage/types#encryption-of-disks), allowing you to securely store personal and other sensitive data, while reducing the risk of unauthorized access. * *Updated:* [Applications](./applications) now have an updated interface that offers improved navigation and filtering, as well as unified product cards with multiple installation options in one place. * *Updated:* Nebius AI Cloud may [automatically reduce quotas](/overview/quotas#automatic-quota-reduction) when usage stays low for a prolonged period. Users receive an email notification and have a grace period before the change applies. * *Added:* In Serverless AI, you can now [debug failed jobs](/serverless/jobs/failure) by keeping the job's VM alive to connect via SSH. * *Added:* [Single sign-on with JumpCloud](/iam/federations/configure-sso-jumpcloud) is now available. Users can sign in to Nebius AI Cloud with their JumpCloud credentials instead of a separate password. * *Added:* You can now [export audit events to an Object Storage bucket](/audit-logs/events/export) for a specific time range. Use exported data for long-term retention, data portability or analysis in external tools. * *Added:* You can now [collect traces](/observability/traces/ingest) with Nebius Observability Agent for Kubernetes and [view traces in Grafana](/observability/traces/grafana). Send traces from cluster applications via OTLP and explore them in Grafana with Tempo. * *Updated:* We now recommend [GPU boot disk images](/compute/storage/boot-disk-images#images-for-gpu-vms) with Ubuntu 24.04 and CUDA 12 or CUDA 13.0. The `ubuntu22.04-cuda12` image is not recommended and will be deprecated. * *Updated:* When [setting up GPUs in Managed Kubernetes](/kubernetes/gpu/set-up), you can now choose between driver presets `cuda12.8`, `cuda13.0` and `cuda12.4`. You can also [change the driver preset](/kubernetes/gpu/set-up#how-to-change-the-driver-preset) by updating the node group when you need a different driver or CUDA version. * *Added:* [Serverless AI jobs and endpoints](/serverless/overview) are now available. You can use them to run AI workloads without any need to create and maintain infrastructure for them. * *Added:* [Taxes](/signup-billing/payments/taxes) are now included in invoices for individuals from India, Singapore, the United Arab Emirates and the United Kingdom. * *Updated:* You can now use a Microsoft account to [log in to Nebius AI Cloud](/iam/log-in). * *Added:* Object Storage now supports [logs](/object-storage/logs) of two types: control plane logs and data plane logs. By using them, you can get detailed information about actions on buckets and objects. * *Added:* You can now use [capacity block groups](/overview/limits/capacity-block-groups) to [reserve GPUs](/compute/virtual-machines/reservations) for virtual machines. Capacity block groups and reservations ensure that you always have the computing resources necessary for your workloads and applications. * *Added:* The [Managed Service for MLflow](/mlflow/index) is now available in the `me-west1` and `uk-south1` [regions](/overview/regions). * *Added:* The [Managed Service for PostgreSQL](/postgresql/index) is now available in the `uk-south1` [region](/overview/regions). * *Added:* Object Storage now supports the [Force storage class](/object-storage/buckets/manage#bucket-parameters) parameter for buckets. It overrides a storage class that you specify when you upload an object to a bucket. * *Added:* You can now set up [billing data export](/signup-billing/usage/export) and automatically get usage data for cost analysis. * *Updated:* The `me-west1` region is now [public](/overview/regions#public-regions). Services available in this region are listed in [Regions](/overview/regions#availability-of-services-per-region). * *Updated:* The default [Compute quotas](/compute/resources/quotas-limits) on the numbers of NVIDIA B200 and NVIDIA H200 GPUs in the `us-central1` region per tenant are now zero, down from 32 and 16, respectively. This means that in tenants created after December 1, you need to [request a quota raise](/overview/quotas#change-quotas) before creating VMs with any number of these GPUs in `us-central1` projects. The change does not affect existing tenants. * *Added:* Two new [virtual machine platforms](/compute/virtual-machines/types) are now available for Compute virtual machines, Managed Kubernetes nodes and other resources: * NVIDIA® B300 NVLink with Intel Granite Rapids (ID `gpu-b300-sxm`) is now available in the [private region](/overview/regions) `uk-south1`. It introduces NVIDIA B300 GPUs to Nebius AI Cloud. * NVIDIA® B200 NVLink with Intel Emerald Rapids (ID `gpu-b200-sxm-a`) is now available in the private region `me-west1`. This is the second platform with NVIDIA B200 GPUs; a platform with the same name (ID `gpu-b200-sxm`) is available in the public region `us-central1`. * *Added:* When creating a [support ticket](/overview/support) in the [support center](https://console.nebius.com/support/create-ticket), you can now choose the topic of the ticket (technical, billing or digital rights). Available priority levels for technical tickets have also changed: the standard level is renamed medium, and new high and low levels are added to the existing levels. This helps us process your requests faster and more efficiently. * *Added:* Four [NVIDIA NIM](https://www.nvidia.com/en-us/ai-data-science/products/nim-microservices/) microservices are now available as [standalone applications](/applications/standalone/nvidia-nim/index). These microservices provide models from the NVIDIA BioNeMo Framework for computational drug discovery: [Boltz-2](https://build.nvidia.com/mit/boltz2/modelcard), [Evo 2](https://build.nvidia.com/arc/evo2-40b/modelcard), [GenMol](https://build.nvidia.com/nvidia/genmol-generate/modelcard) and [MolMIM](https://build.nvidia.com/nvidia/molmim-generate/modelcard). * *Added:* The [NVIDIA Blueprint for generative virtual screening](https://github.com/NVIDIA-BioNeMo-blueprints/generative-virtual-screening) is now available as an [application for Managed Kubernetes](/applications/kubernetes/nvidia-blueprint-virtual-screening/index). The blueprint provides an AI-driven pipeline to design optimized small molecules efficiently. * *Added:* You can now [delete empty projects](/iam/manage-projects#how-to-delete-a-project) that you no longer need, helping you keep your Nebius AI Cloud organized. * *Updated:* You can now only delay a [maintenance event for Compute virtual machines](/compute/virtual-machines/maintenance) two times, up to seven days each time. * *Added:* For residents of Texas and Washington, US, Nebius now [calculates taxes](/signup-billing/payments/taxes) in accordance with United States tax law and includes them in invoices. * *Updated:* The default [Compute quota](/compute/resources/quotas-limits) on the number of NVIDIA H200 GPUs in the `us-central1` region per tenant is now 16, down from 32. The change does not affect existing tenants. * *Updated:* When you [manually install the NVIDIA GPU Operator](/kubernetes/gpu/set-up#how-to-install-the-drivers-and-components-on-existing-node-groups) on your InfiniBand-interconnected Managed Kubernetes nodes, GPUDirect RDMA is now enabled by default. * *Added:* Monitoring dashboards for Managed PostgreSQL clusters now include two new [connection pooler metrics](/postgresql/monitoring#connection-pooler), **Pooler clients active** and **Pooler clients waiting**. * *Added:* Managed Kubernetes now supports Kubernetes 1.32. This version is selected for new clusters and node groups by default. See the [overview of Kubernetes versions](/kubernetes/versions). * *Added:* The list of [roles](/iam/authorization/roles) has been extended. In addition to general roles (`admin`, `editor`, `viewer`, `auditor`), you can now assign new service roles to [custom groups](/iam/authorization/groups/index#custom-groups), allowing for more granular access to your resources. The new roles control access to Object Storage and MysteryBox resources, as well as Data Subject Requests to support. * *Updated:* Starting October 22, usage of virtual machines and applications that use NVIDIA B200, H200 and H100 GPUs is recorded under new billing items that cover GPUs, vCPUs and RAM together rather than separately. Usage from October 1–21 is recalculated retroactively. This makes monitoring your usage simpler and does not affect your costs. [Learn more](/signup-billing/billing-changes-oct-2025). * *Added:* You can now create [preemptible virtual machines](/compute/virtual-machines/preemptible) with NVIDIA B200 GPUs in the `us-central1` region. * *Added:* You can now [create your own tenants](/iam/create-tenants) for dedicated billing and more resource isolation. * *Removed:* New Managed MLflow clusters no longer support the `small` size. See the guide to [creating clusters](/mlflow/clusters/manage). * *Updated:* Automatic security updates are now disabled by default in [boot disk images](/compute/storage/boot-disk-images) for non-GPU virtual machines in Compute, in addition to GPU VMs, to prevent errors in running workloads. You can [enable them back](/compute/storage/automatic-updates). * *Updated:* Computing resources of all Compute virtual machines are now eligible for [committed usage discounts](/signup-billing/billing-models/committed-usage), as opposed to only VMs with NVIDIA H100 GPUs. * *Added:* The [MysteryBox](/mysterybox/index) service is launched, allowing you to store sensitive data in an encrypted form to reuse them in your scripts, configuration files or applications. * *Added:* You can now create [routing tables and routes](/vpc/routing/overview) to customize the routing of egress traffic and implement advanced networking scenarios, such as [custom NAT gateways](/vpc/routing/custom-nat-gateway) or segmented architectures. * *Added:* Your [committed usage discounts](/signup-billing/billing-models/committed-usage) are now grouped in orders that correspond to the agreement addendums that you sign. * *Updated:* Automatic security updates are now disabled by default in [boot disk images](/compute/storage/boot-disk-images) for GPU virtual machines in Compute to prevent errors in running workloads. You can [enable them back](/compute/storage/automatic-updates). * *Updated:* Default [Compute quotas](/compute/resources/quotas-limits) for GPU and non-GPU virtual machines are now separate, allowing new customers to create more VMs overall and control the remaining capacity in their projects more precisely. * *Added:* You can now create Compute virtual machines with container images deployed on them: [containers over VMs](/compute/virtual-machines/containers). You can use images provided by Nebius AI Cloud or custom Docker images from public registries. * *Added:* Two new [extensions for PostgreSQL](/postgresql/databases/extensions) are now available on all Managed Service for PostgreSQL clusters: [RUM](https://github.com/postgrespro/rum) offers enhanced full-text search, and [pg\_repack](https://github.com/reorg/pg_repack) allows you to remove bloat from tables and indexes. * *Updated:* If you pay for Nebius AI Cloud services [by bank card](/signup-billing/payments/card), we can now suspend your account after one unsuccessful attempt to charge your card rather than after multiple attempts. Check regularly that your payment method is up to date. * *Added:* Managed Kubernetes now performs [health checks](/kubernetes/maintenance/health-checks) on nodes, and automatically recovers nodes that are not ready or have issues with the boot disk or GPUs. You can [enable and disable](/kubernetes/maintenance/enable-disable-health-checks) these health checks. * *Added:* Audit Logs now support [filtering events](/audit-logs/events/view) by more fields, so you can find events that occurred in a specific region, are associated with operations that have a specific status, etc. * *Updated:* The navigation in the [web console](https://console.nebius.com) has undergone a major overhaul to group and present services and resources more clearly. * *Updated:* The upload and download speed for the Standard [storage class](/object-storage/storage-classes) in Object Storage is now limited to 20 GBps per tenant in all regions. *** *Postgres, PostgreSQL and the Slonik Logo are trademarks or registered trademarks of the PostgreSQL Community Association of Canada, and used with their permission.* *InfiniBand and InfiniBand Trade Association are registered trademarks of the InfiniBand Trade Association.* # How to work with the Nebius AI Cloud CLI on a Compute virtual machine Source: https://docs.nebius.com/cli/compute-vm On a Compute virtual machine, you cannot log into the Nebius AI Cloud CLI with your user account, because it requires opening the web console in a browser. However, you can still use the Nebius AI Cloud CLI with a service account, in one of two ways: * [Specify the service account on VM creation](#specifying-the-service-account-on-vm-creation) * [Set up a profile for the service account on the VM](#setting-up-a-profile-for-the-service-account-on-the-vm) ## Prerequisites 1. Make sure you are in a [group](/iam/authorization/groups/index) that has the `admin` role within your tenant or project; for example, the default `admins` group. You can check this in the [Administration → IAM](https://console.nebius.com/iam) section of the web console. 2. [Create a service account](/iam/service-accounts/manage#create-a-service-account) and [add it to a group](/iam/authorization/groups/members#add-a-service-account) that has the [roles](/iam/authorization/roles) needed for your operations. Usually, this means adding it to at least the default `editors` group. You do not need to install the Nebius AI Cloud CLI. It is preinstalled on every Compute VM. ## Specifying the service account on VM creation When you [create a VM](/compute/virtual-machines/manage#create-a-vm), specify the service account ID in the VM specifications: Add the `--service-account-id` parameter to the creation command: ```bash theme={null} nebius compute instance create \ "$(cat /path-to-spec/instance.yaml)" \ --service-account-id ``` Alternatively, add the `service_account_id` parameter to the VM specification: ```yaml theme={null} ... spec: ... service_account_id: ``` Add the `service_account_id` parameter to the `nebius_compute_v1_instance` block in the configuration: ```hcl theme={null} resource "nebius_compute_v1_instance" "" { service_account_id = "" ... } ``` Once the VM is ready, you can connect to it and use the Nebius AI Cloud CLI without any additional setup. The authorization token is automatically fetched from `/mnt/cloud-metadata/token`. ## Setting up a profile for the service account on the VM If you haven't specified a service account during VM creation, you can configure a Nebius AI Cloud CLI profile for that service account: 1. Create an [authorized key](/iam/service-accounts/authorized-keys) for the service account. 2. Create a profile for the service account on your VM. Follow the instructions in [How to set up the Nebius AI Cloud CLI](/cli/configure). After that, you can use the Nebius AI Cloud CLI. # How to set up the Nebius AI Cloud CLI Source: https://docs.nebius.com/cli/configure To configure the Nebius AI Cloud CLI, use one of the authorization options: * [A user account](#authorizing-with-a-user-account) offers personalized access and accountability. It can be used when you, as a human user, need to manage and interact with resources. * [A service account](#authorizing-with-a-service-account) automates the interaction of applications and services with resources. ## Authorizing with a user account To authorize quickly, follow the non-interactive flow. To control the authorization process, follow the interactive flow. 1. Open your terminal. 2. Create a name of your new profile in the Nebius AI Cloud CLI and save it to an environment variable: ```bash theme={null} export PROFILE_NAME= ``` 3. [Get the project ID](/iam/manage-projects#cli-3) and save it to an environment variable: ```bash theme={null} export PROJECT_ID= ``` 4. Run the following command: ```bash theme={null} nebius profile create \ --profile $PROFILE_NAME \ --endpoint api.nebius.cloud \ --federation-endpoint auth.nebius.com \ --parent-id $PROJECT_ID ``` If you have access to multiple tenants, you can specify the tenant that you want to use with this profile in the `--tenant-id` parameter. If you are added to someone else's [tenant](/iam/overview#tenants) and know the ID of its [federation](/iam/overview#federations), you can specify it either in the `--federation-id` parameter, or when logging in to the Nebius AI Cloud web console after running the command. 5. On the browser tab that opens, log in to the web console if prompted. After logging in (or if you have already been logged in), you will see the following message: ```plaintext theme={null} Login is successful, you may close the browser tab and go to the console ``` 6. Close the browser tab and go back to your terminal window. You will see the following message: ```plaintext theme={null} Profile "" configured and activated ``` 7. Check that your new profile has been created and set as the default one: ```bash theme={null} nebius profile list ``` You should see the following output: ```sh theme={null} default [default] ``` 1. Open your terminal. 2. Run the following command: ```sh theme={null} nebius profile create ``` 3. Set up the new profile: 1. Using arrow keys, select **Create a new profile** and press `Enter`. 2. Specify the profile name and press `Enter`. 3. Keep the default value for **Select api endpoint** (`api.nebius.cloud`) and press `Enter`. 4. Under **Select authorization type**, keep `federation` and press `Enter`. 5. Keep the default value for **Select federation endpoint** (`auth.nebius.com`) and press `Enter`. 6. On the browser tab that opens, log into the Nebius AI Cloud web console if prompted. After logging in (or if you have already been logged in), you will see the following message: ```plaintext theme={null} Login is successful, you may close the browser tab and go to the console ``` 7. Close the browser tab and go back to your terminal window. If you have access to multiple tenants, the CLI will prompt you to choose a tenant ID. Choose the tenant that you want to use. If you only have access to one tenant, it is selected by default. You will see the following message: ```plaintext theme={null} Profile "" configured and activated ``` 4. Check that your new profile has been created and set as the default one: ```bash theme={null} nebius profile list ``` You should see the following output: ```sh theme={null} default [default] ``` 5. [Get the project ID](/iam/manage-projects#cli-3) and add it to the CLI configuration: ```bash theme={null} nebius config set parent-id ``` ## Authorizing with a service account Before authorization, [create a service account](/iam/service-accounts/manage). You can do it using a user account or another service account within a [group](/iam/authorization/groups/index) that has the `admin` role within your tenant; for example, the default `admins` group. You can check this in the [Administration → IAM](https://console.nebius.com/iam) section of the web console. To authorize quickly, follow the non-interactive flow. To control the authorization process, follow the interactive flow. 1. Open the service account page in the web console. 2. Open your terminal. 3. Save the service account details to environment variables: ```bash theme={null} export SA_ID= export PUBLIC_KEY_ID=<...> export PRIVATE_KEY_PATH=<...> ``` 4. Create a name for your profile and save it to an environment variable: ```bash theme={null} export SA_PROFILE_NAME=<...> ``` For example, `gpu-monitoring-sa`. **Use one profile per project** Create a separate Nebius AI Cloud CLI profile for each project to ensure correct [region](/overview/regions)-specific configuration. 5. [Get the project ID](/iam/manage-projects#cli-3) and save it to an environment variable: ```bash theme={null} export PROJECT_ID= ``` 6. Run the following command: ```bash theme={null} nebius profile create \ --endpoint api.nebius.cloud \ --service-account-id $SA_ID \ --public-key-id $PUBLIC_KEY_ID \ --private-key-file $PRIVATE_KEY_PATH \ --profile $SA_PROFILE_NAME \ --parent-id $PROJECT_ID ``` You will see the following message: ```plaintext theme={null} Profile "" configured and activated ``` 7. Check that your new profile has been created and set as the default one: ```bash theme={null} nebius profile list ``` You should see the following output: ```sh theme={null} default [default] ``` 1. Open the service account page in the web console. 2. Open your terminal. 3. Run the following command: ```sh theme={null} nebius profile create ``` 4. Use the arrow keys to select **Create a new profile**, then press `Enter`. **Use one profile per project** Create a separate Nebius AI Cloud CLI profile for each project to ensure correct [region](/overview/regions)-specific configuration. 5. Add a profile name and press `Enter`. 6. Keep the default value for **Select api endpoint** (api.nebius.cloud) and press `Enter`. 7. Under **Select authorization type**, choose `service account` and press `Enter`. 8. Under **Set service account ID**, paste the **Service account ID** from the web console. 9. Under **Set public key ID**, paste the **Public key ID** from the web console. 10. Under **Set path to PEM encoded private key**, specify the path to your private key in PEM format. You will see the following message: ```plaintext theme={null} Profile "" configured and activated ``` 11. Check that your new profile has been created and set as the default one: ```bash theme={null} nebius profile list ``` You should see the following output: ```sh theme={null} default [default] ``` 12. [Get the project ID](/iam/manage-projects#cli-3) and add it to the CLI configuration. ```bash theme={null} nebius config set parent-id ``` # How to edit resources via the Nebius AI Cloud CLI Source: https://docs.nebius.com/cli/edit Instead of using the `update` command, you can use the `edit` and `edit-by-name` commands to make changes with the help of your preferred editor. These commands are available for all resources that support the `update` command. ## Editing a resource by ID The `edit` commands are constructed according to the following template: ```bash theme={null} nebius edit \ --id \ [--editor ' --wait'] \ [--format ] ``` For example, the command for editing a Compute virtual machine is the following: ```bash theme={null} nebius compute instance edit \ --id \ [--editor ' --wait'] \ [--format ] ``` In this command, specify the parameters: * `--id`: Resource ID. * `--editor` (optional): Editor name. It can be any editor installed on your machine, such as `nano` or `emacs`. To check which of the popular editors are installed, run the following command: ```bash theme={null} which code emacs gedit micro nano subl vi vim ``` For an editor that opens in a separate window, add the `--wait` parameter to its name to ensure that the command waits until you close the editor. You can also specify the editor in the `EDITOR` environment variable, but if both are specified, the `--editor` parameter has priority. By default, `vi` editor is used. * `--format` (optional): Data format. Only `json` and `yaml` values are accepted. By default, YAML format is used. The editor you choose opens and shows the current configuration of the resource. Make the changes and save them. When you exit the editor, the Nebius AI Cloud CLI checks if the data is valid and updates the resource if everything is correct. ## Editing a resource by name and parent ID If you do not know the ID of the resource, you can use its name and the ID of the parent resource, according to the following template: ```bash theme={null} nebius edit-by-name \ --name \ --parent-id \ [--editor ' --wait'] \ [--format ] ``` All parameters in this command are the same as for [`edit`](#editing-a-resource-by-id), but instead of `--id` specify the `--name` and `--parent-id`. ## Examples Edit the configuration of a node group in a Managed Service for Kubernetes® cluster in VS Code: ```bash theme={null} nebius mk8s node-group edit \ --id \ --editor 'code --wait' ``` Edit the configuration of a Compute disk by its name, in the default `vi` editor and in JSON format: ```bash theme={null} nebius compute disk edit-by-name \ --name \ --parent-id \ --format json ``` # CLI exit codes Source: https://docs.nebius.com/cli/exit-codes The Nebius AI Cloud CLI can make multiple network requests when running a command to improve the user experience. The CLI divides the requests into target and extra calls: * A *target call* is the main network request for a command and corresponds to the command path. For example, for `nebius compute instance create`, the target gRPC call is `nebius.compute.v1.InstanceService/Create`. * *Extra calls* improve the user experience and return a clearer picture of resource state. They include waiting for an operation that a target request started to complete, and fetching a resource after the CLI has created or updated it. The exit code for an extra-call error equals the exit code for the target call plus 40. ## Exit code reference The CLI groups exit codes as follows: * General CLI errors: 1–10 * Target call gRPC errors: 11–20 * Target call service errors: 21–50 * Extra call gRPC errors: 51–60 * Extra call service errors: 61–90 | Exit code | Description | | ---------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------ | | `1` | Unknown error. Server returned `UNKNOWN` gRPC code. | | `2` | Incorrect input from the user. Unknown flag or command, unparsable JSON or YAML input, unparsable flag value, incorrect number of arguments for the command. | | `3` | Validation error. Wrong command argument or flag value, or server returned `INVALID_ARGUMENT` gRPC code for a target or extra call. | | `4` | CLI configuration error. | | `5` | CLI internal error. Server returned `UNIMPLEMENTED`, `INTERNAL` or `DATA_LOSS` gRPC code. | | `6` | The user canceled command execution. | | `7` | Any authentication error. For example, SDK couldn't set the Bearer token, or server returned `UNAUTHENTICATED` gRPC code for a request. | | `11`, `51` | Service returned gRPC code `CANCELLED` for a target or extra call. | | `12`, `52` | gRPC code `DEADLINE_EXCEEDED`. | | `13`, `53` | gRPC code `NOT_FOUND`. | | `14`, `54` | gRPC code `ALREADY_EXISTS`. | | `15`, `55` | gRPC code `PERMISSION_DENIED`. | | `16`, `56` | gRPC code `RESOURCE_EXHAUSTED`. | | `17`, `57` | gRPC code `FAILED_PRECONDITION`. | | `18`, `58` | gRPC code `ABORTED`. | | `19`, `59` | gRPC code `OUT_OF_RANGE`. | | `20`, `60` | gRPC code `UNAVAILABLE`. | | `21`, `61` | Service error `BadResourceState`. | | `22`, `62` | Service error `ResourceConflict`. | | `23`, `63` | Service error `TooManyRequests`. | | `24`, `64` | Service error `QuotaFailure`. | | `25`, `65` | Service error `NotEnoughResources`. | ## How the CLI determines exit codes The CLI determines the exit code for a gRPC request error as follows: * If the server returns a gRPC code other than `OK`, the CLI checks the first element in `google.rpc.Status.details`. * If that element is a `ServiceError` with a designated exit code, the CLI returns that code. * If the service error has no designated exit code, or the details do not contain a service error, the CLI returns the exit code that corresponds to the gRPC code. # Nebius AI Cloud CLI Source: https://docs.nebius.com/cli/index Prepare CLI to work with your Nebius AI Cloud resources Install CLI and check the installation status Configure your profile as a user or service account Edit resources in external text editors by using CLI commands Authenticate and use the Nebius AI Cloud CLI on virtual machines Description of the CLI exit codes Descriptions of the CLI resources # How to install the Nebius AI Cloud CLI Source: https://docs.nebius.com/cli/install The Nebius AI Cloud CLI is available for both Ubuntu and macOS. The old installer script ([https://storage.ai.nebius.cloud/nebius/install.sh](https://storage.ai.nebius.cloud/nebius/install.sh)) has been deprecated. If you get an error trying to update the Nebius AI Cloud CLI, reinstall it using the new script: . 1. Open your terminal. 2. Run the command: ```bash theme={null} curl -sSL https://storage.eu-north1.nebius.cloud/cli/install.sh | bash ``` 3. To complete the installation, restart your terminal or run `exec -l $SHELL`. 4. Make sure that the installation is successful. Run: ```bash theme={null} nebius version ``` In the output, you'll see the version number of your Nebius AI Cloud CLI. 5. Go to [How to set up the Nebius AI Cloud CLI](/cli/configure). ## Setting up command autocompletion During setup, your shell will enable Nebius AI Cloud CLI autocompletion by default. If it doesn't happen, use one of the solutions below: Run the following command: ```bash theme={null} nebius completion zsh > ~/.nebius/completion.zsh.inc echo 'if [ -f '~/.nebius/completion.zsh.inc' ]; then source '~/.nebius/completion.zsh.inc'; fi' >> ~/.zshrc ``` The command below will generate a new completion file each time you create a new session. The example below is for Zsh: ```bash theme={null} echo 'source <(nebius completion zsh)' >> ~/.zshrc ``` # How to use interactive mode in the Nebius AI Cloud CLI Source: https://docs.nebius.com/cli/interactive When you create a resource or list resources in interactive mode, the CLI prompts you for parameter values step by step, validates each value before continuing and shows the resulting configuration before you apply it. To use the interactive mode, add the `-i` or `--interactive` parameter to your CLI command. ## Creating resources interactively When you run a resource creation command in the interactive mode, the CLI prompts for parameters in this order: 1. Metadata parameters. 2. Required parameters. 3. Optional parameters. How the parameters are filled in depends on their data type: * For `string` parameters, specify the string directly or use the contents of a file if the string is too long. For example: ```bash theme={null} cloud-init-user-data (string): file: ./user-data.txt ``` * For the `oneof`, `enum` and `bool` parameters, the CLI prompts you to select one of the supported values. If some parameters repeat, the CLI prompts you to fill in each of them separately. After you fill in the parameters, the CLI shows the full resource configuration and lets you apply it, correct the values or abort creation. For example, to create a virtual machine (VM) in the interactive mode: 1. [Create a boot disk](/compute/storage/manage#how-to-create-a-disk). 2. Run the VM creation command: ```bash theme={null} nebius compute instance create --interactive ``` Example session: ```bash theme={null} ... parent-id (required) (string): project-*** Human readable name for the resource. name (string): example-vm Labels associated with the resource. labels (map) string=string[,string=string]: Populate required fields resources-platform (required) (string): gpu-l40s-d resources-preset (required) (string): 1gpu-16vcpu-96gb network-interfaces-0-subnet-id (required) (string): vpcsubnet-*** network-interfaces-0-name (required) (string): eth0 Do you want to populate the network-interfaces-0-ip-address message ? [Y/n]: y network-interfaces-0-ip-address-allocation-id (string): vpcallocation-*** Do you want to populate the network-interfaces-0-public-ip-address message ? [Y/n]: y network-interfaces-0-public-ip-address-allocation-id (string): vpcallocation-*** network-interfaces-0-public-ip-address-static (bool): true Do you want to populate the network-interfaces-0-aliases message ? [Y/n]: n Do you want to populate the network-interfaces-0-security-groups message ? [Y/n]: n Add another entry to the network-interfaces list? [Y/n]: n Do you want to populate the optional fields? [y/N]: y ... Do you want to populate the boot-disk message ? [Y/n]: y boot-disk-attach-mode (required) (enum): READ_WRITE Select one of (boot-disk-type (required)): boot-disk-existing-disk (message) Do you want to populate the boot-disk-existing-disk message ? [Y/n]: y boot-disk-existing-disk-id (required) (string): computedisk-*** boot-disk-device-id (string): dev-1 ... ``` First, set the metadata parameters, such as `parent-id` and `name`. Then, set the required parameters, such as `resources-platform` and `resources-preset`. Finally, set the optional parameters, such as `boot-disk-attach-mode` and `boot-disk-existing-disk-id`. Although the boot disk parameters are marked as optional, they still require input for the command to succeed. To create a VM, you can either create a boot disk in advance and then set it in the `boot-disk-existing-disk` configuration. Alternatively, use the `boot-disk-managed-disk` configuration, and create the boot disk and the VM simultaneously. After you fill in the parameters, the CLI shows the full resource and lets you apply it. ## Listing resources interactively When you run a command in interactive mode, the CLI displays the output in an alternate screen with pagination. In this mode, you can: * Use the keyboard to switch between pages. * Use the keyboard or mouse to scroll through the current page. For example, to [check Audit Logs](/audit-logs/use-cases) in the interactive mode, run: ```bash theme={null} nebius audit v2 audit-event list \ --interactive \ --parent-id \ --start 2025-09-01T00:00:00Z \ --end 2025-10-01T00:00:00Z \ --page-size 10 \ --format 'table(action,resource.metadata.type,status,time)' ``` The `--page-size` parameter sets the number of items per page. If you do not specify this parameter, the default value is `100`. The `--format` parameter sets the output format. Supported values are `yaml`, `json`, `jsonpath`, `table` and `text`. In the given example, the `--format` parameter displays the output as a table and includes only the `action`, `resource.metadata.type`, `status` and `time` columns. Example output: ```bash theme={null} ACTION TIME RESOURCE.METADATA.TYPE STATUS GET 2025-09-30T23:41:01.735292820Z vpcsubnet DONE GET 2025-09-30T23:39:57.822525674Z vpcsubnet DONE GET 2025-09-30T23:39:57.732298637Z vpcsubnet DONE DELETE 2025-09-30T23:35:46.248317235Z serviceaccount DONE DELETE 2025-09-30T23:35:46.019666980Z serviceaccount DONE LIST 2025-09-30T23:35:45.868348266Z serviceaccount DONE LIST 2025-09-30T23:35:45.225734490Z group DONE LIST 2025-09-30T23:35:43.908091679Z accesskey DONE LIST 2025-09-30T23:35:43.458795049Z statickey DONE LIST 2025-09-30T23:35:33.063804463Z computeimage DONE page 5 • ←/→ pages • ↑/↓ scroll • A/D = horizontal scroll • q/Esc exit • Enter = next page ``` # How to filter CLI output with JSONPath Source: https://docs.nebius.com/cli/jsonpath-output Most CLI commands that return data support the `--format jsonpath=''` parameter. You can use it to extract values, such as a resource ID, name or IP address, without post-processing the full output. For example, to return only the ID of a virtual machine (VM), add the following parameter to the `nebius compute instance create` command: ```bash theme={null} --format jsonpath='{.metadata.id}' ``` The CLI uses the [same JSONPath implementation](https://kubernetes.io/docs/reference/kubectl/jsonpath/) as `kubectl`. This implementation extends the original JSONPath syntax with additional functions, such as list iteration, but it doesn't support all JSONPath features. ## Syntax A JSONPath expression selects values from the JSON object returned by a CLI command. When you write JSONPath expressions for the `--format jsonpath` parameter, consider the following: * Enclose expressions in curly braces. However, if you omit them, the CLI still parses the value. The `$` operator is optional because expressions start from the root object by default. As a result, these expressions are equivalent: ```bash theme={null} --format jsonpath='{$.metadata.id}' ``` ```bash theme={null} --format jsonpath='{.metadata.id}' ``` ```bash theme={null} --format jsonpath='.metadata.id' ``` * Use double quotes to quote literal text inside JSONPath expressions: ```bash theme={null} --format jsonpath='{range .items[*]}{.metadata.name}{"\t"}{.status.state}{"\n"}{end}' ``` * Use the `range` and `end` operators to iterate over lists: ```bash theme={null} --format jsonpath='{range .items[*]}{.metadata.name}{"\n"}{end}' ``` * To step backward through a list, use negative slice indices. The negative indices don't wrap around a list and are valid if `-index + listLength >= 0`. For example: ```bash theme={null} nebius compute instance list --format jsonpath='{.items[-1:].metadata.name}' ``` * Complex values, such as objects or lists, are printed in their string representation. If you need stable machine-readable output for further processing, use `--format json`. ## Common expressions | Expression | Description | | ---------------------------------------------- | ---------------------------------------------------------------------------------------- | | `{@}` | Returns the current object. | | `{.metadata.name}` | Returns the `metadata.name` value. | | `{.items[0]}` | Returns the first item from the `items` list. | | `{.items[-1:]}` | Returns the last item from the `items` list. | | `{.items[*].metadata.name}` | Returns the `metadata.name` value for all items in the `items` list. | | `{.items[*]['metadata.name', 'status.state']}` | Returns the `metadata.name` and `status.state` values for all items in the `items` list. | | `{range .items[*]}...{end}` | Iterates over the `items` list. | For more information, see the examples below and [Kubernetes JSONPath documentation](https://kubernetes.io/docs/reference/kubectl/jsonpath/#functions). ## Examples ### Getting a value from a single resource Below are several examples of how to get a value from a single resource: * Get a name of a VM: ```bash theme={null} nebius compute instance get \ --id \ --format jsonpath='{.metadata.name}' ``` Example output: ```text theme={null} vm1 ``` * Get a status of a VM: ```bash theme={null} nebius compute instance get \ --id \ --format jsonpath='{.status.state}' ``` Example output: ```text theme={null} RUNNING ``` * Get a bucket ID by the bucket name: ```bash theme={null} nebius storage bucket get-by-name \ --name \ --format jsonpath='{.metadata.id}' ``` Example output: ```text theme={null} storagebucket-*** ``` * Get a public IP address of a VM by the VM name: ```bash theme={null} nebius compute instance get-by-name \ --name \ --format jsonpath='{.status.network_interfaces[0].public_ip_address.address}' ``` Example output: ```text theme={null} 203.0.113.10/32 ``` ### Getting values from a list Below are several examples of how to get values from a list: * Get the name of the first VM from the list: ```bash theme={null} nebius compute instance list --format jsonpath='{.items[0].metadata.name}' ``` Example output: ```text theme={null} vm2 ``` * Get names and statuses of all VMs: ```bash theme={null} nebius compute instance list \ --format jsonpath="{.items[*]['metadata.name', 'status.state']}" ``` Example output: ```text theme={null} vm2 vm1 RUNNING RUNNING ``` ### Formatting list output Print each VM name and status on a separate line: ```bash theme={null} nebius compute instance list \ --format jsonpath='{range .items[*]}{.metadata.name}{"\t"}{.status.state}{"\n"}{end}' ``` Example output: ```text theme={null} vm2 RUNNING vm1 RUNNING ``` ## Limitations JSONPath regular expressions aren't supported. In this context, a *regular expression* is a pattern used in a JSONPath filter to match field values. For example, the following expression tries to find VMs whose names start with `vm`: ```bash theme={null} nebius compute instance list \ --format jsonpath='{.items[?(@.metadata.name=~/^vm/)].metadata.name}' ``` This expression doesn't work because the JSONPath implementation used by the CLI doesn't support the `=~` regular expression match operator. The command fails while parsing the JSONPath expression, before matching it against command output. Match values with regular expressions by using `jq`: ```bash theme={null} nebius compute instance list --format json \ | jq -r '.items[] | select(.metadata.name | test("^vm")) | .metadata.name' ``` This command requires `jq` to be installed. Example output: ```text theme={null} vm2 vm1 ``` # Getting started with the Nebius AI Cloud CLI: How to install and configure the tool Source: https://docs.nebius.com/cli/quickstart Nebius AI Cloud provides a unified *command-line interface* (CLI) for automating your resource management. It helps you efficiently handle repetitive tasks and scale workloads directly from the terminal. ## Install the Nebius AI Cloud CLI The old installer script ([https://storage.ai.nebius.cloud/nebius/install.sh](https://storage.ai.nebius.cloud/nebius/install.sh)) has been deprecated. If you get an error trying to update the Nebius AI Cloud CLI, reinstall it using the new script: . The Nebius AI Cloud CLI is available for both Ubuntu and macOS. 1. Open your terminal and run the command: ```bash theme={null} curl -sSL https://storage.eu-north1.nebius.cloud/cli/install.sh | bash ``` 2. Restart your terminal or run `exec -l $SHELL` to complete the installation. 3. Make sure that the installation is successful. Run: ```bash theme={null} nebius version ``` In the output, you'll see the version number of your Nebius AI Cloud CLI. ## Configure the Nebius AI Cloud CLI **Use one profile per project** Create a separate Nebius AI Cloud CLI profile for each project to ensure correct [region](/overview/regions)-specific configuration. 1. [Get the project ID](/iam/manage-projects#cli-3) and save it to an environment variable: ```bash theme={null} export PROJECT_ID= ``` 2. Run the following command: ```bash theme={null} nebius profile create --parent-id $PROJECT_ID ``` 3. Set up the new profile: 1. Using arrow keys, select **Create a new profile** and press `Enter`. 2. Specify the profile name and press `Enter`. 3. Keep the default value for **Select api endpoint** (`api.nebius.cloud`) and press `Enter`. 4. Under **Select authorization type**, keep `federation` and press `Enter`. 5. Keep the default value for **Select federation endpoint** (`auth.nebius.com`) and press `Enter`. 6. On the browser tab that opens, log into the Nebius AI Cloud web console if prompted. After logging in (or if you have already been logged in), you will see the following message: ```plaintext theme={null} Login is successful, you may close the browser tab and go to the console ``` 7. Close the browser tab and go back to your terminal window. If you have access to multiple tenants, the CLI will prompt you to choose a tenant ID. Choose the tenant that you want to use. If you only have access to one tenant, it is selected by default. You will see the following message: ```plaintext theme={null} Profile "" configured and activated ``` 4. Check that your new profile has been created and set as the default one: ```bash theme={null} nebius profile list ``` You should see the following output: ```bash theme={null} default [default] ``` ## What's next Create your first resources using the Nebius AI Cloud CLI: * [Compute virtual machine](/compute/quickstart) * [Managed Service for Kubernetes® cluster](/kubernetes/quickstart) * [Object Storage bucket](/object-storage/quickstart) # nebius ai create Source: https://docs.nebius.com/cli/reference/ai/create

Name

nebius ai create

Interactively creates a Serverless AI job or endpoint.

Use `nebius ai job create` or `nebius ai endpoint create` for scripts, agents, and fully explicit configs.

Synopsis

``` nebius ai create --args --auth --container-command --container-port --disk-size --env --env-secret --image --inject-file --name --parent-id --platform --preemptible --preset --public --region --registry-password --registry-secret --registry-username --restart-policy --shm-size --subnet-id --timeout --token --token-secret --type --volume --working-dir ```

Options

`--args` (string)

Override container arguments.

`--auth` (string)

Authentication method, default is none.

A value must be one of:

  • none
  • token

`--container-command` (string)

Override container entrypoint command.

`--container-port` (string array)

Port to expose as HOST\[:CONTAINER]\[/http|tcp|udp] (default protocol http; repeatable). For endpoints, each HTTP port is reachable over a managed https\:// URL (gRPC works over the same URL) and each TCP port over a tls\://HOST:443 URL; UDP ports get no managed URL.

`--disk-size` (string)

Disk size (e.g., 100Gi, 500Gi, 1Ti), default is 250Gi.

`--env` (string array)

Environment variable in KEY=VALUE format (repeatable).

`--env-secret` (string array)

Environment variable from MysteryBox in KEY=SECRET\_SELECTOR format (repeatable). SECRET\_SELECTOR can be a secret name, secret ID, version ID, or SECRET\_ID\@VERSION\_ID.

`--image` (string)

Container image reference in the registry/path:tag or registry/path\@digest format.

`--inject-file` (string array)

Inject a local config file into the container at LOCAL\_PATH:CONTAINER\_PATH (repeatable). CONTAINER\_PATH must be an absolute path; the file is read-only inside the container and limited to 64 KiB.

`--name` (string)

Application name.

`--parent-id` (string)

Parent ID (if not specified, it will be taken from the CLI profile).

`--platform` (string)

Platform of compute resources (e.g. gpu-h100-sxm, gpu-l40s-d), default is gpu-h100-sxm in eu-north1 and gpu-h200-sxm elsewhere.

`--preemptible` (bool)

Use a preemptible VM (cheaper but can be stopped by the platform at any time).

`--preset` (string)

Preset for selected platform (e.g. 1gpu-16vcpu-200gb), default is minimum available preset for the platform.

`--public` (bool)

Assign a public IP to the workload (default false). For endpoints this is independent of the managed https\:// and tls\:// URLs, which are provided regardless of this flag.

`--region` (string)

Region for interactive selection and preview. Defaults to the parent project region when omitted.

`--registry-password` (string)

Container registry password.

`--registry-secret` (string)

MysteryBox secret selector with REGISTRY\_USERNAME and REGISTRY\_PASSWORD payload keys. Selector can be a secret name, secret ID, version ID, or SECRET\_ID\@VERSION\_ID.

`--registry-username` (string)

Container registry username.

`--restart-policy` (string)

Restart policy, default is never.

A value must be one of:

  • never
  • on-failure

`--shm-size` (string)

Size of /dev/shm (e.g., 64Mi, 128Mi, 1Gi), default - 16Gi for GPU platforms, 0 for CPU.

`--subnet-id` (string)

Network subnet ID.

`--timeout` (duration: 2h30m10s)

Job timeout in hours (min - 1h, max - 168h), default is 24h.

`--token` (string)

Token used for endpoint authentication (if --auth=token and neither --token nor --token-secret is set, a random token is generated).

`--token-secret` (string)

MysteryBox secret selector with AUTH\_TOKEN payload key. Selector can be a secret name, secret ID, version ID, or SECRET\_ID\@VERSION\_ID.

`--type` (string)

Workload type to create: job or endpoint. If not specified, you will be prompted.

`--volume` (string array)

Volume mount in SOURCE:CONTAINER\_PATH\[:MODE] or s3://BUCKET:/container\_path\[:MODE\[:PROFILE]] format. MODE: rw, ro (default: rw). PROFILE: AWS credentials profile (default: 'default'). For S3 MysteryBox auth use PROFILE\@SECRET\_SELECTOR, where SECRET\_SELECTOR can be a secret name, secret ID, version ID, or SECRET\_ID\@VERSION\_ID (repeatable).

`--working-dir` (string)

Working directory (absolute path).

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius ai endpoint create Source: https://docs.nebius.com/cli/reference/ai/endpoint/create

Name

nebius ai endpoint create

Creates an endpoint.

This command is deterministic and non-interactive. Use it for scripts, config-driven workflows, CI, and agents.

For human first-time setup, use the guided `ai create` wizard. Static create commands report validation errors with recovery hints instead of switching into prompt mode.

Exposed ports are reachable over managed URLs (no public IP required), surfaced in the endpoint's status.public\_endpoints:
* an HTTP port (--container-port 8080, or .../http) is served over [https://HOST](https://HOST) (gRPC works over the same URL);
* a TCP port (--container-port 6379/tcp) is served over tls\://HOST:443 (connect with a direct-TLS client);
* a UDP port gets no managed URL.

Example (two HTTP ports plus one TLS-TCP port):
cli ai endpoint create --image IMAGE --parent-id PROJECT\_ID \
\--container-port 8080 --container-port 8081/http --container-port 6379/tcp
-> two https\:// URLs and one tls\://HOST:443 URL in status.public\_endpoints.

Synopsis

``` nebius ai endpoint create --args --async --auth --container-command --container-port --disk-size --env --env-secret --image --inject-file --name --parent-id --platform --preemptible --preset --public --registry-password --registry-secret --registry-username --shm-size --ssh-key --subnet-id --token --token-secret --volume --working-dir ```

Options

`--args` (string)

Override container arguments.

`--async` (bool)

Return immediately after starting the create operation.

`--auth` (string)

Authentication method, default is none.

A value must be one of:

  • none
  • token

`--container-command` (string)

Override container entrypoint command.

`--container-port` (string array)

Port to expose as HOST\[:CONTAINER]\[/http|tcp|udp] (default protocol http; repeatable). For endpoints, each HTTP port is reachable over a managed https\:// URL (gRPC works over the same URL) and each TCP port over a tls\://HOST:443 URL; UDP ports get no managed URL.

`--disk-size` (string)

Disk size (e.g., 100Gi, 500Gi, 1Ti), default is 250Gi.

`--env` (string array)

Environment variable in KEY=VALUE format (repeatable).

`--env-secret` (string array)

Environment variable from MysteryBox in KEY=SECRET\_SELECTOR format (repeatable). SECRET\_SELECTOR can be a secret name, secret ID, version ID, or SECRET\_ID\@VERSION\_ID.

`--image` (string)

Container image reference in the registry/path:tag or registry/path\@digest format.

`--inject-file` (string array)

Inject a local config file into the container at LOCAL\_PATH:CONTAINER\_PATH (repeatable). CONTAINER\_PATH must be an absolute path; the file is read-only inside the container and limited to 64 KiB.

`--name` (string)

Application name.

`--parent-id` (string)

Parent ID (if not specified, it will be taken from the CLI profile).

`--platform` (string)

Platform of compute resources (e.g. gpu-h100-sxm, gpu-l40s-d), default is gpu-h100-sxm in eu-north1 and gpu-h200-sxm elsewhere.

`--preemptible` (bool)

Use a preemptible VM (cheaper but can be stopped by the platform at any time).

`--preset` (string)

Preset for selected platform (e.g. 1gpu-16vcpu-200gb), default is minimum available preset for the platform.

`--public` (bool)

Assign a public IP to the workload (default false). For endpoints this is independent of the managed https\:// and tls\:// URLs, which are provided regardless of this flag.

`--registry-password` (string)

Container registry password.

`--registry-secret` (string)

MysteryBox secret selector with REGISTRY\_USERNAME and REGISTRY\_PASSWORD payload keys. Selector can be a secret name, secret ID, version ID, or SECRET\_ID\@VERSION\_ID.

`--registry-username` (string)

Container registry username.

`--shm-size` (string)

Size of /dev/shm (e.g., 64Mi, 128Mi, 1Gi), default - 16Gi for GPU platforms, 0 for CPU.

`--ssh-key` (string array)

Configure ssh\_authorized\_keys for creating VM.

`--subnet-id` (string)

Network subnet ID.

`--token` (string)

Token used for endpoint authentication (if --auth=token and neither --token nor --token-secret is set, a random token is generated).

`--token-secret` (string)

MysteryBox secret selector with AUTH\_TOKEN payload key. Selector can be a secret name, secret ID, version ID, or SECRET\_ID\@VERSION\_ID.

`--volume` (string array)

Volume mount in SOURCE:CONTAINER\_PATH\[:MODE] or s3://BUCKET:/container\_path\[:MODE\[:PROFILE]] format. MODE: rw, ro (default: rw). PROFILE: AWS credentials profile (default: 'default'). For S3 MysteryBox auth use PROFILE\@SECRET\_SELECTOR, where SECRET\_SELECTOR can be a secret name, secret ID, version ID, or SECRET\_ID\@VERSION\_ID (repeatable).

`--working-dir` (string)

Working directory (absolute path).

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius ai endpoint delete Source: https://docs.nebius.com/cli/reference/ai/endpoint/delete

Name

nebius ai endpoint delete

Deletes an endpoint.

Synopsis

``` nebius ai endpoint delete [id] --id [required] --async ```

Positional Arguments

id

ID of the resource to delete.

Options

`--id` (string) \[required]

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius ai endpoint delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius ai endpoint get Source: https://docs.nebius.com/cli/reference/ai/endpoint/get

Name

nebius ai endpoint get

Returns the specified endpoint.

Synopsis

``` nebius ai endpoint get [id] --id ```

Positional Arguments

id

Endpoint ID.

Options

`--id` (string)

Endpoint ID.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius ai endpoint get-by-name Source: https://docs.nebius.com/cli/reference/ai/endpoint/get-by-name

Name

nebius ai endpoint get-by-name

Returns the specified endpoint by name.

Synopsis

``` nebius ai endpoint get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

`--parent-id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // [required] } ``` ```json theme={null} nebius ai endpoint get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius ai endpoint Source: https://docs.nebius.com/cli/reference/ai/endpoint/index

Name

nebius ai endpoint

Service to create/manage endpoints.

Commands

nebius ai endpoint create

Creates an endpoint.

nebius ai endpoint delete

Deletes an endpoint.

nebius ai endpoint get

Returns the specified endpoint.

nebius ai endpoint get-by-name

Returns the specified endpoint by name.

nebius ai endpoint list

Lists endpoints.

nebius ai endpoint logs

Get logs for the specified application

nebius ai endpoint operation

Manage operations for Endpoint service.

nebius ai endpoint ssh

Run shell in the specified endpoint.

nebius ai endpoint start

Starts an endpoint.

nebius ai endpoint stop

Stops an endpoint.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius ai endpoint list Source: https://docs.nebius.com/cli/reference/ai/endpoint/list

Name

nebius ai endpoint list

Lists endpoints.

Synopsis

``` nebius ai endpoint list --parent-id ```

Options

`--parent-id` (string)

Parent ID (if not specified, it will be taken from the CLI profile).

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius ai endpoint logs Source: https://docs.nebius.com/cli/reference/ai/endpoint/logs

Name

nebius ai endpoint logs

Get logs for the specified application

Synopsis

``` nebius ai endpoint logs --follow --since --tail --timestamps --until ```

Options

`--follow` (bool)

Stream logs in real-time.

`--since` (string)

Show logs since time (e.g., 1h, 30m, 2024-01-01), default is 1h.

`--tail` (int)

Number of recent lines to show.

`--timestamps` (bool)

Additional timestamp for log messages.

`--until` (string)

Show logs until time, default is current time.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius ai endpoint operation get Source: https://docs.nebius.com/cli/reference/ai/endpoint/operation/get

Name

nebius ai endpoint operation get

Get operation by ID.

Synopsis

``` nebius ai endpoint operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius ai endpoint operation Source: https://docs.nebius.com/cli/reference/ai/endpoint/operation/index

Name

nebius ai endpoint operation

Manage operations for Endpoint service.

Commands

nebius ai endpoint operation get

Get operation by ID.

nebius ai endpoint operation list

List operations by resource ID.

nebius ai endpoint operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius ai endpoint operation list Source: https://docs.nebius.com/cli/reference/ai/endpoint/operation/list

Name

nebius ai endpoint operation list

List operations by resource ID.

Synopsis

``` nebius ai endpoint operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius ai endpoint operation wait Source: https://docs.nebius.com/cli/reference/ai/endpoint/operation/wait

Name

nebius ai endpoint operation wait

Wait for operation to complete.

Synopsis

``` nebius ai endpoint operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius ai endpoint ssh Source: https://docs.nebius.com/cli/reference/ai/endpoint/ssh

Name

nebius ai endpoint ssh

Run shell in the specified endpoint.

Synopsis

``` nebius ai endpoint ssh -i, --identity-file --private -s, --shell ```

Options

`-i, --identity-file` (string)

Identity file to use for SSH authentication.

`--private` (bool)

If set, the private IP will be used to connect.

`-s, --shell` (string)

Shell command to use inside container, default is sh.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius ai endpoint start Source: https://docs.nebius.com/cli/reference/ai/endpoint/start

Name

nebius ai endpoint start

Starts an endpoint.

Synopsis

``` nebius ai endpoint start [id] --id [required] --async ```

Positional Arguments

id

ID of the resource to start.

Options

`--id` (string) \[required]

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius ai endpoint start ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius ai endpoint stop Source: https://docs.nebius.com/cli/reference/ai/endpoint/stop

Name

nebius ai endpoint stop

Stops an endpoint.

Synopsis

``` nebius ai endpoint stop [id] --id [required] --async ```

Positional Arguments

id

ID of the resource to stop.

Options

`--id` (string) \[required]

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius ai endpoint stop ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius ai get Source: https://docs.nebius.com/cli/reference/ai/get

Name

nebius ai get

Returns the specified job or endpoint.

Synopsis

``` nebius ai get [id] --id ```

Positional Arguments

id

Job or Endpoint ID.

Options

`--id` (string)

Job or Endpoint ID.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius ai Source: https://docs.nebius.com/cli/reference/ai/index

Name

nebius ai

Commands

nebius ai create

Interactively creates a Serverless AI job or endpoint.

nebius ai endpoint

Service to create/manage endpoints.

nebius ai get

Returns the specified job or endpoint.

nebius ai job

Service to create/manage jobs.

nebius ai list

Lists endpoints and jobs.

nebius ai logs

Get logs for the specified application

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius ai job cancel Source: https://docs.nebius.com/cli/reference/ai/job/cancel

Name

nebius ai job cancel

Cancels a job.

Synopsis

``` nebius ai job cancel [id] --id [required] --async ```

Positional Arguments

id

ID of the resource to cancel.

Options

`--id` (string) \[required]

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius ai job cancel ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius ai job create Source: https://docs.nebius.com/cli/reference/ai/job/create

Name

nebius ai job create

Creates a job.

This command is deterministic and non-interactive. Use it for scripts, config-driven workflows, CI, and agents.

For human first-time setup, use the guided `ai create` wizard. Static create commands report validation errors with recovery hints instead of switching into prompt mode.

Synopsis

``` nebius ai job create --args --async --container-command --container-port --disk-size --env --env-secret --image --inject-file --name --parent-id --platform --preemptible --preset --registry-password --registry-secret --registry-username --restart-policy --shm-size --ssh-key --subnet-id --timeout --volume --working-dir ```

Options

`--args` (string)

Override container arguments.

`--async` (bool)

Return immediately after starting the create operation.

`--container-command` (string)

Override container entrypoint command.

`--container-port` (string array)

Port to expose as HOST\[:CONTAINER]\[/http|tcp|udp] (default protocol http; repeatable). For endpoints, each HTTP port is reachable over a managed https\:// URL (gRPC works over the same URL) and each TCP port over a tls\://HOST:443 URL; UDP ports get no managed URL.

`--disk-size` (string)

Disk size (e.g., 100Gi, 500Gi, 1Ti), default is 250Gi.

`--env` (string array)

Environment variable in KEY=VALUE format (repeatable).

`--env-secret` (string array)

Environment variable from MysteryBox in KEY=SECRET\_SELECTOR format (repeatable). SECRET\_SELECTOR can be a secret name, secret ID, version ID, or SECRET\_ID\@VERSION\_ID.

`--image` (string)

Container image reference in the registry/path:tag or registry/path\@digest format.

`--inject-file` (string array)

Inject a local config file into the container at LOCAL\_PATH:CONTAINER\_PATH (repeatable). CONTAINER\_PATH must be an absolute path; the file is read-only inside the container and limited to 64 KiB.

`--name` (string)

Application name.

`--parent-id` (string)

Parent ID (if not specified, it will be taken from the CLI profile).

`--platform` (string)

Platform of compute resources (e.g. gpu-h100-sxm, gpu-l40s-d), default is gpu-h100-sxm in eu-north1 and gpu-h200-sxm elsewhere.

`--preemptible` (bool)

Use a preemptible VM (cheaper but can be stopped by the platform at any time).

`--preset` (string)

Preset for selected platform (e.g. 1gpu-16vcpu-200gb), default is minimum available preset for the platform.

`--registry-password` (string)

Container registry password.

`--registry-secret` (string)

MysteryBox secret selector with REGISTRY\_USERNAME and REGISTRY\_PASSWORD payload keys. Selector can be a secret name, secret ID, version ID, or SECRET\_ID\@VERSION\_ID.

`--registry-username` (string)

Container registry username.

`--restart-policy` (string)

Restart policy, default is never.

A value must be one of:

  • never
  • on-failure

`--shm-size` (string)

Size of /dev/shm (e.g., 64Mi, 128Mi, 1Gi), default - 16Gi for GPU platforms, 0 for CPU.

`--ssh-key` (string array)

Configure ssh\_authorized\_keys for creating VM.

`--subnet-id` (string)

Network subnet ID.

`--timeout` (duration: 2h30m10s)

Job timeout in hours (min - 1h, max - 168h), default is 24h.

`--volume` (string array)

Volume mount in SOURCE:CONTAINER\_PATH\[:MODE] or s3://BUCKET:/container\_path\[:MODE\[:PROFILE]] format. MODE: rw, ro (default: rw). PROFILE: AWS credentials profile (default: 'default'). For S3 MysteryBox auth use PROFILE\@SECRET\_SELECTOR, where SECRET\_SELECTOR can be a secret name, secret ID, version ID, or SECRET\_ID\@VERSION\_ID (repeatable).

`--working-dir` (string)

Working directory (absolute path).

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius ai job delete Source: https://docs.nebius.com/cli/reference/ai/job/delete

Name

nebius ai job delete

Deletes a job.

Synopsis

``` nebius ai job delete [id] --id [required] --async ```

Positional Arguments

id

ID of the resource to delete.

Options

`--id` (string) \[required]

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius ai job delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius ai job get Source: https://docs.nebius.com/cli/reference/ai/job/get

Name

nebius ai job get

Returns the specified job.

Synopsis

``` nebius ai job get [id] --id ```

Positional Arguments

id

Job ID.

Options

`--id` (string)

Job ID.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius ai job get-by-name Source: https://docs.nebius.com/cli/reference/ai/job/get-by-name

Name

nebius ai job get-by-name

Returns the specified job by name.

Synopsis

``` nebius ai job get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

`--parent-id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // [required] } ``` ```json theme={null} nebius ai job get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius ai job Source: https://docs.nebius.com/cli/reference/ai/job/index

Name

nebius ai job

Service to create/manage jobs.

Commands

nebius ai job cancel

Cancels a job.

nebius ai job create

Creates a job.

nebius ai job delete

Deletes a job.

nebius ai job get

Returns the specified job.

nebius ai job get-by-name

Returns the specified job by name.

nebius ai job list

Lists jobs.

nebius ai job logs

Get logs for the specified application

nebius ai job operation

Manage operations for Job service.

nebius ai job ssh

Run shell in the specified job.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius ai job list Source: https://docs.nebius.com/cli/reference/ai/job/list

Name

nebius ai job list

Lists jobs.

Synopsis

``` nebius ai job list --parent-id ```

Options

`--parent-id` (string)

Parent ID (if not specified, it will be taken from the CLI profile).

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius ai job logs Source: https://docs.nebius.com/cli/reference/ai/job/logs

Name

nebius ai job logs

Get logs for the specified application

Synopsis

``` nebius ai job logs --follow --since --tail --timestamps --until ```

Options

`--follow` (bool)

Stream logs in real-time.

`--since` (string)

Show logs since time (e.g., 1h, 30m, 2024-01-01), default is 1h.

`--tail` (int)

Number of recent lines to show.

`--timestamps` (bool)

Additional timestamp for log messages.

`--until` (string)

Show logs until time, default is current time.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius ai job operation get Source: https://docs.nebius.com/cli/reference/ai/job/operation/get

Name

nebius ai job operation get

Get operation by ID.

Synopsis

``` nebius ai job operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius ai job operation Source: https://docs.nebius.com/cli/reference/ai/job/operation/index

Name

nebius ai job operation

Manage operations for Job service.

Commands

nebius ai job operation get

Get operation by ID.

nebius ai job operation list

List operations by resource ID.

nebius ai job operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius ai job operation list Source: https://docs.nebius.com/cli/reference/ai/job/operation/list

Name

nebius ai job operation list

List operations by resource ID.

Synopsis

``` nebius ai job operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius ai job operation wait Source: https://docs.nebius.com/cli/reference/ai/job/operation/wait

Name

nebius ai job operation wait

Wait for operation to complete.

Synopsis

``` nebius ai job operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius ai job ssh Source: https://docs.nebius.com/cli/reference/ai/job/ssh

Name

nebius ai job ssh

Run shell in the specified job.

Synopsis

``` nebius ai job ssh -i, --identity-file --private -s, --shell ```

Options

`-i, --identity-file` (string)

Identity file to use for SSH authentication.

`--private` (bool)

If set, the private IP will be used to connect.

`-s, --shell` (string)

Shell command to use inside container, default is sh.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius ai list Source: https://docs.nebius.com/cli/reference/ai/list

Name

nebius ai list

Lists endpoints and jobs.

Synopsis

``` nebius ai list --page-size --parent-id ```

Options

`--page-size` (int64)

Number of items to request per resource type.

`--parent-id` (string)

Parent ID (if not specified, it will be taken from the CLI profile).

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius ai logs Source: https://docs.nebius.com/cli/reference/ai/logs

Name

nebius ai logs

Get logs for the specified application

Synopsis

``` nebius ai logs --follow --since --tail --timestamps --until ```

Options

`--follow` (bool)

Stream logs in real-time.

`--since` (string)

Show logs since time (e.g., 1h, 30m, 2024-01-01), default is 1h.

`--tail` (int)

Number of recent lines to show.

`--timestamps` (bool)

Additional timestamp for log messages.

`--until` (string)

Show logs until time, default is current time.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius applications Source: https://docs.nebius.com/cli/reference/applications/index

Name

nebius applications

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius applications v1alpha1 Source: https://docs.nebius.com/cli/reference/applications/v1alpha1/index

Name

nebius applications v1alpha1

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius applications v1alpha1 k8s-release create Source: https://docs.nebius.com/cli/reference/applications/v1alpha1/k8s-release/create

Name

nebius applications v1alpha1 k8s-release create

Synopsis

``` nebius applications v1alpha1 k8s-release create --application-name [required] --cluster-id [required] --labels --name --namespace [required] --parent-id [required] --product-slug [required] --resource-version --set --values --async -i, --interactive ```

Options

`--application-name` (string) \[required]

`--cluster-id` (string) \[required]

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--namespace` (string) \[required]

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--product-slug` (string) \[required]

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--set` (string->string)

`--values` (string)

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "application_name": string, // [required] [immutable] "cluster_id": string, // [required] [immutable] "namespace": string, // [required] [immutable] "product_slug": string, // [required] [immutable] "set": { // [map] [sensitive] [input_only] string: string }, "values": string // [sensitive] [input_only] } } ``` ```json theme={null} nebius applications v1alpha1 k8s-release create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "application_name": "", "cluster_id": "", "namespace": "", "product_slug": "", "set": { "": "" }, "values": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius applications v1alpha1 k8s-release delete Source: https://docs.nebius.com/cli/reference/applications/v1alpha1/k8s-release/delete

Name

nebius applications v1alpha1 k8s-release delete

Synopsis

``` nebius applications v1alpha1 k8s-release delete [id] --id [required] --async ```

Positional Arguments

id

ID of the resource to delete.

Options

`--id` (string) \[required]

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius applications v1alpha1 k8s-release delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius applications v1alpha1 k8s-release edit Source: https://docs.nebius.com/cli/reference/applications/v1alpha1/k8s-release/edit

Name

nebius applications v1alpha1 k8s-release edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius applications v1alpha1 k8s-release edit [id] --async --editor --id ```

Positional Arguments

id

ID of the resource to edit.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius applications v1alpha1 k8s-release get Source: https://docs.nebius.com/cli/reference/applications/v1alpha1/k8s-release/get

Name

nebius applications v1alpha1 k8s-release get

Synopsis

``` nebius applications v1alpha1 k8s-release get [id] --id [required] ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius applications v1alpha1 k8s-release get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius applications v1alpha1 k8s-release Source: https://docs.nebius.com/cli/reference/applications/v1alpha1/k8s-release/index

Name

nebius applications v1alpha1 k8s-release

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius applications v1alpha1 k8s-release list Source: https://docs.nebius.com/cli/reference/applications/v1alpha1/k8s-release/list

Name

nebius applications v1alpha1 k8s-release list

Synopsis

``` nebius applications v1alpha1 k8s-release list --cluster-id [required] --filter --page-size --page-token --parent-id [required] --all -i, --interactive ```

Options

`--cluster-id` (string) \[required]

`--filter` (string)

`--page-size` (int64)

`--page-token` (string)

`--parent-id` (string) \[required]

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "cluster_id": string, // [required] "filter": string, "page_size": int64, "page_token": string, "parent_id": string // [required] } ``` ```json theme={null} nebius applications v1alpha1 k8s-release list ' { "cluster_id": "", "filter": "", "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius applications v1alpha1 k8s-release operation get Source: https://docs.nebius.com/cli/reference/applications/v1alpha1/k8s-release/operation/get

Name

nebius applications v1alpha1 k8s-release operation get

Get operation by ID.

Synopsis

``` nebius applications v1alpha1 k8s-release operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius applications v1alpha1 k8s-release operation Source: https://docs.nebius.com/cli/reference/applications/v1alpha1/k8s-release/operation/index

Name

nebius applications v1alpha1 k8s-release operation

Manage operations for K8SRelease service.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius applications v1alpha1 k8s-release operation list Source: https://docs.nebius.com/cli/reference/applications/v1alpha1/k8s-release/operation/list

Name

nebius applications v1alpha1 k8s-release operation list

List operations by resource ID.

Synopsis

``` nebius applications v1alpha1 k8s-release operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius applications v1alpha1 k8s-release operation wait Source: https://docs.nebius.com/cli/reference/applications/v1alpha1/k8s-release/operation/wait

Name

nebius applications v1alpha1 k8s-release operation wait

Wait for operation to complete.

Synopsis

``` nebius applications v1alpha1 k8s-release operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius applications v1alpha1 k8s-release update Source: https://docs.nebius.com/cli/reference/applications/v1alpha1/k8s-release/update

Name

nebius applications v1alpha1 k8s-release update

Synopsis

``` nebius applications v1alpha1 k8s-release update [id] --id --labels --labels-add --labels-remove --name --parent-id --resource-version --set --values --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--set` (string->string)

`--values` (string)

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "set": { // [map] [sensitive] [input_only] string: string }, "values": string // [sensitive] [input_only] } } ``` ```json theme={null} nebius applications v1alpha1 k8s-release update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "set": { "": "" }, "values": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius audit Source: https://docs.nebius.com/cli/reference/audit/index

Name

nebius audit

Commands

nebius audit v2

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius audit v2 audit-event-export cancel Source: https://docs.nebius.com/cli/reference/audit/v2/audit-event-export/cancel

Name

nebius audit v2 audit-event-export cancel

Stop active audit events export to s3 bucket, all data written before calling this API remains in the bucket.

Synopsis

``` nebius audit v2 audit-event-export cancel [id] --id [required] --async ```

Positional Arguments

id

Id of the audit event export that needs to be cancelled.

Options

`--id` (string) \[required]

Id of the audit event export that needs to be cancelled.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] // Id of the audit event export that needs to be cancelled. } ``` ```json theme={null} nebius audit v2 audit-event-export cancel ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius audit v2 audit-event-export get Source: https://docs.nebius.com/cli/reference/audit/v2/audit-event-export/get

Name

nebius audit v2 audit-event-export get

Returns the audit event export with the current progress status and the parameters with which it was created.

Synopsis

``` nebius audit v2 audit-event-export get [id] --id [required] ```

Positional Arguments

id

Id of the audit event export.

Options

`--id` (string) \[required]

Id of the audit event export.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] // Id of the audit event export. } ``` ```json theme={null} nebius audit v2 audit-event-export get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius audit v2 audit-event-export Source: https://docs.nebius.com/cli/reference/audit/v2/audit-event-export/index

Name

nebius audit v2 audit-event-export

Service for managing audit event exports.

Commands

nebius audit v2 audit-event-export cancel

Stop active audit events export to s3 bucket, all data written before calling this API remains in the bucket.

nebius audit v2 audit-event-export get

Returns the audit event export with the current progress status and the parameters with which it was created.

nebius audit v2 audit-event-export list

Returns a list of exports created for a specific parent\_id.

nebius audit v2 audit-event-export operation

Manage operations for AuditEventExport service.

nebius audit v2 audit-event-export start

Start audit events export to s3 bucket for specific period.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius audit v2 audit-event-export list Source: https://docs.nebius.com/cli/reference/audit/v2/audit-event-export/list

Name

nebius audit v2 audit-event-export list

Returns a list of exports created for a specific parent\_id.

Synopsis

``` nebius audit v2 audit-event-export list --page-size --page-token --parent-id [required] --region --all -i, --interactive ```

Options

`--page-size` (int64)

Specifies the maximum number of items to return in the response.

`--page-token` (string)

Token for pagination, allowing the retrieval of the next set of results.

`--parent-id` (string) \[required]

Parent id used when creating the audit export.

`--region` (string)

Region to retrieve audit exports (e.g. eu-north2, us-central1, eu-west1)
See [https://docs.nebius.com/overview/regions](https://docs.nebius.com/overview/regions)
Default: eu-north1

After a transition period (13-08-2026) this field becomes required.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, // Specifies the maximum number of items to return in the response. "page_token": string, // Token for pagination, allowing the retrieval of the next set of results. "parent_id": string, // [required] // Parent id used when creating the audit export. "region": string // Region to retrieve audit exports (e.g. eu-north2, us-central1, eu-west1) // See https://docs.nebius.com/overview/regions // Default: eu-north1 // // After a transition period (13-08-2026) this field becomes required. } ``` ```json theme={null} nebius audit v2 audit-event-export list ' { "page_size": 0, "page_token": "", "parent_id": "", "region": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius audit v2 audit-event-export operation get Source: https://docs.nebius.com/cli/reference/audit/v2/audit-event-export/operation/get

Name

nebius audit v2 audit-event-export operation get

Get operation by ID.

Synopsis

``` nebius audit v2 audit-event-export operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius audit v2 audit-event-export operation Source: https://docs.nebius.com/cli/reference/audit/v2/audit-event-export/operation/index

Name

nebius audit v2 audit-event-export operation

Manage operations for AuditEventExport service.

Commands

nebius audit v2 audit-event-export operation get

Get operation by ID.

nebius audit v2 audit-event-export operation list

List operations by resource ID.

nebius audit v2 audit-event-export operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius audit v2 audit-event-export operation list Source: https://docs.nebius.com/cli/reference/audit/v2/audit-event-export/operation/list

Name

nebius audit v2 audit-event-export operation list

List operations by resource ID.

Synopsis

``` nebius audit v2 audit-event-export operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius audit v2 audit-event-export operation wait Source: https://docs.nebius.com/cli/reference/audit/v2/audit-event-export/operation/wait

Name

nebius audit v2 audit-event-export operation wait

Wait for operation to complete.

Synopsis

``` nebius audit v2 audit-event-export operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius audit v2 audit-event-export start Source: https://docs.nebius.com/cli/reference/audit/v2/audit-event-export/start

Name

nebius audit v2 audit-event-export start

Start audit events export to s3 bucket for specific period.

Synopsis

``` nebius audit v2 audit-event-export start [id] --id --labels --name --nebius-object-storage-bucket-by-id-id [required] --nebius-object-storage-object-prefix --params-event-type [required] --params-filter --params-from [required] --params-to [required] --parent-id [required] --region --resource-version --async ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--nebius-object-storage-bucket-by-id-id` (string) \[required]

The id of the bucket in the tenant where the logs will be exported.

`--nebius-object-storage-object-prefix` (string)

Prefix for export objects.
Default value is `auditlogs`.

`--params-event-type` (string) \[required]

Type of audit event to filter by.

A value must be one of:

  • control\_plane
  • data\_plane

`--params-filter` (string)

Example:
service.name = 'iam' AND resource.hierarchy.id:'container-e0t' AND regex(resource.metadata.name, '^.*test.*\$')

Supported filters:
"=" - equals
"!=" - not equals
":" - contains
regex - regular expression

Fields that can be used for filtering:
action
authentication.static\_key\_credential.id
authentication.subject.service\_account\_id
authentication.subject.tenant\_user\_id
authentication.token\_credential.masked\_token
project\_region.name
resource.hierarchy.id
resource.hierarchy.name
resource.metadata.id
resource.metadata.name
resource.metadata.type
service.name
type
status.

`--params-from` (timestamp: 1970-01-31T02:30:59Z) \[required]

Returns results with a timestamp greater than or equal to this value.

`--params-to` (timestamp: 1970-01-31T02:30:59Z) \[required]

Returns results with a timestamp lower than this value.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--region` (string)

Region to retrieve audit logs (e.g. eu-north2, us-central1, eu-west1)
See [https://docs.nebius.com/overview/regions](https://docs.nebius.com/overview/regions)
Default: eu-north1

During a transition period (until 13-08-2026), events are written to
both eu-north1 and their origin region.
After that, events are only stored in their origin region, and this field becomes required.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // Metadata associated with the new export. "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "region": string, // Region to retrieve audit logs (e.g. eu-north2, us-central1, eu-west1) // See https://docs.nebius.com/overview/regions // Default: eu-north1 // // During a transition period (until 13-08-2026), events are written to // both eu-north1 and their origin region. // After that, events are only stored in their origin region, and this field becomes required. "spec": { // Specification for the new export. "nebius_object_storage": { // An object storage bucket that will be used as the destination for audit logs. // You must have `storage.upload` permission for successful execution. "bucket_by_id": { "id": string // [required] // The id of the bucket in the tenant where the logs will be exported. }, "object_prefix": string // Prefix for export objects. // Default value is `auditlogs`. }, "params": { // [required] // Filter based on which audit logs must be exported. "event_type": enum( // [required] // Type of audit event to filter by. "EVENT_TYPE_UNSPECIFIED", // Unspecified event type. "CONTROL_PLANE", // Control plane events. "DATA_PLANE" // Data plane events (S3). ), "filter": string, // [sensitive] // Example: // service.name = 'iam' AND resource.hierarchy.id:'container-e0t' AND regex(resource.metadata.name, '^.*test.*$') // // Supported filters: // "=" - equals // "!=" - not equals // ":" - contains // regex - regular expression // // Fields that can be used for filtering: // action // authentication.static_key_credential.id // authentication.subject.service_account_id // authentication.subject.tenant_user_id // authentication.token_credential.masked_token // project_region.name // resource.hierarchy.id // resource.hierarchy.name // resource.metadata.id // resource.metadata.name // resource.metadata.type // service.name // type // status. "from": "1970-01-31T02:30:59Z", // [required] [google.protobuf.Timestamp] // Returns results with a timestamp greater than or equal to this value. "to": "1970-01-31T02:30:59Z" // [required] [google.protobuf.Timestamp] // Returns results with a timestamp lower than this value. } } } ``` ```json theme={null} nebius audit v2 audit-event-export start ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "region": "", "spec": { "nebius_object_storage": { "bucket_by_id": { "id": "" }, "object_prefix": "" }, "params": { "event_type": "event_type_unspecified"|"control_plane"|"data_plane", "filter": "", "from": "1970-01-31T02:30:59Z", "to": "1970-01-31T02:30:59Z" } } } ' ``` *Auto generated on 15-Jul-2026* # nebius audit v2 audit-event Source: https://docs.nebius.com/cli/reference/audit/v2/audit-event/index

Name

nebius audit v2 audit-event

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius audit v2 audit-event list Source: https://docs.nebius.com/cli/reference/audit/v2/audit-event/list

Name

nebius audit v2 audit-event list

Synopsis

``` nebius audit v2 audit-event list --end [required] --event-type --filter --page-size --page-token --parent-id [required] --region --start [required] --all -i, --interactive ```

Options

`--end` (timestamp: 1970-01-31T02:30:59Z) \[required]

`--event-type` (string)

Type of audit event to filter by.

A value must be one of:

  • event\_type\_unspecified
  • control\_plane
  • data\_plane

`--filter` (string)

Example:
service.name = 'iam' AND resource.hierarchy.id:'container-e0t' AND regex(resource.metadata.name, '^.*test.*\$')

Supported filters:
"=" - equals
"!=" - not equals
":" - contains
regex - regular expression

Fields that can be used for filtering:
action
authentication.static\_key\_credential.id
authentication.subject.name
authentication.subject.service\_account\_id
authentication.subject.tenant\_user\_id
authentication.token\_credential.masked\_token
project\_region.name
resource.hierarchy.id
resource.hierarchy.name
resource.metadata.id
resource.metadata.name
resource.metadata.type
service.name
type
status.

`--page-size` (int64)

`--page-token` (string)

`--parent-id` (string) \[required]

A tenant id must be provided.

`--region` (string)

Region to retrieve audit logs (e.g. eu-north2, us-central1, eu-west1)
See [https://docs.nebius.com/overview/regions](https://docs.nebius.com/overview/regions)
Default: eu-north1

During a transition period (until 13-08-2026), events are written to
both eu-north1 and their origin region.
After that, events are only stored in their origin region, and this field becomes required.

`--start` (timestamp: 1970-01-31T02:30:59Z) \[required]

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "end": "1970-01-31T02:30:59Z", // [required] [google.protobuf.Timestamp] "event_type": enum( // Type of audit event to filter by. "EVENT_TYPE_UNSPECIFIED", // Unspecified event type. "CONTROL_PLANE", // Control plane events. "DATA_PLANE" // Data plane events (S3). ), "filter": string, // [sensitive] // Example: // service.name = 'iam' AND resource.hierarchy.id:'container-e0t' AND regex(resource.metadata.name, '^.*test.*$') // // Supported filters: // "=" - equals // "!=" - not equals // ":" - contains // regex - regular expression // // Fields that can be used for filtering: // action // authentication.static_key_credential.id // authentication.subject.name // authentication.subject.service_account_id // authentication.subject.tenant_user_id // authentication.token_credential.masked_token // project_region.name // resource.hierarchy.id // resource.hierarchy.name // resource.metadata.id // resource.metadata.name // resource.metadata.type // service.name // type // status. "page_size": int64, "page_token": string, "parent_id": string, // [required] // A tenant id must be provided. "region": string, // Region to retrieve audit logs (e.g. eu-north2, us-central1, eu-west1) // See https://docs.nebius.com/overview/regions // Default: eu-north1 // // During a transition period (until 13-08-2026), events are written to // both eu-north1 and their origin region. // After that, events are only stored in their origin region, and this field becomes required. "start": "1970-01-31T02:30:59Z" // [required] [google.protobuf.Timestamp] } ``` ```json theme={null} nebius audit v2 audit-event list ' { "end": "1970-01-31T02:30:59Z", "event_type": "event_type_unspecified"|"control_plane"|"data_plane", "filter": "", "page_size": 0, "page_token": "", "parent_id": "", "region": "", "start": "1970-01-31T02:30:59Z" } ' ``` *Auto generated on 15-Jul-2026* # nebius audit v2 Source: https://docs.nebius.com/cli/reference/audit/v2/index

Name

nebius audit v2

Commands

nebius audit v2 audit-event

nebius audit v2 audit-event-export

Service for managing audit event exports.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius billing Source: https://docs.nebius.com/cli/reference/billing/index

Name

nebius billing

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius billing v1alpha1 calculator estimate Source: https://docs.nebius.com/cli/reference/billing/v1alpha1/calculator/estimate

Name

nebius billing v1alpha1 calculator estimate

Estimates prices for a single resource.
Returns both hourly and monthly cost estimates for the specified resource configuration.

Synopsis

``` nebius billing v1alpha1 calculator estimate --offer-types --resource-spec-compute-disk-spec-block-size-bytes --resource-spec-compute-disk-spec-disk-encryption-type --resource-spec-compute-disk-spec-forbid-deletion --resource-spec-compute-disk-spec-id --resource-spec-compute-disk-spec-labels --resource-spec-compute-disk-spec-name --resource-spec-compute-disk-spec-parent-id --resource-spec-compute-disk-spec-resource-version --resource-spec-compute-disk-spec-size-bytes --resource-spec-compute-disk-spec-size-gibibytes --resource-spec-compute-disk-spec-size-kibibytes --resource-spec-compute-disk-spec-size-mebibytes --resource-spec-compute-disk-spec-source-image-family-image-family --resource-spec-compute-disk-spec-source-image-family-parent-id --resource-spec-compute-disk-spec-source-image-id --resource-spec-compute-disk-spec-source-snapshot-id --resource-spec-compute-disk-spec-type --resource-spec-compute-disk-update-spec-block-size-bytes --resource-spec-compute-disk-update-spec-disk-encryption-type --resource-spec-compute-disk-update-spec-forbid-deletion --resource-spec-compute-disk-update-spec-id --resource-spec-compute-disk-update-spec-labels --resource-spec-compute-disk-update-spec-name --resource-spec-compute-disk-update-spec-parent-id --resource-spec-compute-disk-update-spec-resource-version --resource-spec-compute-disk-update-spec-size-bytes --resource-spec-compute-disk-update-spec-size-gibibytes --resource-spec-compute-disk-update-spec-size-kibibytes --resource-spec-compute-disk-update-spec-size-mebibytes --resource-spec-compute-disk-update-spec-source-image-family-image-family --resource-spec-compute-disk-update-spec-source-image-family-parent-id --resource-spec-compute-disk-update-spec-source-image-id --resource-spec-compute-disk-update-spec-source-snapshot-id --resource-spec-compute-disk-update-spec-type --resource-spec-compute-filesystem-spec-block-size-bytes --resource-spec-compute-filesystem-spec-forbid-deletion --resource-spec-compute-filesystem-spec-id --resource-spec-compute-filesystem-spec-labels --resource-spec-compute-filesystem-spec-name --resource-spec-compute-filesystem-spec-parent-id --resource-spec-compute-filesystem-spec-resource-version --resource-spec-compute-filesystem-spec-size-bytes --resource-spec-compute-filesystem-spec-size-gibibytes --resource-spec-compute-filesystem-spec-size-kibibytes --resource-spec-compute-filesystem-spec-size-mebibytes --resource-spec-compute-filesystem-spec-type --resource-spec-compute-filesystem-update-spec-block-size-bytes --resource-spec-compute-filesystem-update-spec-forbid-deletion --resource-spec-compute-filesystem-update-spec-id --resource-spec-compute-filesystem-update-spec-labels --resource-spec-compute-filesystem-update-spec-name --resource-spec-compute-filesystem-update-spec-parent-id --resource-spec-compute-filesystem-update-spec-resource-version --resource-spec-compute-filesystem-update-spec-size-bytes --resource-spec-compute-filesystem-update-spec-size-gibibytes --resource-spec-compute-filesystem-update-spec-size-kibibytes --resource-spec-compute-filesystem-update-spec-size-mebibytes --resource-spec-compute-filesystem-update-spec-type --resource-spec-compute-instance-spec-boot-disk-attach-mode --resource-spec-compute-instance-spec-boot-disk-device-id --resource-spec-compute-instance-spec-boot-disk-existing-disk-id --resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes --resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type --resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion --resource-spec-compute-instance-spec-boot-disk-managed-disk-labels --resource-spec-compute-instance-spec-boot-disk-managed-disk-name --resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes --resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes --resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes --resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes --resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family --resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id --resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id --resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id --resource-spec-compute-instance-spec-boot-disk-managed-disk-type --resource-spec-compute-instance-spec-cloud-init-user-data --resource-spec-compute-instance-spec-filesystems --resource-spec-compute-instance-spec-gpu-cluster-id --resource-spec-compute-instance-spec-hostname --resource-spec-compute-instance-spec-id --resource-spec-compute-instance-spec-labels --resource-spec-compute-instance-spec-local-disks-passthrough-group-requested --resource-spec-compute-instance-spec-name --resource-spec-compute-instance-spec-network-interfaces --resource-spec-compute-instance-spec-nvl-instance-group-id --resource-spec-compute-instance-spec-parent-id --resource-spec-compute-instance-spec-preemptible-on-preemption --resource-spec-compute-instance-spec-preemptible-priority --resource-spec-compute-instance-spec-recovery-policy --resource-spec-compute-instance-spec-reservation-policy-policy --resource-spec-compute-instance-spec-reservation-policy-reservation-ids --resource-spec-compute-instance-spec-resource-version --resource-spec-compute-instance-spec-resources-platform --resource-spec-compute-instance-spec-resources-preset --resource-spec-compute-instance-spec-secondary-disks --resource-spec-compute-instance-spec-service-account-id --resource-spec-compute-instance-spec-stopped --resource-spec-compute-instance-update-spec-boot-disk-attach-mode --resource-spec-compute-instance-update-spec-boot-disk-device-id --resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id --resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes --resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type --resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion --resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels --resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name --resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes --resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes --resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes --resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes --resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family --resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id --resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id --resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id --resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type --resource-spec-compute-instance-update-spec-cloud-init-user-data --resource-spec-compute-instance-update-spec-filesystems --resource-spec-compute-instance-update-spec-gpu-cluster-id --resource-spec-compute-instance-update-spec-hostname --resource-spec-compute-instance-update-spec-id --resource-spec-compute-instance-update-spec-labels --resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested --resource-spec-compute-instance-update-spec-name --resource-spec-compute-instance-update-spec-network-interfaces --resource-spec-compute-instance-update-spec-nvl-instance-group-id --resource-spec-compute-instance-update-spec-parent-id --resource-spec-compute-instance-update-spec-preemptible-on-preemption --resource-spec-compute-instance-update-spec-preemptible-priority --resource-spec-compute-instance-update-spec-recovery-policy --resource-spec-compute-instance-update-spec-reservation-policy-policy --resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids --resource-spec-compute-instance-update-spec-resource-version --resource-spec-compute-instance-update-spec-resources-platform --resource-spec-compute-instance-update-spec-resources-preset --resource-spec-compute-instance-update-spec-secondary-disks --resource-spec-compute-instance-update-spec-service-account-id --resource-spec-compute-instance-update-spec-stopped ```

Options

`--offer-types` (enum array)

Type of offers to be applied to the cost estimate.

`--resource-spec-compute-disk-spec-block-size-bytes` (int64)

Block size in bytes.
The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB).
The default value is 4096 bytes (4 KiB).

Mutually exclusive with: `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-disk-spec-disk-encryption-type` (string)

A value must be one of:

  • disk\_encryption\_unspecified
  • disk\_encryption\_managed

Mutually exclusive with: `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-disk-spec-forbid-deletion` (bool)

Prevents deletion whilst set.

Mutually exclusive with: `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-disk-spec-id` (string)

Identifier for the resource, unique for its resource type.

Mutually exclusive with: `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-disk-spec-labels` (string->string)

Labels associated with the resource.

Mutually exclusive with: `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-disk-spec-name` (string)

Human readable name for the resource.

Mutually exclusive with: `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-disk-spec-parent-id` (string)

Identifier of the parent resource to which the resource belongs.

Mutually exclusive with: `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-disk-spec-resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

Mutually exclusive with: `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-disk-spec-size-bytes` (int64)

Mutually exclusive with: `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-disk-spec-size-gibibytes` (int64)

Mutually exclusive with: `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-disk-spec-size-kibibytes` (int64)

Mutually exclusive with: `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-disk-spec-size-mebibytes` (int64)

Mutually exclusive with: `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-disk-spec-source-image-family-image-family` (string)

Mutually exclusive with: `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-disk-spec-source-image-family-parent-id` (string)

Mutually exclusive with: `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-disk-spec-source-image-id` (string)

Mutually exclusive with: `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-disk-spec-source-snapshot-id` (string)

Mutually exclusive with: `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-disk-spec-type` (string)

The type of disk defines the performance and reliability characteristics of the block device.
For details, see [https://docs.nebius.com/compute/storage/types#disks-types](https://docs.nebius.com/compute/storage/types#disks-types).

A value must be one of:

  • unspecified
  • network\_ssd
  • network\_hdd
  • network\_ssd\_non\_replicated
  • network\_ssd\_io\_m3

Mutually exclusive with: `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-disk-update-spec-block-size-bytes` (int64)

Block size in bytes.
The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB).
The default value is 4096 bytes (4 KiB).

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-disk-update-spec-disk-encryption-type` (string)

A value must be one of:

  • disk\_encryption\_unspecified
  • disk\_encryption\_managed

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-disk-update-spec-forbid-deletion` (bool)

Prevents deletion whilst set.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-disk-update-spec-id` (string)

Identifier for the resource, unique for its resource type.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-disk-update-spec-labels` (string->string)

Labels associated with the resource.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-disk-update-spec-name` (string)

Human readable name for the resource.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-disk-update-spec-parent-id` (string)

Identifier of the parent resource to which the resource belongs.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-disk-update-spec-resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-disk-update-spec-size-bytes` (int64)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-disk-update-spec-size-gibibytes` (int64)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-disk-update-spec-size-kibibytes` (int64)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-disk-update-spec-size-mebibytes` (int64)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-disk-update-spec-source-image-family-image-family` (string)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-disk-update-spec-source-image-family-parent-id` (string)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-disk-update-spec-source-image-id` (string)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-disk-update-spec-source-snapshot-id` (string)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-disk-update-spec-type` (string)

The type of disk defines the performance and reliability characteristics of the block device.
For details, see [https://docs.nebius.com/compute/storage/types#disks-types](https://docs.nebius.com/compute/storage/types#disks-types).

A value must be one of:

  • unspecified
  • network\_ssd
  • network\_hdd
  • network\_ssd\_non\_replicated
  • network\_ssd\_io\_m3

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-filesystem-spec-block-size-bytes` (int64)

Block size in bytes.
The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB).
The default value is 4096 bytes (4 KiB).

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-filesystem-spec-forbid-deletion` (bool)

Prevents deletion whilst set.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-filesystem-spec-id` (string)

Identifier for the resource, unique for its resource type.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-filesystem-spec-labels` (string->string)

Labels associated with the resource.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-filesystem-spec-name` (string)

Human readable name for the resource.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-filesystem-spec-parent-id` (string)

Identifier of the parent resource to which the resource belongs.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-filesystem-spec-resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-filesystem-spec-size-bytes` (int64)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-filesystem-spec-size-gibibytes` (int64)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-filesystem-spec-size-kibibytes` (int64)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-filesystem-spec-size-mebibytes` (int64)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-filesystem-spec-type` (string)

The Shared Filesystem type determines its limits and performance characteristics.
For details, see [https://docs.nebius.com/compute/storage/types#filesystems-types](https://docs.nebius.com/compute/storage/types#filesystems-types).

A value must be one of:

  • unspecified
  • network\_ssd
  • network\_hdd
  • weka
  • vast

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-filesystem-update-spec-block-size-bytes` (int64)

Block size in bytes.
The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB).
The default value is 4096 bytes (4 KiB).

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-filesystem-update-spec-forbid-deletion` (bool)

Prevents deletion whilst set.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-filesystem-update-spec-id` (string)

Identifier for the resource, unique for its resource type.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-filesystem-update-spec-labels` (string->string)

Labels associated with the resource.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-filesystem-update-spec-name` (string)

Human readable name for the resource.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-filesystem-update-spec-parent-id` (string)

Identifier of the parent resource to which the resource belongs.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-filesystem-update-spec-resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-filesystem-update-spec-size-bytes` (int64)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-filesystem-update-spec-size-gibibytes` (int64)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-filesystem-update-spec-size-kibibytes` (int64)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-filesystem-update-spec-size-mebibytes` (int64)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-filesystem-update-spec-type` (string)

The Shared Filesystem type determines its limits and performance characteristics.
For details, see [https://docs.nebius.com/compute/storage/types#filesystems-types](https://docs.nebius.com/compute/storage/types#filesystems-types).

A value must be one of:

  • unspecified
  • network\_ssd
  • network\_hdd
  • weka
  • vast

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-instance-spec-boot-disk-attach-mode` (string)

A value must be one of:

  • unspecified
  • read\_only
  • read\_write

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-instance-spec-boot-disk-device-id` (string)

Specifies the user-defined identifier, allowing to use '/dev/disk/by-id/virtio-' as a device path in mount command.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-instance-spec-boot-disk-existing-disk-id` (string)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes` (int64)

Block size in bytes.
The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB).
The default value is 4096 bytes (4 KiB).

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type` (string)

A value must be one of:

  • disk\_encryption\_unspecified
  • disk\_encryption\_managed

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion` (bool)

Prevents deletion whilst set.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels` (string->string)

Labels associated with disk resource.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-instance-spec-boot-disk-managed-disk-name` (string)

Name of a dependent disk.
Use it to convert an ExistingDisk to a dependent disk.
Changing the name will replace the disk and cause data loss.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes` (int64)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes` (int64)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes` (int64)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes` (int64)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family` (string)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id` (string)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id` (string)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id` (string)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-instance-spec-boot-disk-managed-disk-type` (string)

The type of disk defines the performance and reliability characteristics of the block device.
For details, see [https://docs.nebius.com/compute/storage/types#disks-types](https://docs.nebius.com/compute/storage/types#disks-types).

A value must be one of:

  • unspecified
  • network\_ssd
  • network\_hdd
  • network\_ssd\_non\_replicated
  • network\_ssd\_io\_m3

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-instance-spec-cloud-init-user-data` (string)

Data in cloud-init format for customizing instance initialization.
For details, see [https://docs.nebius.com/compute/virtual-machines/manage#user-data](https://docs.nebius.com/compute/virtual-machines/manage#user-data).

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-instance-spec-filesystems` (json)

List of Shared Filesystems attached to the instance.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

(structure)

attach\_mode -> (string)\[required]

A value must be one of:

  • "unspecified"
  • "read\_only"
  • "read\_write"

existing\_filesystem -> (structure)

id -> (string)\[required]

mount\_tag -> (string)\[required]

Specifies the user-defined identifier, allowing to use it as a device in mount command.

JSON Schema:

```json theme={null} [{ "attach_mode": "unspecified"|"read_only"|"read_write", "existing_filesystem": { "id": "" }, "mount_tag": "" }] ```

`--resource-spec-compute-instance-spec-gpu-cluster-id` (string)

If you want to interconnect several instances in a GPU cluster via NVIDIA InfiniBand,
set the ID of an existing GPU cluster.
You can only add the VM to the cluster when creating the VM.
For details, see [https://docs.nebius.com/compute/clusters/gpu](https://docs.nebius.com/compute/clusters/gpu).

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-instance-spec-hostname` (string)

Instance's hostname. Used to generate default DNS record in format `..compute.internal.`
or `..compute.internal.` if hostname is not specified.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-instance-spec-id` (string)

Identifier for the resource, unique for its resource type.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-instance-spec-labels` (string->string)

Labels associated with the resource.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested` (bool)

Passthrough local disks from the underlying host.

Devices are expected to appear in the guest as NVMe devices (nvme0, nvme1, ...),
but the exact number depends on the preset.
Enabled only when this field is explicitly set.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-instance-spec-name` (string)

Human readable name for the resource.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-instance-spec-network-interfaces` (json)

List of network interfaces attached to the instance.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

(structure)

aliases -> (structure)

Assign ranges of IP addresses as aliases.

allocation\_id -> (string)\[required]

ID of allocation.

ip\_address -> (structure)\[required] \[immutable] \[meaningful\_empty\_value]

Private IPv4 address associated with the interface.

allocation\_id -> (string)

Allocation identifier if it was created before.

name -> (string)\[required] \[immutable]

Interface name
Value of this field configures the name of the network interface inside VM's OS.
Longer values will persist in the specification but will be truncated to 15 symbols before being passed to VM configuration.

public\_ip\_address -> (structure)\[meaningful\_empty\_value]

Public IPv4 address associated with the interface.

allocation\_id -> (string)

Allocation identifier if it was created before.

static -> (bool)

If false - Allocation will be created/deleted during NetworkInterface.Allocate/NetworkInterface.Deallocate
If true - Allocation will be created/deleted during NetworkInterface.Create/NetworkInterface.Delete
False by default.

security\_groups -> (structure)

Security groups associated with the network interface.
If an empty list is provided, the default security group for the network will be used.
Effective security groups can be seen in the status.

id -> (string)

Security group identifier.

subnet\_id -> (string)\[required] \[immutable]

Subnet ID.

JSON Schema:

```json theme={null} [{ "aliases": [{ "allocation_id": "" }], "ip_address": { "allocation_id": "" }, "name": "", "public_ip_address": { "allocation_id": "", "static": false }, "security_groups": [{ "id": "" }], "subnet_id": "" }] ```

`--resource-spec-compute-instance-spec-nvl-instance-group-id` (string)

NVLink Instance Group ID associated with the VM.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-instance-spec-parent-id` (string)

Identifier of the parent resource to which the resource belongs.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-instance-spec-preemptible-on-preemption` (string)

Specifies what happens when the VM is preempted. The only supported value is STOP:
Compute stops the VM without deleting or restarting it.

A value must be one of:

  • unspecified
  • stop

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-instance-spec-preemptible-priority` (int32)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-instance-spec-recovery-policy` (string)

Recovery policy defines how the instance will be treated in case of a failure.
Common source of failure is a host failure, but it can be any other failure.
Instance undergoing a guest shutdown (poweroff, etc.) will be subject to recovery policy, meaning that it could
be restarted and billed accordingly. Stop instance via API or UI to stop it to avoid recovering.
* If set to RECOVER, instance will be restarted, if possible. It could be restarted on the same host or on another host.
* If set to FAIL, instance will be stopped and not restarted.

A value must be one of:

  • recover
  • fail

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-instance-spec-reservation-policy-policy` (string)

A value must be one of:

  • auto
  • forbid
  • strict

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-instance-spec-reservation-policy-reservation-ids` (string array)

Capacity block groups, order matters.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-instance-spec-resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-instance-spec-resources-platform` (string)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-instance-spec-resources-preset` (string)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-instance-spec-secondary-disks` (json)

List of additional data disks attached to the instance beyond the boot disk.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

(structure)

attach\_mode -> (string)\[required]

A value must be one of:

  • "unspecified"
  • "read\_only"
  • "read\_write"

device\_id -> (string)

Specifies the user-defined identifier, allowing to use '/dev/disk/by-id/virtio-' as a device path in mount command.

existing\_disk -> (structure)

Attach an existing disk.

Lifecycle:
* The disk is preserved when the instance is deleted (it will be detached).

Switching to a managed disk:
* To delete the disk together with the instance, switch to ManagedDisk in the instance spec.
* For the switch, `ManagedDisk.name` MUST match the current disk `name`
(see DiskService.Get for the disk referenced by `ExistingDisk.id`).
* When converting an ExistingDisk to a ManagedDisk, you must provide `ManagedDisk.name` and `ManagedDisk.spec`
exactly as they are currently defined in the disk resource.
Obtain the current values via `DiskService.Get` and copy them verbatim.
If `ManagedDisk.spec` differs from the current disk spec, the instance update will fail.

Mutually exclusive with: managed\_disk.

id -> (string)\[required]

managed\_disk -> (structure)

Attach a managed disk.

Lifecycle:
* The disk is deleted when the instance is deleted.

Semantics:
* Specifying a ManagedDisk expresses an intent to have that managed disk attached.
* If this intent cannot be satisfied, the entire operation fails.
* You can check the intent status in `instance.status.disk_attachments`.

Updates and matching:
* Managed disks can be updated only via instance spec updates. Updates via DiskService are not allowed.
* During updates, disks are matched by `name`.

Renaming and data loss:
* Changing the disk `name` triggers disk replacement (create a new disk and delete the old one),
which causes data loss.
* To rename a managed disk safely:
1. switch it to ExistingDisk in the instance spec, and
2. update/rename it via DiskService.

Conflicts:
* Instance create/update fails if there is already a disk with the same `name`.
as requested by any ManagedDisk.

Finding the disk ID:
* The disk ID is available in `instance.status.disk_attachments` after it is created.
Use `DiskAttachmentStatus.name` to find the desired disk which matches `name`.

Switching to an existing (non-managed) disk:
* To preserve the disk after instance deletion, switch it to ExistingDisk in the instance spec,
use the disk ID from `instance.status.disk_attachments`.

Deletion protection:
* Switching ExistingDisk to ManagedDisk fails if `Disk.spec.deletion_protection` is enabled.
* Deleting an instance that has a ManagedDisk fails if `Disk.spec.deletion_protection` is enabled.

Mutually exclusive with: existing\_disk.

labels -> (map)\[map]

Labels associated with disk resource.

key -> (string)

value -> (string)

name -> (string)\[required]

Name of a dependent disk.
Use it to convert an ExistingDisk to a dependent disk.
Changing the name will replace the disk and cause data loss.

spec -> (structure)\[required]

Specification of a dependent disk to be created.

block\_size\_bytes -> (int64)\[immutable]

Block size in bytes.
The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB).
The default value is 4096 bytes (4 KiB).

disk\_encryption -> (structure)\[immutable]

Defines how data on the disk is encrypted. By default, no encryption is applied.

type -> (string)

A value must be one of:

  • "disk\_encryption\_unspecified"
  • "disk\_encryption\_managed"

forbid\_deletion -> (bool)

Prevents deletion whilst set.

size\_bytes -> (int64)

Mutually exclusive with: size\_gibibytes, size\_kibibytes, size\_mebibytes.

size\_gibibytes -> (int64)

Mutually exclusive with: size\_bytes, size\_kibibytes, size\_mebibytes.

size\_kibibytes -> (int64)

Mutually exclusive with: size\_bytes, size\_gibibytes, size\_mebibytes.

size\_mebibytes -> (int64)

Mutually exclusive with: size\_bytes, size\_gibibytes, size\_kibibytes.

source\_image\_family -> (structure)\[immutable]

Mutually exclusive with: source\_image\_id, source\_snapshot\_id.

image\_family -> (string)\[required]

parent\_id -> (string)

source\_image\_id -> (string)\[immutable]

Mutually exclusive with: source\_image\_family, source\_snapshot\_id.

source\_snapshot\_id -> (string)\[immutable]

Mutually exclusive with: source\_image\_family, source\_image\_id.

type -> (string)\[required] \[immutable]

The type of disk defines the performance and reliability characteristics of the block device.
For details, see [https://docs.nebius.com/compute/storage/types#disks-types](https://docs.nebius.com/compute/storage/types#disks-types).

A value must be one of:

  • "unspecified"
  • "network\_ssd"
  • "network\_hdd"
  • "network\_ssd\_non\_replicated"
  • "network\_ssd\_io\_m3"

JSON Schema:

```json theme={null} [{ "attach_mode": "unspecified"|"read_only"|"read_write", "device_id": "", "existing_disk": { "id": "" } }] ```

`--resource-spec-compute-instance-spec-service-account-id` (string)

Unique identifier of the service account associated with this instance.
For details, see [https://docs.nebius.com/iam/service-accounts/manage](https://docs.nebius.com/iam/service-accounts/manage).

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-instance-spec-stopped` (bool)

Indicates whether the instance should be stopped.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-update-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-update-spec-boot-disk-device-id`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-cloud-init-user-data`, `--resource-spec-compute-instance-update-spec-filesystems`, `--resource-spec-compute-instance-update-spec-gpu-cluster-id`, `--resource-spec-compute-instance-update-spec-hostname`, `--resource-spec-compute-instance-update-spec-id`, `--resource-spec-compute-instance-update-spec-labels`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-name`, `--resource-spec-compute-instance-update-spec-network-interfaces`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-parent-id`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-recovery-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-resource-version`, `--resource-spec-compute-instance-update-spec-resources-platform`, `--resource-spec-compute-instance-update-spec-resources-preset`, `--resource-spec-compute-instance-update-spec-secondary-disks`, `--resource-spec-compute-instance-update-spec-service-account-id`, `--resource-spec-compute-instance-update-spec-stopped`.

`--resource-spec-compute-instance-update-spec-boot-disk-attach-mode` (string)

A value must be one of:

  • unspecified
  • read\_only
  • read\_write

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`.

`--resource-spec-compute-instance-update-spec-boot-disk-device-id` (string)

Specifies the user-defined identifier, allowing to use '/dev/disk/by-id/virtio-' as a device path in mount command.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`.

`--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id` (string)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type`.

`--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes` (int64)

Block size in bytes.
The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB).
The default value is 4096 bytes (4 KiB).

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`.

`--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type` (string)

A value must be one of:

  • disk\_encryption\_unspecified
  • disk\_encryption\_managed

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`.

`--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion` (bool)

Prevents deletion whilst set.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`.

`--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels` (string->string)

Labels associated with disk resource.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`.

`--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name` (string)

Name of a dependent disk.
Use it to convert an ExistingDisk to a dependent disk.
Changing the name will replace the disk and cause data loss.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`.

`--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes` (int64)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`.

`--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes` (int64)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`.

`--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes` (int64)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`.

`--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes` (int64)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`.

`--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family` (string)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`.

`--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id` (string)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`.

`--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id` (string)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id`.

`--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id` (string)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`.

`--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type` (string)

The type of disk defines the performance and reliability characteristics of the block device.
For details, see [https://docs.nebius.com/compute/storage/types#disks-types](https://docs.nebius.com/compute/storage/types#disks-types).

A value must be one of:

  • unspecified
  • network\_ssd
  • network\_hdd
  • network\_ssd\_non\_replicated
  • network\_ssd\_io\_m3

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`, `--resource-spec-compute-instance-update-spec-boot-disk-existing-disk-id`.

`--resource-spec-compute-instance-update-spec-cloud-init-user-data` (string)

Data in cloud-init format for customizing instance initialization.
For details, see [https://docs.nebius.com/compute/virtual-machines/manage#user-data](https://docs.nebius.com/compute/virtual-machines/manage#user-data).

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`.

`--resource-spec-compute-instance-update-spec-filesystems` (json)

List of Shared Filesystems attached to the instance.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`.

(structure)

attach\_mode -> (string)\[required]

A value must be one of:

  • "unspecified"
  • "read\_only"
  • "read\_write"

existing\_filesystem -> (structure)

id -> (string)\[required]

mount\_tag -> (string)\[required]

Specifies the user-defined identifier, allowing to use it as a device in mount command.

JSON Schema:

```json theme={null} [{ "attach_mode": "unspecified"|"read_only"|"read_write", "existing_filesystem": { "id": "" }, "mount_tag": "" }] ```

`--resource-spec-compute-instance-update-spec-gpu-cluster-id` (string)

If you want to interconnect several instances in a GPU cluster via NVIDIA InfiniBand,
set the ID of an existing GPU cluster.
You can only add the VM to the cluster when creating the VM.
For details, see [https://docs.nebius.com/compute/clusters/gpu](https://docs.nebius.com/compute/clusters/gpu).

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`.

`--resource-spec-compute-instance-update-spec-hostname` (string)

Instance's hostname. Used to generate default DNS record in format `..compute.internal.`
or `..compute.internal.` if hostname is not specified.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`.

`--resource-spec-compute-instance-update-spec-id` (string)

Identifier for the resource, unique for its resource type.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`.

`--resource-spec-compute-instance-update-spec-labels` (string->string)

Labels associated with the resource.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`.

`--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested` (bool)

Passthrough local disks from the underlying host.

Devices are expected to appear in the guest as NVMe devices (nvme0, nvme1, ...),
but the exact number depends on the preset.
Enabled only when this field is explicitly set.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`.

`--resource-spec-compute-instance-update-spec-name` (string)

Human readable name for the resource.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`.

`--resource-spec-compute-instance-update-spec-network-interfaces` (json)

List of network interfaces attached to the instance.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`.

(structure)

aliases -> (structure)

Assign ranges of IP addresses as aliases.

allocation\_id -> (string)\[required]

ID of allocation.

ip\_address -> (structure)\[required] \[immutable] \[meaningful\_empty\_value]

Private IPv4 address associated with the interface.

allocation\_id -> (string)

Allocation identifier if it was created before.

name -> (string)\[required] \[immutable]

Interface name
Value of this field configures the name of the network interface inside VM's OS.
Longer values will persist in the specification but will be truncated to 15 symbols before being passed to VM configuration.

public\_ip\_address -> (structure)\[meaningful\_empty\_value]

Public IPv4 address associated with the interface.

allocation\_id -> (string)

Allocation identifier if it was created before.

static -> (bool)

If false - Allocation will be created/deleted during NetworkInterface.Allocate/NetworkInterface.Deallocate
If true - Allocation will be created/deleted during NetworkInterface.Create/NetworkInterface.Delete
False by default.

security\_groups -> (structure)

Security groups associated with the network interface.
If an empty list is provided, the default security group for the network will be used.
Effective security groups can be seen in the status.

id -> (string)

Security group identifier.

subnet\_id -> (string)\[required] \[immutable]

Subnet ID.

JSON Schema:

```json theme={null} [{ "aliases": [{ "allocation_id": "" }], "ip_address": { "allocation_id": "" }, "name": "", "public_ip_address": { "allocation_id": "", "static": false }, "security_groups": [{ "id": "" }], "subnet_id": "" }] ```

`--resource-spec-compute-instance-update-spec-nvl-instance-group-id` (string)

NVLink Instance Group ID associated with the VM.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`.

`--resource-spec-compute-instance-update-spec-parent-id` (string)

Identifier of the parent resource to which the resource belongs.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`.

`--resource-spec-compute-instance-update-spec-preemptible-on-preemption` (string)

Specifies what happens when the VM is preempted. The only supported value is STOP:
Compute stops the VM without deleting or restarting it.

A value must be one of:

  • unspecified
  • stop

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`.

`--resource-spec-compute-instance-update-spec-preemptible-priority` (int32)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`.

`--resource-spec-compute-instance-update-spec-recovery-policy` (string)

Recovery policy defines how the instance will be treated in case of a failure.
Common source of failure is a host failure, but it can be any other failure.
Instance undergoing a guest shutdown (poweroff, etc.) will be subject to recovery policy, meaning that it could
be restarted and billed accordingly. Stop instance via API or UI to stop it to avoid recovering.
* If set to RECOVER, instance will be restarted, if possible. It could be restarted on the same host or on another host.
* If set to FAIL, instance will be stopped and not restarted.

A value must be one of:

  • recover
  • fail

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`.

`--resource-spec-compute-instance-update-spec-reservation-policy-policy` (string)

A value must be one of:

  • auto
  • forbid
  • strict

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`.

`--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids` (string array)

Capacity block groups, order matters.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`.

`--resource-spec-compute-instance-update-spec-resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`.

`--resource-spec-compute-instance-update-spec-resources-platform` (string)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`.

`--resource-spec-compute-instance-update-spec-resources-preset` (string)

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`.

`--resource-spec-compute-instance-update-spec-secondary-disks` (json)

List of additional data disks attached to the instance beyond the boot disk.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`.

(structure)

attach\_mode -> (string)\[required]

A value must be one of:

  • "unspecified"
  • "read\_only"
  • "read\_write"

device\_id -> (string)

Specifies the user-defined identifier, allowing to use '/dev/disk/by-id/virtio-' as a device path in mount command.

existing\_disk -> (structure)

Attach an existing disk.

Lifecycle:
* The disk is preserved when the instance is deleted (it will be detached).

Switching to a managed disk:
* To delete the disk together with the instance, switch to ManagedDisk in the instance spec.
* For the switch, `ManagedDisk.name` MUST match the current disk `name`
(see DiskService.Get for the disk referenced by `ExistingDisk.id`).
* When converting an ExistingDisk to a ManagedDisk, you must provide `ManagedDisk.name` and `ManagedDisk.spec`
exactly as they are currently defined in the disk resource.
Obtain the current values via `DiskService.Get` and copy them verbatim.
If `ManagedDisk.spec` differs from the current disk spec, the instance update will fail.

Mutually exclusive with: managed\_disk.

id -> (string)\[required]

managed\_disk -> (structure)

Attach a managed disk.

Lifecycle:
* The disk is deleted when the instance is deleted.

Semantics:
* Specifying a ManagedDisk expresses an intent to have that managed disk attached.
* If this intent cannot be satisfied, the entire operation fails.
* You can check the intent status in `instance.status.disk_attachments`.

Updates and matching:
* Managed disks can be updated only via instance spec updates. Updates via DiskService are not allowed.
* During updates, disks are matched by `name`.

Renaming and data loss:
* Changing the disk `name` triggers disk replacement (create a new disk and delete the old one),
which causes data loss.
* To rename a managed disk safely:
1. switch it to ExistingDisk in the instance spec, and
2. update/rename it via DiskService.

Conflicts:
* Instance create/update fails if there is already a disk with the same `name`.
as requested by any ManagedDisk.

Finding the disk ID:
* The disk ID is available in `instance.status.disk_attachments` after it is created.
Use `DiskAttachmentStatus.name` to find the desired disk which matches `name`.

Switching to an existing (non-managed) disk:
* To preserve the disk after instance deletion, switch it to ExistingDisk in the instance spec,
use the disk ID from `instance.status.disk_attachments`.

Deletion protection:
* Switching ExistingDisk to ManagedDisk fails if `Disk.spec.deletion_protection` is enabled.
* Deleting an instance that has a ManagedDisk fails if `Disk.spec.deletion_protection` is enabled.

Mutually exclusive with: existing\_disk.

labels -> (map)\[map]

Labels associated with disk resource.

key -> (string)

value -> (string)

name -> (string)\[required]

Name of a dependent disk.
Use it to convert an ExistingDisk to a dependent disk.
Changing the name will replace the disk and cause data loss.

spec -> (structure)\[required]

Specification of a dependent disk to be created.

block\_size\_bytes -> (int64)\[immutable]

Block size in bytes.
The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB).
The default value is 4096 bytes (4 KiB).

disk\_encryption -> (structure)\[immutable]

Defines how data on the disk is encrypted. By default, no encryption is applied.

type -> (string)

A value must be one of:

  • "disk\_encryption\_unspecified"
  • "disk\_encryption\_managed"

forbid\_deletion -> (bool)

Prevents deletion whilst set.

size\_bytes -> (int64)

Mutually exclusive with: size\_gibibytes, size\_kibibytes, size\_mebibytes.

size\_gibibytes -> (int64)

Mutually exclusive with: size\_bytes, size\_kibibytes, size\_mebibytes.

size\_kibibytes -> (int64)

Mutually exclusive with: size\_bytes, size\_gibibytes, size\_mebibytes.

size\_mebibytes -> (int64)

Mutually exclusive with: size\_bytes, size\_gibibytes, size\_kibibytes.

source\_image\_family -> (structure)\[immutable]

Mutually exclusive with: source\_image\_id, source\_snapshot\_id.

image\_family -> (string)\[required]

parent\_id -> (string)

source\_image\_id -> (string)\[immutable]

Mutually exclusive with: source\_image\_family, source\_snapshot\_id.

source\_snapshot\_id -> (string)\[immutable]

Mutually exclusive with: source\_image\_family, source\_image\_id.

type -> (string)\[required] \[immutable]

The type of disk defines the performance and reliability characteristics of the block device.
For details, see [https://docs.nebius.com/compute/storage/types#disks-types](https://docs.nebius.com/compute/storage/types#disks-types).

A value must be one of:

  • "unspecified"
  • "network\_ssd"
  • "network\_hdd"
  • "network\_ssd\_non\_replicated"
  • "network\_ssd\_io\_m3"

JSON Schema:

```json theme={null} [{ "attach_mode": "unspecified"|"read_only"|"read_write", "device_id": "", "existing_disk": { "id": "" } }] ```

`--resource-spec-compute-instance-update-spec-service-account-id` (string)

Unique identifier of the service account associated with this instance.
For details, see [https://docs.nebius.com/iam/service-accounts/manage](https://docs.nebius.com/iam/service-accounts/manage).

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`.

`--resource-spec-compute-instance-update-spec-stopped` (bool)

Indicates whether the instance should be stopped.

Mutually exclusive with: `--resource-spec-compute-disk-spec-block-size-bytes`, `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-spec-id`, `--resource-spec-compute-disk-spec-labels`, `--resource-spec-compute-disk-spec-name`, `--resource-spec-compute-disk-spec-parent-id`, `--resource-spec-compute-disk-spec-resource-version`, `--resource-spec-compute-disk-spec-size-bytes`, `--resource-spec-compute-disk-spec-size-gibibytes`, `--resource-spec-compute-disk-spec-size-kibibytes`, `--resource-spec-compute-disk-spec-size-mebibytes`, `--resource-spec-compute-disk-spec-source-image-family-image-family`, `--resource-spec-compute-disk-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-spec-source-image-id`, `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-spec-type`, `--resource-spec-compute-disk-update-spec-block-size-bytes`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-id`, `--resource-spec-compute-disk-update-spec-labels`, `--resource-spec-compute-disk-update-spec-name`, `--resource-spec-compute-disk-update-spec-parent-id`, `--resource-spec-compute-disk-update-spec-resource-version`, `--resource-spec-compute-disk-update-spec-size-bytes`, `--resource-spec-compute-disk-update-spec-size-gibibytes`, `--resource-spec-compute-disk-update-spec-size-kibibytes`, `--resource-spec-compute-disk-update-spec-size-mebibytes`, `--resource-spec-compute-disk-update-spec-source-image-family-image-family`, `--resource-spec-compute-disk-update-spec-source-image-family-parent-id`, `--resource-spec-compute-disk-update-spec-source-image-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-type`, `--resource-spec-compute-filesystem-spec-block-size-bytes`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-id`, `--resource-spec-compute-filesystem-spec-labels`, `--resource-spec-compute-filesystem-spec-name`, `--resource-spec-compute-filesystem-spec-parent-id`, `--resource-spec-compute-filesystem-spec-resource-version`, `--resource-spec-compute-filesystem-spec-size-bytes`, `--resource-spec-compute-filesystem-spec-size-gibibytes`, `--resource-spec-compute-filesystem-spec-size-kibibytes`, `--resource-spec-compute-filesystem-spec-size-mebibytes`, `--resource-spec-compute-filesystem-spec-type`, `--resource-spec-compute-filesystem-update-spec-block-size-bytes`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-id`, `--resource-spec-compute-filesystem-update-spec-labels`, `--resource-spec-compute-filesystem-update-spec-name`, `--resource-spec-compute-filesystem-update-spec-parent-id`, `--resource-spec-compute-filesystem-update-spec-resource-version`, `--resource-spec-compute-filesystem-update-spec-size-bytes`, `--resource-spec-compute-filesystem-update-spec-size-gibibytes`, `--resource-spec-compute-filesystem-update-spec-size-kibibytes`, `--resource-spec-compute-filesystem-update-spec-size-mebibytes`, `--resource-spec-compute-filesystem-update-spec-type`, `--resource-spec-compute-instance-spec-boot-disk-attach-mode`, `--resource-spec-compute-instance-spec-boot-disk-device-id`, `--resource-spec-compute-instance-spec-boot-disk-existing-disk-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-spec-cloud-init-user-data`, `--resource-spec-compute-instance-spec-filesystems`, `--resource-spec-compute-instance-spec-gpu-cluster-id`, `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-spec-id`, `--resource-spec-compute-instance-spec-labels`, `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-spec-name`, `--resource-spec-compute-instance-spec-network-interfaces`, `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-spec-parent-id`, `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-spec-recovery-policy`, `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-spec-resource-version`, `--resource-spec-compute-instance-spec-resources-platform`, `--resource-spec-compute-instance-spec-resources-preset`, `--resource-spec-compute-instance-spec-secondary-disks`, `--resource-spec-compute-instance-spec-service-account-id`, `--resource-spec-compute-instance-spec-stopped`.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "offer_types": enum( // Type of offers to be applied to the cost estimate. "OFFER_TYPE_UNSPECIFIED", "OFFER_TYPE_CONTRACT_PRICE" // Contract price is a special price for SKU. ), "resource_spec": { // [required] // Resource specification for cost estimation. // Must contain exactly one resource type. "compute_disk_spec": { // Cannot be set together with: compute_instance_spec, compute_instance_update_spec, compute_disk_update_spec, compute_filesystem_spec, compute_filesystem_update_spec "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "block_size_bytes": int64, // [immutable] // Block size in bytes. // The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB). // The default value is 4096 bytes (4 KiB). "disk_encryption": { // [immutable] // Defines how data on the disk is encrypted. By default, no encryption is applied. "type": enum( "DISK_ENCRYPTION_UNSPECIFIED", // No encryption is applied unless explicitly specified. "DISK_ENCRYPTION_MANAGED" // Enables encryption using the platform's default root key from KMS. // Available for disks with NETWORK_SSD_NON_REPLICATED and NETWORK_SSD_IO_M3 types only. ) }, "forbid_deletion": bool, // Prevents deletion whilst set. "size_bytes": int64, // Cannot be set together with: size_kibibytes, size_mebibytes, size_gibibytes "size_gibibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_mebibytes "size_kibibytes": int64, // Cannot be set together with: size_bytes, size_mebibytes, size_gibibytes "size_mebibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_gibibytes "source_image_family": { // [immutable] // Cannot be set together with: source_image_id, source_snapshot_id "image_family": string, // [required] "parent_id": string }, "source_image_id": string, // [immutable] // Cannot be set together with: source_image_family, source_snapshot_id "source_snapshot_id": string, // [immutable] // Cannot be set together with: source_image_id, source_image_family "type": enum( // [required] [immutable] // The type of disk defines the performance and reliability characteristics of the block device. // For details, see https://docs.nebius.com/compute/storage/types#disks-types. "UNSPECIFIED", "NETWORK_SSD", "NETWORK_HDD", "NETWORK_SSD_NON_REPLICATED", "NETWORK_SSD_IO_M3" ) } }, "compute_disk_update_spec": { // Cannot be set together with: compute_instance_spec, compute_instance_update_spec, compute_disk_spec, compute_filesystem_spec, compute_filesystem_update_spec "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "block_size_bytes": int64, // [immutable] // Block size in bytes. // The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB). // The default value is 4096 bytes (4 KiB). "disk_encryption": { // [immutable] // Defines how data on the disk is encrypted. By default, no encryption is applied. "type": enum( "DISK_ENCRYPTION_UNSPECIFIED", // No encryption is applied unless explicitly specified. "DISK_ENCRYPTION_MANAGED" // Enables encryption using the platform's default root key from KMS. // Available for disks with NETWORK_SSD_NON_REPLICATED and NETWORK_SSD_IO_M3 types only. ) }, "forbid_deletion": bool, // Prevents deletion whilst set. "size_bytes": int64, // Cannot be set together with: size_kibibytes, size_mebibytes, size_gibibytes "size_gibibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_mebibytes "size_kibibytes": int64, // Cannot be set together with: size_bytes, size_mebibytes, size_gibibytes "size_mebibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_gibibytes "source_image_family": { // [immutable] // Cannot be set together with: source_image_id, source_snapshot_id "image_family": string, // [required] "parent_id": string }, "source_image_id": string, // [immutable] // Cannot be set together with: source_image_family, source_snapshot_id "source_snapshot_id": string, // [immutable] // Cannot be set together with: source_image_id, source_image_family "type": enum( // [required] [immutable] // The type of disk defines the performance and reliability characteristics of the block device. // For details, see https://docs.nebius.com/compute/storage/types#disks-types. "UNSPECIFIED", "NETWORK_SSD", "NETWORK_HDD", "NETWORK_SSD_NON_REPLICATED", "NETWORK_SSD_IO_M3" ) } }, "compute_filesystem_spec": { // Cannot be set together with: compute_instance_spec, compute_instance_update_spec, compute_disk_spec, compute_disk_update_spec, compute_filesystem_update_spec "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "block_size_bytes": int64, // [immutable] // Block size in bytes. // The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB). // The default value is 4096 bytes (4 KiB). "forbid_deletion": bool, // Prevents deletion whilst set. "size_bytes": int64, // Cannot be set together with: size_kibibytes, size_mebibytes, size_gibibytes "size_gibibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_mebibytes "size_kibibytes": int64, // Cannot be set together with: size_bytes, size_mebibytes, size_gibibytes "size_mebibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_gibibytes "type": enum( // [required] [immutable] // The Shared Filesystem type determines its limits and performance characteristics. // For details, see https://docs.nebius.com/compute/storage/types#filesystems-types. "UNSPECIFIED", "NETWORK_SSD", // The list of available types will be clarified later, it is not final version. "NETWORK_HDD", "WEKA", "VAST" ) } }, "compute_filesystem_update_spec": { // Cannot be set together with: compute_instance_spec, compute_instance_update_spec, compute_disk_spec, compute_disk_update_spec, compute_filesystem_spec "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "block_size_bytes": int64, // [immutable] // Block size in bytes. // The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB). // The default value is 4096 bytes (4 KiB). "forbid_deletion": bool, // Prevents deletion whilst set. "size_bytes": int64, // Cannot be set together with: size_kibibytes, size_mebibytes, size_gibibytes "size_gibibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_mebibytes "size_kibibytes": int64, // Cannot be set together with: size_bytes, size_mebibytes, size_gibibytes "size_mebibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_gibibytes "type": enum( // [required] [immutable] // The Shared Filesystem type determines its limits and performance characteristics. // For details, see https://docs.nebius.com/compute/storage/types#filesystems-types. "UNSPECIFIED", "NETWORK_SSD", // The list of available types will be clarified later, it is not final version. "NETWORK_HDD", "WEKA", "VAST" ) } }, "compute_instance_spec": { // Cannot be set together with: compute_instance_update_spec, compute_disk_spec, compute_disk_update_spec, compute_filesystem_spec, compute_filesystem_update_spec "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "boot_disk": { // [required] // Specified boot disk attached to the instance. "attach_mode": enum( // [required] "UNSPECIFIED", "READ_ONLY", "READ_WRITE" ), "device_id": string, // Specifies the user-defined identifier, allowing to use '/dev/disk/by-id/virtio-{device_id}' as a device path in mount command. "existing_disk": { // Cannot be set together with: managed_disk // Attach an existing disk. // // Lifecycle: // - The disk is preserved when the instance is deleted (it will be detached). // // Switching to a managed disk: // - To delete the disk together with the instance, switch to ManagedDisk in the instance spec. // - For the switch, `ManagedDisk.name` MUST match the current disk `name` // (see DiskService.Get for the disk referenced by `ExistingDisk.id`). // - When converting an ExistingDisk to a ManagedDisk, you must provide `ManagedDisk.name` and `ManagedDisk.spec` // exactly as they are currently defined in the disk resource. // Obtain the current values via `DiskService.Get` and copy them verbatim. // If `ManagedDisk.spec` differs from the current disk spec, the instance update will fail. "id": string // [required] }, "managed_disk": { // Cannot be set together with: existing_disk // Attach a managed disk. // // Lifecycle: // - The disk is deleted when the instance is deleted. // // Semantics: // - Specifying a ManagedDisk expresses an intent to have that managed disk attached. // - If this intent cannot be satisfied, the entire operation fails. // - You can check the intent status in `instance.status.disk_attachments`. // // Updates and matching: // - Managed disks can be updated only via instance spec updates. Updates via DiskService are not allowed. // - During updates, disks are matched by `name`. // // Renaming and data loss: // - Changing the disk `name` triggers disk replacement (create a new disk and delete the old one), // which causes data loss. // - To rename a managed disk safely: // 1) switch it to ExistingDisk in the instance spec, and // 2) update/rename it via DiskService. // // Conflicts: // - Instance create/update fails if there is already a disk with the same `name`. // as requested by any ManagedDisk. // // Finding the disk ID: // - The disk ID is available in `instance.status.disk_attachments` after it is created. // Use `DiskAttachmentStatus.name` to find the desired disk which matches `name`. // // Switching to an existing (non-managed) disk: // - To preserve the disk after instance deletion, switch it to ExistingDisk in the instance spec, // use the disk ID from `instance.status.disk_attachments`. // // Deletion protection: // - Switching ExistingDisk to ManagedDisk fails if `Disk.spec.deletion_protection` is enabled. // - Deleting an instance that has a ManagedDisk fails if `Disk.spec.deletion_protection` is enabled. "labels": { // [map] // Labels associated with disk resource. string: string }, "name": string, // [required] // Name of a dependent disk. // Use it to convert an ExistingDisk to a dependent disk. // Changing the name will replace the disk and cause data loss. "spec": { // [required] // Specification of a dependent disk to be created. "block_size_bytes": int64, // [immutable] // Block size in bytes. // The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB). // The default value is 4096 bytes (4 KiB). "disk_encryption": { // [immutable] // Defines how data on the disk is encrypted. By default, no encryption is applied. "type": enum( "DISK_ENCRYPTION_UNSPECIFIED", // No encryption is applied unless explicitly specified. "DISK_ENCRYPTION_MANAGED" // Enables encryption using the platform's default root key from KMS. // Available for disks with NETWORK_SSD_NON_REPLICATED and NETWORK_SSD_IO_M3 types only. ) }, "forbid_deletion": bool, // Prevents deletion whilst set. "size_bytes": int64, // Cannot be set together with: size_kibibytes, size_mebibytes, size_gibibytes "size_gibibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_mebibytes "size_kibibytes": int64, // Cannot be set together with: size_bytes, size_mebibytes, size_gibibytes "size_mebibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_gibibytes "source_image_family": { // [immutable] // Cannot be set together with: source_image_id, source_snapshot_id "image_family": string, // [required] "parent_id": string }, "source_image_id": string, // [immutable] // Cannot be set together with: source_image_family, source_snapshot_id "source_snapshot_id": string, // [immutable] // Cannot be set together with: source_image_id, source_image_family "type": enum( // [required] [immutable] // The type of disk defines the performance and reliability characteristics of the block device. // For details, see https://docs.nebius.com/compute/storage/types#disks-types. "UNSPECIFIED", "NETWORK_SSD", "NETWORK_HDD", "NETWORK_SSD_NON_REPLICATED", "NETWORK_SSD_IO_M3" ) } } }, "cloud_init_user_data": string, // [sensitive] // Data in cloud-init format for customizing instance initialization. // For details, see https://docs.nebius.com/compute/virtual-machines/manage#user-data. "filesystems": [{ // List of Shared Filesystems attached to the instance. "attach_mode": enum( // [required] "UNSPECIFIED", "READ_ONLY", "READ_WRITE" ), "existing_filesystem": { "id": string // [required] }, "mount_tag": string // [required] // Specifies the user-defined identifier, allowing to use it as a device in mount command. }], "gpu_cluster": { // [immutable] // If you want to interconnect several instances in a GPU cluster via NVIDIA InfiniBand, // set the ID of an existing GPU cluster. // You can only add the VM to the cluster when creating the VM. // For details, see https://docs.nebius.com/compute/clusters/gpu. "id": string // If you want to interconnect several instances in a GPU cluster via NVIDIA InfiniBand, // set the ID of an existing GPU cluster. // You can only add the VM to the cluster when creating the VM. // For details, see https://docs.nebius.com/compute/clusters/gpu. }, "hostname": string, // Instance's hostname. Used to generate default DNS record in format `..compute.internal.` // or `..compute.internal.` if hostname is not specified. "local_disks": { // Local disks are meaningfully different from regular (remote) disks: // they are provided by the underlying host and are tied to a particular VM run. // Local disk data is not preserved across Stop-Start initiated via Compute API. // Local disks are not provided by default. To get them, explicitly request them via this field. // Availability depends on the selected platform, preset and region. // Changing this field will result in disks change and content loss, but only after stop and start the instance. "passthrough_group": { // Requests passthrough local disks from the host. // Topology of the provided disks is preserved during stop and start // for every instance of a specific platform and preset in the region. "requested": bool // Passthrough local disks from the underlying host. // // Devices are expected to appear in the guest as NVMe devices (nvme0, nvme1, ...), // but the exact number depends on the preset. // Enabled only when this field is explicitly set. } }, "network_interfaces": [{ // [required] // List of network interfaces attached to the instance. "aliases": [{ // Assign ranges of IP addresses as aliases. "allocation_id": string // [required] // ID of allocation. }], "ip_address": { // [required] [immutable] [meaningful_empty_value] // Private IPv4 address associated with the interface. "allocation_id": string // Allocation identifier if it was created before. }, "name": string, // [required] [immutable] // Interface name // Value of this field configures the name of the network interface inside VM's OS. // Longer values will persist in the specification but will be truncated to 15 symbols before being passed to VM configuration. "public_ip_address": { // [meaningful_empty_value] // Public IPv4 address associated with the interface. "allocation_id": string, // Allocation identifier if it was created before. "static": bool // If false - Allocation will be created/deleted during NetworkInterface.Allocate/NetworkInterface.Deallocate // If true - Allocation will be created/deleted during NetworkInterface.Create/NetworkInterface.Delete // False by default. }, "security_groups": [{ // Security groups associated with the network interface. // If an empty list is provided, the default security group for the network will be used. // Effective security groups can be seen in the status. "id": string // Security group identifier. }], "subnet_id": string // [required] [immutable] // Subnet ID. }], "nvl_instance_group_id": string, // NVLink Instance Group ID associated with the VM. "preemptible": { // [immutable] // Include these parameters to create a Preemptible VM and omit them to create a Regular VM // For details, see https://docs.nebius.com/compute/virtual-machines/preemptible. "on_preemption": enum( // [required] [immutable] // Specifies what happens when the VM is preempted. The only supported value is STOP: // Compute stops the VM without deleting or restarting it. "UNSPECIFIED", "STOP" ), "priority": int32 // [deprecated: supported until 2026-05-11] [immutable] // It is deprecated and doesn't affect preemption behavior anymore. }, "recovery_policy": enum( // [immutable] // Recovery policy defines how the instance will be treated in case of a failure. // Common source of failure is a host failure, but it can be any other failure. // Instance undergoing a guest shutdown (poweroff, etc.) will be subject to recovery policy, meaning that it could // be restarted and billed accordingly. Stop instance via API or UI to stop it to avoid recovering. // - If set to RECOVER, instance will be restarted, if possible. It could be restarted on the same host or on another host. // - If set to FAIL, instance will be stopped and not restarted. "RECOVER", "FAIL" ), "reservation_policy": { "policy": enum( "AUTO", // 1) Will try to launch instance in any reservation_ids if provided. // 2) Will try to launch instance in any of the available capacity block. // 3) Will try to launch instance in PAYG if 1 & 2 are not satisfied. "FORBID", // The instance is launched only using on-demand (PAYG) capacity. // No attempt is made to find or use a Capacity Block. // It's an error to provide reservation_ids with policy = FORBID. "STRICT" // 1) Will try to launch the instance in Capacity Blocks from reservation_ids if provided. // 2) If reservation_ids are not provided will try to launch instance in suitable & available Capacity Block. // 3) Fail otherwise. ), "reservation_ids": [string] // Capacity block groups, order matters. }, "resources": { // [required] // Specification of compute resources allocated to the instance. // For details, see https://docs.nebius.com/compute/virtual-machines/types. "platform": string, // [required] [immutable] "preset": string }, "secondary_disks": [{ // List of additional data disks attached to the instance beyond the boot disk. "attach_mode": enum( // [required] "UNSPECIFIED", "READ_ONLY", "READ_WRITE" ), "device_id": string, // Specifies the user-defined identifier, allowing to use '/dev/disk/by-id/virtio-{device_id}' as a device path in mount command. "existing_disk": { // Cannot be set together with: managed_disk // Attach an existing disk. // // Lifecycle: // - The disk is preserved when the instance is deleted (it will be detached). // // Switching to a managed disk: // - To delete the disk together with the instance, switch to ManagedDisk in the instance spec. // - For the switch, `ManagedDisk.name` MUST match the current disk `name` // (see DiskService.Get for the disk referenced by `ExistingDisk.id`). // - When converting an ExistingDisk to a ManagedDisk, you must provide `ManagedDisk.name` and `ManagedDisk.spec` // exactly as they are currently defined in the disk resource. // Obtain the current values via `DiskService.Get` and copy them verbatim. // If `ManagedDisk.spec` differs from the current disk spec, the instance update will fail. "id": string // [required] }, "managed_disk": { // Cannot be set together with: existing_disk // Attach a managed disk. // // Lifecycle: // - The disk is deleted when the instance is deleted. // // Semantics: // - Specifying a ManagedDisk expresses an intent to have that managed disk attached. // - If this intent cannot be satisfied, the entire operation fails. // - You can check the intent status in `instance.status.disk_attachments`. // // Updates and matching: // - Managed disks can be updated only via instance spec updates. Updates via DiskService are not allowed. // - During updates, disks are matched by `name`. // // Renaming and data loss: // - Changing the disk `name` triggers disk replacement (create a new disk and delete the old one), // which causes data loss. // - To rename a managed disk safely: // 1) switch it to ExistingDisk in the instance spec, and // 2) update/rename it via DiskService. // // Conflicts: // - Instance create/update fails if there is already a disk with the same `name`. // as requested by any ManagedDisk. // // Finding the disk ID: // - The disk ID is available in `instance.status.disk_attachments` after it is created. // Use `DiskAttachmentStatus.name` to find the desired disk which matches `name`. // // Switching to an existing (non-managed) disk: // - To preserve the disk after instance deletion, switch it to ExistingDisk in the instance spec, // use the disk ID from `instance.status.disk_attachments`. // // Deletion protection: // - Switching ExistingDisk to ManagedDisk fails if `Disk.spec.deletion_protection` is enabled. // - Deleting an instance that has a ManagedDisk fails if `Disk.spec.deletion_protection` is enabled. "labels": { // [map] // Labels associated with disk resource. string: string }, "name": string, // [required] // Name of a dependent disk. // Use it to convert an ExistingDisk to a dependent disk. // Changing the name will replace the disk and cause data loss. "spec": { // [required] // Specification of a dependent disk to be created. "block_size_bytes": int64, // [immutable] // Block size in bytes. // The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB). // The default value is 4096 bytes (4 KiB). "disk_encryption": { // [immutable] // Defines how data on the disk is encrypted. By default, no encryption is applied. "type": enum( "DISK_ENCRYPTION_UNSPECIFIED", // No encryption is applied unless explicitly specified. "DISK_ENCRYPTION_MANAGED" // Enables encryption using the platform's default root key from KMS. // Available for disks with NETWORK_SSD_NON_REPLICATED and NETWORK_SSD_IO_M3 types only. ) }, "forbid_deletion": bool, // Prevents deletion whilst set. "size_bytes": int64, // Cannot be set together with: size_kibibytes, size_mebibytes, size_gibibytes "size_gibibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_mebibytes "size_kibibytes": int64, // Cannot be set together with: size_bytes, size_mebibytes, size_gibibytes "size_mebibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_gibibytes "source_image_family": { // [immutable] // Cannot be set together with: source_image_id, source_snapshot_id "image_family": string, // [required] "parent_id": string }, "source_image_id": string, // [immutable] // Cannot be set together with: source_image_family, source_snapshot_id "source_snapshot_id": string, // [immutable] // Cannot be set together with: source_image_id, source_image_family "type": enum( // [required] [immutable] // The type of disk defines the performance and reliability characteristics of the block device. // For details, see https://docs.nebius.com/compute/storage/types#disks-types. "UNSPECIFIED", "NETWORK_SSD", "NETWORK_HDD", "NETWORK_SSD_NON_REPLICATED", "NETWORK_SSD_IO_M3" ) } } }], "service_account_id": string, // [immutable] // Unique identifier of the service account associated with this instance. // For details, see https://docs.nebius.com/iam/service-accounts/manage. "stopped": bool // Indicates whether the instance should be stopped. } }, "compute_instance_update_spec": { // Cannot be set together with: compute_instance_spec, compute_disk_spec, compute_disk_update_spec, compute_filesystem_spec, compute_filesystem_update_spec "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "boot_disk": { // [required] // Specified boot disk attached to the instance. "attach_mode": enum( // [required] "UNSPECIFIED", "READ_ONLY", "READ_WRITE" ), "device_id": string, // Specifies the user-defined identifier, allowing to use '/dev/disk/by-id/virtio-{device_id}' as a device path in mount command. "existing_disk": { // Cannot be set together with: managed_disk // Attach an existing disk. // // Lifecycle: // - The disk is preserved when the instance is deleted (it will be detached). // // Switching to a managed disk: // - To delete the disk together with the instance, switch to ManagedDisk in the instance spec. // - For the switch, `ManagedDisk.name` MUST match the current disk `name` // (see DiskService.Get for the disk referenced by `ExistingDisk.id`). // - When converting an ExistingDisk to a ManagedDisk, you must provide `ManagedDisk.name` and `ManagedDisk.spec` // exactly as they are currently defined in the disk resource. // Obtain the current values via `DiskService.Get` and copy them verbatim. // If `ManagedDisk.spec` differs from the current disk spec, the instance update will fail. "id": string // [required] }, "managed_disk": { // Cannot be set together with: existing_disk // Attach a managed disk. // // Lifecycle: // - The disk is deleted when the instance is deleted. // // Semantics: // - Specifying a ManagedDisk expresses an intent to have that managed disk attached. // - If this intent cannot be satisfied, the entire operation fails. // - You can check the intent status in `instance.status.disk_attachments`. // // Updates and matching: // - Managed disks can be updated only via instance spec updates. Updates via DiskService are not allowed. // - During updates, disks are matched by `name`. // // Renaming and data loss: // - Changing the disk `name` triggers disk replacement (create a new disk and delete the old one), // which causes data loss. // - To rename a managed disk safely: // 1) switch it to ExistingDisk in the instance spec, and // 2) update/rename it via DiskService. // // Conflicts: // - Instance create/update fails if there is already a disk with the same `name`. // as requested by any ManagedDisk. // // Finding the disk ID: // - The disk ID is available in `instance.status.disk_attachments` after it is created. // Use `DiskAttachmentStatus.name` to find the desired disk which matches `name`. // // Switching to an existing (non-managed) disk: // - To preserve the disk after instance deletion, switch it to ExistingDisk in the instance spec, // use the disk ID from `instance.status.disk_attachments`. // // Deletion protection: // - Switching ExistingDisk to ManagedDisk fails if `Disk.spec.deletion_protection` is enabled. // - Deleting an instance that has a ManagedDisk fails if `Disk.spec.deletion_protection` is enabled. "labels": { // [map] // Labels associated with disk resource. string: string }, "name": string, // [required] // Name of a dependent disk. // Use it to convert an ExistingDisk to a dependent disk. // Changing the name will replace the disk and cause data loss. "spec": { // [required] // Specification of a dependent disk to be created. "block_size_bytes": int64, // [immutable] // Block size in bytes. // The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB). // The default value is 4096 bytes (4 KiB). "disk_encryption": { // [immutable] // Defines how data on the disk is encrypted. By default, no encryption is applied. "type": enum( "DISK_ENCRYPTION_UNSPECIFIED", // No encryption is applied unless explicitly specified. "DISK_ENCRYPTION_MANAGED" // Enables encryption using the platform's default root key from KMS. // Available for disks with NETWORK_SSD_NON_REPLICATED and NETWORK_SSD_IO_M3 types only. ) }, "forbid_deletion": bool, // Prevents deletion whilst set. "size_bytes": int64, // Cannot be set together with: size_kibibytes, size_mebibytes, size_gibibytes "size_gibibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_mebibytes "size_kibibytes": int64, // Cannot be set together with: size_bytes, size_mebibytes, size_gibibytes "size_mebibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_gibibytes "source_image_family": { // [immutable] // Cannot be set together with: source_image_id, source_snapshot_id "image_family": string, // [required] "parent_id": string }, "source_image_id": string, // [immutable] // Cannot be set together with: source_image_family, source_snapshot_id "source_snapshot_id": string, // [immutable] // Cannot be set together with: source_image_id, source_image_family "type": enum( // [required] [immutable] // The type of disk defines the performance and reliability characteristics of the block device. // For details, see https://docs.nebius.com/compute/storage/types#disks-types. "UNSPECIFIED", "NETWORK_SSD", "NETWORK_HDD", "NETWORK_SSD_NON_REPLICATED", "NETWORK_SSD_IO_M3" ) } } }, "cloud_init_user_data": string, // [sensitive] // Data in cloud-init format for customizing instance initialization. // For details, see https://docs.nebius.com/compute/virtual-machines/manage#user-data. "filesystems": [{ // List of Shared Filesystems attached to the instance. "attach_mode": enum( // [required] "UNSPECIFIED", "READ_ONLY", "READ_WRITE" ), "existing_filesystem": { "id": string // [required] }, "mount_tag": string // [required] // Specifies the user-defined identifier, allowing to use it as a device in mount command. }], "gpu_cluster": { // [immutable] // If you want to interconnect several instances in a GPU cluster via NVIDIA InfiniBand, // set the ID of an existing GPU cluster. // You can only add the VM to the cluster when creating the VM. // For details, see https://docs.nebius.com/compute/clusters/gpu. "id": string // If you want to interconnect several instances in a GPU cluster via NVIDIA InfiniBand, // set the ID of an existing GPU cluster. // You can only add the VM to the cluster when creating the VM. // For details, see https://docs.nebius.com/compute/clusters/gpu. }, "hostname": string, // Instance's hostname. Used to generate default DNS record in format `..compute.internal.` // or `..compute.internal.` if hostname is not specified. "local_disks": { // Local disks are meaningfully different from regular (remote) disks: // they are provided by the underlying host and are tied to a particular VM run. // Local disk data is not preserved across Stop-Start initiated via Compute API. // Local disks are not provided by default. To get them, explicitly request them via this field. // Availability depends on the selected platform, preset and region. // Changing this field will result in disks change and content loss, but only after stop and start the instance. "passthrough_group": { // Requests passthrough local disks from the host. // Topology of the provided disks is preserved during stop and start // for every instance of a specific platform and preset in the region. "requested": bool // Passthrough local disks from the underlying host. // // Devices are expected to appear in the guest as NVMe devices (nvme0, nvme1, ...), // but the exact number depends on the preset. // Enabled only when this field is explicitly set. } }, "network_interfaces": [{ // [required] // List of network interfaces attached to the instance. "aliases": [{ // Assign ranges of IP addresses as aliases. "allocation_id": string // [required] // ID of allocation. }], "ip_address": { // [required] [immutable] [meaningful_empty_value] // Private IPv4 address associated with the interface. "allocation_id": string // Allocation identifier if it was created before. }, "name": string, // [required] [immutable] // Interface name // Value of this field configures the name of the network interface inside VM's OS. // Longer values will persist in the specification but will be truncated to 15 symbols before being passed to VM configuration. "public_ip_address": { // [meaningful_empty_value] // Public IPv4 address associated with the interface. "allocation_id": string, // Allocation identifier if it was created before. "static": bool // If false - Allocation will be created/deleted during NetworkInterface.Allocate/NetworkInterface.Deallocate // If true - Allocation will be created/deleted during NetworkInterface.Create/NetworkInterface.Delete // False by default. }, "security_groups": [{ // Security groups associated with the network interface. // If an empty list is provided, the default security group for the network will be used. // Effective security groups can be seen in the status. "id": string // Security group identifier. }], "subnet_id": string // [required] [immutable] // Subnet ID. }], "nvl_instance_group_id": string, // NVLink Instance Group ID associated with the VM. "preemptible": { // [immutable] // Include these parameters to create a Preemptible VM and omit them to create a Regular VM // For details, see https://docs.nebius.com/compute/virtual-machines/preemptible. "on_preemption": enum( // [required] [immutable] // Specifies what happens when the VM is preempted. The only supported value is STOP: // Compute stops the VM without deleting or restarting it. "UNSPECIFIED", "STOP" ), "priority": int32 // [deprecated: supported until 2026-05-11] [immutable] // It is deprecated and doesn't affect preemption behavior anymore. }, "recovery_policy": enum( // [immutable] // Recovery policy defines how the instance will be treated in case of a failure. // Common source of failure is a host failure, but it can be any other failure. // Instance undergoing a guest shutdown (poweroff, etc.) will be subject to recovery policy, meaning that it could // be restarted and billed accordingly. Stop instance via API or UI to stop it to avoid recovering. // - If set to RECOVER, instance will be restarted, if possible. It could be restarted on the same host or on another host. // - If set to FAIL, instance will be stopped and not restarted. "RECOVER", "FAIL" ), "reservation_policy": { "policy": enum( "AUTO", // 1) Will try to launch instance in any reservation_ids if provided. // 2) Will try to launch instance in any of the available capacity block. // 3) Will try to launch instance in PAYG if 1 & 2 are not satisfied. "FORBID", // The instance is launched only using on-demand (PAYG) capacity. // No attempt is made to find or use a Capacity Block. // It's an error to provide reservation_ids with policy = FORBID. "STRICT" // 1) Will try to launch the instance in Capacity Blocks from reservation_ids if provided. // 2) If reservation_ids are not provided will try to launch instance in suitable & available Capacity Block. // 3) Fail otherwise. ), "reservation_ids": [string] // Capacity block groups, order matters. }, "resources": { // [required] // Specification of compute resources allocated to the instance. // For details, see https://docs.nebius.com/compute/virtual-machines/types. "platform": string, // [required] [immutable] "preset": string }, "secondary_disks": [{ // List of additional data disks attached to the instance beyond the boot disk. "attach_mode": enum( // [required] "UNSPECIFIED", "READ_ONLY", "READ_WRITE" ), "device_id": string, // Specifies the user-defined identifier, allowing to use '/dev/disk/by-id/virtio-{device_id}' as a device path in mount command. "existing_disk": { // Cannot be set together with: managed_disk // Attach an existing disk. // // Lifecycle: // - The disk is preserved when the instance is deleted (it will be detached). // // Switching to a managed disk: // - To delete the disk together with the instance, switch to ManagedDisk in the instance spec. // - For the switch, `ManagedDisk.name` MUST match the current disk `name` // (see DiskService.Get for the disk referenced by `ExistingDisk.id`). // - When converting an ExistingDisk to a ManagedDisk, you must provide `ManagedDisk.name` and `ManagedDisk.spec` // exactly as they are currently defined in the disk resource. // Obtain the current values via `DiskService.Get` and copy them verbatim. // If `ManagedDisk.spec` differs from the current disk spec, the instance update will fail. "id": string // [required] }, "managed_disk": { // Cannot be set together with: existing_disk // Attach a managed disk. // // Lifecycle: // - The disk is deleted when the instance is deleted. // // Semantics: // - Specifying a ManagedDisk expresses an intent to have that managed disk attached. // - If this intent cannot be satisfied, the entire operation fails. // - You can check the intent status in `instance.status.disk_attachments`. // // Updates and matching: // - Managed disks can be updated only via instance spec updates. Updates via DiskService are not allowed. // - During updates, disks are matched by `name`. // // Renaming and data loss: // - Changing the disk `name` triggers disk replacement (create a new disk and delete the old one), // which causes data loss. // - To rename a managed disk safely: // 1) switch it to ExistingDisk in the instance spec, and // 2) update/rename it via DiskService. // // Conflicts: // - Instance create/update fails if there is already a disk with the same `name`. // as requested by any ManagedDisk. // // Finding the disk ID: // - The disk ID is available in `instance.status.disk_attachments` after it is created. // Use `DiskAttachmentStatus.name` to find the desired disk which matches `name`. // // Switching to an existing (non-managed) disk: // - To preserve the disk after instance deletion, switch it to ExistingDisk in the instance spec, // use the disk ID from `instance.status.disk_attachments`. // // Deletion protection: // - Switching ExistingDisk to ManagedDisk fails if `Disk.spec.deletion_protection` is enabled. // - Deleting an instance that has a ManagedDisk fails if `Disk.spec.deletion_protection` is enabled. "labels": { // [map] // Labels associated with disk resource. string: string }, "name": string, // [required] // Name of a dependent disk. // Use it to convert an ExistingDisk to a dependent disk. // Changing the name will replace the disk and cause data loss. "spec": { // [required] // Specification of a dependent disk to be created. "block_size_bytes": int64, // [immutable] // Block size in bytes. // The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB). // The default value is 4096 bytes (4 KiB). "disk_encryption": { // [immutable] // Defines how data on the disk is encrypted. By default, no encryption is applied. "type": enum( "DISK_ENCRYPTION_UNSPECIFIED", // No encryption is applied unless explicitly specified. "DISK_ENCRYPTION_MANAGED" // Enables encryption using the platform's default root key from KMS. // Available for disks with NETWORK_SSD_NON_REPLICATED and NETWORK_SSD_IO_M3 types only. ) }, "forbid_deletion": bool, // Prevents deletion whilst set. "size_bytes": int64, // Cannot be set together with: size_kibibytes, size_mebibytes, size_gibibytes "size_gibibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_mebibytes "size_kibibytes": int64, // Cannot be set together with: size_bytes, size_mebibytes, size_gibibytes "size_mebibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_gibibytes "source_image_family": { // [immutable] // Cannot be set together with: source_image_id, source_snapshot_id "image_family": string, // [required] "parent_id": string }, "source_image_id": string, // [immutable] // Cannot be set together with: source_image_family, source_snapshot_id "source_snapshot_id": string, // [immutable] // Cannot be set together with: source_image_id, source_image_family "type": enum( // [required] [immutable] // The type of disk defines the performance and reliability characteristics of the block device. // For details, see https://docs.nebius.com/compute/storage/types#disks-types. "UNSPECIFIED", "NETWORK_SSD", "NETWORK_HDD", "NETWORK_SSD_NON_REPLICATED", "NETWORK_SSD_IO_M3" ) } } }], "service_account_id": string, // [immutable] // Unique identifier of the service account associated with this instance. // For details, see https://docs.nebius.com/iam/service-accounts/manage. "stopped": bool // Indicates whether the instance should be stopped. } } } } ``` ```json theme={null} nebius billing v1alpha1 calculator estimate ' { "offer_types": "offer_type_unspecified"|"offer_type_contract_price", "resource_spec": { "compute_disk_spec": { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "block_size_bytes": 0, "disk_encryption": { "type": "disk_encryption_unspecified"|"disk_encryption_managed" }, "forbid_deletion": false, "size_bytes": 0, "source_image_family": { "image_family": "", "parent_id": "" }, "type": "unspecified"|"network_ssd"|"network_hdd"|"network_ssd_non_replicated"|"network_ssd_io_m3" } } } } ' ``` *Auto generated on 15-Jul-2026* # nebius billing v1alpha1 calculator estimate-batch Source: https://docs.nebius.com/cli/reference/billing/v1alpha1/calculator/estimate-batch

Name

nebius billing v1alpha1 calculator estimate-batch

Estimates prices for multiple resources.
Returns aggregated hourly and monthly cost estimates for all specified resources.

Synopsis

``` nebius billing v1alpha1 calculator estimate-batch --offer-types --resource-specs [required] ```

Options

`--offer-types` (enum array)

Type of offers to be applied to the cost estimate.

`--resource-specs` (json) \[required]

List of resource specifications for cost estimation.
Each resource will be priced individually and then aggregated into total costs.

(structure)

compute\_disk\_spec -> (structure)

Mutually exclusive with: compute\_disk\_update\_spec, compute\_filesystem\_spec, compute\_filesystem\_update\_spec, compute\_instance\_spec, compute\_instance\_update\_spec.

metadata -> (structure)

id -> (string)\[identifier]

Identifier for the resource, unique for its resource type.

labels -> (map)\[map]

Labels associated with the resource.

key -> (string)

value -> (string)

name -> (string)

Human readable name for the resource.

parent\_id -> (string)\[required]

Identifier of the parent resource to which the resource belongs.

resource\_version -> (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

spec -> (structure)

block\_size\_bytes -> (int64)\[immutable]

Block size in bytes.
The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB).
The default value is 4096 bytes (4 KiB).

disk\_encryption -> (structure)\[immutable]

Defines how data on the disk is encrypted. By default, no encryption is applied.

type -> (string)

A value must be one of:

  • "disk\_encryption\_unspecified"
  • "disk\_encryption\_managed"

forbid\_deletion -> (bool)

Prevents deletion whilst set.

size\_bytes -> (int64)

Mutually exclusive with: size\_gibibytes, size\_kibibytes, size\_mebibytes.

size\_gibibytes -> (int64)

Mutually exclusive with: size\_bytes, size\_kibibytes, size\_mebibytes.

size\_kibibytes -> (int64)

Mutually exclusive with: size\_bytes, size\_gibibytes, size\_mebibytes.

size\_mebibytes -> (int64)

Mutually exclusive with: size\_bytes, size\_gibibytes, size\_kibibytes.

source\_image\_family -> (structure)\[immutable]

Mutually exclusive with: source\_image\_id, source\_snapshot\_id.

image\_family -> (string)\[required]

parent\_id -> (string)

source\_image\_id -> (string)\[immutable]

Mutually exclusive with: source\_image\_family, source\_snapshot\_id.

source\_snapshot\_id -> (string)\[immutable]

Mutually exclusive with: source\_image\_family, source\_image\_id.

type -> (string)\[required] \[immutable]

The type of disk defines the performance and reliability characteristics of the block device.
For details, see [https://docs.nebius.com/compute/storage/types#disks-types](https://docs.nebius.com/compute/storage/types#disks-types).

A value must be one of:

  • "unspecified"
  • "network\_ssd"
  • "network\_hdd"
  • "network\_ssd\_non\_replicated"
  • "network\_ssd\_io\_m3"

compute\_disk\_update\_spec -> (structure)

Mutually exclusive with: compute\_disk\_spec, compute\_filesystem\_spec, compute\_filesystem\_update\_spec, compute\_instance\_spec, compute\_instance\_update\_spec.

metadata -> (structure)

id -> (string)\[identifier]

Identifier for the resource, unique for its resource type.

labels -> (map)\[map]

Labels associated with the resource.

key -> (string)

value -> (string)

name -> (string)

Human readable name for the resource.

parent\_id -> (string)\[required]

Identifier of the parent resource to which the resource belongs.

resource\_version -> (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

spec -> (structure)

block\_size\_bytes -> (int64)\[immutable]

Block size in bytes.
The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB).
The default value is 4096 bytes (4 KiB).

disk\_encryption -> (structure)\[immutable]

Defines how data on the disk is encrypted. By default, no encryption is applied.

type -> (string)

A value must be one of:

  • "disk\_encryption\_unspecified"
  • "disk\_encryption\_managed"

forbid\_deletion -> (bool)

Prevents deletion whilst set.

size\_bytes -> (int64)

Mutually exclusive with: size\_gibibytes, size\_kibibytes, size\_mebibytes.

size\_gibibytes -> (int64)

Mutually exclusive with: size\_bytes, size\_kibibytes, size\_mebibytes.

size\_kibibytes -> (int64)

Mutually exclusive with: size\_bytes, size\_gibibytes, size\_mebibytes.

size\_mebibytes -> (int64)

Mutually exclusive with: size\_bytes, size\_gibibytes, size\_kibibytes.

source\_image\_family -> (structure)\[immutable]

Mutually exclusive with: source\_image\_id, source\_snapshot\_id.

image\_family -> (string)\[required]

parent\_id -> (string)

source\_image\_id -> (string)\[immutable]

Mutually exclusive with: source\_image\_family, source\_snapshot\_id.

source\_snapshot\_id -> (string)\[immutable]

Mutually exclusive with: source\_image\_family, source\_image\_id.

type -> (string)\[required] \[immutable]

The type of disk defines the performance and reliability characteristics of the block device.
For details, see [https://docs.nebius.com/compute/storage/types#disks-types](https://docs.nebius.com/compute/storage/types#disks-types).

A value must be one of:

  • "unspecified"
  • "network\_ssd"
  • "network\_hdd"
  • "network\_ssd\_non\_replicated"
  • "network\_ssd\_io\_m3"

compute\_filesystem\_spec -> (structure)

Mutually exclusive with: compute\_disk\_spec, compute\_disk\_update\_spec, compute\_filesystem\_update\_spec, compute\_instance\_spec, compute\_instance\_update\_spec.

metadata -> (structure)

id -> (string)\[identifier]

Identifier for the resource, unique for its resource type.

labels -> (map)\[map]

Labels associated with the resource.

key -> (string)

value -> (string)

name -> (string)

Human readable name for the resource.

parent\_id -> (string)\[required]

Identifier of the parent resource to which the resource belongs.

resource\_version -> (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

spec -> (structure)

block\_size\_bytes -> (int64)\[immutable]

Block size in bytes.
The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB).
The default value is 4096 bytes (4 KiB).

forbid\_deletion -> (bool)

Prevents deletion whilst set.

size\_bytes -> (int64)

Mutually exclusive with: size\_gibibytes, size\_kibibytes, size\_mebibytes.

size\_gibibytes -> (int64)

Mutually exclusive with: size\_bytes, size\_kibibytes, size\_mebibytes.

size\_kibibytes -> (int64)

Mutually exclusive with: size\_bytes, size\_gibibytes, size\_mebibytes.

size\_mebibytes -> (int64)

Mutually exclusive with: size\_bytes, size\_gibibytes, size\_kibibytes.

type -> (string)\[required] \[immutable]

The Shared Filesystem type determines its limits and performance characteristics.
For details, see [https://docs.nebius.com/compute/storage/types#filesystems-types](https://docs.nebius.com/compute/storage/types#filesystems-types).

A value must be one of:

  • "unspecified"
  • "network\_ssd"
  • "network\_hdd"
  • "weka"
  • "vast"

compute\_filesystem\_update\_spec -> (structure)

Mutually exclusive with: compute\_disk\_spec, compute\_disk\_update\_spec, compute\_filesystem\_spec, compute\_instance\_spec, compute\_instance\_update\_spec.

metadata -> (structure)

id -> (string)\[identifier]

Identifier for the resource, unique for its resource type.

labels -> (map)\[map]

Labels associated with the resource.

key -> (string)

value -> (string)

name -> (string)

Human readable name for the resource.

parent\_id -> (string)\[required]

Identifier of the parent resource to which the resource belongs.

resource\_version -> (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

spec -> (structure)

block\_size\_bytes -> (int64)\[immutable]

Block size in bytes.
The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB).
The default value is 4096 bytes (4 KiB).

forbid\_deletion -> (bool)

Prevents deletion whilst set.

size\_bytes -> (int64)

Mutually exclusive with: size\_gibibytes, size\_kibibytes, size\_mebibytes.

size\_gibibytes -> (int64)

Mutually exclusive with: size\_bytes, size\_kibibytes, size\_mebibytes.

size\_kibibytes -> (int64)

Mutually exclusive with: size\_bytes, size\_gibibytes, size\_mebibytes.

size\_mebibytes -> (int64)

Mutually exclusive with: size\_bytes, size\_gibibytes, size\_kibibytes.

type -> (string)\[required] \[immutable]

The Shared Filesystem type determines its limits and performance characteristics.
For details, see [https://docs.nebius.com/compute/storage/types#filesystems-types](https://docs.nebius.com/compute/storage/types#filesystems-types).

A value must be one of:

  • "unspecified"
  • "network\_ssd"
  • "network\_hdd"
  • "weka"
  • "vast"

compute\_instance\_spec -> (structure)

Mutually exclusive with: compute\_disk\_spec, compute\_disk\_update\_spec, compute\_filesystem\_spec, compute\_filesystem\_update\_spec, compute\_instance\_update\_spec.

metadata -> (structure)

id -> (string)\[identifier]

Identifier for the resource, unique for its resource type.

labels -> (map)\[map]

Labels associated with the resource.

key -> (string)

value -> (string)

name -> (string)

Human readable name for the resource.

parent\_id -> (string)\[required]

Identifier of the parent resource to which the resource belongs.

resource\_version -> (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

spec -> (structure)

boot\_disk -> (structure)\[required]

Specified boot disk attached to the instance.

attach\_mode -> (string)\[required]

A value must be one of:

  • "unspecified"
  • "read\_only"
  • "read\_write"

device\_id -> (string)

Specifies the user-defined identifier, allowing to use '/dev/disk/by-id/virtio-' as a device path in mount command.

existing\_disk -> (structure)

Attach an existing disk.

Lifecycle:
* The disk is preserved when the instance is deleted (it will be detached).

Switching to a managed disk:
* To delete the disk together with the instance, switch to ManagedDisk in the instance spec.
* For the switch, `ManagedDisk.name` MUST match the current disk `name`
(see DiskService.Get for the disk referenced by `ExistingDisk.id`).
* When converting an ExistingDisk to a ManagedDisk, you must provide `ManagedDisk.name` and `ManagedDisk.spec`
exactly as they are currently defined in the disk resource.
Obtain the current values via `DiskService.Get` and copy them verbatim.
If `ManagedDisk.spec` differs from the current disk spec, the instance update will fail.

Mutually exclusive with: managed\_disk.

id -> (string)\[required]

managed\_disk -> (structure)

Attach a managed disk.

Lifecycle:
* The disk is deleted when the instance is deleted.

Semantics:
* Specifying a ManagedDisk expresses an intent to have that managed disk attached.
* If this intent cannot be satisfied, the entire operation fails.
* You can check the intent status in `instance.status.disk_attachments`.

Updates and matching:
* Managed disks can be updated only via instance spec updates. Updates via DiskService are not allowed.
* During updates, disks are matched by `name`.

Renaming and data loss:
* Changing the disk `name` triggers disk replacement (create a new disk and delete the old one),
which causes data loss.
* To rename a managed disk safely:
1. switch it to ExistingDisk in the instance spec, and
2. update/rename it via DiskService.

Conflicts:
* Instance create/update fails if there is already a disk with the same `name`.
as requested by any ManagedDisk.

Finding the disk ID:
* The disk ID is available in `instance.status.disk_attachments` after it is created.
Use `DiskAttachmentStatus.name` to find the desired disk which matches `name`.

Switching to an existing (non-managed) disk:
* To preserve the disk after instance deletion, switch it to ExistingDisk in the instance spec,
use the disk ID from `instance.status.disk_attachments`.

Deletion protection:
* Switching ExistingDisk to ManagedDisk fails if `Disk.spec.deletion_protection` is enabled.
* Deleting an instance that has a ManagedDisk fails if `Disk.spec.deletion_protection` is enabled.

Mutually exclusive with: existing\_disk.

labels -> (map)\[map]

Labels associated with disk resource.

key -> (string)

value -> (string)

name -> (string)\[required]

Name of a dependent disk.
Use it to convert an ExistingDisk to a dependent disk.
Changing the name will replace the disk and cause data loss.

spec -> (structure)\[required]

Specification of a dependent disk to be created.

block\_size\_bytes -> (int64)\[immutable]

Block size in bytes.
The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB).
The default value is 4096 bytes (4 KiB).

disk\_encryption -> (structure)\[immutable]

Defines how data on the disk is encrypted. By default, no encryption is applied.

type -> (string)

A value must be one of:

  • "disk\_encryption\_unspecified"
  • "disk\_encryption\_managed"

forbid\_deletion -> (bool)

Prevents deletion whilst set.

size\_bytes -> (int64)

Mutually exclusive with: size\_gibibytes, size\_kibibytes, size\_mebibytes.

size\_gibibytes -> (int64)

Mutually exclusive with: size\_bytes, size\_kibibytes, size\_mebibytes.

size\_kibibytes -> (int64)

Mutually exclusive with: size\_bytes, size\_gibibytes, size\_mebibytes.

size\_mebibytes -> (int64)

Mutually exclusive with: size\_bytes, size\_gibibytes, size\_kibibytes.

source\_image\_family -> (structure)\[immutable]

Mutually exclusive with: source\_image\_id, source\_snapshot\_id.

image\_family -> (string)\[required]

parent\_id -> (string)

source\_image\_id -> (string)\[immutable]

Mutually exclusive with: source\_image\_family, source\_snapshot\_id.

source\_snapshot\_id -> (string)\[immutable]

Mutually exclusive with: source\_image\_family, source\_image\_id.

type -> (string)\[required] \[immutable]

The type of disk defines the performance and reliability characteristics of the block device.
For details, see [https://docs.nebius.com/compute/storage/types#disks-types](https://docs.nebius.com/compute/storage/types#disks-types).

A value must be one of:

  • "unspecified"
  • "network\_ssd"
  • "network\_hdd"
  • "network\_ssd\_non\_replicated"
  • "network\_ssd\_io\_m3"

cloud\_init\_user\_data -> (string)\[sensitive]

Data in cloud-init format for customizing instance initialization.
For details, see [https://docs.nebius.com/compute/virtual-machines/manage#user-data](https://docs.nebius.com/compute/virtual-machines/manage#user-data).

filesystems -> (structure)

List of Shared Filesystems attached to the instance.

attach\_mode -> (string)\[required]

A value must be one of:

  • "unspecified"
  • "read\_only"
  • "read\_write"

existing\_filesystem -> (structure)

id -> (string)\[required]

mount\_tag -> (string)\[required]

Specifies the user-defined identifier, allowing to use it as a device in mount command.

gpu\_cluster -> (structure)\[immutable]

If you want to interconnect several instances in a GPU cluster via NVIDIA InfiniBand,
set the ID of an existing GPU cluster.
You can only add the VM to the cluster when creating the VM.
For details, see [https://docs.nebius.com/compute/clusters/gpu](https://docs.nebius.com/compute/clusters/gpu).

id -> (string)

If you want to interconnect several instances in a GPU cluster via NVIDIA InfiniBand,
set the ID of an existing GPU cluster.
You can only add the VM to the cluster when creating the VM.
For details, see [https://docs.nebius.com/compute/clusters/gpu](https://docs.nebius.com/compute/clusters/gpu).

hostname -> (string)

Instance's hostname. Used to generate default DNS record in format `..compute.internal.`
or `..compute.internal.` if hostname is not specified.

local\_disks -> (structure)

Local disks are meaningfully different from regular (remote) disks:
they are provided by the underlying host and are tied to a particular VM run.
Local disk data is not preserved across Stop-Start initiated via Compute API.
Local disks are not provided by default. To get them, explicitly request them via this field.
Availability depends on the selected platform, preset and region.
Changing this field will result in disks change and content loss, but only after stop and start the instance.

passthrough\_group -> (structure)

Requests passthrough local disks from the host.
Topology of the provided disks is preserved during stop and start
for every instance of a specific platform and preset in the region.

requested -> (bool)

Passthrough local disks from the underlying host.

Devices are expected to appear in the guest as NVMe devices (nvme0, nvme1, ...),
but the exact number depends on the preset.
Enabled only when this field is explicitly set.

network\_interfaces -> (structure)\[required]

List of network interfaces attached to the instance.

aliases -> (structure)

Assign ranges of IP addresses as aliases.

allocation\_id -> (string)\[required]

ID of allocation.

ip\_address -> (structure)\[required] \[immutable] \[meaningful\_empty\_value]

Private IPv4 address associated with the interface.

allocation\_id -> (string)

Allocation identifier if it was created before.

name -> (string)\[required] \[immutable]

Interface name
Value of this field configures the name of the network interface inside VM's OS.
Longer values will persist in the specification but will be truncated to 15 symbols before being passed to VM configuration.

public\_ip\_address -> (structure)\[meaningful\_empty\_value]

Public IPv4 address associated with the interface.

allocation\_id -> (string)

Allocation identifier if it was created before.

static -> (bool)

If false - Allocation will be created/deleted during NetworkInterface.Allocate/NetworkInterface.Deallocate
If true - Allocation will be created/deleted during NetworkInterface.Create/NetworkInterface.Delete
False by default.

security\_groups -> (structure)

Security groups associated with the network interface.
If an empty list is provided, the default security group for the network will be used.
Effective security groups can be seen in the status.

id -> (string)

Security group identifier.

subnet\_id -> (string)\[required] \[immutable]

Subnet ID.

nvl\_instance\_group\_id -> (string)

NVLink Instance Group ID associated with the VM.

preemptible -> (structure)\[immutable]

Include these parameters to create a Preemptible VM and omit them to create a Regular VM
For details, see [https://docs.nebius.com/compute/virtual-machines/preemptible](https://docs.nebius.com/compute/virtual-machines/preemptible).

on\_preemption -> (string)\[required] \[immutable]

Specifies what happens when the VM is preempted. The only supported value is STOP:
Compute stops the VM without deleting or restarting it.

A value must be one of:

  • "unspecified"
  • "stop"

priority -> (int32)\[deprecated: supported until 2026-05-11] \[immutable]

It is deprecated and doesn't affect preemption behavior anymore.

recovery\_policy -> (string)\[immutable]

Recovery policy defines how the instance will be treated in case of a failure.
Common source of failure is a host failure, but it can be any other failure.
Instance undergoing a guest shutdown (poweroff, etc.) will be subject to recovery policy, meaning that it could
be restarted and billed accordingly. Stop instance via API or UI to stop it to avoid recovering.
* If set to RECOVER, instance will be restarted, if possible. It could be restarted on the same host or on another host.
* If set to FAIL, instance will be stopped and not restarted.

A value must be one of:

  • "recover"
  • "fail"

reservation\_policy -> (structure)

policy -> (string)

A value must be one of:

  • "auto"
  • "forbid"
  • "strict"

reservation\_ids -> (string)

Capacity block groups, order matters.

resources -> (structure)\[required]

Specification of compute resources allocated to the instance.
For details, see [https://docs.nebius.com/compute/virtual-machines/types](https://docs.nebius.com/compute/virtual-machines/types).

platform -> (string)\[required] \[immutable]

preset -> (string)

secondary\_disks -> (structure)

List of additional data disks attached to the instance beyond the boot disk.

attach\_mode -> (string)\[required]

A value must be one of:

  • "unspecified"
  • "read\_only"
  • "read\_write"

device\_id -> (string)

Specifies the user-defined identifier, allowing to use '/dev/disk/by-id/virtio-' as a device path in mount command.

existing\_disk -> (structure)

Attach an existing disk.

Lifecycle:
* The disk is preserved when the instance is deleted (it will be detached).

Switching to a managed disk:
* To delete the disk together with the instance, switch to ManagedDisk in the instance spec.
* For the switch, `ManagedDisk.name` MUST match the current disk `name`
(see DiskService.Get for the disk referenced by `ExistingDisk.id`).
* When converting an ExistingDisk to a ManagedDisk, you must provide `ManagedDisk.name` and `ManagedDisk.spec`
exactly as they are currently defined in the disk resource.
Obtain the current values via `DiskService.Get` and copy them verbatim.
If `ManagedDisk.spec` differs from the current disk spec, the instance update will fail.

Mutually exclusive with: managed\_disk.

id -> (string)\[required]

managed\_disk -> (structure)

Attach a managed disk.

Lifecycle:
* The disk is deleted when the instance is deleted.

Semantics:
* Specifying a ManagedDisk expresses an intent to have that managed disk attached.
* If this intent cannot be satisfied, the entire operation fails.
* You can check the intent status in `instance.status.disk_attachments`.

Updates and matching:
* Managed disks can be updated only via instance spec updates. Updates via DiskService are not allowed.
* During updates, disks are matched by `name`.

Renaming and data loss:
* Changing the disk `name` triggers disk replacement (create a new disk and delete the old one),
which causes data loss.
* To rename a managed disk safely:
1. switch it to ExistingDisk in the instance spec, and
2. update/rename it via DiskService.

Conflicts:
* Instance create/update fails if there is already a disk with the same `name`.
as requested by any ManagedDisk.

Finding the disk ID:
* The disk ID is available in `instance.status.disk_attachments` after it is created.
Use `DiskAttachmentStatus.name` to find the desired disk which matches `name`.

Switching to an existing (non-managed) disk:
* To preserve the disk after instance deletion, switch it to ExistingDisk in the instance spec,
use the disk ID from `instance.status.disk_attachments`.

Deletion protection:
* Switching ExistingDisk to ManagedDisk fails if `Disk.spec.deletion_protection` is enabled.
* Deleting an instance that has a ManagedDisk fails if `Disk.spec.deletion_protection` is enabled.

Mutually exclusive with: existing\_disk.

labels -> (map)\[map]

Labels associated with disk resource.

key -> (string)

value -> (string)

name -> (string)\[required]

Name of a dependent disk.
Use it to convert an ExistingDisk to a dependent disk.
Changing the name will replace the disk and cause data loss.

spec -> (structure)\[required]

Specification of a dependent disk to be created.

block\_size\_bytes -> (int64)\[immutable]

Block size in bytes.
The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB).
The default value is 4096 bytes (4 KiB).

disk\_encryption -> (structure)\[immutable]

Defines how data on the disk is encrypted. By default, no encryption is applied.

type -> (string)

A value must be one of:

  • "disk\_encryption\_unspecified"
  • "disk\_encryption\_managed"

forbid\_deletion -> (bool)

Prevents deletion whilst set.

size\_bytes -> (int64)

Mutually exclusive with: size\_gibibytes, size\_kibibytes, size\_mebibytes.

size\_gibibytes -> (int64)

Mutually exclusive with: size\_bytes, size\_kibibytes, size\_mebibytes.

size\_kibibytes -> (int64)

Mutually exclusive with: size\_bytes, size\_gibibytes, size\_mebibytes.

size\_mebibytes -> (int64)

Mutually exclusive with: size\_bytes, size\_gibibytes, size\_kibibytes.

source\_image\_family -> (structure)\[immutable]

Mutually exclusive with: source\_image\_id, source\_snapshot\_id.

image\_family -> (string)\[required]

parent\_id -> (string)

source\_image\_id -> (string)\[immutable]

Mutually exclusive with: source\_image\_family, source\_snapshot\_id.

source\_snapshot\_id -> (string)\[immutable]

Mutually exclusive with: source\_image\_family, source\_image\_id.

type -> (string)\[required] \[immutable]

The type of disk defines the performance and reliability characteristics of the block device.
For details, see [https://docs.nebius.com/compute/storage/types#disks-types](https://docs.nebius.com/compute/storage/types#disks-types).

A value must be one of:

  • "unspecified"
  • "network\_ssd"
  • "network\_hdd"
  • "network\_ssd\_non\_replicated"
  • "network\_ssd\_io\_m3"

service\_account\_id -> (string)\[immutable]

Unique identifier of the service account associated with this instance.
For details, see [https://docs.nebius.com/iam/service-accounts/manage](https://docs.nebius.com/iam/service-accounts/manage).

stopped -> (bool)

Indicates whether the instance should be stopped.

compute\_instance\_update\_spec -> (structure)

Mutually exclusive with: compute\_disk\_spec, compute\_disk\_update\_spec, compute\_filesystem\_spec, compute\_filesystem\_update\_spec, compute\_instance\_spec.

metadata -> (structure)

id -> (string)\[identifier]

Identifier for the resource, unique for its resource type.

labels -> (map)\[map]

Labels associated with the resource.

key -> (string)

value -> (string)

name -> (string)

Human readable name for the resource.

parent\_id -> (string)\[required]

Identifier of the parent resource to which the resource belongs.

resource\_version -> (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

spec -> (structure)

boot\_disk -> (structure)\[required]

Specified boot disk attached to the instance.

attach\_mode -> (string)\[required]

A value must be one of:

  • "unspecified"
  • "read\_only"
  • "read\_write"

device\_id -> (string)

Specifies the user-defined identifier, allowing to use '/dev/disk/by-id/virtio-' as a device path in mount command.

existing\_disk -> (structure)

Attach an existing disk.

Lifecycle:
* The disk is preserved when the instance is deleted (it will be detached).

Switching to a managed disk:
* To delete the disk together with the instance, switch to ManagedDisk in the instance spec.
* For the switch, `ManagedDisk.name` MUST match the current disk `name`
(see DiskService.Get for the disk referenced by `ExistingDisk.id`).
* When converting an ExistingDisk to a ManagedDisk, you must provide `ManagedDisk.name` and `ManagedDisk.spec`
exactly as they are currently defined in the disk resource.
Obtain the current values via `DiskService.Get` and copy them verbatim.
If `ManagedDisk.spec` differs from the current disk spec, the instance update will fail.

Mutually exclusive with: managed\_disk.

id -> (string)\[required]

managed\_disk -> (structure)

Attach a managed disk.

Lifecycle:
* The disk is deleted when the instance is deleted.

Semantics:
* Specifying a ManagedDisk expresses an intent to have that managed disk attached.
* If this intent cannot be satisfied, the entire operation fails.
* You can check the intent status in `instance.status.disk_attachments`.

Updates and matching:
* Managed disks can be updated only via instance spec updates. Updates via DiskService are not allowed.
* During updates, disks are matched by `name`.

Renaming and data loss:
* Changing the disk `name` triggers disk replacement (create a new disk and delete the old one),
which causes data loss.
* To rename a managed disk safely:
1. switch it to ExistingDisk in the instance spec, and
2. update/rename it via DiskService.

Conflicts:
* Instance create/update fails if there is already a disk with the same `name`.
as requested by any ManagedDisk.

Finding the disk ID:
* The disk ID is available in `instance.status.disk_attachments` after it is created.
Use `DiskAttachmentStatus.name` to find the desired disk which matches `name`.

Switching to an existing (non-managed) disk:
* To preserve the disk after instance deletion, switch it to ExistingDisk in the instance spec,
use the disk ID from `instance.status.disk_attachments`.

Deletion protection:
* Switching ExistingDisk to ManagedDisk fails if `Disk.spec.deletion_protection` is enabled.
* Deleting an instance that has a ManagedDisk fails if `Disk.spec.deletion_protection` is enabled.

Mutually exclusive with: existing\_disk.

labels -> (map)\[map]

Labels associated with disk resource.

key -> (string)

value -> (string)

name -> (string)\[required]

Name of a dependent disk.
Use it to convert an ExistingDisk to a dependent disk.
Changing the name will replace the disk and cause data loss.

spec -> (structure)\[required]

Specification of a dependent disk to be created.

block\_size\_bytes -> (int64)\[immutable]

Block size in bytes.
The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB).
The default value is 4096 bytes (4 KiB).

disk\_encryption -> (structure)\[immutable]

Defines how data on the disk is encrypted. By default, no encryption is applied.

type -> (string)

A value must be one of:

  • "disk\_encryption\_unspecified"
  • "disk\_encryption\_managed"

forbid\_deletion -> (bool)

Prevents deletion whilst set.

size\_bytes -> (int64)

Mutually exclusive with: size\_gibibytes, size\_kibibytes, size\_mebibytes.

size\_gibibytes -> (int64)

Mutually exclusive with: size\_bytes, size\_kibibytes, size\_mebibytes.

size\_kibibytes -> (int64)

Mutually exclusive with: size\_bytes, size\_gibibytes, size\_mebibytes.

size\_mebibytes -> (int64)

Mutually exclusive with: size\_bytes, size\_gibibytes, size\_kibibytes.

source\_image\_family -> (structure)\[immutable]

Mutually exclusive with: source\_image\_id, source\_snapshot\_id.

image\_family -> (string)\[required]

parent\_id -> (string)

source\_image\_id -> (string)\[immutable]

Mutually exclusive with: source\_image\_family, source\_snapshot\_id.

source\_snapshot\_id -> (string)\[immutable]

Mutually exclusive with: source\_image\_family, source\_image\_id.

type -> (string)\[required] \[immutable]

The type of disk defines the performance and reliability characteristics of the block device.
For details, see [https://docs.nebius.com/compute/storage/types#disks-types](https://docs.nebius.com/compute/storage/types#disks-types).

A value must be one of:

  • "unspecified"
  • "network\_ssd"
  • "network\_hdd"
  • "network\_ssd\_non\_replicated"
  • "network\_ssd\_io\_m3"

cloud\_init\_user\_data -> (string)\[sensitive]

Data in cloud-init format for customizing instance initialization.
For details, see [https://docs.nebius.com/compute/virtual-machines/manage#user-data](https://docs.nebius.com/compute/virtual-machines/manage#user-data).

filesystems -> (structure)

List of Shared Filesystems attached to the instance.

attach\_mode -> (string)\[required]

A value must be one of:

  • "unspecified"
  • "read\_only"
  • "read\_write"

existing\_filesystem -> (structure)

id -> (string)\[required]

mount\_tag -> (string)\[required]

Specifies the user-defined identifier, allowing to use it as a device in mount command.

gpu\_cluster -> (structure)\[immutable]

If you want to interconnect several instances in a GPU cluster via NVIDIA InfiniBand,
set the ID of an existing GPU cluster.
You can only add the VM to the cluster when creating the VM.
For details, see [https://docs.nebius.com/compute/clusters/gpu](https://docs.nebius.com/compute/clusters/gpu).

id -> (string)

If you want to interconnect several instances in a GPU cluster via NVIDIA InfiniBand,
set the ID of an existing GPU cluster.
You can only add the VM to the cluster when creating the VM.
For details, see [https://docs.nebius.com/compute/clusters/gpu](https://docs.nebius.com/compute/clusters/gpu).

hostname -> (string)

Instance's hostname. Used to generate default DNS record in format `..compute.internal.`
or `..compute.internal.` if hostname is not specified.

local\_disks -> (structure)

Local disks are meaningfully different from regular (remote) disks:
they are provided by the underlying host and are tied to a particular VM run.
Local disk data is not preserved across Stop-Start initiated via Compute API.
Local disks are not provided by default. To get them, explicitly request them via this field.
Availability depends on the selected platform, preset and region.
Changing this field will result in disks change and content loss, but only after stop and start the instance.

passthrough\_group -> (structure)

Requests passthrough local disks from the host.
Topology of the provided disks is preserved during stop and start
for every instance of a specific platform and preset in the region.

requested -> (bool)

Passthrough local disks from the underlying host.

Devices are expected to appear in the guest as NVMe devices (nvme0, nvme1, ...),
but the exact number depends on the preset.
Enabled only when this field is explicitly set.

network\_interfaces -> (structure)\[required]

List of network interfaces attached to the instance.

aliases -> (structure)

Assign ranges of IP addresses as aliases.

allocation\_id -> (string)\[required]

ID of allocation.

ip\_address -> (structure)\[required] \[immutable] \[meaningful\_empty\_value]

Private IPv4 address associated with the interface.

allocation\_id -> (string)

Allocation identifier if it was created before.

name -> (string)\[required] \[immutable]

Interface name
Value of this field configures the name of the network interface inside VM's OS.
Longer values will persist in the specification but will be truncated to 15 symbols before being passed to VM configuration.

public\_ip\_address -> (structure)\[meaningful\_empty\_value]

Public IPv4 address associated with the interface.

allocation\_id -> (string)

Allocation identifier if it was created before.

static -> (bool)

If false - Allocation will be created/deleted during NetworkInterface.Allocate/NetworkInterface.Deallocate
If true - Allocation will be created/deleted during NetworkInterface.Create/NetworkInterface.Delete
False by default.

security\_groups -> (structure)

Security groups associated with the network interface.
If an empty list is provided, the default security group for the network will be used.
Effective security groups can be seen in the status.

id -> (string)

Security group identifier.

subnet\_id -> (string)\[required] \[immutable]

Subnet ID.

nvl\_instance\_group\_id -> (string)

NVLink Instance Group ID associated with the VM.

preemptible -> (structure)\[immutable]

Include these parameters to create a Preemptible VM and omit them to create a Regular VM
For details, see [https://docs.nebius.com/compute/virtual-machines/preemptible](https://docs.nebius.com/compute/virtual-machines/preemptible).

on\_preemption -> (string)\[required] \[immutable]

Specifies what happens when the VM is preempted. The only supported value is STOP:
Compute stops the VM without deleting or restarting it.

A value must be one of:

  • "unspecified"
  • "stop"

priority -> (int32)\[deprecated: supported until 2026-05-11] \[immutable]

It is deprecated and doesn't affect preemption behavior anymore.

recovery\_policy -> (string)\[immutable]

Recovery policy defines how the instance will be treated in case of a failure.
Common source of failure is a host failure, but it can be any other failure.
Instance undergoing a guest shutdown (poweroff, etc.) will be subject to recovery policy, meaning that it could
be restarted and billed accordingly. Stop instance via API or UI to stop it to avoid recovering.
* If set to RECOVER, instance will be restarted, if possible. It could be restarted on the same host or on another host.
* If set to FAIL, instance will be stopped and not restarted.

A value must be one of:

  • "recover"
  • "fail"

reservation\_policy -> (structure)

policy -> (string)

A value must be one of:

  • "auto"
  • "forbid"
  • "strict"

reservation\_ids -> (string)

Capacity block groups, order matters.

resources -> (structure)\[required]

Specification of compute resources allocated to the instance.
For details, see [https://docs.nebius.com/compute/virtual-machines/types](https://docs.nebius.com/compute/virtual-machines/types).

platform -> (string)\[required] \[immutable]

preset -> (string)

secondary\_disks -> (structure)

List of additional data disks attached to the instance beyond the boot disk.

attach\_mode -> (string)\[required]

A value must be one of:

  • "unspecified"
  • "read\_only"
  • "read\_write"

device\_id -> (string)

Specifies the user-defined identifier, allowing to use '/dev/disk/by-id/virtio-' as a device path in mount command.

existing\_disk -> (structure)

Attach an existing disk.

Lifecycle:
* The disk is preserved when the instance is deleted (it will be detached).

Switching to a managed disk:
* To delete the disk together with the instance, switch to ManagedDisk in the instance spec.
* For the switch, `ManagedDisk.name` MUST match the current disk `name`
(see DiskService.Get for the disk referenced by `ExistingDisk.id`).
* When converting an ExistingDisk to a ManagedDisk, you must provide `ManagedDisk.name` and `ManagedDisk.spec`
exactly as they are currently defined in the disk resource.
Obtain the current values via `DiskService.Get` and copy them verbatim.
If `ManagedDisk.spec` differs from the current disk spec, the instance update will fail.

Mutually exclusive with: managed\_disk.

id -> (string)\[required]

managed\_disk -> (structure)

Attach a managed disk.

Lifecycle:
* The disk is deleted when the instance is deleted.

Semantics:
* Specifying a ManagedDisk expresses an intent to have that managed disk attached.
* If this intent cannot be satisfied, the entire operation fails.
* You can check the intent status in `instance.status.disk_attachments`.

Updates and matching:
* Managed disks can be updated only via instance spec updates. Updates via DiskService are not allowed.
* During updates, disks are matched by `name`.

Renaming and data loss:
* Changing the disk `name` triggers disk replacement (create a new disk and delete the old one),
which causes data loss.
* To rename a managed disk safely:
1. switch it to ExistingDisk in the instance spec, and
2. update/rename it via DiskService.

Conflicts:
* Instance create/update fails if there is already a disk with the same `name`.
as requested by any ManagedDisk.

Finding the disk ID:
* The disk ID is available in `instance.status.disk_attachments` after it is created.
Use `DiskAttachmentStatus.name` to find the desired disk which matches `name`.

Switching to an existing (non-managed) disk:
* To preserve the disk after instance deletion, switch it to ExistingDisk in the instance spec,
use the disk ID from `instance.status.disk_attachments`.

Deletion protection:
* Switching ExistingDisk to ManagedDisk fails if `Disk.spec.deletion_protection` is enabled.
* Deleting an instance that has a ManagedDisk fails if `Disk.spec.deletion_protection` is enabled.

Mutually exclusive with: existing\_disk.

labels -> (map)\[map]

Labels associated with disk resource.

key -> (string)

value -> (string)

name -> (string)\[required]

Name of a dependent disk.
Use it to convert an ExistingDisk to a dependent disk.
Changing the name will replace the disk and cause data loss.

spec -> (structure)\[required]

Specification of a dependent disk to be created.

block\_size\_bytes -> (int64)\[immutable]

Block size in bytes.
The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB).
The default value is 4096 bytes (4 KiB).

disk\_encryption -> (structure)\[immutable]

Defines how data on the disk is encrypted. By default, no encryption is applied.

type -> (string)

A value must be one of:

  • "disk\_encryption\_unspecified"
  • "disk\_encryption\_managed"

forbid\_deletion -> (bool)

Prevents deletion whilst set.

size\_bytes -> (int64)

Mutually exclusive with: size\_gibibytes, size\_kibibytes, size\_mebibytes.

size\_gibibytes -> (int64)

Mutually exclusive with: size\_bytes, size\_kibibytes, size\_mebibytes.

size\_kibibytes -> (int64)

Mutually exclusive with: size\_bytes, size\_gibibytes, size\_mebibytes.

size\_mebibytes -> (int64)

Mutually exclusive with: size\_bytes, size\_gibibytes, size\_kibibytes.

source\_image\_family -> (structure)\[immutable]

Mutually exclusive with: source\_image\_id, source\_snapshot\_id.

image\_family -> (string)\[required]

parent\_id -> (string)

source\_image\_id -> (string)\[immutable]

Mutually exclusive with: source\_image\_family, source\_snapshot\_id.

source\_snapshot\_id -> (string)\[immutable]

Mutually exclusive with: source\_image\_family, source\_image\_id.

type -> (string)\[required] \[immutable]

The type of disk defines the performance and reliability characteristics of the block device.
For details, see [https://docs.nebius.com/compute/storage/types#disks-types](https://docs.nebius.com/compute/storage/types#disks-types).

A value must be one of:

  • "unspecified"
  • "network\_ssd"
  • "network\_hdd"
  • "network\_ssd\_non\_replicated"
  • "network\_ssd\_io\_m3"

service\_account\_id -> (string)\[immutable]

Unique identifier of the service account associated with this instance.
For details, see [https://docs.nebius.com/iam/service-accounts/manage](https://docs.nebius.com/iam/service-accounts/manage).

stopped -> (bool)

Indicates whether the instance should be stopped.

JSON Schema:

```json theme={null} [{ "compute_disk_spec": { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "block_size_bytes": 0, "disk_encryption": { "type": "disk_encryption_unspecified"|"disk_encryption_managed" }, "forbid_deletion": false, "size_bytes": 0, "source_image_family": { "image_family": "", "parent_id": "" }, "type": "unspecified"|"network_ssd"|"network_hdd"|"network_ssd_non_replicated"|"network_ssd_io_m3" } } }] ```

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "offer_types": enum( // Type of offers to be applied to the cost estimate. "OFFER_TYPE_UNSPECIFIED", "OFFER_TYPE_CONTRACT_PRICE" // Contract price is a special price for SKU. ), "resource_specs": [{ // [required] // List of resource specifications for cost estimation. // Each resource will be priced individually and then aggregated into total costs. "compute_disk_spec": { // Cannot be set together with: compute_instance_spec, compute_instance_update_spec, compute_disk_update_spec, compute_filesystem_spec, compute_filesystem_update_spec "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "block_size_bytes": int64, // [immutable] // Block size in bytes. // The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB). // The default value is 4096 bytes (4 KiB). "disk_encryption": { // [immutable] // Defines how data on the disk is encrypted. By default, no encryption is applied. "type": enum( "DISK_ENCRYPTION_UNSPECIFIED", // No encryption is applied unless explicitly specified. "DISK_ENCRYPTION_MANAGED" // Enables encryption using the platform's default root key from KMS. // Available for disks with NETWORK_SSD_NON_REPLICATED and NETWORK_SSD_IO_M3 types only. ) }, "forbid_deletion": bool, // Prevents deletion whilst set. "size_bytes": int64, // Cannot be set together with: size_kibibytes, size_mebibytes, size_gibibytes "size_gibibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_mebibytes "size_kibibytes": int64, // Cannot be set together with: size_bytes, size_mebibytes, size_gibibytes "size_mebibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_gibibytes "source_image_family": { // [immutable] // Cannot be set together with: source_image_id, source_snapshot_id "image_family": string, // [required] "parent_id": string }, "source_image_id": string, // [immutable] // Cannot be set together with: source_image_family, source_snapshot_id "source_snapshot_id": string, // [immutable] // Cannot be set together with: source_image_id, source_image_family "type": enum( // [required] [immutable] // The type of disk defines the performance and reliability characteristics of the block device. // For details, see https://docs.nebius.com/compute/storage/types#disks-types. "UNSPECIFIED", "NETWORK_SSD", "NETWORK_HDD", "NETWORK_SSD_NON_REPLICATED", "NETWORK_SSD_IO_M3" ) } }, "compute_disk_update_spec": { // Cannot be set together with: compute_instance_spec, compute_instance_update_spec, compute_disk_spec, compute_filesystem_spec, compute_filesystem_update_spec "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "block_size_bytes": int64, // [immutable] // Block size in bytes. // The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB). // The default value is 4096 bytes (4 KiB). "disk_encryption": { // [immutable] // Defines how data on the disk is encrypted. By default, no encryption is applied. "type": enum( "DISK_ENCRYPTION_UNSPECIFIED", // No encryption is applied unless explicitly specified. "DISK_ENCRYPTION_MANAGED" // Enables encryption using the platform's default root key from KMS. // Available for disks with NETWORK_SSD_NON_REPLICATED and NETWORK_SSD_IO_M3 types only. ) }, "forbid_deletion": bool, // Prevents deletion whilst set. "size_bytes": int64, // Cannot be set together with: size_kibibytes, size_mebibytes, size_gibibytes "size_gibibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_mebibytes "size_kibibytes": int64, // Cannot be set together with: size_bytes, size_mebibytes, size_gibibytes "size_mebibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_gibibytes "source_image_family": { // [immutable] // Cannot be set together with: source_image_id, source_snapshot_id "image_family": string, // [required] "parent_id": string }, "source_image_id": string, // [immutable] // Cannot be set together with: source_image_family, source_snapshot_id "source_snapshot_id": string, // [immutable] // Cannot be set together with: source_image_id, source_image_family "type": enum( // [required] [immutable] // The type of disk defines the performance and reliability characteristics of the block device. // For details, see https://docs.nebius.com/compute/storage/types#disks-types. "UNSPECIFIED", "NETWORK_SSD", "NETWORK_HDD", "NETWORK_SSD_NON_REPLICATED", "NETWORK_SSD_IO_M3" ) } }, "compute_filesystem_spec": { // Cannot be set together with: compute_instance_spec, compute_instance_update_spec, compute_disk_spec, compute_disk_update_spec, compute_filesystem_update_spec "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "block_size_bytes": int64, // [immutable] // Block size in bytes. // The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB). // The default value is 4096 bytes (4 KiB). "forbid_deletion": bool, // Prevents deletion whilst set. "size_bytes": int64, // Cannot be set together with: size_kibibytes, size_mebibytes, size_gibibytes "size_gibibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_mebibytes "size_kibibytes": int64, // Cannot be set together with: size_bytes, size_mebibytes, size_gibibytes "size_mebibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_gibibytes "type": enum( // [required] [immutable] // The Shared Filesystem type determines its limits and performance characteristics. // For details, see https://docs.nebius.com/compute/storage/types#filesystems-types. "UNSPECIFIED", "NETWORK_SSD", // The list of available types will be clarified later, it is not final version. "NETWORK_HDD", "WEKA", "VAST" ) } }, "compute_filesystem_update_spec": { // Cannot be set together with: compute_instance_spec, compute_instance_update_spec, compute_disk_spec, compute_disk_update_spec, compute_filesystem_spec "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "block_size_bytes": int64, // [immutable] // Block size in bytes. // The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB). // The default value is 4096 bytes (4 KiB). "forbid_deletion": bool, // Prevents deletion whilst set. "size_bytes": int64, // Cannot be set together with: size_kibibytes, size_mebibytes, size_gibibytes "size_gibibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_mebibytes "size_kibibytes": int64, // Cannot be set together with: size_bytes, size_mebibytes, size_gibibytes "size_mebibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_gibibytes "type": enum( // [required] [immutable] // The Shared Filesystem type determines its limits and performance characteristics. // For details, see https://docs.nebius.com/compute/storage/types#filesystems-types. "UNSPECIFIED", "NETWORK_SSD", // The list of available types will be clarified later, it is not final version. "NETWORK_HDD", "WEKA", "VAST" ) } }, "compute_instance_spec": { // Cannot be set together with: compute_instance_update_spec, compute_disk_spec, compute_disk_update_spec, compute_filesystem_spec, compute_filesystem_update_spec "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "boot_disk": { // [required] // Specified boot disk attached to the instance. "attach_mode": enum( // [required] "UNSPECIFIED", "READ_ONLY", "READ_WRITE" ), "device_id": string, // Specifies the user-defined identifier, allowing to use '/dev/disk/by-id/virtio-{device_id}' as a device path in mount command. "existing_disk": { // Cannot be set together with: managed_disk // Attach an existing disk. // // Lifecycle: // - The disk is preserved when the instance is deleted (it will be detached). // // Switching to a managed disk: // - To delete the disk together with the instance, switch to ManagedDisk in the instance spec. // - For the switch, `ManagedDisk.name` MUST match the current disk `name` // (see DiskService.Get for the disk referenced by `ExistingDisk.id`). // - When converting an ExistingDisk to a ManagedDisk, you must provide `ManagedDisk.name` and `ManagedDisk.spec` // exactly as they are currently defined in the disk resource. // Obtain the current values via `DiskService.Get` and copy them verbatim. // If `ManagedDisk.spec` differs from the current disk spec, the instance update will fail. "id": string // [required] }, "managed_disk": { // Cannot be set together with: existing_disk // Attach a managed disk. // // Lifecycle: // - The disk is deleted when the instance is deleted. // // Semantics: // - Specifying a ManagedDisk expresses an intent to have that managed disk attached. // - If this intent cannot be satisfied, the entire operation fails. // - You can check the intent status in `instance.status.disk_attachments`. // // Updates and matching: // - Managed disks can be updated only via instance spec updates. Updates via DiskService are not allowed. // - During updates, disks are matched by `name`. // // Renaming and data loss: // - Changing the disk `name` triggers disk replacement (create a new disk and delete the old one), // which causes data loss. // - To rename a managed disk safely: // 1) switch it to ExistingDisk in the instance spec, and // 2) update/rename it via DiskService. // // Conflicts: // - Instance create/update fails if there is already a disk with the same `name`. // as requested by any ManagedDisk. // // Finding the disk ID: // - The disk ID is available in `instance.status.disk_attachments` after it is created. // Use `DiskAttachmentStatus.name` to find the desired disk which matches `name`. // // Switching to an existing (non-managed) disk: // - To preserve the disk after instance deletion, switch it to ExistingDisk in the instance spec, // use the disk ID from `instance.status.disk_attachments`. // // Deletion protection: // - Switching ExistingDisk to ManagedDisk fails if `Disk.spec.deletion_protection` is enabled. // - Deleting an instance that has a ManagedDisk fails if `Disk.spec.deletion_protection` is enabled. "labels": { // [map] // Labels associated with disk resource. string: string }, "name": string, // [required] // Name of a dependent disk. // Use it to convert an ExistingDisk to a dependent disk. // Changing the name will replace the disk and cause data loss. "spec": { // [required] // Specification of a dependent disk to be created. "block_size_bytes": int64, // [immutable] // Block size in bytes. // The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB). // The default value is 4096 bytes (4 KiB). "disk_encryption": { // [immutable] // Defines how data on the disk is encrypted. By default, no encryption is applied. "type": enum( "DISK_ENCRYPTION_UNSPECIFIED", // No encryption is applied unless explicitly specified. "DISK_ENCRYPTION_MANAGED" // Enables encryption using the platform's default root key from KMS. // Available for disks with NETWORK_SSD_NON_REPLICATED and NETWORK_SSD_IO_M3 types only. ) }, "forbid_deletion": bool, // Prevents deletion whilst set. "size_bytes": int64, // Cannot be set together with: size_kibibytes, size_mebibytes, size_gibibytes "size_gibibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_mebibytes "size_kibibytes": int64, // Cannot be set together with: size_bytes, size_mebibytes, size_gibibytes "size_mebibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_gibibytes "source_image_family": { // [immutable] // Cannot be set together with: source_image_id, source_snapshot_id "image_family": string, // [required] "parent_id": string }, "source_image_id": string, // [immutable] // Cannot be set together with: source_image_family, source_snapshot_id "source_snapshot_id": string, // [immutable] // Cannot be set together with: source_image_id, source_image_family "type": enum( // [required] [immutable] // The type of disk defines the performance and reliability characteristics of the block device. // For details, see https://docs.nebius.com/compute/storage/types#disks-types. "UNSPECIFIED", "NETWORK_SSD", "NETWORK_HDD", "NETWORK_SSD_NON_REPLICATED", "NETWORK_SSD_IO_M3" ) } } }, "cloud_init_user_data": string, // [sensitive] // Data in cloud-init format for customizing instance initialization. // For details, see https://docs.nebius.com/compute/virtual-machines/manage#user-data. "filesystems": [{ // List of Shared Filesystems attached to the instance. "attach_mode": enum( // [required] "UNSPECIFIED", "READ_ONLY", "READ_WRITE" ), "existing_filesystem": { "id": string // [required] }, "mount_tag": string // [required] // Specifies the user-defined identifier, allowing to use it as a device in mount command. }], "gpu_cluster": { // [immutable] // If you want to interconnect several instances in a GPU cluster via NVIDIA InfiniBand, // set the ID of an existing GPU cluster. // You can only add the VM to the cluster when creating the VM. // For details, see https://docs.nebius.com/compute/clusters/gpu. "id": string // If you want to interconnect several instances in a GPU cluster via NVIDIA InfiniBand, // set the ID of an existing GPU cluster. // You can only add the VM to the cluster when creating the VM. // For details, see https://docs.nebius.com/compute/clusters/gpu. }, "hostname": string, // Instance's hostname. Used to generate default DNS record in format `..compute.internal.` // or `..compute.internal.` if hostname is not specified. "local_disks": { // Local disks are meaningfully different from regular (remote) disks: // they are provided by the underlying host and are tied to a particular VM run. // Local disk data is not preserved across Stop-Start initiated via Compute API. // Local disks are not provided by default. To get them, explicitly request them via this field. // Availability depends on the selected platform, preset and region. // Changing this field will result in disks change and content loss, but only after stop and start the instance. "passthrough_group": { // Requests passthrough local disks from the host. // Topology of the provided disks is preserved during stop and start // for every instance of a specific platform and preset in the region. "requested": bool // Passthrough local disks from the underlying host. // // Devices are expected to appear in the guest as NVMe devices (nvme0, nvme1, ...), // but the exact number depends on the preset. // Enabled only when this field is explicitly set. } }, "network_interfaces": [{ // [required] // List of network interfaces attached to the instance. "aliases": [{ // Assign ranges of IP addresses as aliases. "allocation_id": string // [required] // ID of allocation. }], "ip_address": { // [required] [immutable] [meaningful_empty_value] // Private IPv4 address associated with the interface. "allocation_id": string // Allocation identifier if it was created before. }, "name": string, // [required] [immutable] // Interface name // Value of this field configures the name of the network interface inside VM's OS. // Longer values will persist in the specification but will be truncated to 15 symbols before being passed to VM configuration. "public_ip_address": { // [meaningful_empty_value] // Public IPv4 address associated with the interface. "allocation_id": string, // Allocation identifier if it was created before. "static": bool // If false - Allocation will be created/deleted during NetworkInterface.Allocate/NetworkInterface.Deallocate // If true - Allocation will be created/deleted during NetworkInterface.Create/NetworkInterface.Delete // False by default. }, "security_groups": [{ // Security groups associated with the network interface. // If an empty list is provided, the default security group for the network will be used. // Effective security groups can be seen in the status. "id": string // Security group identifier. }], "subnet_id": string // [required] [immutable] // Subnet ID. }], "nvl_instance_group_id": string, // NVLink Instance Group ID associated with the VM. "preemptible": { // [immutable] // Include these parameters to create a Preemptible VM and omit them to create a Regular VM // For details, see https://docs.nebius.com/compute/virtual-machines/preemptible. "on_preemption": enum( // [required] [immutable] // Specifies what happens when the VM is preempted. The only supported value is STOP: // Compute stops the VM without deleting or restarting it. "UNSPECIFIED", "STOP" ), "priority": int32 // [deprecated: supported until 2026-05-11] [immutable] // It is deprecated and doesn't affect preemption behavior anymore. }, "recovery_policy": enum( // [immutable] // Recovery policy defines how the instance will be treated in case of a failure. // Common source of failure is a host failure, but it can be any other failure. // Instance undergoing a guest shutdown (poweroff, etc.) will be subject to recovery policy, meaning that it could // be restarted and billed accordingly. Stop instance via API or UI to stop it to avoid recovering. // - If set to RECOVER, instance will be restarted, if possible. It could be restarted on the same host or on another host. // - If set to FAIL, instance will be stopped and not restarted. "RECOVER", "FAIL" ), "reservation_policy": { "policy": enum( "AUTO", // 1) Will try to launch instance in any reservation_ids if provided. // 2) Will try to launch instance in any of the available capacity block. // 3) Will try to launch instance in PAYG if 1 & 2 are not satisfied. "FORBID", // The instance is launched only using on-demand (PAYG) capacity. // No attempt is made to find or use a Capacity Block. // It's an error to provide reservation_ids with policy = FORBID. "STRICT" // 1) Will try to launch the instance in Capacity Blocks from reservation_ids if provided. // 2) If reservation_ids are not provided will try to launch instance in suitable & available Capacity Block. // 3) Fail otherwise. ), "reservation_ids": [string] // Capacity block groups, order matters. }, "resources": { // [required] // Specification of compute resources allocated to the instance. // For details, see https://docs.nebius.com/compute/virtual-machines/types. "platform": string, // [required] [immutable] "preset": string }, "secondary_disks": [{ // List of additional data disks attached to the instance beyond the boot disk. "attach_mode": enum( // [required] "UNSPECIFIED", "READ_ONLY", "READ_WRITE" ), "device_id": string, // Specifies the user-defined identifier, allowing to use '/dev/disk/by-id/virtio-{device_id}' as a device path in mount command. "existing_disk": { // Cannot be set together with: managed_disk // Attach an existing disk. // // Lifecycle: // - The disk is preserved when the instance is deleted (it will be detached). // // Switching to a managed disk: // - To delete the disk together with the instance, switch to ManagedDisk in the instance spec. // - For the switch, `ManagedDisk.name` MUST match the current disk `name` // (see DiskService.Get for the disk referenced by `ExistingDisk.id`). // - When converting an ExistingDisk to a ManagedDisk, you must provide `ManagedDisk.name` and `ManagedDisk.spec` // exactly as they are currently defined in the disk resource. // Obtain the current values via `DiskService.Get` and copy them verbatim. // If `ManagedDisk.spec` differs from the current disk spec, the instance update will fail. "id": string // [required] }, "managed_disk": { // Cannot be set together with: existing_disk // Attach a managed disk. // // Lifecycle: // - The disk is deleted when the instance is deleted. // // Semantics: // - Specifying a ManagedDisk expresses an intent to have that managed disk attached. // - If this intent cannot be satisfied, the entire operation fails. // - You can check the intent status in `instance.status.disk_attachments`. // // Updates and matching: // - Managed disks can be updated only via instance spec updates. Updates via DiskService are not allowed. // - During updates, disks are matched by `name`. // // Renaming and data loss: // - Changing the disk `name` triggers disk replacement (create a new disk and delete the old one), // which causes data loss. // - To rename a managed disk safely: // 1) switch it to ExistingDisk in the instance spec, and // 2) update/rename it via DiskService. // // Conflicts: // - Instance create/update fails if there is already a disk with the same `name`. // as requested by any ManagedDisk. // // Finding the disk ID: // - The disk ID is available in `instance.status.disk_attachments` after it is created. // Use `DiskAttachmentStatus.name` to find the desired disk which matches `name`. // // Switching to an existing (non-managed) disk: // - To preserve the disk after instance deletion, switch it to ExistingDisk in the instance spec, // use the disk ID from `instance.status.disk_attachments`. // // Deletion protection: // - Switching ExistingDisk to ManagedDisk fails if `Disk.spec.deletion_protection` is enabled. // - Deleting an instance that has a ManagedDisk fails if `Disk.spec.deletion_protection` is enabled. "labels": { // [map] // Labels associated with disk resource. string: string }, "name": string, // [required] // Name of a dependent disk. // Use it to convert an ExistingDisk to a dependent disk. // Changing the name will replace the disk and cause data loss. "spec": { // [required] // Specification of a dependent disk to be created. "block_size_bytes": int64, // [immutable] // Block size in bytes. // The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB). // The default value is 4096 bytes (4 KiB). "disk_encryption": { // [immutable] // Defines how data on the disk is encrypted. By default, no encryption is applied. "type": enum( "DISK_ENCRYPTION_UNSPECIFIED", // No encryption is applied unless explicitly specified. "DISK_ENCRYPTION_MANAGED" // Enables encryption using the platform's default root key from KMS. // Available for disks with NETWORK_SSD_NON_REPLICATED and NETWORK_SSD_IO_M3 types only. ) }, "forbid_deletion": bool, // Prevents deletion whilst set. "size_bytes": int64, // Cannot be set together with: size_kibibytes, size_mebibytes, size_gibibytes "size_gibibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_mebibytes "size_kibibytes": int64, // Cannot be set together with: size_bytes, size_mebibytes, size_gibibytes "size_mebibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_gibibytes "source_image_family": { // [immutable] // Cannot be set together with: source_image_id, source_snapshot_id "image_family": string, // [required] "parent_id": string }, "source_image_id": string, // [immutable] // Cannot be set together with: source_image_family, source_snapshot_id "source_snapshot_id": string, // [immutable] // Cannot be set together with: source_image_id, source_image_family "type": enum( // [required] [immutable] // The type of disk defines the performance and reliability characteristics of the block device. // For details, see https://docs.nebius.com/compute/storage/types#disks-types. "UNSPECIFIED", "NETWORK_SSD", "NETWORK_HDD", "NETWORK_SSD_NON_REPLICATED", "NETWORK_SSD_IO_M3" ) } } }], "service_account_id": string, // [immutable] // Unique identifier of the service account associated with this instance. // For details, see https://docs.nebius.com/iam/service-accounts/manage. "stopped": bool // Indicates whether the instance should be stopped. } }, "compute_instance_update_spec": { // Cannot be set together with: compute_instance_spec, compute_disk_spec, compute_disk_update_spec, compute_filesystem_spec, compute_filesystem_update_spec "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "boot_disk": { // [required] // Specified boot disk attached to the instance. "attach_mode": enum( // [required] "UNSPECIFIED", "READ_ONLY", "READ_WRITE" ), "device_id": string, // Specifies the user-defined identifier, allowing to use '/dev/disk/by-id/virtio-{device_id}' as a device path in mount command. "existing_disk": { // Cannot be set together with: managed_disk // Attach an existing disk. // // Lifecycle: // - The disk is preserved when the instance is deleted (it will be detached). // // Switching to a managed disk: // - To delete the disk together with the instance, switch to ManagedDisk in the instance spec. // - For the switch, `ManagedDisk.name` MUST match the current disk `name` // (see DiskService.Get for the disk referenced by `ExistingDisk.id`). // - When converting an ExistingDisk to a ManagedDisk, you must provide `ManagedDisk.name` and `ManagedDisk.spec` // exactly as they are currently defined in the disk resource. // Obtain the current values via `DiskService.Get` and copy them verbatim. // If `ManagedDisk.spec` differs from the current disk spec, the instance update will fail. "id": string // [required] }, "managed_disk": { // Cannot be set together with: existing_disk // Attach a managed disk. // // Lifecycle: // - The disk is deleted when the instance is deleted. // // Semantics: // - Specifying a ManagedDisk expresses an intent to have that managed disk attached. // - If this intent cannot be satisfied, the entire operation fails. // - You can check the intent status in `instance.status.disk_attachments`. // // Updates and matching: // - Managed disks can be updated only via instance spec updates. Updates via DiskService are not allowed. // - During updates, disks are matched by `name`. // // Renaming and data loss: // - Changing the disk `name` triggers disk replacement (create a new disk and delete the old one), // which causes data loss. // - To rename a managed disk safely: // 1) switch it to ExistingDisk in the instance spec, and // 2) update/rename it via DiskService. // // Conflicts: // - Instance create/update fails if there is already a disk with the same `name`. // as requested by any ManagedDisk. // // Finding the disk ID: // - The disk ID is available in `instance.status.disk_attachments` after it is created. // Use `DiskAttachmentStatus.name` to find the desired disk which matches `name`. // // Switching to an existing (non-managed) disk: // - To preserve the disk after instance deletion, switch it to ExistingDisk in the instance spec, // use the disk ID from `instance.status.disk_attachments`. // // Deletion protection: // - Switching ExistingDisk to ManagedDisk fails if `Disk.spec.deletion_protection` is enabled. // - Deleting an instance that has a ManagedDisk fails if `Disk.spec.deletion_protection` is enabled. "labels": { // [map] // Labels associated with disk resource. string: string }, "name": string, // [required] // Name of a dependent disk. // Use it to convert an ExistingDisk to a dependent disk. // Changing the name will replace the disk and cause data loss. "spec": { // [required] // Specification of a dependent disk to be created. "block_size_bytes": int64, // [immutable] // Block size in bytes. // The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB). // The default value is 4096 bytes (4 KiB). "disk_encryption": { // [immutable] // Defines how data on the disk is encrypted. By default, no encryption is applied. "type": enum( "DISK_ENCRYPTION_UNSPECIFIED", // No encryption is applied unless explicitly specified. "DISK_ENCRYPTION_MANAGED" // Enables encryption using the platform's default root key from KMS. // Available for disks with NETWORK_SSD_NON_REPLICATED and NETWORK_SSD_IO_M3 types only. ) }, "forbid_deletion": bool, // Prevents deletion whilst set. "size_bytes": int64, // Cannot be set together with: size_kibibytes, size_mebibytes, size_gibibytes "size_gibibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_mebibytes "size_kibibytes": int64, // Cannot be set together with: size_bytes, size_mebibytes, size_gibibytes "size_mebibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_gibibytes "source_image_family": { // [immutable] // Cannot be set together with: source_image_id, source_snapshot_id "image_family": string, // [required] "parent_id": string }, "source_image_id": string, // [immutable] // Cannot be set together with: source_image_family, source_snapshot_id "source_snapshot_id": string, // [immutable] // Cannot be set together with: source_image_id, source_image_family "type": enum( // [required] [immutable] // The type of disk defines the performance and reliability characteristics of the block device. // For details, see https://docs.nebius.com/compute/storage/types#disks-types. "UNSPECIFIED", "NETWORK_SSD", "NETWORK_HDD", "NETWORK_SSD_NON_REPLICATED", "NETWORK_SSD_IO_M3" ) } } }, "cloud_init_user_data": string, // [sensitive] // Data in cloud-init format for customizing instance initialization. // For details, see https://docs.nebius.com/compute/virtual-machines/manage#user-data. "filesystems": [{ // List of Shared Filesystems attached to the instance. "attach_mode": enum( // [required] "UNSPECIFIED", "READ_ONLY", "READ_WRITE" ), "existing_filesystem": { "id": string // [required] }, "mount_tag": string // [required] // Specifies the user-defined identifier, allowing to use it as a device in mount command. }], "gpu_cluster": { // [immutable] // If you want to interconnect several instances in a GPU cluster via NVIDIA InfiniBand, // set the ID of an existing GPU cluster. // You can only add the VM to the cluster when creating the VM. // For details, see https://docs.nebius.com/compute/clusters/gpu. "id": string // If you want to interconnect several instances in a GPU cluster via NVIDIA InfiniBand, // set the ID of an existing GPU cluster. // You can only add the VM to the cluster when creating the VM. // For details, see https://docs.nebius.com/compute/clusters/gpu. }, "hostname": string, // Instance's hostname. Used to generate default DNS record in format `..compute.internal.` // or `..compute.internal.` if hostname is not specified. "local_disks": { // Local disks are meaningfully different from regular (remote) disks: // they are provided by the underlying host and are tied to a particular VM run. // Local disk data is not preserved across Stop-Start initiated via Compute API. // Local disks are not provided by default. To get them, explicitly request them via this field. // Availability depends on the selected platform, preset and region. // Changing this field will result in disks change and content loss, but only after stop and start the instance. "passthrough_group": { // Requests passthrough local disks from the host. // Topology of the provided disks is preserved during stop and start // for every instance of a specific platform and preset in the region. "requested": bool // Passthrough local disks from the underlying host. // // Devices are expected to appear in the guest as NVMe devices (nvme0, nvme1, ...), // but the exact number depends on the preset. // Enabled only when this field is explicitly set. } }, "network_interfaces": [{ // [required] // List of network interfaces attached to the instance. "aliases": [{ // Assign ranges of IP addresses as aliases. "allocation_id": string // [required] // ID of allocation. }], "ip_address": { // [required] [immutable] [meaningful_empty_value] // Private IPv4 address associated with the interface. "allocation_id": string // Allocation identifier if it was created before. }, "name": string, // [required] [immutable] // Interface name // Value of this field configures the name of the network interface inside VM's OS. // Longer values will persist in the specification but will be truncated to 15 symbols before being passed to VM configuration. "public_ip_address": { // [meaningful_empty_value] // Public IPv4 address associated with the interface. "allocation_id": string, // Allocation identifier if it was created before. "static": bool // If false - Allocation will be created/deleted during NetworkInterface.Allocate/NetworkInterface.Deallocate // If true - Allocation will be created/deleted during NetworkInterface.Create/NetworkInterface.Delete // False by default. }, "security_groups": [{ // Security groups associated with the network interface. // If an empty list is provided, the default security group for the network will be used. // Effective security groups can be seen in the status. "id": string // Security group identifier. }], "subnet_id": string // [required] [immutable] // Subnet ID. }], "nvl_instance_group_id": string, // NVLink Instance Group ID associated with the VM. "preemptible": { // [immutable] // Include these parameters to create a Preemptible VM and omit them to create a Regular VM // For details, see https://docs.nebius.com/compute/virtual-machines/preemptible. "on_preemption": enum( // [required] [immutable] // Specifies what happens when the VM is preempted. The only supported value is STOP: // Compute stops the VM without deleting or restarting it. "UNSPECIFIED", "STOP" ), "priority": int32 // [deprecated: supported until 2026-05-11] [immutable] // It is deprecated and doesn't affect preemption behavior anymore. }, "recovery_policy": enum( // [immutable] // Recovery policy defines how the instance will be treated in case of a failure. // Common source of failure is a host failure, but it can be any other failure. // Instance undergoing a guest shutdown (poweroff, etc.) will be subject to recovery policy, meaning that it could // be restarted and billed accordingly. Stop instance via API or UI to stop it to avoid recovering. // - If set to RECOVER, instance will be restarted, if possible. It could be restarted on the same host or on another host. // - If set to FAIL, instance will be stopped and not restarted. "RECOVER", "FAIL" ), "reservation_policy": { "policy": enum( "AUTO", // 1) Will try to launch instance in any reservation_ids if provided. // 2) Will try to launch instance in any of the available capacity block. // 3) Will try to launch instance in PAYG if 1 & 2 are not satisfied. "FORBID", // The instance is launched only using on-demand (PAYG) capacity. // No attempt is made to find or use a Capacity Block. // It's an error to provide reservation_ids with policy = FORBID. "STRICT" // 1) Will try to launch the instance in Capacity Blocks from reservation_ids if provided. // 2) If reservation_ids are not provided will try to launch instance in suitable & available Capacity Block. // 3) Fail otherwise. ), "reservation_ids": [string] // Capacity block groups, order matters. }, "resources": { // [required] // Specification of compute resources allocated to the instance. // For details, see https://docs.nebius.com/compute/virtual-machines/types. "platform": string, // [required] [immutable] "preset": string }, "secondary_disks": [{ // List of additional data disks attached to the instance beyond the boot disk. "attach_mode": enum( // [required] "UNSPECIFIED", "READ_ONLY", "READ_WRITE" ), "device_id": string, // Specifies the user-defined identifier, allowing to use '/dev/disk/by-id/virtio-{device_id}' as a device path in mount command. "existing_disk": { // Cannot be set together with: managed_disk // Attach an existing disk. // // Lifecycle: // - The disk is preserved when the instance is deleted (it will be detached). // // Switching to a managed disk: // - To delete the disk together with the instance, switch to ManagedDisk in the instance spec. // - For the switch, `ManagedDisk.name` MUST match the current disk `name` // (see DiskService.Get for the disk referenced by `ExistingDisk.id`). // - When converting an ExistingDisk to a ManagedDisk, you must provide `ManagedDisk.name` and `ManagedDisk.spec` // exactly as they are currently defined in the disk resource. // Obtain the current values via `DiskService.Get` and copy them verbatim. // If `ManagedDisk.spec` differs from the current disk spec, the instance update will fail. "id": string // [required] }, "managed_disk": { // Cannot be set together with: existing_disk // Attach a managed disk. // // Lifecycle: // - The disk is deleted when the instance is deleted. // // Semantics: // - Specifying a ManagedDisk expresses an intent to have that managed disk attached. // - If this intent cannot be satisfied, the entire operation fails. // - You can check the intent status in `instance.status.disk_attachments`. // // Updates and matching: // - Managed disks can be updated only via instance spec updates. Updates via DiskService are not allowed. // - During updates, disks are matched by `name`. // // Renaming and data loss: // - Changing the disk `name` triggers disk replacement (create a new disk and delete the old one), // which causes data loss. // - To rename a managed disk safely: // 1) switch it to ExistingDisk in the instance spec, and // 2) update/rename it via DiskService. // // Conflicts: // - Instance create/update fails if there is already a disk with the same `name`. // as requested by any ManagedDisk. // // Finding the disk ID: // - The disk ID is available in `instance.status.disk_attachments` after it is created. // Use `DiskAttachmentStatus.name` to find the desired disk which matches `name`. // // Switching to an existing (non-managed) disk: // - To preserve the disk after instance deletion, switch it to ExistingDisk in the instance spec, // use the disk ID from `instance.status.disk_attachments`. // // Deletion protection: // - Switching ExistingDisk to ManagedDisk fails if `Disk.spec.deletion_protection` is enabled. // - Deleting an instance that has a ManagedDisk fails if `Disk.spec.deletion_protection` is enabled. "labels": { // [map] // Labels associated with disk resource. string: string }, "name": string, // [required] // Name of a dependent disk. // Use it to convert an ExistingDisk to a dependent disk. // Changing the name will replace the disk and cause data loss. "spec": { // [required] // Specification of a dependent disk to be created. "block_size_bytes": int64, // [immutable] // Block size in bytes. // The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB). // The default value is 4096 bytes (4 KiB). "disk_encryption": { // [immutable] // Defines how data on the disk is encrypted. By default, no encryption is applied. "type": enum( "DISK_ENCRYPTION_UNSPECIFIED", // No encryption is applied unless explicitly specified. "DISK_ENCRYPTION_MANAGED" // Enables encryption using the platform's default root key from KMS. // Available for disks with NETWORK_SSD_NON_REPLICATED and NETWORK_SSD_IO_M3 types only. ) }, "forbid_deletion": bool, // Prevents deletion whilst set. "size_bytes": int64, // Cannot be set together with: size_kibibytes, size_mebibytes, size_gibibytes "size_gibibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_mebibytes "size_kibibytes": int64, // Cannot be set together with: size_bytes, size_mebibytes, size_gibibytes "size_mebibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_gibibytes "source_image_family": { // [immutable] // Cannot be set together with: source_image_id, source_snapshot_id "image_family": string, // [required] "parent_id": string }, "source_image_id": string, // [immutable] // Cannot be set together with: source_image_family, source_snapshot_id "source_snapshot_id": string, // [immutable] // Cannot be set together with: source_image_id, source_image_family "type": enum( // [required] [immutable] // The type of disk defines the performance and reliability characteristics of the block device. // For details, see https://docs.nebius.com/compute/storage/types#disks-types. "UNSPECIFIED", "NETWORK_SSD", "NETWORK_HDD", "NETWORK_SSD_NON_REPLICATED", "NETWORK_SSD_IO_M3" ) } } }], "service_account_id": string, // [immutable] // Unique identifier of the service account associated with this instance. // For details, see https://docs.nebius.com/iam/service-accounts/manage. "stopped": bool // Indicates whether the instance should be stopped. } } }] } ``` ```json theme={null} nebius billing v1alpha1 calculator estimate-batch ' { "offer_types": "offer_type_unspecified"|"offer_type_contract_price", "resource_specs": [{ "compute_disk_spec": { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "block_size_bytes": 0, "disk_encryption": { "type": "disk_encryption_unspecified"|"disk_encryption_managed" }, "forbid_deletion": false, "size_bytes": 0, "source_image_family": { "image_family": "", "parent_id": "" }, "type": "unspecified"|"network_ssd"|"network_hdd"|"network_ssd_non_replicated"|"network_ssd_io_m3" } } }] } ' ``` *Auto generated on 15-Jul-2026* # nebius billing v1alpha1 calculator Source: https://docs.nebius.com/cli/reference/billing/v1alpha1/calculator/index

Name

nebius billing v1alpha1 calculator

Calculator service for estimating resource costs.

Commands

nebius billing v1alpha1 calculator estimate

Estimates prices for a single resource.
Returns both hourly and monthly cost estimates for the specified resource configuration.

nebius billing v1alpha1 calculator estimate-batch

Estimates prices for multiple resources.
Returns aggregated hourly and monthly cost estimates for all specified resources.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius billing v1alpha1 Source: https://docs.nebius.com/cli/reference/billing/v1alpha1/index

Name

nebius billing v1alpha1

Commands

nebius billing v1alpha1 calculator

Calculator service for estimating resource costs.

nebius billing v1alpha1 one-time-export

Service for managing one-time billing report exports.
Enables creation of downloadable archives of billing data for a specified period.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius billing v1alpha1 one-time-export create Source: https://docs.nebius.com/cli/reference/billing/v1alpha1/one-time-export/create

Name

nebius billing v1alpha1 one-time-export create

Creates a new one-time export of billing reports for the requested period.

Synopsis

``` nebius billing v1alpha1 one-time-export create --end-period [required] --format [required] --labels --name --parent-id [required] --resource-version --start-period [required] --async -i, --interactive ```

Options

`--end-period` (string) \[required]

The last billing period to include in the export (inclusive).
Example: "2025-06".

`--format` (string) \[required]

Format of the exported billing reports.

A value must be one of:

  • export\_format\_focus\_1\_2\_csv
  • export\_format\_consumption\_breakdown\_pdf

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--start-period` (string) \[required]

The first billing period to include in the export (inclusive).
Example: "2025-04".

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // [required] // Resource metadata including parent contract ID. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // [required] // Export configuration specification. "end_period": string, // [required] // The last billing period to include in the export (inclusive). // Example: "2025-06". "format": enum( // [required] // Format of the exported billing reports. "EXPORT_FORMAT_UNSPECIFIED", "EXPORT_FORMAT_FOCUS_1_2_CSV", // FOCUS (FinOps Open Cost and Usage Specification) v1.2 CSV format. // See: https://focus.finops.org/focus-specification/v1-2/. "EXPORT_FORMAT_CONSUMPTION_BREAKDOWN_PDF" // Consumption Breakdown PDF format. // Single-period human-readable cost breakdown report exported as a PDF file. ), "start_period": string // [required] // The first billing period to include in the export (inclusive). // Example: "2025-04". } } ``` ```json theme={null} nebius billing v1alpha1 one-time-export create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "end_period": "", "format": "export_format_unspecified"|"export_format_focus_1_2_csv"|"export_format_consumption_breakdown_pdf", "start_period": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius billing v1alpha1 one-time-export get Source: https://docs.nebius.com/cli/reference/billing/v1alpha1/one-time-export/get

Name

nebius billing v1alpha1 one-time-export get

Retrieves details of a specific one-time export.
When the export is complete, the response includes a fresh presigned download URL.

Synopsis

``` nebius billing v1alpha1 one-time-export get [id] --id [required] ```

Positional Arguments

id

Unique identifier of the one-time export.

Options

`--id` (string) \[required]

Unique identifier of the one-time export.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] [identifier] // Unique identifier of the one-time export. } ``` ```json theme={null} nebius billing v1alpha1 one-time-export get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius billing v1alpha1 one-time-export Source: https://docs.nebius.com/cli/reference/billing/v1alpha1/one-time-export/index

Name

nebius billing v1alpha1 one-time-export

Service for managing one-time billing report exports.
Enables creation of downloadable archives of billing data for a specified period.

Commands

nebius billing v1alpha1 one-time-export create

Creates a new one-time export of billing reports for the requested period.

nebius billing v1alpha1 one-time-export get

Retrieves details of a specific one-time export.
When the export is complete, the response includes a fresh presigned download URL.

nebius billing v1alpha1 one-time-export list

Lists one-time exports for a given contract.

nebius billing v1alpha1 one-time-export operation

Manage operations for OneTimeExport service.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius billing v1alpha1 one-time-export list Source: https://docs.nebius.com/cli/reference/billing/v1alpha1/one-time-export/list

Name

nebius billing v1alpha1 one-time-export list

Lists one-time exports for a given contract.

Synopsis

``` nebius billing v1alpha1 one-time-export list --page-size --page-token --parent-id [required] --all -i, --interactive ```

Options

`--page-size` (int64)

Maximum number of items to return per page.

`--page-token` (string)

Token for retrieving the next page of results.

`--parent-id` (string) \[required]

Parent contract ID for which to list one-time exports.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, // Maximum number of items to return per page. "page_token": string, // Token for retrieving the next page of results. "parent_id": string // [required] // Parent contract ID for which to list one-time exports. } ``` ```json theme={null} nebius billing v1alpha1 one-time-export list ' { "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius billing v1alpha1 one-time-export operation get Source: https://docs.nebius.com/cli/reference/billing/v1alpha1/one-time-export/operation/get

Name

nebius billing v1alpha1 one-time-export operation get

Get operation by ID.

Synopsis

``` nebius billing v1alpha1 one-time-export operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius billing v1alpha1 one-time-export operation Source: https://docs.nebius.com/cli/reference/billing/v1alpha1/one-time-export/operation/index

Name

nebius billing v1alpha1 one-time-export operation

Manage operations for OneTimeExport service.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius billing v1alpha1 one-time-export operation list Source: https://docs.nebius.com/cli/reference/billing/v1alpha1/one-time-export/operation/list

Name

nebius billing v1alpha1 one-time-export operation list

List operations by resource ID.

Synopsis

``` nebius billing v1alpha1 one-time-export operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius billing v1alpha1 one-time-export operation wait Source: https://docs.nebius.com/cli/reference/billing/v1alpha1/one-time-export/operation/wait

Name

nebius billing v1alpha1 one-time-export operation wait

Wait for operation to complete.

Synopsis

``` nebius billing v1alpha1 one-time-export operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius capacity capacity-block-group get Source: https://docs.nebius.com/cli/reference/capacity/capacity-block-group/get

Name

nebius capacity capacity-block-group get

Get Capacity Block Group by its ID.

Synopsis

``` nebius capacity capacity-block-group get [id] --id [required] ```

Positional Arguments

id

ID of the Capacity Block Group.

Options

`--id` (string) \[required]

ID of the Capacity Block Group.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] [identifier] // ID of the Capacity Block Group. } ``` ```json theme={null} nebius capacity capacity-block-group get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius capacity capacity-block-group get-by-resource-affinity Source: https://docs.nebius.com/cli/reference/capacity/capacity-block-group/get-by-resource-affinity

Name

nebius capacity capacity-block-group get-by-resource-affinity

Get Capacity Block Group by its specification.

Synopsis

``` nebius capacity capacity-block-group get-by-resource-affinity --parent-id [required] --region [required] --resource-affinity-compute-v1-fabric --resource-affinity-compute-v1-platform ```

Options

`--parent-id` (string) \[required]

Tenant ID of the Capacity Block Group.

`--region` (string) \[required]

Name of the region where the Capacity Block Group is allocated.
Example: "eu-north1".

`--resource-affinity-compute-v1-fabric` (string)

The fabric where the Capacity Block Group is allocated.

`--resource-affinity-compute-v1-platform` (string)

The platform for which the Capacity Block Group is allocated.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "parent_id": string, // [required] // Tenant ID of the Capacity Block Group. "region": string, // [required] // Name of the region where the Capacity Block Group is allocated. // Example: "eu-north1". "resource_affinity": { // [required] // Specifications of the Capacity Block Group. "compute_v1": { // First version of the compute Resource Affinity. "fabric": string, // The fabric where the Capacity Block Group is allocated. "platform": string // [required] // The platform for which the Capacity Block Group is allocated. } } } ``` ```json theme={null} nebius capacity capacity-block-group get-by-resource-affinity ' { "parent_id": "", "region": "", "resource_affinity": { "compute_v1": { "fabric": "", "platform": "" } } } ' ``` *Auto generated on 15-Jul-2026* # nebius capacity capacity-block-group Source: https://docs.nebius.com/cli/reference/capacity/capacity-block-group/index

Name

nebius capacity capacity-block-group

Capacity Block Group service provides read access to Capacity Block Groups resources.

Commands

nebius capacity capacity-block-group get

Get Capacity Block Group by its ID.

nebius capacity capacity-block-group get-by-resource-affinity

Get Capacity Block Group by its specification.

nebius capacity capacity-block-group list

List all Capacity Block Groups for the specified Tenant.

nebius capacity capacity-block-group list-resources

List virtual machines instances' IDs that occupy a Capacity Block Group by its ID.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius capacity capacity-block-group list Source: https://docs.nebius.com/cli/reference/capacity/capacity-block-group/list

Name

nebius capacity capacity-block-group list

List all Capacity Block Groups for the specified Tenant.

Synopsis

``` nebius capacity capacity-block-group list --page-size --page-token --parent-id [required] --all -i, --interactive ```

Options

`--page-size` (int64)

Page size. Must be between \[1...200].
Optional; if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Pass an empty string to start listing from the first page.

`--parent-id` (string) \[required]

Tenant ID of the Capacity Block Group.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, // Page size. Must be between [1...200]. // Optional; if not specified, a reasonable default will be chosen by the service. "page_token": string, // Listing continuation token. Pass an empty string to start listing from the first page. "parent_id": string // [required] // Tenant ID of the Capacity Block Group. } ``` ```json theme={null} nebius capacity capacity-block-group list ' { "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius capacity capacity-block-group list-resources Source: https://docs.nebius.com/cli/reference/capacity/capacity-block-group/list-resources

Name

nebius capacity capacity-block-group list-resources

List virtual machines instances' IDs that occupy a Capacity Block Group by its ID.

Synopsis

``` nebius capacity capacity-block-group list-resources [id] --id [required] ```

Positional Arguments

id

ID of a Capacity Block Group.

Options

`--id` (string) \[required]

ID of a Capacity Block Group.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] [identifier] // ID of a Capacity Block Group. } ``` ```json theme={null} nebius capacity capacity-block-group list-resources ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius capacity capacity-interval get Source: https://docs.nebius.com/cli/reference/capacity/capacity-interval/get

Name

nebius capacity capacity-interval get

Get Capacity Interval by its ID.

Synopsis

``` nebius capacity capacity-interval get [id] --id [required] ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] [identifier] } ``` ```json theme={null} nebius capacity capacity-interval get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius capacity capacity-interval Source: https://docs.nebius.com/cli/reference/capacity/capacity-interval/index

Name

nebius capacity capacity-interval

Capacity Interval service provides read access to Capacity Intervals resources.

Commands

nebius capacity capacity-interval get

Get Capacity Interval by its ID.

nebius capacity capacity-interval list

List all capacity intervals in a Capacity Block Group.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius capacity capacity-interval list Source: https://docs.nebius.com/cli/reference/capacity/capacity-interval/list

Name

nebius capacity capacity-interval list

List all capacity intervals in a Capacity Block Group.

Synopsis

``` nebius capacity capacity-interval list --page-size --page-token --parent-id [required] --all -i, --interactive ```

Options

`--page-size` (int64)

Page size. Must be between \[1...200].
Optional; if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Pass an empty string to start listing from the first page.

`--parent-id` (string) \[required]

Capacity Block Group ID for which the Capacity Intervals should be listed.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, // Page size. Must be between [1...200]. // Optional; if not specified, a reasonable default will be chosen by the service. "page_token": string, // Listing continuation token. Pass an empty string to start listing from the first page. "parent_id": string // [required] // Capacity Block Group ID for which the Capacity Intervals should be listed. } ``` ```json theme={null} nebius capacity capacity-interval list ' { "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius capacity Source: https://docs.nebius.com/cli/reference/capacity/index

Name

nebius capacity

Commands

nebius capacity capacity-block-group

Capacity Block Group service provides read access to Capacity Block Groups resources.

nebius capacity capacity-interval

Capacity Interval service provides read access to Capacity Intervals resources.

nebius capacity resource-advice

ResourceAdvisorService provides insights into capacity availability for various resources.
It helps users understand where they can launch instances or allocate storage based on their
quotas and the current physical capacity in the data centers.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius capacity resource-advice Source: https://docs.nebius.com/cli/reference/capacity/resource-advice/index

Name

nebius capacity resource-advice

ResourceAdvisorService provides insights into capacity availability for various resources.
It helps users understand where they can launch instances or allocate storage based on their
quotas and the current physical capacity in the data centers.

Commands

nebius capacity resource-advice list

Returns a list of resource advice entries for the caller's tenant.
Each entry represents a unique combination of region, fabric, platform, and preset
(e.g., gpu-b200-sxm / 8gpu-160vcpu-1792gb in us-central1-b) and reports current
capacity availability across three allocation types: reserved, on-demand, and preemptible.
Use this method to determine where and which compute instances can be launched
given the tenant's quotas, capacity block groups, and the current physical capacity in data centers.
Supports filtering by region, resource type, or platform.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius capacity resource-advice list Source: https://docs.nebius.com/cli/reference/capacity/resource-advice/list

Name

nebius capacity resource-advice list

Returns a list of resource advice entries for the caller's tenant.
Each entry represents a unique combination of region, fabric, platform, and preset
(e.g., gpu-b200-sxm / 8gpu-160vcpu-1792gb in us-central1-b) and reports current
capacity availability across three allocation types: reserved, on-demand, and preemptible.
Use this method to determine where and which compute instances can be launched
given the tenant's quotas, capacity block groups, and the current physical capacity in data centers.
Supports filtering by region, resource type, or platform.

Synopsis

``` nebius capacity resource-advice list --page-size --page-token --parent-id [required] --all -i, --interactive ```

Options

`--page-size` (int64)

Maximum number of items to return.

`--page-token` (string)

Page token for pagination.

`--parent-id` (string) \[required]

Tenant NID.
Required to calculate 'available' numbers clipped by user quotas.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, // Maximum number of items to return. "page_token": string, // Page token for pagination. "parent_id": string // [required] // Tenant NID. // Required to calculate 'available' numbers clipped by user quotas. } ``` ```json theme={null} nebius capacity resource-advice list ' { "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute disk-snapshot create Source: https://docs.nebius.com/cli/reference/compute/disk-snapshot/create

Name

nebius compute disk-snapshot create

Creates a new snapshot resource of a disk.

Synopsis

``` nebius compute disk-snapshot create --description --labels --name --parent-id [required] --resource-version --source-disk-id [required] --async -i, --interactive ```

Options

`--description` (string)

Arbitrary information about this snapshot provided by user.

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--source-disk-id` (string) \[required]

Identifier of the source disk. May become stale if the disk is deleted.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "description": string, // Arbitrary information about this snapshot provided by user. "source_disk_id": string // [required] [immutable] // Identifier of the source disk. May become stale if the disk is deleted. } } ``` ```json theme={null} nebius compute disk-snapshot create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "description": "", "source_disk_id": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius compute disk-snapshot delete Source: https://docs.nebius.com/cli/reference/compute/disk-snapshot/delete

Name

nebius compute disk-snapshot delete

Deletes snapshot.

Synopsis

``` nebius compute disk-snapshot delete [id] --id --async ```

Positional Arguments

id

ID of the resource to delete.

Options

`--id` (string)

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string } ``` ```json theme={null} nebius compute disk-snapshot delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute disk-snapshot edit Source: https://docs.nebius.com/cli/reference/compute/disk-snapshot/edit

Name

nebius compute disk-snapshot edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius compute disk-snapshot edit [id] --async --editor --id ```

Positional Arguments

id

ID of the resource to edit.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute disk-snapshot edit-by-name Source: https://docs.nebius.com/cli/reference/compute/disk-snapshot/edit-by-name

Name

nebius compute disk-snapshot edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

Synopsis

``` nebius compute disk-snapshot edit-by-name --async --editor --name --parent-id ```

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--name` (string)

`--parent-id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute disk-snapshot get Source: https://docs.nebius.com/cli/reference/compute/disk-snapshot/get

Name

nebius compute disk-snapshot get

Retrieves detailed information about a specific snapshot by its ID.

Synopsis

``` nebius compute disk-snapshot get [id] --id ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string } ``` ```json theme={null} nebius compute disk-snapshot get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute disk-snapshot get-by-name Source: https://docs.nebius.com/cli/reference/compute/disk-snapshot/get-by-name

Name

nebius compute disk-snapshot get-by-name

Retrieves information about a snapshot by its parent and name.

Synopsis

``` nebius compute disk-snapshot get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

`--parent-id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // [required] } ``` ```json theme={null} nebius compute disk-snapshot get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute disk-snapshot Source: https://docs.nebius.com/cli/reference/compute/disk-snapshot/index

Name

nebius compute disk-snapshot

Disk snapshot service specification.

Commands

nebius compute disk-snapshot create

Creates a new snapshot resource of a disk.

nebius compute disk-snapshot delete

Deletes snapshot.

nebius compute disk-snapshot edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius compute disk-snapshot edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

nebius compute disk-snapshot get

Retrieves detailed information about a specific snapshot by its ID.

nebius compute disk-snapshot get-by-name

Retrieves information about a snapshot by its parent and name.

nebius compute disk-snapshot list

Lists all snapshots in a specific parent resource.

nebius compute disk-snapshot list-by-disk

Lists all snapshots with a specific source disk.

nebius compute disk-snapshot operation

Manage operations for DiskSnapshot service.

nebius compute disk-snapshot update

Updates an existing snapshot with new configuration parameters.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute disk-snapshot list Source: https://docs.nebius.com/cli/reference/compute/disk-snapshot/list

Name

nebius compute disk-snapshot list

Lists all snapshots in a specific parent resource.

Synopsis

``` nebius compute disk-snapshot list --page-size --page-token --parent-id --all -i, --interactive ```

Options

`--page-size` (int64)

`--page-token` (string)

`--parent-id` (string)

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, "page_token": string, "parent_id": string } ``` ```json theme={null} nebius compute disk-snapshot list ' { "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute disk-snapshot list-by-disk Source: https://docs.nebius.com/cli/reference/compute/disk-snapshot/list-by-disk

Name

nebius compute disk-snapshot list-by-disk

Lists all snapshots with a specific source disk.

Synopsis

``` nebius compute disk-snapshot list-by-disk --disk-id --page-size --page-token ```

Options

`--disk-id` (string)

ID of computedisk resource.

`--page-size` (int64)

`--page-token` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "disk_id": string, // ID of computedisk resource. "page_size": int64, "page_token": string } ``` ```json theme={null} nebius compute disk-snapshot list-by-disk ' { "disk_id": "", "page_size": 0, "page_token": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute disk-snapshot operation get Source: https://docs.nebius.com/cli/reference/compute/disk-snapshot/operation/get

Name

nebius compute disk-snapshot operation get

Get operation by ID.

Synopsis

``` nebius compute disk-snapshot operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute disk-snapshot operation Source: https://docs.nebius.com/cli/reference/compute/disk-snapshot/operation/index

Name

nebius compute disk-snapshot operation

Manage operations for DiskSnapshot service.

Commands

nebius compute disk-snapshot operation get

Get operation by ID.

nebius compute disk-snapshot operation list

List operations by resource ID.

nebius compute disk-snapshot operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute disk-snapshot operation list Source: https://docs.nebius.com/cli/reference/compute/disk-snapshot/operation/list

Name

nebius compute disk-snapshot operation list

List operations by resource ID.

Synopsis

``` nebius compute disk-snapshot operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute disk-snapshot operation wait Source: https://docs.nebius.com/cli/reference/compute/disk-snapshot/operation/wait

Name

nebius compute disk-snapshot operation wait

Wait for operation to complete.

Synopsis

``` nebius compute disk-snapshot operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute disk-snapshot update Source: https://docs.nebius.com/cli/reference/compute/disk-snapshot/update

Name

nebius compute disk-snapshot update

Updates an existing snapshot with new configuration parameters.

Synopsis

``` nebius compute disk-snapshot update [id] --description --id --labels --labels-add --labels-remove --name --parent-id --resource-version --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--description` (string)

Arbitrary information about this snapshot provided by user.

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "description": string // Arbitrary information about this snapshot provided by user. } } ``` ```json theme={null} nebius compute disk-snapshot update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "description": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius compute disk create Source: https://docs.nebius.com/cli/reference/compute/disk/create

Name

nebius compute disk create

Creates a new disk with the specified configuration.
For details, see [https://docs.nebius.com/compute/storage/manage](https://docs.nebius.com/compute/storage/manage).

Synopsis

``` nebius compute disk create --block-size-bytes --disk-encryption-type --forbid-deletion --labels --name --parent-id [required] --resource-version --size-bytes --size-gibibytes --size-kibibytes --size-mebibytes --source-image-family-image-family --source-image-family-parent-id --source-image-id --source-snapshot-id --type [required] --async -i, --interactive ```

Options

`--block-size-bytes` (int64)

Block size in bytes.
The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB).
The default value is 4096 bytes (4 KiB).

`--disk-encryption-type` (string)

A value must be one of:

  • disk\_encryption\_unspecified
  • disk\_encryption\_managed

`--forbid-deletion` (bool)

Prevents deletion whilst set.

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--size-bytes` (int64)

Mutually exclusive with: `--size-gibibytes`, `--size-kibibytes`, `--size-mebibytes`.

`--size-gibibytes` (int64)

Mutually exclusive with: `--size-bytes`, `--size-kibibytes`, `--size-mebibytes`.

`--size-kibibytes` (int64)

Mutually exclusive with: `--size-bytes`, `--size-gibibytes`, `--size-mebibytes`.

`--size-mebibytes` (int64)

Mutually exclusive with: `--size-bytes`, `--size-gibibytes`, `--size-kibibytes`.

`--source-image-family-image-family` (string)

Mutually exclusive with: `--source-image-id`, `--source-snapshot-id`.

`--source-image-family-parent-id` (string)

Mutually exclusive with: `--source-image-id`, `--source-snapshot-id`.

`--source-image-id` (string)

Mutually exclusive with: `--source-image-family-image-family`, `--source-image-family-parent-id`, `--source-snapshot-id`.

`--source-snapshot-id` (string)

Mutually exclusive with: `--source-image-family-image-family`, `--source-image-family-parent-id`, `--source-image-id`.

`--type` (string) \[required]

The type of disk defines the performance and reliability characteristics of the block device.
For details, see [https://docs.nebius.com/compute/storage/types#disks-types](https://docs.nebius.com/compute/storage/types#disks-types).

A value must be one of:

  • network\_ssd
  • network\_hdd
  • network\_ssd\_non\_replicated
  • network\_ssd\_io\_m3

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "block_size_bytes": int64, // [immutable] // Block size in bytes. // The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB). // The default value is 4096 bytes (4 KiB). "disk_encryption": { // [immutable] // Defines how data on the disk is encrypted. By default, no encryption is applied. "type": enum( "DISK_ENCRYPTION_UNSPECIFIED", // No encryption is applied unless explicitly specified. "DISK_ENCRYPTION_MANAGED" // Enables encryption using the platform's default root key from KMS. // Available for disks with NETWORK_SSD_NON_REPLICATED and NETWORK_SSD_IO_M3 types only. ) }, "forbid_deletion": bool, // Prevents deletion whilst set. "size_bytes": int64, // Cannot be set together with: size_kibibytes, size_mebibytes, size_gibibytes "size_gibibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_mebibytes "size_kibibytes": int64, // Cannot be set together with: size_bytes, size_mebibytes, size_gibibytes "size_mebibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_gibibytes "source_image_family": { // [immutable] // Cannot be set together with: source_image_id, source_snapshot_id "image_family": string, // [required] "parent_id": string }, "source_image_id": string, // [immutable] // Cannot be set together with: source_image_family, source_snapshot_id "source_snapshot_id": string, // [immutable] // Cannot be set together with: source_image_id, source_image_family "type": enum( // [required] [immutable] // The type of disk defines the performance and reliability characteristics of the block device. // For details, see https://docs.nebius.com/compute/storage/types#disks-types. "UNSPECIFIED", "NETWORK_SSD", "NETWORK_HDD", "NETWORK_SSD_NON_REPLICATED", "NETWORK_SSD_IO_M3" ) } } ``` ```json theme={null} nebius compute disk create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "block_size_bytes": 0, "disk_encryption": { "type": "disk_encryption_unspecified"|"disk_encryption_managed" }, "forbid_deletion": false, "size_bytes": 0, "source_image_family": { "image_family": "", "parent_id": "" }, "type": "unspecified"|"network_ssd"|"network_hdd"|"network_ssd_non_replicated"|"network_ssd_io_m3" } } ' ``` *Auto generated on 15-Jul-2026* # nebius compute disk delete Source: https://docs.nebius.com/cli/reference/compute/disk/delete

Name

nebius compute disk delete

Deletes a disk by its ID.

Synopsis

``` nebius compute disk delete [id] --id --async ```

Positional Arguments

id

ID of the resource to delete.

Options

`--id` (string)

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string } ``` ```json theme={null} nebius compute disk delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute disk edit Source: https://docs.nebius.com/cli/reference/compute/disk/edit

Name

nebius compute disk edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius compute disk edit [id] --async --editor --id ```

Positional Arguments

id

ID of the resource to edit.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute disk edit-by-name Source: https://docs.nebius.com/cli/reference/compute/disk/edit-by-name

Name

nebius compute disk edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

Synopsis

``` nebius compute disk edit-by-name --async --editor --name --parent-id ```

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--name` (string)

`--parent-id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute disk get Source: https://docs.nebius.com/cli/reference/compute/disk/get

Name

nebius compute disk get

Retrieves information about a disk by its ID.

Synopsis

``` nebius compute disk get [id] --id ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string } ``` ```json theme={null} nebius compute disk get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute disk get-by-name Source: https://docs.nebius.com/cli/reference/compute/disk/get-by-name

Name

nebius compute disk get-by-name

Retrieves information about a disk by its parent and name.

Synopsis

``` nebius compute disk get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

`--parent-id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // [required] } ``` ```json theme={null} nebius compute disk get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute disk Source: https://docs.nebius.com/cli/reference/compute/disk/index

Name

nebius compute disk

Commands

nebius compute disk create

Creates a new disk with the specified configuration.
For details, see [https://docs.nebius.com/compute/storage/manage](https://docs.nebius.com/compute/storage/manage).

nebius compute disk delete

Deletes a disk by its ID.

nebius compute disk edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius compute disk edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

nebius compute disk get

Retrieves information about a disk by its ID.

nebius compute disk get-by-name

Retrieves information about a disk by its parent and name.

nebius compute disk list

Lists all disks within a specified parent.

nebius compute disk list-operations-by-parent

Lists all operations that were performed within a specific parent resource.

nebius compute disk operation

Manage operations for Disk service.

nebius compute disk update

Updates an existing disk with new configuration parameters.
For details, see [https://docs.nebius.com/compute/storage/manage#parameters](https://docs.nebius.com/compute/storage/manage#parameters).

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute disk list Source: https://docs.nebius.com/cli/reference/compute/disk/list

Name

nebius compute disk list

Lists all disks within a specified parent.

Synopsis

``` nebius compute disk list --filter --page-size --page-token --parent-id --all -i, --interactive ```

Options

`--filter` (string)

`--page-size` (int64)

`--page-token` (string)

`--parent-id` (string)

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "filter": string, // [deprecated: supported until 2025-06-16] // It is not implemented, filtering could be done on client side. "page_size": int64, "page_token": string, "parent_id": string } ``` ```json theme={null} nebius compute disk list ' { "filter": "", "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute disk list-operations-by-parent Source: https://docs.nebius.com/cli/reference/compute/disk/list-operations-by-parent

Name

nebius compute disk list-operations-by-parent

Lists all operations that were performed within a specific parent resource.

Synopsis

``` nebius compute disk list-operations-by-parent --page-size --page-token --parent-id [required] ```

Options

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--parent-id` (string) \[required]

ID of the parent to list operations for resource type at.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, // Page size. [1...1000]. Optional, if not specified, a reasonable default will be chosen by the service. "page_token": string, // Listing continuation token. Empty to start listing from the first page. "parent_id": string // [required] // ID of the parent to list operations for resource type at. } ``` ```json theme={null} nebius compute disk list-operations-by-parent ' { "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute disk operation get Source: https://docs.nebius.com/cli/reference/compute/disk/operation/get

Name

nebius compute disk operation get

Get operation by ID.

Synopsis

``` nebius compute disk operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute disk operation Source: https://docs.nebius.com/cli/reference/compute/disk/operation/index

Name

nebius compute disk operation

Manage operations for Disk service.

Commands

nebius compute disk operation get

Get operation by ID.

nebius compute disk operation list

List operations by resource ID.

nebius compute disk operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute disk operation list Source: https://docs.nebius.com/cli/reference/compute/disk/operation/list

Name

nebius compute disk operation list

List operations by resource ID.

Synopsis

``` nebius compute disk operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute disk operation wait Source: https://docs.nebius.com/cli/reference/compute/disk/operation/wait

Name

nebius compute disk operation wait

Wait for operation to complete.

Synopsis

``` nebius compute disk operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute disk update Source: https://docs.nebius.com/cli/reference/compute/disk/update

Name

nebius compute disk update

Updates an existing disk with new configuration parameters.
For details, see [https://docs.nebius.com/compute/storage/manage#parameters](https://docs.nebius.com/compute/storage/manage#parameters).

Synopsis

``` nebius compute disk update [id] --forbid-deletion --id --labels --labels-add --labels-remove --name --parent-id --resource-version --size-bytes --size-gibibytes --size-kibibytes --size-mebibytes --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--forbid-deletion` (bool)

Prevents deletion whilst set.

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--size-bytes` (int64)

Mutually exclusive with: `--size-gibibytes`, `--size-kibibytes`, `--size-mebibytes`.

`--size-gibibytes` (int64)

Mutually exclusive with: `--size-bytes`, `--size-kibibytes`, `--size-mebibytes`.

`--size-kibibytes` (int64)

Mutually exclusive with: `--size-bytes`, `--size-gibibytes`, `--size-mebibytes`.

`--size-mebibytes` (int64)

Mutually exclusive with: `--size-bytes`, `--size-gibibytes`, `--size-kibibytes`.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "forbid_deletion": bool, // Prevents deletion whilst set. "size_bytes": int64, // Cannot be set together with: size_kibibytes, size_mebibytes, size_gibibytes "size_gibibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_mebibytes "size_kibibytes": int64, // Cannot be set together with: size_bytes, size_mebibytes, size_gibibytes "size_mebibytes": int64 // Cannot be set together with: size_bytes, size_kibibytes, size_gibibytes } } ``` ```json theme={null} nebius compute disk update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "forbid_deletion": false, "size_bytes": 0 } } ' ``` *Auto generated on 15-Jul-2026* # nebius compute filesystem create Source: https://docs.nebius.com/cli/reference/compute/filesystem/create

Name

nebius compute filesystem create

Creates a new filesystem with the specified configuration.
For details, see [https://docs.nebius.com/compute/storage/manage](https://docs.nebius.com/compute/storage/manage).

Synopsis

``` nebius compute filesystem create --block-size-bytes --forbid-deletion --labels --name --parent-id [required] --resource-version --size-bytes --size-gibibytes --size-kibibytes --size-mebibytes --type [required] --async -i, --interactive ```

Options

`--block-size-bytes` (int64)

Block size in bytes.
The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB).
The default value is 4096 bytes (4 KiB).

`--forbid-deletion` (bool)

Prevents deletion whilst set.

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--size-bytes` (int64)

Mutually exclusive with: `--size-gibibytes`, `--size-kibibytes`, `--size-mebibytes`.

`--size-gibibytes` (int64)

Mutually exclusive with: `--size-bytes`, `--size-kibibytes`, `--size-mebibytes`.

`--size-kibibytes` (int64)

Mutually exclusive with: `--size-bytes`, `--size-gibibytes`, `--size-mebibytes`.

`--size-mebibytes` (int64)

Mutually exclusive with: `--size-bytes`, `--size-gibibytes`, `--size-kibibytes`.

`--type` (string) \[required]

The Shared Filesystem type determines its limits and performance characteristics.
For details, see [https://docs.nebius.com/compute/storage/types#filesystems-types](https://docs.nebius.com/compute/storage/types#filesystems-types).

A value must be one of:

  • network\_ssd
  • network\_hdd
  • weka
  • vast

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "block_size_bytes": int64, // [immutable] // Block size in bytes. // The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB). // The default value is 4096 bytes (4 KiB). "forbid_deletion": bool, // Prevents deletion whilst set. "size_bytes": int64, // Cannot be set together with: size_kibibytes, size_mebibytes, size_gibibytes "size_gibibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_mebibytes "size_kibibytes": int64, // Cannot be set together with: size_bytes, size_mebibytes, size_gibibytes "size_mebibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_gibibytes "type": enum( // [required] [immutable] // The Shared Filesystem type determines its limits and performance characteristics. // For details, see https://docs.nebius.com/compute/storage/types#filesystems-types. "UNSPECIFIED", "NETWORK_SSD", // The list of available types will be clarified later, it is not final version. "NETWORK_HDD", "WEKA", "VAST" ) } } ``` ```json theme={null} nebius compute filesystem create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "block_size_bytes": 0, "forbid_deletion": false, "size_bytes": 0, "type": "unspecified"|"network_ssd"|"network_hdd"|"weka"|"vast" } } ' ``` *Auto generated on 15-Jul-2026* # nebius compute filesystem delete Source: https://docs.nebius.com/cli/reference/compute/filesystem/delete

Name

nebius compute filesystem delete

Deletes a disk by its ID.

Synopsis

``` nebius compute filesystem delete [id] --id --async ```

Positional Arguments

id

ID of the resource to delete.

Options

`--id` (string)

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string } ``` ```json theme={null} nebius compute filesystem delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute filesystem edit Source: https://docs.nebius.com/cli/reference/compute/filesystem/edit

Name

nebius compute filesystem edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius compute filesystem edit [id] --async --editor --id ```

Positional Arguments

id

ID of the resource to edit.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute filesystem edit-by-name Source: https://docs.nebius.com/cli/reference/compute/filesystem/edit-by-name

Name

nebius compute filesystem edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

Synopsis

``` nebius compute filesystem edit-by-name --async --editor --name --parent-id ```

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--name` (string)

`--parent-id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute filesystem get Source: https://docs.nebius.com/cli/reference/compute/filesystem/get

Name

nebius compute filesystem get

Retrieves information about a filesystem by its ID.

Synopsis

``` nebius compute filesystem get [id] --id ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string } ``` ```json theme={null} nebius compute filesystem get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute filesystem get-by-name Source: https://docs.nebius.com/cli/reference/compute/filesystem/get-by-name

Name

nebius compute filesystem get-by-name

Retrieves information about a filesystem by its parent and name.

Synopsis

``` nebius compute filesystem get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

`--parent-id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // [required] } ``` ```json theme={null} nebius compute filesystem get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute filesystem Source: https://docs.nebius.com/cli/reference/compute/filesystem/index

Name

nebius compute filesystem

Commands

nebius compute filesystem create

Creates a new filesystem with the specified configuration.
For details, see [https://docs.nebius.com/compute/storage/manage](https://docs.nebius.com/compute/storage/manage).

nebius compute filesystem delete

Deletes a disk by its ID.

nebius compute filesystem edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius compute filesystem edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

nebius compute filesystem get

Retrieves information about a filesystem by its ID.

nebius compute filesystem get-by-name

Retrieves information about a filesystem by its parent and name.

nebius compute filesystem list

Lists all filesystems within a specified parent.

nebius compute filesystem list-operations-by-parent

Lists all operations that were performed within a specific parent resource.

nebius compute filesystem operation

Manage operations for Filesystem service.

nebius compute filesystem update

Updates an existing filesystem with new configuration parameters.
For details, see [https://docs.nebius.com/compute/storage/manage#parameters](https://docs.nebius.com/compute/storage/manage#parameters).

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute filesystem list Source: https://docs.nebius.com/cli/reference/compute/filesystem/list

Name

nebius compute filesystem list

Lists all filesystems within a specified parent.

Synopsis

``` nebius compute filesystem list --filter --page-size --page-token --parent-id --all -i, --interactive ```

Options

`--filter` (string)

`--page-size` (int64)

`--page-token` (string)

`--parent-id` (string)

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "filter": string, // [deprecated: supported until 2025-06-16] // It is not implemented, filtering could be done on client side. "page_size": int64, "page_token": string, "parent_id": string } ``` ```json theme={null} nebius compute filesystem list ' { "filter": "", "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute filesystem list-operations-by-parent Source: https://docs.nebius.com/cli/reference/compute/filesystem/list-operations-by-parent

Name

nebius compute filesystem list-operations-by-parent

Lists all operations that were performed within a specific parent resource.

Synopsis

``` nebius compute filesystem list-operations-by-parent --page-size --page-token --parent-id [required] ```

Options

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--parent-id` (string) \[required]

ID of the parent to list operations for resource type at.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, // Page size. [1...1000]. Optional, if not specified, a reasonable default will be chosen by the service. "page_token": string, // Listing continuation token. Empty to start listing from the first page. "parent_id": string // [required] // ID of the parent to list operations for resource type at. } ``` ```json theme={null} nebius compute filesystem list-operations-by-parent ' { "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute filesystem operation get Source: https://docs.nebius.com/cli/reference/compute/filesystem/operation/get

Name

nebius compute filesystem operation get

Get operation by ID.

Synopsis

``` nebius compute filesystem operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute filesystem operation Source: https://docs.nebius.com/cli/reference/compute/filesystem/operation/index

Name

nebius compute filesystem operation

Manage operations for Filesystem service.

Commands

nebius compute filesystem operation get

Get operation by ID.

nebius compute filesystem operation list

List operations by resource ID.

nebius compute filesystem operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute filesystem operation list Source: https://docs.nebius.com/cli/reference/compute/filesystem/operation/list

Name

nebius compute filesystem operation list

List operations by resource ID.

Synopsis

``` nebius compute filesystem operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute filesystem operation wait Source: https://docs.nebius.com/cli/reference/compute/filesystem/operation/wait

Name

nebius compute filesystem operation wait

Wait for operation to complete.

Synopsis

``` nebius compute filesystem operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute filesystem update Source: https://docs.nebius.com/cli/reference/compute/filesystem/update

Name

nebius compute filesystem update

Updates an existing filesystem with new configuration parameters.
For details, see [https://docs.nebius.com/compute/storage/manage#parameters](https://docs.nebius.com/compute/storage/manage#parameters).

Synopsis

``` nebius compute filesystem update [id] --forbid-deletion --id --labels --labels-add --labels-remove --name --parent-id --resource-version --size-bytes --size-gibibytes --size-kibibytes --size-mebibytes --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--forbid-deletion` (bool)

Prevents deletion whilst set.

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--size-bytes` (int64)

Mutually exclusive with: `--size-gibibytes`, `--size-kibibytes`, `--size-mebibytes`.

`--size-gibibytes` (int64)

Mutually exclusive with: `--size-bytes`, `--size-kibibytes`, `--size-mebibytes`.

`--size-kibibytes` (int64)

Mutually exclusive with: `--size-bytes`, `--size-gibibytes`, `--size-mebibytes`.

`--size-mebibytes` (int64)

Mutually exclusive with: `--size-bytes`, `--size-gibibytes`, `--size-kibibytes`.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "forbid_deletion": bool, // Prevents deletion whilst set. "size_bytes": int64, // Cannot be set together with: size_kibibytes, size_mebibytes, size_gibibytes "size_gibibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_mebibytes "size_kibibytes": int64, // Cannot be set together with: size_bytes, size_mebibytes, size_gibibytes "size_mebibytes": int64 // Cannot be set together with: size_bytes, size_kibibytes, size_gibibytes } } ``` ```json theme={null} nebius compute filesystem update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "forbid_deletion": false, "size_bytes": 0 } } ' ``` *Auto generated on 15-Jul-2026* # nebius compute gpu-cluster create Source: https://docs.nebius.com/cli/reference/compute/gpu-cluster/create

Name

nebius compute gpu-cluster create

Creates a new GPU Cluster.
For details, see [https://docs.nebius.com/compute/clusters/gpu#create-cluster](https://docs.nebius.com/compute/clusters/gpu#create-cluster).

Synopsis

``` nebius compute gpu-cluster create --infiniband-fabric [required] --labels --name --parent-id [required] --resource-version --async -i, --interactive ```

Options

`--infiniband-fabric` (string) \[required]

The identifier of the physical InfiniBand fabric to connect GPU instances to.
For details, see [https://docs.nebius.com/compute/clusters/gpu#fabrics](https://docs.nebius.com/compute/clusters/gpu#fabrics).

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "infiniband_fabric": string // [required] [immutable] // The identifier of the physical InfiniBand fabric to connect GPU instances to. // For details, see https://docs.nebius.com/compute/clusters/gpu#fabrics. } } ``` ```json theme={null} nebius compute gpu-cluster create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "infiniband_fabric": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius compute gpu-cluster delete Source: https://docs.nebius.com/cli/reference/compute/gpu-cluster/delete

Name

nebius compute gpu-cluster delete

Deletes a GPU Cluster by its ID.

Synopsis

``` nebius compute gpu-cluster delete [id] --id --async ```

Positional Arguments

id

ID of the resource to delete.

Options

`--id` (string)

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string } ``` ```json theme={null} nebius compute gpu-cluster delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute gpu-cluster edit Source: https://docs.nebius.com/cli/reference/compute/gpu-cluster/edit

Name

nebius compute gpu-cluster edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius compute gpu-cluster edit [id] --async --editor --id ```

Positional Arguments

id

ID of the resource to edit.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute gpu-cluster edit-by-name Source: https://docs.nebius.com/cli/reference/compute/gpu-cluster/edit-by-name

Name

nebius compute gpu-cluster edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

Synopsis

``` nebius compute gpu-cluster edit-by-name --async --editor --name --parent-id ```

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--name` (string)

`--parent-id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute gpu-cluster get Source: https://docs.nebius.com/cli/reference/compute/gpu-cluster/get

Name

nebius compute gpu-cluster get

Retrieves the specified GPU Cluster by its ID.

Synopsis

``` nebius compute gpu-cluster get [id] --id ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string } ``` ```json theme={null} nebius compute gpu-cluster get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute gpu-cluster get-by-name Source: https://docs.nebius.com/cli/reference/compute/gpu-cluster/get-by-name

Name

nebius compute gpu-cluster get-by-name

Retrieves the specified GPU Cluster by its parent and name.

Synopsis

``` nebius compute gpu-cluster get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

`--parent-id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // [required] } ``` ```json theme={null} nebius compute gpu-cluster get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute gpu-cluster Source: https://docs.nebius.com/cli/reference/compute/gpu-cluster/index

Name

nebius compute gpu-cluster

Commands

nebius compute gpu-cluster create

Creates a new GPU Cluster.
For details, see [https://docs.nebius.com/compute/clusters/gpu#create-cluster](https://docs.nebius.com/compute/clusters/gpu#create-cluster).

nebius compute gpu-cluster delete

Deletes a GPU Cluster by its ID.

nebius compute gpu-cluster edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius compute gpu-cluster edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

nebius compute gpu-cluster get

Retrieves the specified GPU Cluster by its ID.

nebius compute gpu-cluster get-by-name

Retrieves the specified GPU Cluster by its parent and name.

nebius compute gpu-cluster list

Lists GPU Clusters in the specified parent.

nebius compute gpu-cluster list-operations-by-parent

Lists all operations that were performed within a specific parent resource.

nebius compute gpu-cluster operation

Manage operations for GpuCluster service.

nebius compute gpu-cluster update

Modifies the configuration of an existing GPU Cluster.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute gpu-cluster list Source: https://docs.nebius.com/cli/reference/compute/gpu-cluster/list

Name

nebius compute gpu-cluster list

Lists GPU Clusters in the specified parent.

Synopsis

``` nebius compute gpu-cluster list --filter --page-size --page-token --parent-id --all -i, --interactive ```

Options

`--filter` (string)

`--page-size` (int64)

`--page-token` (string)

`--parent-id` (string)

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "filter": string, // [deprecated: supported until 2025-06-16] // It is not implemented, filtering could be done on client side. "page_size": int64, "page_token": string, "parent_id": string } ``` ```json theme={null} nebius compute gpu-cluster list ' { "filter": "", "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute gpu-cluster list-operations-by-parent Source: https://docs.nebius.com/cli/reference/compute/gpu-cluster/list-operations-by-parent

Name

nebius compute gpu-cluster list-operations-by-parent

Lists all operations that were performed within a specific parent resource.

Synopsis

``` nebius compute gpu-cluster list-operations-by-parent --page-size --page-token --parent-id [required] ```

Options

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--parent-id` (string) \[required]

ID of the parent to list operations for resource type at.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, // Page size. [1...1000]. Optional, if not specified, a reasonable default will be chosen by the service. "page_token": string, // Listing continuation token. Empty to start listing from the first page. "parent_id": string // [required] // ID of the parent to list operations for resource type at. } ``` ```json theme={null} nebius compute gpu-cluster list-operations-by-parent ' { "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute gpu-cluster operation get Source: https://docs.nebius.com/cli/reference/compute/gpu-cluster/operation/get

Name

nebius compute gpu-cluster operation get

Get operation by ID.

Synopsis

``` nebius compute gpu-cluster operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute gpu-cluster operation Source: https://docs.nebius.com/cli/reference/compute/gpu-cluster/operation/index

Name

nebius compute gpu-cluster operation

Manage operations for GpuCluster service.

Commands

nebius compute gpu-cluster operation get

Get operation by ID.

nebius compute gpu-cluster operation list

List operations by resource ID.

nebius compute gpu-cluster operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute gpu-cluster operation list Source: https://docs.nebius.com/cli/reference/compute/gpu-cluster/operation/list

Name

nebius compute gpu-cluster operation list

List operations by resource ID.

Synopsis

``` nebius compute gpu-cluster operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute gpu-cluster operation wait Source: https://docs.nebius.com/cli/reference/compute/gpu-cluster/operation/wait

Name

nebius compute gpu-cluster operation wait

Wait for operation to complete.

Synopsis

``` nebius compute gpu-cluster operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute gpu-cluster update Source: https://docs.nebius.com/cli/reference/compute/gpu-cluster/update

Name

nebius compute gpu-cluster update

Modifies the configuration of an existing GPU Cluster.

Synopsis

``` nebius compute gpu-cluster update [id] --id --labels --labels-add --labels-remove --name --parent-id --resource-version --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { } } ``` ```json theme={null} nebius compute gpu-cluster update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { } } ' ``` *Auto generated on 15-Jul-2026* # nebius compute image create Source: https://docs.nebius.com/cli/reference/compute/image/create

Name

nebius compute image create

Creates a new image resource.

Synopsis

``` nebius compute image create --cpu-architecture --description --image-family --image-family-human-readable --labels --name --parent-id [required] --recommended-platforms --resource-version --source-disk-id --source-disk-snapshot-id --source-storage-bucket-name --source-storage-object-name --unsupported-platforms --version --async -i, --interactive ```

Options

`--cpu-architecture` (string)

CPU architecture supported by the image.

A value must be one of:

  • unspecified
  • amd64
  • arm64

`--description` (string)

`--image-family` (string)

`--image-family-human-readable` (string)

Human readable name for image family.

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--recommended-platforms` (string array)

List of platforms where this image is recommended to use.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--source-disk-id` (string)

ID of the disk to create the image from.

Mutually exclusive with: `--source-disk-snapshot-id`, `--source-storage-bucket-name`, `--source-storage-object-name`.

`--source-disk-snapshot-id` (string)

Mutually exclusive with: `--source-disk-id`, `--source-storage-bucket-name`, `--source-storage-object-name`.

`--source-storage-bucket-name` (string)

Mutually exclusive with: `--source-disk-id`, `--source-disk-snapshot-id`.

`--source-storage-object-name` (string)

Mutually exclusive with: `--source-disk-id`, `--source-disk-snapshot-id`.

`--unsupported-platforms` (string->string)

List of platforms where this image is not supported with explanation.

`--version` (string)

Part of identifier into the image family.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "cpu_architecture": enum( // [immutable] // CPU architecture supported by the image. "UNSPECIFIED", "AMD64", "ARM64" ), "description": string, "image_family": string, // [immutable] "image_family_human_readable": string, // [immutable] // Human readable name for image family. "recommended_platforms": [string], // List of platforms where this image is recommended to use. "source_disk_id": string, // [immutable] // Cannot be set together with: source_storage, source_disk_snapshot_id // ID of the disk to create the image from. "source_disk_snapshot_id": string, // [immutable] // Cannot be set together with: source_disk_id, source_storage "source_storage": { // [immutable] // Cannot be set together with: source_disk_id, source_disk_snapshot_id "bucket_name": string, "object_name": string }, "unsupported_platforms": { // [map] // List of platforms where this image is not supported with explanation. string: string }, "version": string // [immutable] // Part of identifier into the image family. } } ``` ```json theme={null} nebius compute image create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "cpu_architecture": "unspecified"|"amd64"|"arm64", "description": "", "image_family": "", "image_family_human_readable": "", "recommended_platforms": [""], "source_disk_id": "", "unsupported_platforms": { "": "" }, "version": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius compute image delete Source: https://docs.nebius.com/cli/reference/compute/image/delete

Name

nebius compute image delete

Deletes an existing image resource by its ID.

Synopsis

``` nebius compute image delete [id] --id --async ```

Positional Arguments

id

ID of the resource to delete.

Options

`--id` (string)

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string } ``` ```json theme={null} nebius compute image delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute image edit Source: https://docs.nebius.com/cli/reference/compute/image/edit

Name

nebius compute image edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius compute image edit [id] --async --editor --id ```

Positional Arguments

id

ID of the resource to edit.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute image edit-by-name Source: https://docs.nebius.com/cli/reference/compute/image/edit-by-name

Name

nebius compute image edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

Synopsis

``` nebius compute image edit-by-name --async --editor --name --parent-id ```

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--name` (string)

`--parent-id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute image get Source: https://docs.nebius.com/cli/reference/compute/image/get

Name

nebius compute image get

Retrieves detailed information about a specific image by its ID.

Synopsis

``` nebius compute image get [id] --id ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string } ``` ```json theme={null} nebius compute image get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute image get-by-name Source: https://docs.nebius.com/cli/reference/compute/image/get-by-name

Name

nebius compute image get-by-name

Retrieves detailed information about a specific image by its parent and name.

Synopsis

``` nebius compute image get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

`--parent-id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // [required] } ``` ```json theme={null} nebius compute image get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute image get-latest-by-family Source: https://docs.nebius.com/cli/reference/compute/image/get-latest-by-family

Name

nebius compute image get-latest-by-family

Retrieves the most recent image from a specified family.
Image families are used to organize related images and ensure easy access to the latest version.

Synopsis

``` nebius compute image get-latest-by-family --image-family --parent-id ```

Options

`--image-family` (string)

`--parent-id` (string)

Default 'project-public-images'.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "image_family": string, "parent_id": string // Default 'project-{region}public-images'. } ``` ```json theme={null} nebius compute image get-latest-by-family ' { "image_family": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute image Source: https://docs.nebius.com/cli/reference/compute/image/index

Name

nebius compute image

Commands

nebius compute image create

Creates a new image resource.

nebius compute image delete

Deletes an existing image resource by its ID.

nebius compute image edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius compute image edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

nebius compute image get

Retrieves detailed information about a specific image by its ID.

nebius compute image get-by-name

Retrieves detailed information about a specific image by its parent and name.

nebius compute image get-latest-by-family

Retrieves the most recent image from a specified family.
Image families are used to organize related images and ensure easy access to the latest version.

nebius compute image list

Lists all images in a specific parent resource.

nebius compute image list-operations-by-parent

Lists all operations that were performed within a specific parent resource.

nebius compute image list-public

Lists all public images available in a specific region. Regions doc [https://docs.nebius.com/overview/regions](https://docs.nebius.com/overview/regions)
Public images can contain specific labels in metadata like:
"os\_name: Ubuntu", "os\_version: 22.04 LTS", "linux\_kernel: 5.15", "cuda\_toolkit: 13.0"
"nvidia\_gpu\_drivers: 550", "networking\_package: OFED 23.10".

nebius compute image operation

Manage operations for Image service.

nebius compute image update

Updates an existing image resource. Only specific fields can be updated, such as labels and name.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute image list Source: https://docs.nebius.com/cli/reference/compute/image/list

Name

nebius compute image list

Lists all images in a specific parent resource.

Synopsis

``` nebius compute image list --filter --page-size --page-token --parent-id --all -i, --interactive ```

Options

`--filter` (string)

`--page-size` (int64)

`--page-token` (string)

`--parent-id` (string)

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "filter": string, // [deprecated: supported until 2025-06-16] // It is not implemented, filtering could be done on client side. "page_size": int64, "page_token": string, "parent_id": string } ``` ```json theme={null} nebius compute image list ' { "filter": "", "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute image list-operations-by-parent Source: https://docs.nebius.com/cli/reference/compute/image/list-operations-by-parent

Name

nebius compute image list-operations-by-parent

Lists all operations that were performed within a specific parent resource.

Synopsis

``` nebius compute image list-operations-by-parent --page-size --page-token --parent-id [required] ```

Options

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--parent-id` (string) \[required]

ID of the parent to list operations for resource type at.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, // Page size. [1...1000]. Optional, if not specified, a reasonable default will be chosen by the service. "page_token": string, // Listing continuation token. Empty to start listing from the first page. "parent_id": string // [required] // ID of the parent to list operations for resource type at. } ``` ```json theme={null} nebius compute image list-operations-by-parent ' { "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute image list-public Source: https://docs.nebius.com/cli/reference/compute/image/list-public

Name

nebius compute image list-public

Lists all public images available in a specific region. Regions doc [https://docs.nebius.com/overview/regions](https://docs.nebius.com/overview/regions)
Public images can contain specific labels in metadata like:
"os\_name: Ubuntu", "os\_version: 22.04 LTS", "linux\_kernel: 5.15", "cuda\_toolkit: 13.0"
"nvidia\_gpu\_drivers: 550", "networking\_package: OFED 23.10".

Synopsis

``` nebius compute image list-public --page-size --page-token --region [required] ```

Options

`--page-size` (int64)

`--page-token` (string)

`--region` (string) \[required]

Region name (eu-north2, us-central1, eu-west1, etc.)
For details, see [https://docs.nebius.com/overview/regions](https://docs.nebius.com/overview/regions).

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, "page_token": string, "region": string // [required] // Region name (eu-north2, us-central1, eu-west1, etc.) // For details, see https://docs.nebius.com/overview/regions. } ``` ```json theme={null} nebius compute image list-public ' { "page_size": 0, "page_token": "", "region": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute image operation get Source: https://docs.nebius.com/cli/reference/compute/image/operation/get

Name

nebius compute image operation get

Get operation by ID.

Synopsis

``` nebius compute image operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute image operation Source: https://docs.nebius.com/cli/reference/compute/image/operation/index

Name

nebius compute image operation

Manage operations for Image service.

Commands

nebius compute image operation get

Get operation by ID.

nebius compute image operation list

List operations by resource ID.

nebius compute image operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute image operation list Source: https://docs.nebius.com/cli/reference/compute/image/operation/list

Name

nebius compute image operation list

List operations by resource ID.

Synopsis

``` nebius compute image operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute image operation wait Source: https://docs.nebius.com/cli/reference/compute/image/operation/wait

Name

nebius compute image operation wait

Wait for operation to complete.

Synopsis

``` nebius compute image operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute image update Source: https://docs.nebius.com/cli/reference/compute/image/update

Name

nebius compute image update

Updates an existing image resource. Only specific fields can be updated, such as labels and name.

Synopsis

``` nebius compute image update [id] --description --id --labels --labels-add --labels-remove --name --parent-id --recommended-platforms --resource-version --unsupported-platforms --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--description` (string)

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--recommended-platforms` (string array)

List of platforms where this image is recommended to use.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--unsupported-platforms` (string->string)

List of platforms where this image is not supported with explanation.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "description": string, "recommended_platforms": [string], // List of platforms where this image is recommended to use. "unsupported_platforms": { // [map] // List of platforms where this image is not supported with explanation. string: string } } } ``` ```json theme={null} nebius compute image update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "description": "", "recommended_platforms": [""], "unsupported_platforms": { "": "" } } } ' ``` *Auto generated on 15-Jul-2026* # nebius compute Source: https://docs.nebius.com/cli/reference/compute/index

Name

nebius compute

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute instance batch-get Source: https://docs.nebius.com/cli/reference/compute/instance/batch-get

Name

nebius compute instance batch-get

Retrieves detailed information about specific VMs by their IDs.
If instance cannot be retrieved (e.g. not found) error is returned in place of instance instead.

Synopsis

``` nebius compute instance batch-get --instance-ids [required] ```

Options

`--instance-ids` (string array) \[required]

List of instances to fetch.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "instance_ids": [string] // [required] // List of instances to fetch. } ``` ```json theme={null} nebius compute instance batch-get ' { "instance_ids": [""] } ' ``` *Auto generated on 15-Jul-2026* # nebius compute instance create Source: https://docs.nebius.com/cli/reference/compute/instance/create

Name

nebius compute instance create

Creates a new VM instance based on the provided specification.
For details, see [https://docs.nebius.com/compute/virtual-machines/manage](https://docs.nebius.com/compute/virtual-machines/manage).

Synopsis

``` nebius compute instance create --boot-disk-attach-mode [required] --boot-disk-device-id --boot-disk-existing-disk-id --boot-disk-managed-disk-block-size-bytes --boot-disk-managed-disk-disk-encryption-type --boot-disk-managed-disk-forbid-deletion --boot-disk-managed-disk-labels --boot-disk-managed-disk-name --boot-disk-managed-disk-size-bytes --boot-disk-managed-disk-size-gibibytes --boot-disk-managed-disk-size-kibibytes --boot-disk-managed-disk-size-mebibytes --boot-disk-managed-disk-source-image-family-image-family --boot-disk-managed-disk-source-image-family-parent-id --boot-disk-managed-disk-source-image-id --boot-disk-managed-disk-source-snapshot-id --boot-disk-managed-disk-type --cloud-init-user-data --filesystems --gpu-cluster-id --hostname --labels --local-disks-passthrough-group-requested --name --network-interfaces [required] --nvl-instance-group-id --parent-id [required] --preemptible-on-preemption --preemptible-priority --recovery-policy --reservation-policy-policy --reservation-policy-reservation-ids --resource-version --resources-platform [required] --resources-preset [required] --secondary-disks --service-account-id --stopped --async -i, --interactive ```

Options

`--boot-disk-attach-mode` (string) \[required]

A value must be one of:

  • read\_only
  • read\_write

`--boot-disk-device-id` (string)

Specifies the user-defined identifier, allowing to use '/dev/disk/by-id/virtio-' as a device path in mount command.

`--boot-disk-existing-disk-id` (string)

Mutually exclusive with: `--boot-disk-managed-disk-block-size-bytes`, `--boot-disk-managed-disk-disk-encryption-type`, `--boot-disk-managed-disk-forbid-deletion`, `--boot-disk-managed-disk-labels`, `--boot-disk-managed-disk-name`, `--boot-disk-managed-disk-size-bytes`, `--boot-disk-managed-disk-size-gibibytes`, `--boot-disk-managed-disk-size-kibibytes`, `--boot-disk-managed-disk-size-mebibytes`, `--boot-disk-managed-disk-source-image-family-image-family`, `--boot-disk-managed-disk-source-image-family-parent-id`, `--boot-disk-managed-disk-source-image-id`, `--boot-disk-managed-disk-source-snapshot-id`, `--boot-disk-managed-disk-type`.

`--boot-disk-managed-disk-block-size-bytes` (int64)

Block size in bytes.
The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB).
The default value is 4096 bytes (4 KiB).

Mutually exclusive with: `--boot-disk-existing-disk-id`.

`--boot-disk-managed-disk-disk-encryption-type` (string)

A value must be one of:

  • disk\_encryption\_unspecified
  • disk\_encryption\_managed

Mutually exclusive with: `--boot-disk-existing-disk-id`.

`--boot-disk-managed-disk-forbid-deletion` (bool)

Prevents deletion whilst set.

Mutually exclusive with: `--boot-disk-existing-disk-id`.

`--boot-disk-managed-disk-labels` (string->string)

Labels associated with disk resource.

Mutually exclusive with: `--boot-disk-existing-disk-id`.

`--boot-disk-managed-disk-name` (string)

Name of a dependent disk.
Use it to convert an ExistingDisk to a dependent disk.
Changing the name will replace the disk and cause data loss.

Mutually exclusive with: `--boot-disk-existing-disk-id`.

`--boot-disk-managed-disk-size-bytes` (int64)

Mutually exclusive with: `--boot-disk-existing-disk-id`, `--boot-disk-managed-disk-size-gibibytes`, `--boot-disk-managed-disk-size-kibibytes`, `--boot-disk-managed-disk-size-mebibytes`.

`--boot-disk-managed-disk-size-gibibytes` (int64)

Mutually exclusive with: `--boot-disk-existing-disk-id`, `--boot-disk-managed-disk-size-bytes`, `--boot-disk-managed-disk-size-kibibytes`, `--boot-disk-managed-disk-size-mebibytes`.

`--boot-disk-managed-disk-size-kibibytes` (int64)

Mutually exclusive with: `--boot-disk-existing-disk-id`, `--boot-disk-managed-disk-size-bytes`, `--boot-disk-managed-disk-size-gibibytes`, `--boot-disk-managed-disk-size-mebibytes`.

`--boot-disk-managed-disk-size-mebibytes` (int64)

Mutually exclusive with: `--boot-disk-existing-disk-id`, `--boot-disk-managed-disk-size-bytes`, `--boot-disk-managed-disk-size-gibibytes`, `--boot-disk-managed-disk-size-kibibytes`.

`--boot-disk-managed-disk-source-image-family-image-family` (string)

Mutually exclusive with: `--boot-disk-existing-disk-id`, `--boot-disk-managed-disk-source-image-id`, `--boot-disk-managed-disk-source-snapshot-id`.

`--boot-disk-managed-disk-source-image-family-parent-id` (string)

Mutually exclusive with: `--boot-disk-existing-disk-id`, `--boot-disk-managed-disk-source-image-id`, `--boot-disk-managed-disk-source-snapshot-id`.

`--boot-disk-managed-disk-source-image-id` (string)

Mutually exclusive with: `--boot-disk-existing-disk-id`, `--boot-disk-managed-disk-source-image-family-image-family`, `--boot-disk-managed-disk-source-image-family-parent-id`, `--boot-disk-managed-disk-source-snapshot-id`.

`--boot-disk-managed-disk-source-snapshot-id` (string)

Mutually exclusive with: `--boot-disk-existing-disk-id`, `--boot-disk-managed-disk-source-image-family-image-family`, `--boot-disk-managed-disk-source-image-family-parent-id`, `--boot-disk-managed-disk-source-image-id`.

`--boot-disk-managed-disk-type` (string)

The type of disk defines the performance and reliability characteristics of the block device.
For details, see [https://docs.nebius.com/compute/storage/types#disks-types](https://docs.nebius.com/compute/storage/types#disks-types).

A value must be one of:

  • unspecified
  • network\_ssd
  • network\_hdd
  • network\_ssd\_non\_replicated
  • network\_ssd\_io\_m3

Mutually exclusive with: `--boot-disk-existing-disk-id`.

`--cloud-init-user-data` (string)

Data in cloud-init format for customizing instance initialization.
For details, see [https://docs.nebius.com/compute/virtual-machines/manage#user-data](https://docs.nebius.com/compute/virtual-machines/manage#user-data).

`--filesystems` (json)

List of Shared Filesystems attached to the instance.

(structure)

attach\_mode -> (string)\[required]

A value must be one of:

  • "unspecified"
  • "read\_only"
  • "read\_write"

existing\_filesystem -> (structure)

id -> (string)\[required]

mount\_tag -> (string)\[required]

Specifies the user-defined identifier, allowing to use it as a device in mount command.

JSON Schema:

```json theme={null} [{ "attach_mode": "unspecified"|"read_only"|"read_write", "existing_filesystem": { "id": "" }, "mount_tag": "" }] ```

`--gpu-cluster-id` (string)

If you want to interconnect several instances in a GPU cluster via NVIDIA InfiniBand,
set the ID of an existing GPU cluster.
You can only add the VM to the cluster when creating the VM.
For details, see [https://docs.nebius.com/compute/clusters/gpu](https://docs.nebius.com/compute/clusters/gpu).

`--hostname` (string)

Instance's hostname. Used to generate default DNS record in format `..compute.internal.`
or `..compute.internal.` if hostname is not specified.

`--labels` (string->string)

Labels associated with the resource.

`--local-disks-passthrough-group-requested` (bool)

Passthrough local disks from the underlying host.

Devices are expected to appear in the guest as NVMe devices (nvme0, nvme1, ...),
but the exact number depends on the preset.
Enabled only when this field is explicitly set.

`--name` (string)

Human readable name for the resource.

`--network-interfaces` (json) \[required]

List of network interfaces attached to the instance.

(structure)

aliases -> (structure)

Assign ranges of IP addresses as aliases.

allocation\_id -> (string)\[required]

ID of allocation.

ip\_address -> (structure)\[required] \[immutable] \[meaningful\_empty\_value]

Private IPv4 address associated with the interface.

allocation\_id -> (string)

Allocation identifier if it was created before.

name -> (string)\[required] \[immutable]

Interface name
Value of this field configures the name of the network interface inside VM's OS.
Longer values will persist in the specification but will be truncated to 15 symbols before being passed to VM configuration.

public\_ip\_address -> (structure)\[meaningful\_empty\_value]

Public IPv4 address associated with the interface.

allocation\_id -> (string)

Allocation identifier if it was created before.

static -> (bool)

If false - Allocation will be created/deleted during NetworkInterface.Allocate/NetworkInterface.Deallocate
If true - Allocation will be created/deleted during NetworkInterface.Create/NetworkInterface.Delete
False by default.

security\_groups -> (structure)

Security groups associated with the network interface.
If an empty list is provided, the default security group for the network will be used.
Effective security groups can be seen in the status.

id -> (string)

Security group identifier.

subnet\_id -> (string)\[required] \[immutable]

Subnet ID.

JSON Schema:

```json theme={null} [{ "aliases": [{ "allocation_id": "" }], "ip_address": { "allocation_id": "" }, "name": "", "public_ip_address": { "allocation_id": "", "static": false }, "security_groups": [{ "id": "" }], "subnet_id": "" }] ```

`--nvl-instance-group-id` (string)

NVLink Instance Group ID associated with the VM.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--preemptible-on-preemption` (string)

Specifies what happens when the VM is preempted. The only supported value is STOP:
Compute stops the VM without deleting or restarting it.

A value must be one of:

  • unspecified
  • stop

`--preemptible-priority` (int32)

`--recovery-policy` (string)

Recovery policy defines how the instance will be treated in case of a failure.
Common source of failure is a host failure, but it can be any other failure.
Instance undergoing a guest shutdown (poweroff, etc.) will be subject to recovery policy, meaning that it could
be restarted and billed accordingly. Stop instance via API or UI to stop it to avoid recovering.
* If set to RECOVER, instance will be restarted, if possible. It could be restarted on the same host or on another host.
* If set to FAIL, instance will be stopped and not restarted.

A value must be one of:

  • recover
  • fail

`--reservation-policy-policy` (string)

A value must be one of:

  • auto
  • forbid
  • strict

`--reservation-policy-reservation-ids` (string array)

Capacity block groups, order matters.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--resources-platform` (string) \[required]

`--resources-preset` (string) \[required]

`--secondary-disks` (json)

List of additional data disks attached to the instance beyond the boot disk.

(structure)

attach\_mode -> (string)\[required]

A value must be one of:

  • "unspecified"
  • "read\_only"
  • "read\_write"

device\_id -> (string)

Specifies the user-defined identifier, allowing to use '/dev/disk/by-id/virtio-' as a device path in mount command.

existing\_disk -> (structure)

Attach an existing disk.

Lifecycle:
* The disk is preserved when the instance is deleted (it will be detached).

Switching to a managed disk:
* To delete the disk together with the instance, switch to ManagedDisk in the instance spec.
* For the switch, `ManagedDisk.name` MUST match the current disk `name`
(see DiskService.Get for the disk referenced by `ExistingDisk.id`).
* When converting an ExistingDisk to a ManagedDisk, you must provide `ManagedDisk.name` and `ManagedDisk.spec`
exactly as they are currently defined in the disk resource.
Obtain the current values via `DiskService.Get` and copy them verbatim.
If `ManagedDisk.spec` differs from the current disk spec, the instance update will fail.

Mutually exclusive with: managed\_disk.

id -> (string)\[required]

managed\_disk -> (structure)

Attach a managed disk.

Lifecycle:
* The disk is deleted when the instance is deleted.

Semantics:
* Specifying a ManagedDisk expresses an intent to have that managed disk attached.
* If this intent cannot be satisfied, the entire operation fails.
* You can check the intent status in `instance.status.disk_attachments`.

Updates and matching:
* Managed disks can be updated only via instance spec updates. Updates via DiskService are not allowed.
* During updates, disks are matched by `name`.

Renaming and data loss:
* Changing the disk `name` triggers disk replacement (create a new disk and delete the old one),
which causes data loss.
* To rename a managed disk safely:
1. switch it to ExistingDisk in the instance spec, and
2. update/rename it via DiskService.

Conflicts:
* Instance create/update fails if there is already a disk with the same `name`.
as requested by any ManagedDisk.

Finding the disk ID:
* The disk ID is available in `instance.status.disk_attachments` after it is created.
Use `DiskAttachmentStatus.name` to find the desired disk which matches `name`.

Switching to an existing (non-managed) disk:
* To preserve the disk after instance deletion, switch it to ExistingDisk in the instance spec,
use the disk ID from `instance.status.disk_attachments`.

Deletion protection:
* Switching ExistingDisk to ManagedDisk fails if `Disk.spec.deletion_protection` is enabled.
* Deleting an instance that has a ManagedDisk fails if `Disk.spec.deletion_protection` is enabled.

Mutually exclusive with: existing\_disk.

labels -> (map)\[map]

Labels associated with disk resource.

key -> (string)

value -> (string)

name -> (string)\[required]

Name of a dependent disk.
Use it to convert an ExistingDisk to a dependent disk.
Changing the name will replace the disk and cause data loss.

spec -> (structure)\[required]

Specification of a dependent disk to be created.

block\_size\_bytes -> (int64)\[immutable]

Block size in bytes.
The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB).
The default value is 4096 bytes (4 KiB).

disk\_encryption -> (structure)\[immutable]

Defines how data on the disk is encrypted. By default, no encryption is applied.

type -> (string)

A value must be one of:

  • "disk\_encryption\_unspecified"
  • "disk\_encryption\_managed"

forbid\_deletion -> (bool)

Prevents deletion whilst set.

size\_bytes -> (int64)

Mutually exclusive with: size\_gibibytes, size\_kibibytes, size\_mebibytes.

size\_gibibytes -> (int64)

Mutually exclusive with: size\_bytes, size\_kibibytes, size\_mebibytes.

size\_kibibytes -> (int64)

Mutually exclusive with: size\_bytes, size\_gibibytes, size\_mebibytes.

size\_mebibytes -> (int64)

Mutually exclusive with: size\_bytes, size\_gibibytes, size\_kibibytes.

source\_image\_family -> (structure)\[immutable]

Mutually exclusive with: source\_image\_id, source\_snapshot\_id.

image\_family -> (string)\[required]

parent\_id -> (string)

source\_image\_id -> (string)\[immutable]

Mutually exclusive with: source\_image\_family, source\_snapshot\_id.

source\_snapshot\_id -> (string)\[immutable]

Mutually exclusive with: source\_image\_family, source\_image\_id.

type -> (string)\[required] \[immutable]

The type of disk defines the performance and reliability characteristics of the block device.
For details, see [https://docs.nebius.com/compute/storage/types#disks-types](https://docs.nebius.com/compute/storage/types#disks-types).

A value must be one of:

  • "unspecified"
  • "network\_ssd"
  • "network\_hdd"
  • "network\_ssd\_non\_replicated"
  • "network\_ssd\_io\_m3"

JSON Schema:

```json theme={null} [{ "attach_mode": "unspecified"|"read_only"|"read_write", "device_id": "", "existing_disk": { "id": "" } }] ```

`--service-account-id` (string)

Unique identifier of the service account associated with this instance.
For details, see [https://docs.nebius.com/iam/service-accounts/manage](https://docs.nebius.com/iam/service-accounts/manage).

`--stopped` (bool)

Indicates whether the instance should be stopped.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "boot_disk": { // [required] // Specified boot disk attached to the instance. "attach_mode": enum( // [required] "UNSPECIFIED", "READ_ONLY", "READ_WRITE" ), "device_id": string, // Specifies the user-defined identifier, allowing to use '/dev/disk/by-id/virtio-{device_id}' as a device path in mount command. "existing_disk": { // Cannot be set together with: managed_disk // Attach an existing disk. // // Lifecycle: // - The disk is preserved when the instance is deleted (it will be detached). // // Switching to a managed disk: // - To delete the disk together with the instance, switch to ManagedDisk in the instance spec. // - For the switch, `ManagedDisk.name` MUST match the current disk `name` // (see DiskService.Get for the disk referenced by `ExistingDisk.id`). // - When converting an ExistingDisk to a ManagedDisk, you must provide `ManagedDisk.name` and `ManagedDisk.spec` // exactly as they are currently defined in the disk resource. // Obtain the current values via `DiskService.Get` and copy them verbatim. // If `ManagedDisk.spec` differs from the current disk spec, the instance update will fail. "id": string // [required] }, "managed_disk": { // Cannot be set together with: existing_disk // Attach a managed disk. // // Lifecycle: // - The disk is deleted when the instance is deleted. // // Semantics: // - Specifying a ManagedDisk expresses an intent to have that managed disk attached. // - If this intent cannot be satisfied, the entire operation fails. // - You can check the intent status in `instance.status.disk_attachments`. // // Updates and matching: // - Managed disks can be updated only via instance spec updates. Updates via DiskService are not allowed. // - During updates, disks are matched by `name`. // // Renaming and data loss: // - Changing the disk `name` triggers disk replacement (create a new disk and delete the old one), // which causes data loss. // - To rename a managed disk safely: // 1) switch it to ExistingDisk in the instance spec, and // 2) update/rename it via DiskService. // // Conflicts: // - Instance create/update fails if there is already a disk with the same `name`. // as requested by any ManagedDisk. // // Finding the disk ID: // - The disk ID is available in `instance.status.disk_attachments` after it is created. // Use `DiskAttachmentStatus.name` to find the desired disk which matches `name`. // // Switching to an existing (non-managed) disk: // - To preserve the disk after instance deletion, switch it to ExistingDisk in the instance spec, // use the disk ID from `instance.status.disk_attachments`. // // Deletion protection: // - Switching ExistingDisk to ManagedDisk fails if `Disk.spec.deletion_protection` is enabled. // - Deleting an instance that has a ManagedDisk fails if `Disk.spec.deletion_protection` is enabled. "labels": { // [map] // Labels associated with disk resource. string: string }, "name": string, // [required] // Name of a dependent disk. // Use it to convert an ExistingDisk to a dependent disk. // Changing the name will replace the disk and cause data loss. "spec": { // [required] // Specification of a dependent disk to be created. "block_size_bytes": int64, // [immutable] // Block size in bytes. // The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB). // The default value is 4096 bytes (4 KiB). "disk_encryption": { // [immutable] // Defines how data on the disk is encrypted. By default, no encryption is applied. "type": enum( "DISK_ENCRYPTION_UNSPECIFIED", // No encryption is applied unless explicitly specified. "DISK_ENCRYPTION_MANAGED" // Enables encryption using the platform's default root key from KMS. // Available for disks with NETWORK_SSD_NON_REPLICATED and NETWORK_SSD_IO_M3 types only. ) }, "forbid_deletion": bool, // Prevents deletion whilst set. "size_bytes": int64, // Cannot be set together with: size_kibibytes, size_mebibytes, size_gibibytes "size_gibibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_mebibytes "size_kibibytes": int64, // Cannot be set together with: size_bytes, size_mebibytes, size_gibibytes "size_mebibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_gibibytes "source_image_family": { // [immutable] // Cannot be set together with: source_image_id, source_snapshot_id "image_family": string, // [required] "parent_id": string }, "source_image_id": string, // [immutable] // Cannot be set together with: source_image_family, source_snapshot_id "source_snapshot_id": string, // [immutable] // Cannot be set together with: source_image_id, source_image_family "type": enum( // [required] [immutable] // The type of disk defines the performance and reliability characteristics of the block device. // For details, see https://docs.nebius.com/compute/storage/types#disks-types. "UNSPECIFIED", "NETWORK_SSD", "NETWORK_HDD", "NETWORK_SSD_NON_REPLICATED", "NETWORK_SSD_IO_M3" ) } } }, "cloud_init_user_data": string, // [sensitive] // Data in cloud-init format for customizing instance initialization. // For details, see https://docs.nebius.com/compute/virtual-machines/manage#user-data. "filesystems": [{ // List of Shared Filesystems attached to the instance. "attach_mode": enum( // [required] "UNSPECIFIED", "READ_ONLY", "READ_WRITE" ), "existing_filesystem": { "id": string // [required] }, "mount_tag": string // [required] // Specifies the user-defined identifier, allowing to use it as a device in mount command. }], "gpu_cluster": { // [immutable] // If you want to interconnect several instances in a GPU cluster via NVIDIA InfiniBand, // set the ID of an existing GPU cluster. // You can only add the VM to the cluster when creating the VM. // For details, see https://docs.nebius.com/compute/clusters/gpu. "id": string // If you want to interconnect several instances in a GPU cluster via NVIDIA InfiniBand, // set the ID of an existing GPU cluster. // You can only add the VM to the cluster when creating the VM. // For details, see https://docs.nebius.com/compute/clusters/gpu. }, "hostname": string, // Instance's hostname. Used to generate default DNS record in format `..compute.internal.` // or `..compute.internal.` if hostname is not specified. "local_disks": { // Local disks are meaningfully different from regular (remote) disks: // they are provided by the underlying host and are tied to a particular VM run. // Local disk data is not preserved across Stop-Start initiated via Compute API. // Local disks are not provided by default. To get them, explicitly request them via this field. // Availability depends on the selected platform, preset and region. // Changing this field will result in disks change and content loss, but only after stop and start the instance. "passthrough_group": { // Requests passthrough local disks from the host. // Topology of the provided disks is preserved during stop and start // for every instance of a specific platform and preset in the region. "requested": bool // Passthrough local disks from the underlying host. // // Devices are expected to appear in the guest as NVMe devices (nvme0, nvme1, ...), // but the exact number depends on the preset. // Enabled only when this field is explicitly set. } }, "network_interfaces": [{ // [required] // List of network interfaces attached to the instance. "aliases": [{ // Assign ranges of IP addresses as aliases. "allocation_id": string // [required] // ID of allocation. }], "ip_address": { // [required] [immutable] [meaningful_empty_value] // Private IPv4 address associated with the interface. "allocation_id": string // Allocation identifier if it was created before. }, "name": string, // [required] [immutable] // Interface name // Value of this field configures the name of the network interface inside VM's OS. // Longer values will persist in the specification but will be truncated to 15 symbols before being passed to VM configuration. "public_ip_address": { // [meaningful_empty_value] // Public IPv4 address associated with the interface. "allocation_id": string, // Allocation identifier if it was created before. "static": bool // If false - Allocation will be created/deleted during NetworkInterface.Allocate/NetworkInterface.Deallocate // If true - Allocation will be created/deleted during NetworkInterface.Create/NetworkInterface.Delete // False by default. }, "security_groups": [{ // Security groups associated with the network interface. // If an empty list is provided, the default security group for the network will be used. // Effective security groups can be seen in the status. "id": string // Security group identifier. }], "subnet_id": string // [required] [immutable] // Subnet ID. }], "nvl_instance_group_id": string, // NVLink Instance Group ID associated with the VM. "preemptible": { // [immutable] // Include these parameters to create a Preemptible VM and omit them to create a Regular VM // For details, see https://docs.nebius.com/compute/virtual-machines/preemptible. "on_preemption": enum( // [required] [immutable] // Specifies what happens when the VM is preempted. The only supported value is STOP: // Compute stops the VM without deleting or restarting it. "UNSPECIFIED", "STOP" ), "priority": int32 // [deprecated: supported until 2026-05-11] [immutable] // It is deprecated and doesn't affect preemption behavior anymore. }, "recovery_policy": enum( // [immutable] // Recovery policy defines how the instance will be treated in case of a failure. // Common source of failure is a host failure, but it can be any other failure. // Instance undergoing a guest shutdown (poweroff, etc.) will be subject to recovery policy, meaning that it could // be restarted and billed accordingly. Stop instance via API or UI to stop it to avoid recovering. // - If set to RECOVER, instance will be restarted, if possible. It could be restarted on the same host or on another host. // - If set to FAIL, instance will be stopped and not restarted. "RECOVER", "FAIL" ), "reservation_policy": { "policy": enum( "AUTO", // 1) Will try to launch instance in any reservation_ids if provided. // 2) Will try to launch instance in any of the available capacity block. // 3) Will try to launch instance in PAYG if 1 & 2 are not satisfied. "FORBID", // The instance is launched only using on-demand (PAYG) capacity. // No attempt is made to find or use a Capacity Block. // It's an error to provide reservation_ids with policy = FORBID. "STRICT" // 1) Will try to launch the instance in Capacity Blocks from reservation_ids if provided. // 2) If reservation_ids are not provided will try to launch instance in suitable & available Capacity Block. // 3) Fail otherwise. ), "reservation_ids": [string] // Capacity block groups, order matters. }, "resources": { // [required] // Specification of compute resources allocated to the instance. // For details, see https://docs.nebius.com/compute/virtual-machines/types. "platform": string, // [required] [immutable] "preset": string }, "secondary_disks": [{ // List of additional data disks attached to the instance beyond the boot disk. "attach_mode": enum( // [required] "UNSPECIFIED", "READ_ONLY", "READ_WRITE" ), "device_id": string, // Specifies the user-defined identifier, allowing to use '/dev/disk/by-id/virtio-{device_id}' as a device path in mount command. "existing_disk": { // Cannot be set together with: managed_disk // Attach an existing disk. // // Lifecycle: // - The disk is preserved when the instance is deleted (it will be detached). // // Switching to a managed disk: // - To delete the disk together with the instance, switch to ManagedDisk in the instance spec. // - For the switch, `ManagedDisk.name` MUST match the current disk `name` // (see DiskService.Get for the disk referenced by `ExistingDisk.id`). // - When converting an ExistingDisk to a ManagedDisk, you must provide `ManagedDisk.name` and `ManagedDisk.spec` // exactly as they are currently defined in the disk resource. // Obtain the current values via `DiskService.Get` and copy them verbatim. // If `ManagedDisk.spec` differs from the current disk spec, the instance update will fail. "id": string // [required] }, "managed_disk": { // Cannot be set together with: existing_disk // Attach a managed disk. // // Lifecycle: // - The disk is deleted when the instance is deleted. // // Semantics: // - Specifying a ManagedDisk expresses an intent to have that managed disk attached. // - If this intent cannot be satisfied, the entire operation fails. // - You can check the intent status in `instance.status.disk_attachments`. // // Updates and matching: // - Managed disks can be updated only via instance spec updates. Updates via DiskService are not allowed. // - During updates, disks are matched by `name`. // // Renaming and data loss: // - Changing the disk `name` triggers disk replacement (create a new disk and delete the old one), // which causes data loss. // - To rename a managed disk safely: // 1) switch it to ExistingDisk in the instance spec, and // 2) update/rename it via DiskService. // // Conflicts: // - Instance create/update fails if there is already a disk with the same `name`. // as requested by any ManagedDisk. // // Finding the disk ID: // - The disk ID is available in `instance.status.disk_attachments` after it is created. // Use `DiskAttachmentStatus.name` to find the desired disk which matches `name`. // // Switching to an existing (non-managed) disk: // - To preserve the disk after instance deletion, switch it to ExistingDisk in the instance spec, // use the disk ID from `instance.status.disk_attachments`. // // Deletion protection: // - Switching ExistingDisk to ManagedDisk fails if `Disk.spec.deletion_protection` is enabled. // - Deleting an instance that has a ManagedDisk fails if `Disk.spec.deletion_protection` is enabled. "labels": { // [map] // Labels associated with disk resource. string: string }, "name": string, // [required] // Name of a dependent disk. // Use it to convert an ExistingDisk to a dependent disk. // Changing the name will replace the disk and cause data loss. "spec": { // [required] // Specification of a dependent disk to be created. "block_size_bytes": int64, // [immutable] // Block size in bytes. // The block size must be a power of two between 4096 bytes (4 KiB) and 131072 bytes (128 KiB). // The default value is 4096 bytes (4 KiB). "disk_encryption": { // [immutable] // Defines how data on the disk is encrypted. By default, no encryption is applied. "type": enum( "DISK_ENCRYPTION_UNSPECIFIED", // No encryption is applied unless explicitly specified. "DISK_ENCRYPTION_MANAGED" // Enables encryption using the platform's default root key from KMS. // Available for disks with NETWORK_SSD_NON_REPLICATED and NETWORK_SSD_IO_M3 types only. ) }, "forbid_deletion": bool, // Prevents deletion whilst set. "size_bytes": int64, // Cannot be set together with: size_kibibytes, size_mebibytes, size_gibibytes "size_gibibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_mebibytes "size_kibibytes": int64, // Cannot be set together with: size_bytes, size_mebibytes, size_gibibytes "size_mebibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_gibibytes "source_image_family": { // [immutable] // Cannot be set together with: source_image_id, source_snapshot_id "image_family": string, // [required] "parent_id": string }, "source_image_id": string, // [immutable] // Cannot be set together with: source_image_family, source_snapshot_id "source_snapshot_id": string, // [immutable] // Cannot be set together with: source_image_id, source_image_family "type": enum( // [required] [immutable] // The type of disk defines the performance and reliability characteristics of the block device. // For details, see https://docs.nebius.com/compute/storage/types#disks-types. "UNSPECIFIED", "NETWORK_SSD", "NETWORK_HDD", "NETWORK_SSD_NON_REPLICATED", "NETWORK_SSD_IO_M3" ) } } }], "service_account_id": string, // [immutable] // Unique identifier of the service account associated with this instance. // For details, see https://docs.nebius.com/iam/service-accounts/manage. "stopped": bool // Indicates whether the instance should be stopped. } } ``` ```json theme={null} nebius compute instance create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "boot_disk": { "attach_mode": "unspecified"|"read_only"|"read_write", "device_id": "", "existing_disk": { "id": "" } }, "cloud_init_user_data": "", "filesystems": [{ "attach_mode": "unspecified"|"read_only"|"read_write", "existing_filesystem": { "id": "" }, "mount_tag": "" }], "gpu_cluster": { "id": "" }, "hostname": "", "local_disks": { "passthrough_group": { "requested": false } }, "network_interfaces": [{ "aliases": [{ "allocation_id": "" }], "ip_address": { "allocation_id": "" }, "name": "", "public_ip_address": { "allocation_id": "", "static": false }, "security_groups": [{ "id": "" }], "subnet_id": "" }], "nvl_instance_group_id": "", "preemptible": { "on_preemption": "unspecified"|"stop", "priority": 0 }, "recovery_policy": "recover"|"fail", "reservation_policy": { "policy": "auto"|"forbid"|"strict", "reservation_ids": [""] }, "resources": { "platform": "", "preset": "" }, "secondary_disks": [{ "attach_mode": "unspecified"|"read_only"|"read_write", "device_id": "", "existing_disk": { "id": "" } }], "service_account_id": "", "stopped": false } } ' ``` *Auto generated on 15-Jul-2026* # nebius compute instance delete Source: https://docs.nebius.com/cli/reference/compute/instance/delete

Name

nebius compute instance delete

Deletes a VM instance by its ID. Also deletes all the managed disks, declared in the instance spec.
Fails if cannot delete any of the managed disks.

Synopsis

``` nebius compute instance delete [id] --id --async ```

Positional Arguments

id

ID of the resource to delete.

Options

`--id` (string)

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string } ``` ```json theme={null} nebius compute instance delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute instance edit Source: https://docs.nebius.com/cli/reference/compute/instance/edit

Name

nebius compute instance edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius compute instance edit [id] --async --editor --id ```

Positional Arguments

id

ID of the resource to edit.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute instance edit-by-name Source: https://docs.nebius.com/cli/reference/compute/instance/edit-by-name

Name

nebius compute instance edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

Synopsis

``` nebius compute instance edit-by-name --async --editor --name --parent-id ```

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--name` (string)

`--parent-id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute instance get Source: https://docs.nebius.com/cli/reference/compute/instance/get

Name

nebius compute instance get

Retrieves detailed information about a specific VM instance by its ID.

Synopsis

``` nebius compute instance get [id] --id ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string } ``` ```json theme={null} nebius compute instance get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute instance get-by-name Source: https://docs.nebius.com/cli/reference/compute/instance/get-by-name

Name

nebius compute instance get-by-name

Retrieves detailed information about a specific VM instance by its parent and name.

Synopsis

``` nebius compute instance get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

`--parent-id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // [required] } ``` ```json theme={null} nebius compute instance get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute instance Source: https://docs.nebius.com/cli/reference/compute/instance/index

Name

nebius compute instance

Commands

nebius compute instance batch-get

Retrieves detailed information about specific VMs by their IDs.
If instance cannot be retrieved (e.g. not found) error is returned in place of instance instead.

nebius compute instance create

Creates a new VM instance based on the provided specification.
For details, see [https://docs.nebius.com/compute/virtual-machines/manage](https://docs.nebius.com/compute/virtual-machines/manage).

nebius compute instance delete

Deletes a VM instance by its ID. Also deletes all the managed disks, declared in the instance spec.
Fails if cannot delete any of the managed disks.

nebius compute instance edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius compute instance edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

nebius compute instance get

Retrieves detailed information about a specific VM instance by its ID.

nebius compute instance get-by-name

Retrieves detailed information about a specific VM instance by its parent and name.

nebius compute instance list

Lists all VM instances within a specified parent.

nebius compute instance list-operations-by-parent

Lists all operations that were performed within a specific parent resource.

nebius compute instance logs

Show logs for Instance

nebius compute instance operation

Manage operations for Instance service.

nebius compute instance start

Starts a stopped VM instance.

nebius compute instance stop

Stops a running VM instance.

nebius compute instance update

Updates an existing VM instance with new configuration parameters.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute instance list Source: https://docs.nebius.com/cli/reference/compute/instance/list

Name

nebius compute instance list

Lists all VM instances within a specified parent.

Synopsis

``` nebius compute instance list --page-size --page-token --parent-id --all -i, --interactive ```

Options

`--page-size` (int64)

`--page-token` (string)

`--parent-id` (string)

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, "page_token": string, "parent_id": string } ``` ```json theme={null} nebius compute instance list ' { "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute instance list-operations-by-parent Source: https://docs.nebius.com/cli/reference/compute/instance/list-operations-by-parent

Name

nebius compute instance list-operations-by-parent

Lists all operations that were performed within a specific parent resource.

Synopsis

``` nebius compute instance list-operations-by-parent --page-size --page-token --parent-id [required] ```

Options

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--parent-id` (string) \[required]

ID of the parent to list operations for resource type at.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, // Page size. [1...1000]. Optional, if not specified, a reasonable default will be chosen by the service. "page_token": string, // Listing continuation token. Empty to start listing from the first page. "parent_id": string // [required] // ID of the parent to list operations for resource type at. } ``` ```json theme={null} nebius compute instance list-operations-by-parent ' { "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute instance logs Source: https://docs.nebius.com/cli/reference/compute/instance/logs

Name

nebius compute instance logs

Show logs for Instance

Synopsis

``` nebius compute instance logs [id] --follow --forward --id --limit --project-id --query --since --until ```

Positional Arguments

id

ID of the resource.

Options

`--follow` (bool)

Stream new log entries as they arrive. Ignores --limit and --forward.

`--forward` (bool)

Display logs in chronological order (oldest first). By default, newest logs are shown first.

`--id` (string)

ID of the resource.

`--limit` (int)

Maximum number of log entries to return. Default is 100.

`--project-id` (string)

Project ID to query logs from. Defaults to parent-id from config if not set.

`--query` (string)

Filter log entries using LogQL syntax.
For more information see [https://docs.nebius.com/observability/logs/query-language](https://docs.nebius.com/observability/logs/query-language).

`--since` (string)

Show logs starting from this time.
Accepts a duration (7d, 2h, 30m, 10s, 100ms, 1d12h30m, now) of time before now or a timestamp in various formats: ('2006-01-02T15:04:05.999Z', '2006-01-02T15:04:05Z', '2006-01-02 15:04:05', '2006-01-02').
Default is 1d.

`--until` (string)

Show logs up to this time.
Accepts a duration (7d, 2h, 30m, 10s, 100ms, 1d12h30m, now) of time before now or a timestamp in various formats: ('2006-01-02T15:04:05.999Z', '2006-01-02T15:04:05Z', '2006-01-02 15:04:05', '2006-01-02').
Default is now.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute instance operation get Source: https://docs.nebius.com/cli/reference/compute/instance/operation/get

Name

nebius compute instance operation get

Get operation by ID.

Synopsis

``` nebius compute instance operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute instance operation Source: https://docs.nebius.com/cli/reference/compute/instance/operation/index

Name

nebius compute instance operation

Manage operations for Instance service.

Commands

nebius compute instance operation get

Get operation by ID.

nebius compute instance operation list

List operations by resource ID.

nebius compute instance operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute instance operation list Source: https://docs.nebius.com/cli/reference/compute/instance/operation/list

Name

nebius compute instance operation list

List operations by resource ID.

Synopsis

``` nebius compute instance operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute instance operation wait Source: https://docs.nebius.com/cli/reference/compute/instance/operation/wait

Name

nebius compute instance operation wait

Wait for operation to complete.

Synopsis

``` nebius compute instance operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute instance start Source: https://docs.nebius.com/cli/reference/compute/instance/start

Name

nebius compute instance start

Starts a stopped VM instance.

Synopsis

``` nebius compute instance start [id] --id --async ```

Positional Arguments

id

ID of the resource to start.

Options

`--id` (string)

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string } ``` ```json theme={null} nebius compute instance start ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute instance stop Source: https://docs.nebius.com/cli/reference/compute/instance/stop

Name

nebius compute instance stop

Stops a running VM instance.

Synopsis

``` nebius compute instance stop [id] --id --async ```

Positional Arguments

id

ID of the resource to stop.

Options

`--id` (string)

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string } ``` ```json theme={null} nebius compute instance stop ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute instance update Source: https://docs.nebius.com/cli/reference/compute/instance/update

Name

nebius compute instance update

Updates an existing VM instance with new configuration parameters.

Synopsis

``` nebius compute instance update [id] --boot-disk-attach-mode --boot-disk-device-id --boot-disk-existing-disk-id --boot-disk-managed-disk-forbid-deletion --boot-disk-managed-disk-labels --boot-disk-managed-disk-name --boot-disk-managed-disk-size-bytes --boot-disk-managed-disk-size-gibibytes --boot-disk-managed-disk-size-kibibytes --boot-disk-managed-disk-size-mebibytes --cloud-init-user-data --filesystems --hostname --id --labels --labels-add --labels-remove --local-disks-passthrough-group-requested --name --network-interfaces --nvl-instance-group-id --parent-id --reservation-policy-policy --reservation-policy-reservation-ids --resource-version --resources-preset --secondary-disks --stopped --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--boot-disk-attach-mode` (string)

A value must be one of:

  • unspecified
  • read\_only
  • read\_write

`--boot-disk-device-id` (string)

Specifies the user-defined identifier, allowing to use '/dev/disk/by-id/virtio-' as a device path in mount command.

`--boot-disk-existing-disk-id` (string)

Mutually exclusive with: `--boot-disk-managed-disk-forbid-deletion`, `--boot-disk-managed-disk-labels`, `--boot-disk-managed-disk-name`, `--boot-disk-managed-disk-size-bytes`, `--boot-disk-managed-disk-size-gibibytes`, `--boot-disk-managed-disk-size-kibibytes`, `--boot-disk-managed-disk-size-mebibytes`.

`--boot-disk-managed-disk-forbid-deletion` (bool)

Prevents deletion whilst set.

Mutually exclusive with: `--boot-disk-existing-disk-id`.

`--boot-disk-managed-disk-labels` (string->string)

Labels associated with disk resource.

Mutually exclusive with: `--boot-disk-existing-disk-id`.

`--boot-disk-managed-disk-name` (string)

Name of a dependent disk.
Use it to convert an ExistingDisk to a dependent disk.
Changing the name will replace the disk and cause data loss.

Mutually exclusive with: `--boot-disk-existing-disk-id`.

`--boot-disk-managed-disk-size-bytes` (int64)

Mutually exclusive with: `--boot-disk-existing-disk-id`, `--boot-disk-managed-disk-size-gibibytes`, `--boot-disk-managed-disk-size-kibibytes`, `--boot-disk-managed-disk-size-mebibytes`.

`--boot-disk-managed-disk-size-gibibytes` (int64)

Mutually exclusive with: `--boot-disk-existing-disk-id`, `--boot-disk-managed-disk-size-bytes`, `--boot-disk-managed-disk-size-kibibytes`, `--boot-disk-managed-disk-size-mebibytes`.

`--boot-disk-managed-disk-size-kibibytes` (int64)

Mutually exclusive with: `--boot-disk-existing-disk-id`, `--boot-disk-managed-disk-size-bytes`, `--boot-disk-managed-disk-size-gibibytes`, `--boot-disk-managed-disk-size-mebibytes`.

`--boot-disk-managed-disk-size-mebibytes` (int64)

Mutually exclusive with: `--boot-disk-existing-disk-id`, `--boot-disk-managed-disk-size-bytes`, `--boot-disk-managed-disk-size-gibibytes`, `--boot-disk-managed-disk-size-kibibytes`.

`--cloud-init-user-data` (string)

Data in cloud-init format for customizing instance initialization.
For details, see [https://docs.nebius.com/compute/virtual-machines/manage#user-data](https://docs.nebius.com/compute/virtual-machines/manage#user-data).

`--filesystems` (json)

List of Shared Filesystems attached to the instance.

(structure)

attach\_mode -> (string)\[required]

A value must be one of:

  • "unspecified"
  • "read\_only"
  • "read\_write"

existing\_filesystem -> (structure)

id -> (string)\[required]

mount\_tag -> (string)\[required]

Specifies the user-defined identifier, allowing to use it as a device in mount command.

JSON Schema:

```json theme={null} [{ "attach_mode": "unspecified"|"read_only"|"read_write", "existing_filesystem": { "id": "" }, "mount_tag": "" }] ```

`--hostname` (string)

Instance's hostname. Used to generate default DNS record in format `..compute.internal.`
or `..compute.internal.` if hostname is not specified.

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--local-disks-passthrough-group-requested` (bool)

Passthrough local disks from the underlying host.

Devices are expected to appear in the guest as NVMe devices (nvme0, nvme1, ...),
but the exact number depends on the preset.
Enabled only when this field is explicitly set.

`--name` (string)

Human readable name for the resource.

`--network-interfaces` (json)

List of network interfaces attached to the instance.

(structure)

aliases -> (structure)

Assign ranges of IP addresses as aliases.

allocation\_id -> (string)\[required]

ID of allocation.

public\_ip\_address -> (structure)\[meaningful\_empty\_value]

Public IPv4 address associated with the interface.

allocation\_id -> (string)

Allocation identifier if it was created before.

static -> (bool)

If false - Allocation will be created/deleted during NetworkInterface.Allocate/NetworkInterface.Deallocate
If true - Allocation will be created/deleted during NetworkInterface.Create/NetworkInterface.Delete
False by default.

security\_groups -> (structure)

Security groups associated with the network interface.
If an empty list is provided, the default security group for the network will be used.
Effective security groups can be seen in the status.

id -> (string)

Security group identifier.

JSON Schema:

```json theme={null} [{ "aliases": [{ "allocation_id": "" }], "public_ip_address": { "allocation_id": "", "static": false }, "security_groups": [{ "id": "" }] }] ```

`--nvl-instance-group-id` (string)

NVLink Instance Group ID associated with the VM.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--reservation-policy-policy` (string)

A value must be one of:

  • auto
  • forbid
  • strict

`--reservation-policy-reservation-ids` (string array)

Capacity block groups, order matters.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--resources-preset` (string)

`--secondary-disks` (json)

List of additional data disks attached to the instance beyond the boot disk.

(structure)

attach\_mode -> (string)\[required]

A value must be one of:

  • "unspecified"
  • "read\_only"
  • "read\_write"

device\_id -> (string)

Specifies the user-defined identifier, allowing to use '/dev/disk/by-id/virtio-' as a device path in mount command.

existing\_disk -> (structure)

Attach an existing disk.

Lifecycle:
* The disk is preserved when the instance is deleted (it will be detached).

Switching to a managed disk:
* To delete the disk together with the instance, switch to ManagedDisk in the instance spec.
* For the switch, `ManagedDisk.name` MUST match the current disk `name`
(see DiskService.Get for the disk referenced by `ExistingDisk.id`).
* When converting an ExistingDisk to a ManagedDisk, you must provide `ManagedDisk.name` and `ManagedDisk.spec`
exactly as they are currently defined in the disk resource.
Obtain the current values via `DiskService.Get` and copy them verbatim.
If `ManagedDisk.spec` differs from the current disk spec, the instance update will fail.

Mutually exclusive with: managed\_disk.

id -> (string)\[required]

managed\_disk -> (structure)

Attach a managed disk.

Lifecycle:
* The disk is deleted when the instance is deleted.

Semantics:
* Specifying a ManagedDisk expresses an intent to have that managed disk attached.
* If this intent cannot be satisfied, the entire operation fails.
* You can check the intent status in `instance.status.disk_attachments`.

Updates and matching:
* Managed disks can be updated only via instance spec updates. Updates via DiskService are not allowed.
* During updates, disks are matched by `name`.

Renaming and data loss:
* Changing the disk `name` triggers disk replacement (create a new disk and delete the old one),
which causes data loss.
* To rename a managed disk safely:
1. switch it to ExistingDisk in the instance spec, and
2. update/rename it via DiskService.

Conflicts:
* Instance create/update fails if there is already a disk with the same `name`.
as requested by any ManagedDisk.

Finding the disk ID:
* The disk ID is available in `instance.status.disk_attachments` after it is created.
Use `DiskAttachmentStatus.name` to find the desired disk which matches `name`.

Switching to an existing (non-managed) disk:
* To preserve the disk after instance deletion, switch it to ExistingDisk in the instance spec,
use the disk ID from `instance.status.disk_attachments`.

Deletion protection:
* Switching ExistingDisk to ManagedDisk fails if `Disk.spec.deletion_protection` is enabled.
* Deleting an instance that has a ManagedDisk fails if `Disk.spec.deletion_protection` is enabled.

Mutually exclusive with: existing\_disk.

labels -> (map)\[map]

Labels associated with disk resource.

key -> (string)

value -> (string)

name -> (string)\[required]

Name of a dependent disk.
Use it to convert an ExistingDisk to a dependent disk.
Changing the name will replace the disk and cause data loss.

spec -> (structure)\[required]

Specification of a dependent disk to be created.

forbid\_deletion -> (bool)

Prevents deletion whilst set.

size\_bytes -> (int64)

Mutually exclusive with: size\_gibibytes, size\_kibibytes, size\_mebibytes.

size\_gibibytes -> (int64)

Mutually exclusive with: size\_bytes, size\_kibibytes, size\_mebibytes.

size\_kibibytes -> (int64)

Mutually exclusive with: size\_bytes, size\_gibibytes, size\_mebibytes.

size\_mebibytes -> (int64)

Mutually exclusive with: size\_bytes, size\_gibibytes, size\_kibibytes.

JSON Schema:

```json theme={null} [{ "attach_mode": "unspecified"|"read_only"|"read_write", "device_id": "", "existing_disk": { "id": "" } }] ```

`--stopped` (bool)

Indicates whether the instance should be stopped.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "boot_disk": { // [required] // Specified boot disk attached to the instance. "attach_mode": enum( // [required] "UNSPECIFIED", "READ_ONLY", "READ_WRITE" ), "device_id": string, // Specifies the user-defined identifier, allowing to use '/dev/disk/by-id/virtio-{device_id}' as a device path in mount command. "existing_disk": { // Cannot be set together with: managed_disk // Attach an existing disk. // // Lifecycle: // - The disk is preserved when the instance is deleted (it will be detached). // // Switching to a managed disk: // - To delete the disk together with the instance, switch to ManagedDisk in the instance spec. // - For the switch, `ManagedDisk.name` MUST match the current disk `name` // (see DiskService.Get for the disk referenced by `ExistingDisk.id`). // - When converting an ExistingDisk to a ManagedDisk, you must provide `ManagedDisk.name` and `ManagedDisk.spec` // exactly as they are currently defined in the disk resource. // Obtain the current values via `DiskService.Get` and copy them verbatim. // If `ManagedDisk.spec` differs from the current disk spec, the instance update will fail. "id": string // [required] }, "managed_disk": { // Cannot be set together with: existing_disk // Attach a managed disk. // // Lifecycle: // - The disk is deleted when the instance is deleted. // // Semantics: // - Specifying a ManagedDisk expresses an intent to have that managed disk attached. // - If this intent cannot be satisfied, the entire operation fails. // - You can check the intent status in `instance.status.disk_attachments`. // // Updates and matching: // - Managed disks can be updated only via instance spec updates. Updates via DiskService are not allowed. // - During updates, disks are matched by `name`. // // Renaming and data loss: // - Changing the disk `name` triggers disk replacement (create a new disk and delete the old one), // which causes data loss. // - To rename a managed disk safely: // 1) switch it to ExistingDisk in the instance spec, and // 2) update/rename it via DiskService. // // Conflicts: // - Instance create/update fails if there is already a disk with the same `name`. // as requested by any ManagedDisk. // // Finding the disk ID: // - The disk ID is available in `instance.status.disk_attachments` after it is created. // Use `DiskAttachmentStatus.name` to find the desired disk which matches `name`. // // Switching to an existing (non-managed) disk: // - To preserve the disk after instance deletion, switch it to ExistingDisk in the instance spec, // use the disk ID from `instance.status.disk_attachments`. // // Deletion protection: // - Switching ExistingDisk to ManagedDisk fails if `Disk.spec.deletion_protection` is enabled. // - Deleting an instance that has a ManagedDisk fails if `Disk.spec.deletion_protection` is enabled. "labels": { // [map] // Labels associated with disk resource. string: string }, "name": string, // [required] // Name of a dependent disk. // Use it to convert an ExistingDisk to a dependent disk. // Changing the name will replace the disk and cause data loss. "spec": { // [required] // Specification of a dependent disk to be created. "forbid_deletion": bool, // Prevents deletion whilst set. "size_bytes": int64, // Cannot be set together with: size_kibibytes, size_mebibytes, size_gibibytes "size_gibibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_mebibytes "size_kibibytes": int64, // Cannot be set together with: size_bytes, size_mebibytes, size_gibibytes "size_mebibytes": int64 // Cannot be set together with: size_bytes, size_kibibytes, size_gibibytes } } }, "cloud_init_user_data": string, // [sensitive] // Data in cloud-init format for customizing instance initialization. // For details, see https://docs.nebius.com/compute/virtual-machines/manage#user-data. "filesystems": [{ // List of Shared Filesystems attached to the instance. "attach_mode": enum( // [required] "UNSPECIFIED", "READ_ONLY", "READ_WRITE" ), "existing_filesystem": { "id": string // [required] }, "mount_tag": string // [required] // Specifies the user-defined identifier, allowing to use it as a device in mount command. }], "hostname": string, // Instance's hostname. Used to generate default DNS record in format `..compute.internal.` // or `..compute.internal.` if hostname is not specified. "local_disks": { // Local disks are meaningfully different from regular (remote) disks: // they are provided by the underlying host and are tied to a particular VM run. // Local disk data is not preserved across Stop-Start initiated via Compute API. // Local disks are not provided by default. To get them, explicitly request them via this field. // Availability depends on the selected platform, preset and region. // Changing this field will result in disks change and content loss, but only after stop and start the instance. "passthrough_group": { // Requests passthrough local disks from the host. // Topology of the provided disks is preserved during stop and start // for every instance of a specific platform and preset in the region. "requested": bool // Passthrough local disks from the underlying host. // // Devices are expected to appear in the guest as NVMe devices (nvme0, nvme1, ...), // but the exact number depends on the preset. // Enabled only when this field is explicitly set. } }, "network_interfaces": [{ // [required] // List of network interfaces attached to the instance. "aliases": [{ // Assign ranges of IP addresses as aliases. "allocation_id": string // [required] // ID of allocation. }], "public_ip_address": { // [meaningful_empty_value] // Public IPv4 address associated with the interface. "allocation_id": string, // Allocation identifier if it was created before. "static": bool // If false - Allocation will be created/deleted during NetworkInterface.Allocate/NetworkInterface.Deallocate // If true - Allocation will be created/deleted during NetworkInterface.Create/NetworkInterface.Delete // False by default. }, "security_groups": [{ // Security groups associated with the network interface. // If an empty list is provided, the default security group for the network will be used. // Effective security groups can be seen in the status. "id": string // Security group identifier. }] }], "nvl_instance_group_id": string, // NVLink Instance Group ID associated with the VM. "reservation_policy": { "policy": enum( "AUTO", // 1) Will try to launch instance in any reservation_ids if provided. // 2) Will try to launch instance in any of the available capacity block. // 3) Will try to launch instance in PAYG if 1 & 2 are not satisfied. "FORBID", // The instance is launched only using on-demand (PAYG) capacity. // No attempt is made to find or use a Capacity Block. // It's an error to provide reservation_ids with policy = FORBID. "STRICT" // 1) Will try to launch the instance in Capacity Blocks from reservation_ids if provided. // 2) If reservation_ids are not provided will try to launch instance in suitable & available Capacity Block. // 3) Fail otherwise. ), "reservation_ids": [string] // Capacity block groups, order matters. }, "resources": { // [required] // Specification of compute resources allocated to the instance. // For details, see https://docs.nebius.com/compute/virtual-machines/types. "preset": string }, "secondary_disks": [{ // List of additional data disks attached to the instance beyond the boot disk. "attach_mode": enum( // [required] "UNSPECIFIED", "READ_ONLY", "READ_WRITE" ), "device_id": string, // Specifies the user-defined identifier, allowing to use '/dev/disk/by-id/virtio-{device_id}' as a device path in mount command. "existing_disk": { // Cannot be set together with: managed_disk // Attach an existing disk. // // Lifecycle: // - The disk is preserved when the instance is deleted (it will be detached). // // Switching to a managed disk: // - To delete the disk together with the instance, switch to ManagedDisk in the instance spec. // - For the switch, `ManagedDisk.name` MUST match the current disk `name` // (see DiskService.Get for the disk referenced by `ExistingDisk.id`). // - When converting an ExistingDisk to a ManagedDisk, you must provide `ManagedDisk.name` and `ManagedDisk.spec` // exactly as they are currently defined in the disk resource. // Obtain the current values via `DiskService.Get` and copy them verbatim. // If `ManagedDisk.spec` differs from the current disk spec, the instance update will fail. "id": string // [required] }, "managed_disk": { // Cannot be set together with: existing_disk // Attach a managed disk. // // Lifecycle: // - The disk is deleted when the instance is deleted. // // Semantics: // - Specifying a ManagedDisk expresses an intent to have that managed disk attached. // - If this intent cannot be satisfied, the entire operation fails. // - You can check the intent status in `instance.status.disk_attachments`. // // Updates and matching: // - Managed disks can be updated only via instance spec updates. Updates via DiskService are not allowed. // - During updates, disks are matched by `name`. // // Renaming and data loss: // - Changing the disk `name` triggers disk replacement (create a new disk and delete the old one), // which causes data loss. // - To rename a managed disk safely: // 1) switch it to ExistingDisk in the instance spec, and // 2) update/rename it via DiskService. // // Conflicts: // - Instance create/update fails if there is already a disk with the same `name`. // as requested by any ManagedDisk. // // Finding the disk ID: // - The disk ID is available in `instance.status.disk_attachments` after it is created. // Use `DiskAttachmentStatus.name` to find the desired disk which matches `name`. // // Switching to an existing (non-managed) disk: // - To preserve the disk after instance deletion, switch it to ExistingDisk in the instance spec, // use the disk ID from `instance.status.disk_attachments`. // // Deletion protection: // - Switching ExistingDisk to ManagedDisk fails if `Disk.spec.deletion_protection` is enabled. // - Deleting an instance that has a ManagedDisk fails if `Disk.spec.deletion_protection` is enabled. "labels": { // [map] // Labels associated with disk resource. string: string }, "name": string, // [required] // Name of a dependent disk. // Use it to convert an ExistingDisk to a dependent disk. // Changing the name will replace the disk and cause data loss. "spec": { // [required] // Specification of a dependent disk to be created. "forbid_deletion": bool, // Prevents deletion whilst set. "size_bytes": int64, // Cannot be set together with: size_kibibytes, size_mebibytes, size_gibibytes "size_gibibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_mebibytes "size_kibibytes": int64, // Cannot be set together with: size_bytes, size_mebibytes, size_gibibytes "size_mebibytes": int64 // Cannot be set together with: size_bytes, size_kibibytes, size_gibibytes } } }], "stopped": bool // Indicates whether the instance should be stopped. } } ``` ```json theme={null} nebius compute instance update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "boot_disk": { "attach_mode": "unspecified"|"read_only"|"read_write", "device_id": "", "existing_disk": { "id": "" } }, "cloud_init_user_data": "", "filesystems": [{ "attach_mode": "unspecified"|"read_only"|"read_write", "existing_filesystem": { "id": "" }, "mount_tag": "" }], "hostname": "", "local_disks": { "passthrough_group": { "requested": false } }, "network_interfaces": [{ "aliases": [{ "allocation_id": "" }], "public_ip_address": { "allocation_id": "", "static": false }, "security_groups": [{ "id": "" }] }], "nvl_instance_group_id": "", "reservation_policy": { "policy": "auto"|"forbid"|"strict", "reservation_ids": [""] }, "resources": { "preset": "" }, "secondary_disks": [{ "attach_mode": "unspecified"|"read_only"|"read_write", "device_id": "", "existing_disk": { "id": "" } }], "stopped": false } } ' ``` *Auto generated on 15-Jul-2026* # nebius compute maintenance get-by-instance Source: https://docs.nebius.com/cli/reference/compute/maintenance/get-by-instance

Name

nebius compute maintenance get-by-instance

Returns only active maintenance event for the instance.

Synopsis

``` nebius compute maintenance get-by-instance --instance-id ```

Options

`--instance-id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "instance_id": string } ``` ```json theme={null} nebius compute maintenance get-by-instance ' { "instance_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute maintenance Source: https://docs.nebius.com/cli/reference/compute/maintenance/index

Name

nebius compute maintenance

Commands

nebius compute maintenance get-by-instance

Returns only active maintenance event for the instance.

nebius compute maintenance list-active

Returns all unfinished maintenance events for the parent.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute maintenance list-active Source: https://docs.nebius.com/cli/reference/compute/maintenance/list-active

Name

nebius compute maintenance list-active

Returns all unfinished maintenance events for the parent.

Synopsis

``` nebius compute maintenance list-active --page-size --page-token --parent-id ```

Options

`--page-size` (int64)

`--page-token` (string)

`--parent-id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, "page_token": string, "parent_id": string } ``` ```json theme={null} nebius compute maintenance list-active ' { "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute node Source: https://docs.nebius.com/cli/reference/compute/node/index

Name

nebius compute node

Commands

nebius compute node set-unhealthy

SetUnhealthy marks the node underlying the Compute VM as unhealthy, which has the following effect:

1. Scheduler makes the best effort not to assign new VMs to the unhealthy node,
but in case of no capacity, the VM can be assigned to an unhealthy node.
2. The existing VMs continue to work on the node, but after stop/start via
Compute API they most probably will be assigned to a different node.

To use this rpc one needs to obtain `compute.node.setUnhealthy` permission
for the VM's parent container. The permission is granted to the TSA inside the VM.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute node set-unhealthy Source: https://docs.nebius.com/cli/reference/compute/node/set-unhealthy

Name

nebius compute node set-unhealthy

SetUnhealthy marks the node underlying the Compute VM as unhealthy, which has the following effect:

1. Scheduler makes the best effort not to assign new VMs to the unhealthy node,
but in case of no capacity, the VM can be assigned to an unhealthy node.
2. The existing VMs continue to work on the node, but after stop/start via
Compute API they most probably will be assigned to a different node.

To use this rpc one needs to obtain `compute.node.setUnhealthy` permission
for the VM's parent container. The permission is granted to the TSA inside the VM.

Synopsis

``` nebius compute node set-unhealthy --dry-run --health-check-info-check-id [required] --health-check-info-description [required] --health-check-info-observed-at [required] --instance-id [required] ```

Options

`--dry-run` (bool)

If set to true, the call performs the authorization and limit checks, but does not mark node unhealthy.
False by default.

`--health-check-info-check-id` (string) \[required]

Identifies specific GPU check that failed in soperator (key for observability).

`--health-check-info-description` (string) \[required]

Human-readable description of the error for further investigation.

`--health-check-info-observed-at` (timestamp: 1970-01-31T02:30:59Z) \[required]

Time when the unhealthy node was observed.

`--instance-id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "dry_run": bool, // If set to true, the call performs the authorization and limit checks, but does not mark node unhealthy. // False by default. "health_check_info": { // [required] "check_id": string, // [required] // Identifies specific GPU check that failed in soperator (key for observability). "description": string, // [required] // Human-readable description of the error for further investigation. "observed_at": "1970-01-31T02:30:59Z" // [required] [google.protobuf.Timestamp] // Time when the unhealthy node was observed. }, "instance_id": string // [required] } ``` ```json theme={null} nebius compute node set-unhealthy ' { "dry_run": false, "health_check_info": { "check_id": "", "description": "", "observed_at": "1970-01-31T02:30:59Z" }, "instance_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute nvl-instance-group create Source: https://docs.nebius.com/cli/reference/compute/nvl-instance-group/create

Name

nebius compute nvl-instance-group create

Create creates a new NVL InstanceGroup.

Synopsis

``` nebius compute nvl-instance-group create --labels --name --parent-id [required] --resource-version --size [required] --type --async -i, --interactive ```

Options

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--size` (int64) \[required]

Maximum number of instances in the NVLink InstanceGroup.

`--type` (string)

Type of the NVLink InstanceGroup (corresponds to the Compute platform).

A value must be one of:

  • unspecified
  • gb200
  • gb300

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "size": int64, // [required] [immutable] // Maximum number of instances in the NVLink InstanceGroup. "type": enum( // [immutable] // Type of the NVLink InstanceGroup (corresponds to the Compute platform). "UNSPECIFIED", "GB200", "GB300" ) } } ``` ```json theme={null} nebius compute nvl-instance-group create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "size": 0, "type": "unspecified"|"gb200"|"gb300" } } ' ``` *Auto generated on 15-Jul-2026* # nebius compute nvl-instance-group delete Source: https://docs.nebius.com/cli/reference/compute/nvl-instance-group/delete

Name

nebius compute nvl-instance-group delete

Delete deletes the specified NVL InstanceGroup by its ID.

Synopsis

``` nebius compute nvl-instance-group delete [id] --id --async ```

Positional Arguments

id

ID of the resource to delete.

Options

`--id` (string)

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string } ``` ```json theme={null} nebius compute nvl-instance-group delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute nvl-instance-group edit Source: https://docs.nebius.com/cli/reference/compute/nvl-instance-group/edit

Name

nebius compute nvl-instance-group edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius compute nvl-instance-group edit [id] --async --editor --id ```

Positional Arguments

id

ID of the resource to edit.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute nvl-instance-group edit-by-name Source: https://docs.nebius.com/cli/reference/compute/nvl-instance-group/edit-by-name

Name

nebius compute nvl-instance-group edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

Synopsis

``` nebius compute nvl-instance-group edit-by-name --async --editor --name --parent-id ```

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--name` (string)

`--parent-id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute nvl-instance-group get Source: https://docs.nebius.com/cli/reference/compute/nvl-instance-group/get

Name

nebius compute nvl-instance-group get

Get retrieves the specified NVL InstanceGroup by its ID.

Synopsis

``` nebius compute nvl-instance-group get [id] --id ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string } ``` ```json theme={null} nebius compute nvl-instance-group get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute nvl-instance-group get-by-name Source: https://docs.nebius.com/cli/reference/compute/nvl-instance-group/get-by-name

Name

nebius compute nvl-instance-group get-by-name

GetByName retrieves the specified NVL InstanceGroup by its parent and name.

Synopsis

``` nebius compute nvl-instance-group get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

`--parent-id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // [required] } ``` ```json theme={null} nebius compute nvl-instance-group get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute nvl-instance-group Source: https://docs.nebius.com/cli/reference/compute/nvl-instance-group/index

Name

nebius compute nvl-instance-group

Service for managing NVLink InstanceGroups.

Commands

nebius compute nvl-instance-group create

Create creates a new NVL InstanceGroup.

nebius compute nvl-instance-group delete

Delete deletes the specified NVL InstanceGroup by its ID.

nebius compute nvl-instance-group edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius compute nvl-instance-group edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

nebius compute nvl-instance-group get

Get retrieves the specified NVL InstanceGroup by its ID.

nebius compute nvl-instance-group get-by-name

GetByName retrieves the specified NVL InstanceGroup by its parent and name.

nebius compute nvl-instance-group list

List lists all NVL InstanceGroups in the specified parent.

nebius compute nvl-instance-group operation

Manage operations for NVLInstanceGroup service.

nebius compute nvl-instance-group update

Update modifies the specified NVL InstanceGroup by its ID.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute nvl-instance-group list Source: https://docs.nebius.com/cli/reference/compute/nvl-instance-group/list

Name

nebius compute nvl-instance-group list

List lists all NVL InstanceGroups in the specified parent.

Synopsis

``` nebius compute nvl-instance-group list --page-size --page-token --parent-id --all -i, --interactive ```

Options

`--page-size` (int64)

`--page-token` (string)

`--parent-id` (string)

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, "page_token": string, "parent_id": string } ``` ```json theme={null} nebius compute nvl-instance-group list ' { "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute nvl-instance-group operation get Source: https://docs.nebius.com/cli/reference/compute/nvl-instance-group/operation/get

Name

nebius compute nvl-instance-group operation get

Get operation by ID.

Synopsis

``` nebius compute nvl-instance-group operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute nvl-instance-group operation Source: https://docs.nebius.com/cli/reference/compute/nvl-instance-group/operation/index

Name

nebius compute nvl-instance-group operation

Manage operations for NVLInstanceGroup service.

Commands

nebius compute nvl-instance-group operation get

Get operation by ID.

nebius compute nvl-instance-group operation list

List operations by resource ID.

nebius compute nvl-instance-group operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute nvl-instance-group operation list Source: https://docs.nebius.com/cli/reference/compute/nvl-instance-group/operation/list

Name

nebius compute nvl-instance-group operation list

List operations by resource ID.

Synopsis

``` nebius compute nvl-instance-group operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute nvl-instance-group operation wait Source: https://docs.nebius.com/cli/reference/compute/nvl-instance-group/operation/wait

Name

nebius compute nvl-instance-group operation wait

Wait for operation to complete.

Synopsis

``` nebius compute nvl-instance-group operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute nvl-instance-group update Source: https://docs.nebius.com/cli/reference/compute/nvl-instance-group/update

Name

nebius compute nvl-instance-group update

Update modifies the specified NVL InstanceGroup by its ID.

Synopsis

``` nebius compute nvl-instance-group update [id] --id --labels --labels-add --labels-remove --name --parent-id --resource-version --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { } } ``` ```json theme={null} nebius compute nvl-instance-group update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { } } ' ``` *Auto generated on 15-Jul-2026* # nebius compute platform get-by-name Source: https://docs.nebius.com/cli/reference/compute/platform/get-by-name

Name

nebius compute platform get-by-name

Retrieves detailed information about a specific compute platform by its parent and name.

Synopsis

``` nebius compute platform get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

`--parent-id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // [required] } ``` ```json theme={null} nebius compute platform get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius compute platform Source: https://docs.nebius.com/cli/reference/compute/platform/index

Name

nebius compute platform

Commands

nebius compute platform get-by-name

Retrieves detailed information about a specific compute platform by its parent and name.

nebius compute platform list

Lists all compute platforms within a specified parent.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius compute platform list Source: https://docs.nebius.com/cli/reference/compute/platform/list

Name

nebius compute platform list

Lists all compute platforms within a specified parent.

Synopsis

``` nebius compute platform list --page-size --page-token --parent-id [required] --all -i, --interactive ```

Options

`--page-size` (int64)

`--page-token` (string)

`--parent-id` (string) \[required]

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, "page_token": string, "parent_id": string // [required] } ``` ```json theme={null} nebius compute platform list ' { "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius config get Source: https://docs.nebius.com/cli/reference/config/get

Name

nebius config get

Get value for the specified configuration property

Synopsis

``` nebius config get ```

Positional Arguments

endpoint

API endpoint.

federation-endpoint

Federation endpoint.

federation-id

Federation ID.

service-account-id

Service account ID.

public-key-id

Service account public key ID.

private-key

PEM encoded PKCS1 or PKCS8 private key.

private-key-file-path

File path to a private key for the service account.
Will be saved as path and read each time when used.

service-account-credentials-file-path

File path to the service account credentials JSON file.
Will be saved as path and read each time when used.

federated-subject-credentials-file-path

File path to a federated subject credentials.
Will be saved as path and read each time when used.

parent-id

Parent ID to operate on by default.

tenant-id

Tenant ID to operate on by default.

token-file

File with a IAM token for authentication.
Will be saved as path and read each time when used.

token-endpoint

IMDS HTTP endpoint.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius config Source: https://docs.nebius.com/cli/reference/config/index

Name

nebius config

Manage CLI configuration

Commands

nebius config get

Get value for the specified configuration property

nebius config list

List configuration values

nebius config set

Set value for the specified configuration property

nebius config unset

Unset value for the specified configuration property

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius config list Source: https://docs.nebius.com/cli/reference/config/list

Name

nebius config list

List configuration values

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius config set Source: https://docs.nebius.com/cli/reference/config/set

Name

nebius config set

Set value for the specified configuration property

Synopsis

``` nebius config set ```

Positional Arguments

endpoint

API endpoint.

federation-endpoint

Federation endpoint.

federation-id

Federation ID.

service-account-id

Service account ID.

public-key-id

Service account public key ID.

private-key

PEM encoded PKCS1 or PKCS8 private key.

private-key-file-path

File path to a private key for the service account.
Will be saved as path and read each time when used.

service-account-credentials-file-path

File path to the service account credentials JSON file.
Will be saved as path and read each time when used.

federated-subject-credentials-file-path

File path to a federated subject credentials.
Will be saved as path and read each time when used.

parent-id

Parent ID to operate on by default.

tenant-id

Tenant ID to operate on by default.

token-file

File with a IAM token for authentication.
Will be saved as path and read each time when used.

token-endpoint

IMDS HTTP endpoint.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius config unset Source: https://docs.nebius.com/cli/reference/config/unset

Name

nebius config unset

Unset value for the specified configuration property

Synopsis

``` nebius config unset ```

Positional Arguments

endpoint

API endpoint.

federation-endpoint

Federation endpoint.

federation-id

Federation ID.

service-account-id

Service account ID.

public-key-id

Service account public key ID.

private-key

PEM encoded PKCS1 or PKCS8 private key.

private-key-file-path

File path to a private key for the service account.
Will be saved as path and read each time when used.

service-account-credentials-file-path

File path to the service account credentials JSON file.
Will be saved as path and read each time when used.

federated-subject-credentials-file-path

File path to a federated subject credentials.
Will be saved as path and read each time when used.

parent-id

Parent ID to operate on by default.

tenant-id

Tenant ID to operate on by default.

token-file

File with a IAM token for authentication.
Will be saved as path and read each time when used.

token-endpoint

IMDS HTTP endpoint.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius dns Source: https://docs.nebius.com/cli/reference/dns/index

Name

nebius dns

Commands

nebius dns record

Service for managing DNS records (`Record` resources).

nebius dns zone

Service for managing DNS zones (`Zone` resources).

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius dns record create Source: https://docs.nebius.com/cli/reference/dns/record/create

Name

nebius dns record create

Creates a DNS record.

Synopsis

``` nebius dns record create --data [required] --deletion-protection --labels --name --parent-id [required] --relative-name [required] --resource-version --ttl --type [required] --async -i, --interactive ```

Options

`--data` (string) \[required]

Record data in text format

This should be the RDATA part of this Resource Record's
[presentation (zonefile) format](https://datatracker.ietf.org/doc/html/rfc9499#name-resource-records).
E.g., `10 xyz.tuv` for a `@ 600 IN MX 10 xyz.tuv.` resource record in a zonefile.

`--deletion-protection` (bool)

Mark this record as delete-protected
Delete-protected records can *only* be deleted by explicitly calling `RecordService/Delete` API with `force` flag set to `true`.

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--relative-name` (string) \[required]

Zone-relative name of this record (e.g., `www` for `www.`)
Use `@` for records in zone apex (that is, records that have the same domain name as the zone itself)
To see the resolved absolute domain name, see `Record.status.effective_fqdn`.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--ttl` (int64)

Record TTL. If absent or negative, will be assumed to be the default value (`600`).

`--type` (string) \[required]

Record type.

A value must be one of:

  • a
  • aaaa
  • ptr
  • cname
  • mx
  • txt
  • srv
  • ns
  • soa
  • caa
  • svcb
  • https

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // [required] // Metadata for the DNS record to create // The only required field is `metadata.parent_id`, which must be set to the ID of this record's parent DNS zone. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // [required] // Specification for the DNS record to create. "data": string, // [required] // Record data in text format // // This should be the RDATA part of this Resource Record's // [presentation (zonefile) format](https://datatracker.ietf.org/doc/html/rfc9499#name-resource-records). // E.g., `10 xyz.tuv` for a `@ 600 IN MX 10 xyz.tuv.` resource record in a zonefile. "deletion_protection": bool, // Mark this record as delete-protected // Delete-protected records can *only* be deleted by explicitly calling `RecordService/Delete` API with `force` flag set to `true`. "relative_name": string, // [required] [immutable] // Zone-relative name of this record (e.g., `www` for `www.`) // Use `@` for records in zone apex (that is, records that have the same domain name as the zone itself) // To see the resolved absolute domain name, see `Record.status.effective_fqdn`. "ttl": int64, // Record TTL. If absent or negative, will be assumed to be the default value (`600`). "type": enum( // [required] [immutable] // Record type. "RECORD_TYPE_UNSPECIFIED", // Record type is not specified. "A", // `A` record: IPv4 address. "AAAA", // `AAAA` record: IPv6 address. "PTR", // `PTR` record: mapping from IP address to a domain name. "CNAME", // `CNAME` record: an alias for a *canonical domain name*. "MX", // `MX` record: mail server information (domain name, priority). "TXT", // `TXT` record: text data, typically used to verify e-mail addresses, websites and TLS certificates. "SRV", // `SRV` record: information about a network service (domain name, port, weight). "NS", // `NS` record: domain name of an authoritative nameserver for this DNS zone, or one of its subzones. "SOA", // `SOA` record: administrative information about this DNS zone. "CAA", // `CAA` record: certificate issuance settings for this DNS zone and its subzones. "SVCB", // `SVCB` record: service binding. See [RFC 9460, section 2.3](https://www.rfc-editor.org/rfc/rfc9460.html#section-2.3). "HTTPS" // `HTTPS` record: service binding with HTTPS protocol configuration. // See [RFC 9460, section 9.1](https://www.rfc-editor.org/rfc/rfc9460.html#section-9.1). ) } } ``` ```json theme={null} nebius dns record create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "data": "", "deletion_protection": false, "relative_name": "", "ttl": 0, "type": "record_type_unspecified"|"a"|"aaaa"|"ptr"|"cname"|"mx"|"txt"|"srv"|"ns"|"soa"|"caa"|"svcb"|"https" } } ' ``` *Auto generated on 15-Jul-2026* # nebius dns record delete Source: https://docs.nebius.com/cli/reference/dns/record/delete

Name

nebius dns record delete

Deletes the DNS record with the specified ID.

Synopsis

``` nebius dns record delete [id] --force --id [required] --resource-version --async ```

Positional Arguments

id

ID of the DNS record to delete.

Options

`--force` (bool)

Indicates that deletion-protected records should be also deleted
Attempt to delete a protected record without this flag set to `true` will cause a `FAILED_PRECONDITION` error.

`--id` (string) \[required]

ID of the DNS record to delete.

`--resource-version` (int64)

Optional: expected DNS record version (`metadata.resource_version`)
* If specified, ensures that only the requested version is deleted (and a `FAILED_PRECONDITION` error is returned on version mismatch)
* If not specified or set to `0`, the latest version will be deleted.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "force": bool, // Indicates that deletion-protected records should be also deleted // Attempt to delete a protected record without this flag set to `true` will cause a `FAILED_PRECONDITION` error. "id": string, // [required] // ID of the DNS record to delete. "resource_version": int64 // Optional: expected DNS record version (`metadata.resource_version`) // - If specified, ensures that only the requested version is deleted (and a `FAILED_PRECONDITION` error is returned on version mismatch) // - If not specified or set to `0`, the latest version will be deleted. } ``` ```json theme={null} nebius dns record delete ' { "force": false, "id": "", "resource_version": 0 } ' ``` *Auto generated on 15-Jul-2026* # nebius dns record edit Source: https://docs.nebius.com/cli/reference/dns/record/edit

Name

nebius dns record edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius dns record edit [id] --async --editor --id --resource-version ```

Positional Arguments

id

Record ID.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

Record ID.

`--resource-version` (int64)

Optional: expected record version (`metadata.resource_version`)
* If specified, the requested version will be returned if possible
(if the version has changed, you will get a `FAILED_PRECONDITION` error)
* If not specified or set to `0`, the latest version will be returned.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius dns record edit-by-name Source: https://docs.nebius.com/cli/reference/dns/record/edit-by-name

Name

nebius dns record edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

Synopsis

``` nebius dns record edit-by-name --async --editor --name --parent-id ```

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--name` (string)

`--parent-id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius dns record get Source: https://docs.nebius.com/cli/reference/dns/record/get

Name

nebius dns record get

Gets the DNS record with the specified ID.

Synopsis

``` nebius dns record get [id] --id [required] --resource-version ```

Positional Arguments

id

Record ID.

Options

`--id` (string) \[required]

Record ID.

`--resource-version` (int64)

Optional: expected record version (`metadata.resource_version`)
* If specified, the requested version will be returned if possible
(if the version has changed, you will get a `FAILED_PRECONDITION` error)
* If not specified or set to `0`, the latest version will be returned.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string, // [required] // Record ID. "resource_version": int64 // Optional: expected record version (`metadata.resource_version`) // - If specified, the requested version will be returned if possible // (if the version has changed, you will get a `FAILED_PRECONDITION` error) // - If not specified or set to `0`, the latest version will be returned. } ``` ```json theme={null} nebius dns record get ' { "id": "", "resource_version": 0 } ' ``` *Auto generated on 15-Jul-2026* # nebius dns record get-by-name Source: https://docs.nebius.com/cli/reference/dns/record/get-by-name

Name

nebius dns record get-by-name

Gets the DNS record by its parent DNS zone (`metadata.parent_id`) and `metadata.name`.

Synopsis

``` nebius dns record get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

`--parent-id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // [required] } ``` ```json theme={null} nebius dns record get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius dns record Source: https://docs.nebius.com/cli/reference/dns/record/index

Name

nebius dns record

Service for managing DNS records (`Record` resources).

Commands

nebius dns record create

Creates a DNS record.

nebius dns record delete

Deletes the DNS record with the specified ID.

nebius dns record edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius dns record edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

nebius dns record get

Gets the DNS record with the specified ID.

nebius dns record get-by-name

Gets the DNS record by its parent DNS zone (`metadata.parent_id`) and `metadata.name`.

nebius dns record list

Lists DNS records in the specified DNS zone.

nebius dns record operation

Manage operations for Record service.

nebius dns record update

Updates the DNS record with the specified ID.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius dns record list Source: https://docs.nebius.com/cli/reference/dns/record/list

Name

nebius dns record list

Lists DNS records in the specified DNS zone.

Synopsis

``` nebius dns record list --page-size --page-token --parent-id [required] --all -i, --interactive ```

Options

`--page-size` (int64)

Page size
If not specified or set to `0`, a default page size of `100` will be used.

`--page-token` (string)

An opaque listing continuation token
* If not specified or empty, the first page of results will be returned
* If specified, the next page of results (as identified by the token) will be returned.

`--parent-id` (string) \[required]

Parent DNS zone ID.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, // Page size // If not specified or set to `0`, a default page size of `100` will be used. "page_token": string, // An opaque listing continuation token // - If not specified or empty, the first page of results will be returned // - If specified, the next page of results (as identified by the token) will be returned. "parent_id": string // [required] // Parent DNS zone ID. } ``` ```json theme={null} nebius dns record list ' { "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius dns record operation get Source: https://docs.nebius.com/cli/reference/dns/record/operation/get

Name

nebius dns record operation get

Get operation by ID.

Synopsis

``` nebius dns record operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius dns record operation Source: https://docs.nebius.com/cli/reference/dns/record/operation/index

Name

nebius dns record operation

Manage operations for Record service.

Commands

nebius dns record operation get

Get operation by ID.

nebius dns record operation list

List operations by resource ID.

nebius dns record operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius dns record operation list Source: https://docs.nebius.com/cli/reference/dns/record/operation/list

Name

nebius dns record operation list

List operations by resource ID.

Synopsis

``` nebius dns record operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius dns record operation wait Source: https://docs.nebius.com/cli/reference/dns/record/operation/wait

Name

nebius dns record operation wait

Wait for operation to complete.

Synopsis

``` nebius dns record operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius dns record update Source: https://docs.nebius.com/cli/reference/dns/record/update

Name

nebius dns record update

Updates the DNS record with the specified ID.

Synopsis

``` nebius dns record update [id] --data --deletion-protection --id --labels --labels-add --labels-remove --name --parent-id --resource-version --ttl --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--data` (string)

Record data in text format

This should be the RDATA part of this Resource Record's
[presentation (zonefile) format](https://datatracker.ietf.org/doc/html/rfc9499#name-resource-records).
E.g., `10 xyz.tuv` for a `@ 600 IN MX 10 xyz.tuv.` resource record in a zonefile.

`--deletion-protection` (bool)

Mark this record as delete-protected
Delete-protected records can *only* be deleted by explicitly calling `RecordService/Delete` API with `force` flag set to `true`.

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--ttl` (int64)

Record TTL. If absent or negative, will be assumed to be the default value (`600`).

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // Metadata for the DNS record being updated // - The only required field is `metadata.id`, which must be set to the ID of the DNS record being updated // - You may also set the expected DNS record version (`metadata.resource_version`), which ensures that only the requested version is // updated (and a `FAILED_PRECONDITION` error is returned on version mismatch). "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // New specification for the DNS record. "data": string, // [required] // Record data in text format // // This should be the RDATA part of this Resource Record's // [presentation (zonefile) format](https://datatracker.ietf.org/doc/html/rfc9499#name-resource-records). // E.g., `10 xyz.tuv` for a `@ 600 IN MX 10 xyz.tuv.` resource record in a zonefile. "deletion_protection": bool, // Mark this record as delete-protected // Delete-protected records can *only* be deleted by explicitly calling `RecordService/Delete` API with `force` flag set to `true`. "ttl": int64 // Record TTL. If absent or negative, will be assumed to be the default value (`600`). } } ``` ```json theme={null} nebius dns record update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "data": "", "deletion_protection": false, "ttl": 0 } } ' ``` *Auto generated on 15-Jul-2026* # nebius dns zone create Source: https://docs.nebius.com/cli/reference/dns/zone/create

Name

nebius dns zone create

Creates a DNS zone.

Synopsis

``` nebius dns zone create --domain-name [required] --labels --name --parent-id [required] --resource-version --soa-spec-negative-ttl --vpc-primary-network-id [required] --async -i, --interactive ```

Options

`--domain-name` (string) \[required]

Fully qualified domain name of this zone, including `.` at the end
Cannot be changed after creating the zone.

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--soa-spec-negative-ttl` (int64)

Specifies TTL, in seconds, for caching `NXDOMAIN` ("record not found") DNS responses from this zone (*negative caching*)
Set this TTL to a low value if you frequently delete and recreate records instead of updating them
*Note:* Values of less than `5` will be ignored, and a default negative caching TTL will be used instead.

`--vpc-primary-network-id` (string) \[required]

ID of the virtual network that this zone's records will be visible from
This value cannot be changed after creating the zone.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // [required] // Metadata for the DNS zone to create // The only required field is `metadata.parent_id`, which must be set to the ID of this zone's parent IAM container. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // [required] // Specification for the DNS zone to create. "domain_name": string, // [required] [immutable] // Fully qualified domain name of this zone, including `.` at the end // Cannot be changed after creating the zone. "soa_spec": { // Custom SOA (Start of Authority) record specification for the zone. "negative_ttl": int64 // Specifies TTL, in seconds, for caching `NXDOMAIN` ("record not found") DNS responses from this zone (*negative caching*) // Set this TTL to a low value if you frequently delete and recreate records instead of updating them // *Note:* Values of less than `5` will be ignored, and a default negative caching TTL will be used instead. }, "vpc": { // A VPC zone, which is only visible from a virtual network (VPC). "primary_network_id": string // [required] [immutable] // ID of the virtual network that this zone's records will be visible from // This value cannot be changed after creating the zone. } } } ``` ```json theme={null} nebius dns zone create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "domain_name": "", "soa_spec": { "negative_ttl": 0 }, "vpc": { "primary_network_id": "" } } } ' ``` *Auto generated on 15-Jul-2026* # nebius dns zone delete Source: https://docs.nebius.com/cli/reference/dns/zone/delete

Name

nebius dns zone delete

Deletes the DNS zone with the specified ID.

Synopsis

``` nebius dns zone delete [id] --id [required] --resource-version --async ```

Positional Arguments

id

ID of the DNS zone to delete.

Options

`--id` (string) \[required]

ID of the DNS zone to delete.

`--resource-version` (int64)

Optional: expected DNS zone version (`metadata.resource_version`)
* If specified, ensures that only the requested version is deleted (and a `FAILED_PRECONDITION` error is returned on version mismatch)
* If not specified or set to `0`, the latest version will be deleted.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string, // [required] // ID of the DNS zone to delete. "resource_version": int64 // Optional: expected DNS zone version (`metadata.resource_version`) // - If specified, ensures that only the requested version is deleted (and a `FAILED_PRECONDITION` error is returned on version mismatch) // - If not specified or set to `0`, the latest version will be deleted. } ``` ```json theme={null} nebius dns zone delete ' { "id": "", "resource_version": 0 } ' ``` *Auto generated on 15-Jul-2026* # nebius dns zone edit Source: https://docs.nebius.com/cli/reference/dns/zone/edit

Name

nebius dns zone edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius dns zone edit [id] --async --editor --id --resource-version ```

Positional Arguments

id

Zone ID.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

Zone ID.

`--resource-version` (int64)

Optional: expected zone version (`metadata.resource_version`)
* If specified, the requested version will be returned if possible (if the version has changed, you will get a `FAILED_PRECONDITION`
error)
* If not specified or set to `0`, the latest zone version will be returned.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius dns zone edit-by-name Source: https://docs.nebius.com/cli/reference/dns/zone/edit-by-name

Name

nebius dns zone edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

Synopsis

``` nebius dns zone edit-by-name --async --editor --name --parent-id ```

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--name` (string)

`--parent-id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius dns zone get Source: https://docs.nebius.com/cli/reference/dns/zone/get

Name

nebius dns zone get

Gets the DNS zone with the specified ID.

Synopsis

``` nebius dns zone get [id] --id [required] --resource-version ```

Positional Arguments

id

Zone ID.

Options

`--id` (string) \[required]

Zone ID.

`--resource-version` (int64)

Optional: expected zone version (`metadata.resource_version`)
* If specified, the requested version will be returned if possible (if the version has changed, you will get a `FAILED_PRECONDITION`
error)
* If not specified or set to `0`, the latest zone version will be returned.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string, // [required] // Zone ID. "resource_version": int64 // Optional: expected zone version (`metadata.resource_version`) // - If specified, the requested version will be returned if possible (if the version has changed, you will get a `FAILED_PRECONDITION` // error) // - If not specified or set to `0`, the latest zone version will be returned. } ``` ```json theme={null} nebius dns zone get ' { "id": "", "resource_version": 0 } ' ``` *Auto generated on 15-Jul-2026* # nebius dns zone get-by-name Source: https://docs.nebius.com/cli/reference/dns/zone/get-by-name

Name

nebius dns zone get-by-name

Gets the DNS zone by its parent IAM container (`metadata.parent_id`) and `metadata.name`.

Synopsis

``` nebius dns zone get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

`--parent-id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // [required] } ``` ```json theme={null} nebius dns zone get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius dns zone Source: https://docs.nebius.com/cli/reference/dns/zone/index

Name

nebius dns zone

Service for managing DNS zones (`Zone` resources).

Commands

nebius dns zone create

Creates a DNS zone.

nebius dns zone delete

Deletes the DNS zone with the specified ID.

nebius dns zone edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius dns zone edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

nebius dns zone get

Gets the DNS zone with the specified ID.

nebius dns zone get-by-name

Gets the DNS zone by its parent IAM container (`metadata.parent_id`) and `metadata.name`.

nebius dns zone list

Lists DNS zones in the specified parent IAM container.

nebius dns zone operation

Manage operations for Zone service.

nebius dns zone update

Updates the DNS zone with the specified ID.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius dns zone list Source: https://docs.nebius.com/cli/reference/dns/zone/list

Name

nebius dns zone list

Lists DNS zones in the specified parent IAM container.

Synopsis

``` nebius dns zone list --page-size --page-token --parent-id [required] --all -i, --interactive ```

Options

`--page-size` (int64)

Page size
If not specified or set to `0`, a default page size of `100` will be used.

`--page-token` (string)

An opaque listing continuation token
* If not specified or empty, the first page of results will be returned
* If specified, the next page of results (as identified by the token) will be returned.

`--parent-id` (string) \[required]

Parent IAM container ID.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, // Page size // If not specified or set to `0`, a default page size of `100` will be used. "page_token": string, // An opaque listing continuation token // - If not specified or empty, the first page of results will be returned // - If specified, the next page of results (as identified by the token) will be returned. "parent_id": string // [required] // Parent IAM container ID. } ``` ```json theme={null} nebius dns zone list ' { "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius dns zone operation get Source: https://docs.nebius.com/cli/reference/dns/zone/operation/get

Name

nebius dns zone operation get

Get operation by ID.

Synopsis

``` nebius dns zone operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius dns zone operation Source: https://docs.nebius.com/cli/reference/dns/zone/operation/index

Name

nebius dns zone operation

Manage operations for Zone service.

Commands

nebius dns zone operation get

Get operation by ID.

nebius dns zone operation list

List operations by resource ID.

nebius dns zone operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius dns zone operation list Source: https://docs.nebius.com/cli/reference/dns/zone/operation/list

Name

nebius dns zone operation list

List operations by resource ID.

Synopsis

``` nebius dns zone operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius dns zone operation wait Source: https://docs.nebius.com/cli/reference/dns/zone/operation/wait

Name

nebius dns zone operation wait

Wait for operation to complete.

Synopsis

``` nebius dns zone operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius dns zone update Source: https://docs.nebius.com/cli/reference/dns/zone/update

Name

nebius dns zone update

Updates the DNS zone with the specified ID.

Synopsis

``` nebius dns zone update [id] --id --labels --labels-add --labels-remove --name --parent-id --resource-version --soa-spec-negative-ttl --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--soa-spec-negative-ttl` (int64)

Specifies TTL, in seconds, for caching `NXDOMAIN` ("record not found") DNS responses from this zone (*negative caching*)
Set this TTL to a low value if you frequently delete and recreate records instead of updating them
*Note:* Values of less than `5` will be ignored, and a default negative caching TTL will be used instead.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // Metadata for the DNS zone being updated // - The only required field is `metadata.id`, which must be set to the ID of the DNS zone being updated // - You may also set the expected DNS zone version (`metadata.resource_version`), which ensures that only the requested version is // updated (and a `FAILED_PRECONDITION` error is returned on version mismatch). "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // New specification for the DNS zone. "soa_spec": { // Custom SOA (Start of Authority) record specification for the zone. "negative_ttl": int64 // Specifies TTL, in seconds, for caching `NXDOMAIN` ("record not found") DNS responses from this zone (*negative caching*) // Set this TTL to a low value if you frequently delete and recreate records instead of updating them // *Note:* Values of less than `5` will be ignored, and a default negative caching TTL will be used instead. }, "vpc": { // A VPC zone, which is only visible from a virtual network (VPC). } } } ``` ```json theme={null} nebius dns zone update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "soa_spec": { "negative_ttl": 0 }, "vpc": { } } } ' ``` *Auto generated on 15-Jul-2026* # nebius echo Source: https://docs.nebius.com/cli/reference/echo

Name

nebius echo

Nebius Echo is an AI assistant that helps you navigate Nebius documentation, explore and manage project resources.

* **Service & feature guidance:** explains Nebius services, their features, pricing and best-practice usage;
* **Resource inspection:** lists or describes existing Nebius resources (VMs, storage buckets, etc.) in your projects;
* **State-changing operations:** executes actions like creating Nebius resources, or starting and stopping VMs with explicit approval;
* **Log analysis & diagnostics:** explores resource logs to identify issues, explain behavior, and provide operational insights.

Synopsis

``` nebius echo [prompt] --chat --parent-id [required] ```

Examples

``` $ nebius echo 'List all buckets' ```

Options

`--chat` (bool)

Run in chat mode.

`--parent-id` (string) \[required]

Project ID for the AI request. Should be passed explicitly if not set in the profile.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius feedback disable Source: https://docs.nebius.com/cli/reference/feedback/disable

Name

nebius feedback disable

Disable Nebius CLI feedback suggestions

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius feedback Source: https://docs.nebius.com/cli/reference/feedback/index

Name

nebius feedback

Send feedback about Nebius CLI

Commands

nebius feedback disable

Disable Nebius CLI feedback suggestions

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam access-key activate Source: https://docs.nebius.com/cli/reference/iam/access-key/activate

Name

nebius iam access-key activate

Deprecated

Command access-key is deprecated and will be removed on 2026-09-01. Please use the 'iam v2 access-key' command instead. All existing keys remain accessible through the new command.

Synopsis

``` nebius iam access-key activate --id-aws-access-key-id --id-id --async ```

Options

`--id-aws-access-key-id` (string)

Mutually exclusive with: `--id-id`.

`--id-id` (string)

Mutually exclusive with: `--id-aws-access-key-id`.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": { "aws_access_key_id": string, // Cannot be set together with: id "id": string // Cannot be set together with: aws_access_key_id } } ``` ```json theme={null} nebius iam access-key activate ' { "id": { "aws_access_key_id": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius iam access-key create Source: https://docs.nebius.com/cli/reference/iam/access-key/create

Name

nebius iam access-key create

Deprecated

Command access-key is deprecated and will be removed on 2026-09-01. Please use the 'iam v2 access-key' command instead. All existing keys remain accessible through the new command.

Synopsis

``` nebius iam access-key create --account-service-account-id --account-user-account-id --description --expires-at --labels --name --parent-id [required] --resource-version --async -i, --interactive ```

Options

`--account-service-account-id` (string)

Mutually exclusive with: `--account-user-account-id`.

`--account-user-account-id` (string)

Mutually exclusive with: `--account-service-account-id`.

`--description` (string)

`--expires-at` (timestamp: 1970-01-31T02:30:59Z)

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "account": { // [immutable] "anonymous_account": { // Cannot be set together with: user_account, service_account }, "service_account": { // Cannot be set together with: user_account, anonymous_account "id": string }, "user_account": { // Cannot be set together with: service_account, anonymous_account "id": string } }, "description": string, "expires_at": "1970-01-31T02:30:59Z" // [google.protobuf.Timestamp] [immutable] } } ``` ```json theme={null} nebius iam access-key create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "account": { "anonymous_account": { } }, "description": "", "expires_at": "1970-01-31T02:30:59Z" } } ' ``` *Auto generated on 15-Jul-2026* # nebius iam access-key deactivate Source: https://docs.nebius.com/cli/reference/iam/access-key/deactivate

Name

nebius iam access-key deactivate

Deprecated

Command access-key is deprecated and will be removed on 2026-09-01. Please use the 'iam v2 access-key' command instead. All existing keys remain accessible through the new command.

Synopsis

``` nebius iam access-key deactivate --id-aws-access-key-id --id-id --async ```

Options

`--id-aws-access-key-id` (string)

Mutually exclusive with: `--id-id`.

`--id-id` (string)

Mutually exclusive with: `--id-aws-access-key-id`.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": { "aws_access_key_id": string, // Cannot be set together with: id "id": string // Cannot be set together with: aws_access_key_id } } ``` ```json theme={null} nebius iam access-key deactivate ' { "id": { "aws_access_key_id": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius iam access-key delete Source: https://docs.nebius.com/cli/reference/iam/access-key/delete

Name

nebius iam access-key delete

Deprecated

Command access-key is deprecated and will be removed on 2026-09-01. Please use the 'iam v2 access-key' command instead. All existing keys remain accessible through the new command.

Synopsis

``` nebius iam access-key delete --id-aws-access-key-id --id-id --async ```

Options

`--id-aws-access-key-id` (string)

Mutually exclusive with: `--id-id`.

`--id-id` (string)

Mutually exclusive with: `--id-aws-access-key-id`.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": { "aws_access_key_id": string, // Cannot be set together with: id "id": string // Cannot be set together with: aws_access_key_id } } ``` ```json theme={null} nebius iam access-key delete ' { "id": { "aws_access_key_id": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius iam access-key get-by-aws-id Source: https://docs.nebius.com/cli/reference/iam/access-key/get-by-aws-id

Name

nebius iam access-key get-by-aws-id

Deprecated

Command access-key is deprecated and will be removed on 2026-09-01. Please use the 'iam v2 access-key' command instead. All existing keys remain accessible through the new command.

Synopsis

``` nebius iam access-key get-by-aws-id --aws-access-key-id ```

Options

`--aws-access-key-id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "aws_access_key_id": string } ``` ```json theme={null} nebius iam access-key get-by-aws-id ' { "aws_access_key_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam access-key get-by-id Source: https://docs.nebius.com/cli/reference/iam/access-key/get-by-id

Name

nebius iam access-key get-by-id

Deprecated

Command access-key is deprecated and will be removed on 2026-09-01. Please use the 'iam v2 access-key' command instead. All existing keys remain accessible through the new command.

Synopsis

``` nebius iam access-key get-by-id [id] --id ```

Positional Arguments

id

ID of the resource to get-by-id.

Options

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string } ``` ```json theme={null} nebius iam access-key get-by-id ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam access-key get-secret-once Source: https://docs.nebius.com/cli/reference/iam/access-key/get-secret-once

Name

nebius iam access-key get-secret-once

Deprecated

Command access-key is deprecated and will be removed on 2026-09-01. Please use the 'iam v2 access-key' command instead. All existing keys remain accessible through the new command.

Synopsis

``` nebius iam access-key get-secret-once [id] --id ```

Positional Arguments

id

ID of the resource to get-secret-once.

Options

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string } ``` ```json theme={null} nebius iam access-key get-secret-once ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam access-key Source: https://docs.nebius.com/cli/reference/iam/access-key/index

Name

nebius iam access-key

Access keys management \[deprecated].

Deprecated

Command access-key is deprecated and will be removed on 2026-09-01. Please use the 'iam v2 access-key' command instead. All existing keys remain accessible through the new command.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam access-key list Source: https://docs.nebius.com/cli/reference/iam/access-key/list

Name

nebius iam access-key list

Deprecated

Command access-key is deprecated and will be removed on 2026-09-01. Please use the 'iam v2 access-key' command instead. All existing keys remain accessible through the new command.

Synopsis

``` nebius iam access-key list --filter --page-size --page-token --parent-id --all -i, --interactive ```

Options

`--filter` (string)

A filter to narrow down the results based on specific criteria.

`--page-size` (int64)

Specifies the maximum number of items to return in the response.
Default value: 10.

`--page-token` (string)

Token for pagination, allowing the retrieval of the next set of results.

`--parent-id` (string)

Represents the container ID.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "filter": string, // A filter to narrow down the results based on specific criteria. "page_size": int64, // Specifies the maximum number of items to return in the response. // Default value: 10. "page_token": string, // Token for pagination, allowing the retrieval of the next set of results. "parent_id": string // Represents the container ID. } ``` ```json theme={null} nebius iam access-key list ' { "filter": "", "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam access-key list-by-account Source: https://docs.nebius.com/cli/reference/iam/access-key/list-by-account

Name

nebius iam access-key list-by-account

Deprecated

Command access-key is deprecated and will be removed on 2026-09-01. Please use the 'iam v2 access-key' command instead. All existing keys remain accessible through the new command.

Synopsis

``` nebius iam access-key list-by-account --account-service-account-id --account-user-account-id --filter --page-size --page-token ```

Options

`--account-service-account-id` (string)

Mutually exclusive with: `--account-user-account-id`.

`--account-user-account-id` (string)

Mutually exclusive with: `--account-service-account-id`.

`--filter` (string)

A filter to narrow down the results based on specific criteria.

`--page-size` (int64)

Specifies the maximum number of items to return in the response.
Default value: 10.

`--page-token` (string)

Token for pagination, allowing the retrieval of the next set of results.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "account": { // Represents the parent account ID. "anonymous_account": { // Cannot be set together with: user_account, service_account }, "service_account": { // Cannot be set together with: user_account, anonymous_account "id": string }, "user_account": { // Cannot be set together with: service_account, anonymous_account "id": string } }, "filter": string, // A filter to narrow down the results based on specific criteria. "page_size": int64, // Specifies the maximum number of items to return in the response. // Default value: 10. "page_token": string // Token for pagination, allowing the retrieval of the next set of results. } ``` ```json theme={null} nebius iam access-key list-by-account ' { "account": { "anonymous_account": { } }, "filter": "", "page_size": 0, "page_token": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam access-key operation get Source: https://docs.nebius.com/cli/reference/iam/access-key/operation/get

Name

nebius iam access-key operation get

Get operation by ID.

Deprecated

Command access-key is deprecated and will be removed on 2026-09-01. Please use the 'iam v2 access-key' command instead. All existing keys remain accessible through the new command.

Synopsis

``` nebius iam access-key operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam access-key operation Source: https://docs.nebius.com/cli/reference/iam/access-key/operation/index

Name

nebius iam access-key operation

Manage operations for AccessKey service.

Deprecated

Command access-key is deprecated and will be removed on 2026-09-01. Please use the 'iam v2 access-key' command instead. All existing keys remain accessible through the new command.

Commands

nebius iam access-key operation get

Get operation by ID.

nebius iam access-key operation list

List operations by resource ID.

nebius iam access-key operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam access-key operation list Source: https://docs.nebius.com/cli/reference/iam/access-key/operation/list

Name

nebius iam access-key operation list

List operations by resource ID.

Deprecated

Command access-key is deprecated and will be removed on 2026-09-01. Please use the 'iam v2 access-key' command instead. All existing keys remain accessible through the new command.

Synopsis

``` nebius iam access-key operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam access-key operation wait Source: https://docs.nebius.com/cli/reference/iam/access-key/operation/wait

Name

nebius iam access-key operation wait

Wait for operation to complete.

Deprecated

Command access-key is deprecated and will be removed on 2026-09-01. Please use the 'iam v2 access-key' command instead. All existing keys remain accessible through the new command.

Synopsis

``` nebius iam access-key operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam access-key update Source: https://docs.nebius.com/cli/reference/iam/access-key/update

Name

nebius iam access-key update

Deprecated

Command access-key is deprecated and will be removed on 2026-09-01. Please use the 'iam v2 access-key' command instead. All existing keys remain accessible through the new command.

Synopsis

``` nebius iam access-key update [id] --description --id --labels --name --parent-id --resource-version --async --clear-mask --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--description` (string)

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "description": string } } ``` ```json theme={null} nebius iam access-key update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "description": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius iam access-permit create Source: https://docs.nebius.com/cli/reference/iam/access-permit/create

Name

nebius iam access-permit create

Creates access permit for provided resource with provided role.
Subject of access permit is also a parent of access permit.
If resource is unknown - NOT\_FOUND will be thrown.
If parent of subject is not from resource's hierarchy - NOT\_FOUND will be thrown.

Synopsis

``` nebius iam access-permit create --labels --name --parent-id [required] --resource-id --resource-version --role --async -i, --interactive ```

Options

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-id` (string)

Resource for granting access permit.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--role` (string)

Role for granting access permit.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "resource_id": string, // [immutable] // Resource for granting access permit. "role": string // [immutable] // Role for granting access permit. } } ``` ```json theme={null} nebius iam access-permit create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "resource_id": "", "role": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius iam access-permit delete Source: https://docs.nebius.com/cli/reference/iam/access-permit/delete

Name

nebius iam access-permit delete

Delete access permit by id.

Synopsis

``` nebius iam access-permit delete [id] --id --async ```

Positional Arguments

id

ID of the resource to delete.

Options

`--id` (string)

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string } ``` ```json theme={null} nebius iam access-permit delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam access-permit get Source: https://docs.nebius.com/cli/reference/iam/access-permit/get

Name

nebius iam access-permit get

Gets access permit by id.

Synopsis

``` nebius iam access-permit get [id] --id ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string } ``` ```json theme={null} nebius iam access-permit get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam access-permit Source: https://docs.nebius.com/cli/reference/iam/access-permit/index

Name

nebius iam access-permit

Commands

nebius iam access-permit create

Creates access permit for provided resource with provided role.
Subject of access permit is also a parent of access permit.
If resource is unknown - NOT\_FOUND will be thrown.
If parent of subject is not from resource's hierarchy - NOT\_FOUND will be thrown.

nebius iam access-permit delete

Delete access permit by id.

nebius iam access-permit get

Gets access permit by id.

nebius iam access-permit list

Lists access permits for provided parent.

nebius iam access-permit operation

Manage operations for AccessPermit service.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam access-permit list Source: https://docs.nebius.com/cli/reference/iam/access-permit/list

Name

nebius iam access-permit list

Lists access permits for provided parent.

Synopsis

``` nebius iam access-permit list --filter --page-size --page-token --parent-id --all -i, --interactive ```

Options

`--filter` (string)

A filter to narrow down the results based on specific criteria.

`--page-size` (int64)

Specifies the maximum number of items to return in the response.

`--page-token` (string)

Token for pagination, allowing the retrieval of the next set of results.

`--parent-id` (string)

Represents the container ID.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "filter": string, // A filter to narrow down the results based on specific criteria. "page_size": int64, // Specifies the maximum number of items to return in the response. "page_token": string, // Token for pagination, allowing the retrieval of the next set of results. "parent_id": string // Represents the container ID. } ``` ```json theme={null} nebius iam access-permit list ' { "filter": "", "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam access-permit operation get Source: https://docs.nebius.com/cli/reference/iam/access-permit/operation/get

Name

nebius iam access-permit operation get

Get operation by ID.

Synopsis

``` nebius iam access-permit operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam access-permit operation Source: https://docs.nebius.com/cli/reference/iam/access-permit/operation/index

Name

nebius iam access-permit operation

Manage operations for AccessPermit service.

Commands

nebius iam access-permit operation get

Get operation by ID.

nebius iam access-permit operation list

List operations by resource ID.

nebius iam access-permit operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam access-permit operation list Source: https://docs.nebius.com/cli/reference/iam/access-permit/operation/list

Name

nebius iam access-permit operation list

List operations by resource ID.

Synopsis

``` nebius iam access-permit operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam access-permit operation wait Source: https://docs.nebius.com/cli/reference/iam/access-permit/operation/wait

Name

nebius iam access-permit operation wait

Wait for operation to complete.

Synopsis

``` nebius iam access-permit operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam auth-public-key activate Source: https://docs.nebius.com/cli/reference/iam/auth-public-key/activate

Name

nebius iam auth-public-key activate

Synopsis

``` nebius iam auth-public-key activate [id] --id --async ```

Positional Arguments

id

ID of the resource to activate.

Options

`--id` (string)

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string } ``` ```json theme={null} nebius iam auth-public-key activate ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam auth-public-key create Source: https://docs.nebius.com/cli/reference/iam/auth-public-key/create

Name

nebius iam auth-public-key create

Synopsis

``` nebius iam auth-public-key create --account-service-account-id --account-user-account-id --data --description --expires-at --labels --name --parent-id [required] --resource-version --async -i, --interactive ```

Options

`--account-service-account-id` (string)

Mutually exclusive with: `--account-user-account-id`.

`--account-user-account-id` (string)

Mutually exclusive with: `--account-service-account-id`.

`--data` (string)

`--description` (string)

`--expires-at` (timestamp: 1970-01-31T02:30:59Z)

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "account": { // [immutable] "anonymous_account": { // Cannot be set together with: user_account, service_account }, "service_account": { // Cannot be set together with: user_account, anonymous_account "id": string }, "user_account": { // Cannot be set together with: service_account, anonymous_account "id": string } }, "data": string, // [immutable] "description": string, "expires_at": "1970-01-31T02:30:59Z" // [google.protobuf.Timestamp] [immutable] } } ``` ```json theme={null} nebius iam auth-public-key create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "account": { "anonymous_account": { } }, "data": "", "description": "", "expires_at": "1970-01-31T02:30:59Z" } } ' ``` *Auto generated on 15-Jul-2026* # nebius iam auth-public-key deactivate Source: https://docs.nebius.com/cli/reference/iam/auth-public-key/deactivate

Name

nebius iam auth-public-key deactivate

Synopsis

``` nebius iam auth-public-key deactivate [id] --id --async ```

Positional Arguments

id

ID of the resource to deactivate.

Options

`--id` (string)

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string } ``` ```json theme={null} nebius iam auth-public-key deactivate ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam auth-public-key delete Source: https://docs.nebius.com/cli/reference/iam/auth-public-key/delete

Name

nebius iam auth-public-key delete

Synopsis

``` nebius iam auth-public-key delete [id] --id --async ```

Positional Arguments

id

ID of the resource to delete.

Options

`--id` (string)

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string } ``` ```json theme={null} nebius iam auth-public-key delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam auth-public-key edit Source: https://docs.nebius.com/cli/reference/iam/auth-public-key/edit

Name

nebius iam auth-public-key edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius iam auth-public-key edit [id] --async --editor --id ```

Positional Arguments

id

ID of the resource to edit.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam auth-public-key generate Source: https://docs.nebius.com/cli/reference/iam/auth-public-key/generate

Name

nebius iam auth-public-key generate

Generates key-pair, uploads the public key as a service account authentication key and outputs the service account authentication credentials

Synopsis

``` nebius iam auth-public-key generate --expires-at --output [required] --output-format --parent-id --service-account-id [required] ```

Options

`--expires-at` (timestamp: 1970-01-31T02:30:59Z)

Public key expiration time in RFC3339Nano format.

`--output` (string) \[required]

Output file path.

`--output-format` (string)

Output file format: 'service-account-json', 'pem'.

`--parent-id` (string)

Container ID to upload auth public key to. A service account parent is used if not set.

`--service-account-id` (string) \[required]

Service account to upload auth public key to.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam auth-public-key get Source: https://docs.nebius.com/cli/reference/iam/auth-public-key/get

Name

nebius iam auth-public-key get

Synopsis

``` nebius iam auth-public-key get [id] --id ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string } ``` ```json theme={null} nebius iam auth-public-key get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam auth-public-key Source: https://docs.nebius.com/cli/reference/iam/auth-public-key/index

Name

nebius iam auth-public-key

Commands

nebius iam auth-public-key activate

nebius iam auth-public-key create

nebius iam auth-public-key deactivate

nebius iam auth-public-key delete

nebius iam auth-public-key edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius iam auth-public-key generate

Generates key-pair, uploads the public key as a service account authentication key and outputs the service account authentication credentials

nebius iam auth-public-key get

nebius iam auth-public-key list

nebius iam auth-public-key list-by-account

nebius iam auth-public-key operation

Manage operations for AuthPublicKey service.

nebius iam auth-public-key update

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam auth-public-key list Source: https://docs.nebius.com/cli/reference/iam/auth-public-key/list

Name

nebius iam auth-public-key list

Synopsis

``` nebius iam auth-public-key list --filter --page-size --page-token --parent-id --all -i, --interactive ```

Options

`--filter` (string)

A filter to narrow down the results based on specific criteria.

`--page-size` (int64)

Specifies the maximum number of items to return in the response.
Default value: 10.

`--page-token` (string)

Token for pagination, allowing the retrieval of the next set of results.

`--parent-id` (string)

Represents the container ID.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "filter": string, // A filter to narrow down the results based on specific criteria. "page_size": int64, // Specifies the maximum number of items to return in the response. // Default value: 10. "page_token": string, // Token for pagination, allowing the retrieval of the next set of results. "parent_id": string // Represents the container ID. } ``` ```json theme={null} nebius iam auth-public-key list ' { "filter": "", "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam auth-public-key list-by-account Source: https://docs.nebius.com/cli/reference/iam/auth-public-key/list-by-account

Name

nebius iam auth-public-key list-by-account

Synopsis

``` nebius iam auth-public-key list-by-account --account-service-account-id --account-user-account-id --filter --page-size --page-token ```

Options

`--account-service-account-id` (string)

Mutually exclusive with: `--account-user-account-id`.

`--account-user-account-id` (string)

Mutually exclusive with: `--account-service-account-id`.

`--filter` (string)

A filter to narrow down the results based on specific criteria.

`--page-size` (int64)

Specifies the maximum number of items to return in the response.
Default value: 10.

`--page-token` (string)

Token for pagination, allowing the retrieval of the next set of results.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "account": { // Represents the parent account ID. "anonymous_account": { // Cannot be set together with: user_account, service_account }, "service_account": { // Cannot be set together with: user_account, anonymous_account "id": string }, "user_account": { // Cannot be set together with: service_account, anonymous_account "id": string } }, "filter": string, // A filter to narrow down the results based on specific criteria. "page_size": int64, // Specifies the maximum number of items to return in the response. // Default value: 10. "page_token": string // Token for pagination, allowing the retrieval of the next set of results. } ``` ```json theme={null} nebius iam auth-public-key list-by-account ' { "account": { "anonymous_account": { } }, "filter": "", "page_size": 0, "page_token": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam auth-public-key operation get Source: https://docs.nebius.com/cli/reference/iam/auth-public-key/operation/get

Name

nebius iam auth-public-key operation get

Get operation by ID.

Synopsis

``` nebius iam auth-public-key operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam auth-public-key operation Source: https://docs.nebius.com/cli/reference/iam/auth-public-key/operation/index

Name

nebius iam auth-public-key operation

Manage operations for AuthPublicKey service.

Commands

nebius iam auth-public-key operation get

Get operation by ID.

nebius iam auth-public-key operation list

List operations by resource ID.

nebius iam auth-public-key operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam auth-public-key operation list Source: https://docs.nebius.com/cli/reference/iam/auth-public-key/operation/list

Name

nebius iam auth-public-key operation list

List operations by resource ID.

Synopsis

``` nebius iam auth-public-key operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam auth-public-key operation wait Source: https://docs.nebius.com/cli/reference/iam/auth-public-key/operation/wait

Name

nebius iam auth-public-key operation wait

Wait for operation to complete.

Synopsis

``` nebius iam auth-public-key operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam auth-public-key update Source: https://docs.nebius.com/cli/reference/iam/auth-public-key/update

Name

nebius iam auth-public-key update

Synopsis

``` nebius iam auth-public-key update [id] --description --id --labels --labels-add --labels-remove --name --parent-id --resource-version --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--description` (string)

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "description": string } } ``` ```json theme={null} nebius iam auth-public-key update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "description": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius iam federated-credentials create Source: https://docs.nebius.com/cli/reference/iam/federated-credentials/create

Name

nebius iam federated-credentials create

Creates federated credentials.

Synopsis

``` nebius iam federated-credentials create --federated-subject-id --labels --name --oidc-provider-issuer-url [required] --oidc-provider-jwk-set-json --parent-id [required] --resource-version --subject-id [required] --async -i, --interactive ```

Options

`--federated-subject-id` (string)

Federated subject ID. For oidc\_provider, the subject is calculated from the
"sub" claim of the federated JWT token.

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--oidc-provider-issuer-url` (string) \[required]

OIDC-compatible JWT issuer URL.

`--oidc-provider-jwk-set-json` (string)

JSON representation of a JSON Web Key Set (JWKS) with public keys used for
JWT signature verification.
If set, the token service uses this JWKS to verify token signatures.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--subject-id` (string) \[required]

IAM subject (service account) that the federated subject impersonates.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // [required] // Federated credentials resource metadata. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // [required] // Federated credentials resource specification. "federated_subject_id": string, // Federated subject ID. For oidc_provider, the subject is calculated from the // "sub" claim of the federated JWT token. "oidc_provider": { "issuer_url": string, // [required] // OIDC-compatible JWT issuer URL. "jwk_set_json": string // JSON representation of a JSON Web Key Set (JWKS) with public keys used for // JWT signature verification. // If set, the token service uses this JWKS to verify token signatures. }, "subject_id": string // [required] // IAM subject (service account) that the federated subject impersonates. } } ``` ```json theme={null} nebius iam federated-credentials create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "federated_subject_id": "", "oidc_provider": { "issuer_url": "", "jwk_set_json": "" }, "subject_id": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius iam federated-credentials delete Source: https://docs.nebius.com/cli/reference/iam/federated-credentials/delete

Name

nebius iam federated-credentials delete

Deletes federated credentials.

Synopsis

``` nebius iam federated-credentials delete [id] --id [required] --async ```

Positional Arguments

id

Target federated credentials ID.

Options

`--id` (string) \[required]

Target federated credentials ID.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] // Target federated credentials ID. } ``` ```json theme={null} nebius iam federated-credentials delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam federated-credentials edit Source: https://docs.nebius.com/cli/reference/iam/federated-credentials/edit

Name

nebius iam federated-credentials edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius iam federated-credentials edit [id] --async --editor --id ```

Positional Arguments

id

Target federated credentials ID.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

Target federated credentials ID.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam federated-credentials edit-by-name Source: https://docs.nebius.com/cli/reference/iam/federated-credentials/edit-by-name

Name

nebius iam federated-credentials edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

Synopsis

``` nebius iam federated-credentials edit-by-name --async --editor --name --parent-id ```

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--name` (string)

Target federated credentials name.

`--parent-id` (string)

Parent container ID for the federated credentials.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam federated-credentials get Source: https://docs.nebius.com/cli/reference/iam/federated-credentials/get

Name

nebius iam federated-credentials get

Retrieves information about federated credentials by ID.

Synopsis

``` nebius iam federated-credentials get [id] --id [required] ```

Positional Arguments

id

Target federated credentials ID.

Options

`--id` (string) \[required]

Target federated credentials ID.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] // Target federated credentials ID. } ``` ```json theme={null} nebius iam federated-credentials get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam federated-credentials get-by-name Source: https://docs.nebius.com/cli/reference/iam/federated-credentials/get-by-name

Name

nebius iam federated-credentials get-by-name

Retrieves information about federated credentials by name and parent container.

Synopsis

``` nebius iam federated-credentials get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

Target federated credentials name.

`--parent-id` (string) \[required]

Parent container ID for the federated credentials.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] // Target federated credentials name. "parent_id": string // [required] // Parent container ID for the federated credentials. } ``` ```json theme={null} nebius iam federated-credentials get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam federated-credentials Source: https://docs.nebius.com/cli/reference/iam/federated-credentials/index

Name

nebius iam federated-credentials

\[PUBLIC PREVIEW]
The federated credentials feature is currently fully available with Nebius Managed Kubernetes issuers.
Custom external credentials providers are available only for early adopters.
Contact the support team to check whether this feature is available for your tenant.
Alternatively, you can use them in conjunction with local JWK set storage without limitations.

Commands

nebius iam federated-credentials create

Creates federated credentials.

nebius iam federated-credentials delete

Deletes federated credentials.

nebius iam federated-credentials edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius iam federated-credentials edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

nebius iam federated-credentials get

Retrieves information about federated credentials by ID.

nebius iam federated-credentials get-by-name

Retrieves information about federated credentials by name and parent container.

nebius iam federated-credentials list

Lists federated credentials by parent container.

nebius iam federated-credentials operation

Manage operations for FederatedCredentials service.

nebius iam federated-credentials update

Updates federated credentials.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam federated-credentials list Source: https://docs.nebius.com/cli/reference/iam/federated-credentials/list

Name

nebius iam federated-credentials list

Lists federated credentials by parent container.

Synopsis

``` nebius iam federated-credentials list --filter --page-size --page-token --parent-id [required] --all -i, --interactive ```

Options

`--filter` (string)

Filter expression for narrowing down the results.

`--page-size` (int64)

Maximum number of items to return in the response. Default value: 10.

`--page-token` (string)

Token for pagination, allowing the retrieval of the next set of results.

`--parent-id` (string) \[required]

Parent container ID for the federated credentials.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "filter": string, // Filter expression for narrowing down the results. "page_size": int64, // Maximum number of items to return in the response. Default value: 10. "page_token": string, // Token for pagination, allowing the retrieval of the next set of results. "parent_id": string // [required] // Parent container ID for the federated credentials. } ``` ```json theme={null} nebius iam federated-credentials list ' { "filter": "", "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam federated-credentials operation get Source: https://docs.nebius.com/cli/reference/iam/federated-credentials/operation/get

Name

nebius iam federated-credentials operation get

Get operation by ID.

Synopsis

``` nebius iam federated-credentials operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam federated-credentials operation Source: https://docs.nebius.com/cli/reference/iam/federated-credentials/operation/index

Name

nebius iam federated-credentials operation

Manage operations for FederatedCredentials service.

Commands

nebius iam federated-credentials operation get

Get operation by ID.

nebius iam federated-credentials operation list

List operations by resource ID.

nebius iam federated-credentials operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam federated-credentials operation list Source: https://docs.nebius.com/cli/reference/iam/federated-credentials/operation/list

Name

nebius iam federated-credentials operation list

List operations by resource ID.

Synopsis

``` nebius iam federated-credentials operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam federated-credentials operation wait Source: https://docs.nebius.com/cli/reference/iam/federated-credentials/operation/wait

Name

nebius iam federated-credentials operation wait

Wait for operation to complete.

Synopsis

``` nebius iam federated-credentials operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam federated-credentials update Source: https://docs.nebius.com/cli/reference/iam/federated-credentials/update

Name

nebius iam federated-credentials update

Updates federated credentials.

Synopsis

``` nebius iam federated-credentials update [id] --federated-subject-id --id --labels --labels-add --labels-remove --name --oidc-provider-issuer-url --oidc-provider-jwk-set-json --parent-id --resource-version --subject-id --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--federated-subject-id` (string)

Federated subject ID. For oidc\_provider, the subject is calculated from the
"sub" claim of the federated JWT token.

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--oidc-provider-issuer-url` (string)

OIDC-compatible JWT issuer URL.

`--oidc-provider-jwk-set-json` (string)

JSON representation of a JSON Web Key Set (JWKS) with public keys used for
JWT signature verification.
If set, the token service uses this JWKS to verify token signatures.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--subject-id` (string)

IAM subject (service account) that the federated subject impersonates.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // Federated credentials resource metadata. "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // Federated credentials resource specification. "federated_subject_id": string, // Federated subject ID. For oidc_provider, the subject is calculated from the // "sub" claim of the federated JWT token. "oidc_provider": { "issuer_url": string, // [required] // OIDC-compatible JWT issuer URL. "jwk_set_json": string // JSON representation of a JSON Web Key Set (JWKS) with public keys used for // JWT signature verification. // If set, the token service uses this JWKS to verify token signatures. }, "subject_id": string // [required] // IAM subject (service account) that the federated subject impersonates. } } ``` ```json theme={null} nebius iam federated-credentials update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "federated_subject_id": "", "oidc_provider": { "issuer_url": "", "jwk_set_json": "" }, "subject_id": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius iam federation-certificate create Source: https://docs.nebius.com/cli/reference/iam/federation-certificate/create

Name

nebius iam federation-certificate create

Synopsis

``` nebius iam federation-certificate create --data --description --labels --name --parent-id [required] --resource-version --async -i, --interactive ```

Options

`--data` (string)

`--description` (string)

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "data": string, // [immutable] "description": string } } ``` ```json theme={null} nebius iam federation-certificate create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "data": "", "description": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius iam federation-certificate delete Source: https://docs.nebius.com/cli/reference/iam/federation-certificate/delete

Name

nebius iam federation-certificate delete

Synopsis

``` nebius iam federation-certificate delete [id] --id --async ```

Positional Arguments

id

ID of the resource to delete.

Options

`--id` (string)

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string } ``` ```json theme={null} nebius iam federation-certificate delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam federation-certificate edit Source: https://docs.nebius.com/cli/reference/iam/federation-certificate/edit

Name

nebius iam federation-certificate edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius iam federation-certificate edit [id] --async --editor --id ```

Positional Arguments

id

ID of the resource to edit.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam federation-certificate get Source: https://docs.nebius.com/cli/reference/iam/federation-certificate/get

Name

nebius iam federation-certificate get

Synopsis

``` nebius iam federation-certificate get [id] --id ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string } ``` ```json theme={null} nebius iam federation-certificate get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam federation-certificate Source: https://docs.nebius.com/cli/reference/iam/federation-certificate/index

Name

nebius iam federation-certificate

Commands

nebius iam federation-certificate create

nebius iam federation-certificate delete

nebius iam federation-certificate edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius iam federation-certificate get

nebius iam federation-certificate list-by-federation

nebius iam federation-certificate operation

Manage operations for FederationCertificate service.

nebius iam federation-certificate update

nebius iam federation-certificate update-bulk

Replaces all federation's certificates with provided in the request. Certificates which are not presented will be removed.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam federation-certificate list-by-federation Source: https://docs.nebius.com/cli/reference/iam/federation-certificate/list-by-federation

Name

nebius iam federation-certificate list-by-federation

Synopsis

``` nebius iam federation-certificate list-by-federation --federation-id --page-size --page-token ```

Options

`--federation-id` (string)

Represents the parent federation ID. Corresponds to the parent\_id value.

`--page-size` (int64)

Specifies the maximum number of items to return in the response.
Default value: 10.

`--page-token` (string)

Token for pagination, allowing the retrieval of the next set of results.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "federation_id": string, // Represents the parent federation ID. Corresponds to the parent_id value. "page_size": int64, // Specifies the maximum number of items to return in the response. // Default value: 10. "page_token": string // Token for pagination, allowing the retrieval of the next set of results. } ``` ```json theme={null} nebius iam federation-certificate list-by-federation ' { "federation_id": "", "page_size": 0, "page_token": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam federation-certificate operation get Source: https://docs.nebius.com/cli/reference/iam/federation-certificate/operation/get

Name

nebius iam federation-certificate operation get

Get operation by ID.

Synopsis

``` nebius iam federation-certificate operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam federation-certificate operation Source: https://docs.nebius.com/cli/reference/iam/federation-certificate/operation/index

Name

nebius iam federation-certificate operation

Manage operations for FederationCertificate service.

Commands

nebius iam federation-certificate operation get

Get operation by ID.

nebius iam federation-certificate operation list

List operations by resource ID.

nebius iam federation-certificate operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam federation-certificate operation list Source: https://docs.nebius.com/cli/reference/iam/federation-certificate/operation/list

Name

nebius iam federation-certificate operation list

List operations by resource ID.

Synopsis

``` nebius iam federation-certificate operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam federation-certificate operation wait Source: https://docs.nebius.com/cli/reference/iam/federation-certificate/operation/wait

Name

nebius iam federation-certificate operation wait

Wait for operation to complete.

Synopsis

``` nebius iam federation-certificate operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam federation-certificate update Source: https://docs.nebius.com/cli/reference/iam/federation-certificate/update

Name

nebius iam federation-certificate update

Synopsis

``` nebius iam federation-certificate update [id] --description --id --labels --labels-add --labels-remove --name --parent-id --resource-version --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--description` (string)

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "description": string } } ``` ```json theme={null} nebius iam federation-certificate update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "description": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius iam federation-certificate update-bulk Source: https://docs.nebius.com/cli/reference/iam/federation-certificate/update-bulk

Name

nebius iam federation-certificate update-bulk

Replaces all federation's certificates with provided in the request. Certificates which are not presented will be removed.

Synopsis

``` nebius iam federation-certificate update-bulk --federation-id --updates --async --clear-mask --full --patch ```

Options

`--federation-id` (string)

Represents the parent federation ID. All certificates in update should have identical parent id.

`--updates` (json)

If target certificate contains id - the existing one will be updates, otherwise the new one will be created.

(structure)

metadata -> (structure)

id -> (string)\[identifier]

Identifier for the resource, unique for its resource type.

labels -> (map)\[map]

Labels associated with the resource.

key -> (string)

value -> (string)

name -> (string)

Human readable name for the resource.

parent\_id -> (string)\[required]

Identifier of the parent resource to which the resource belongs.

resource\_version -> (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

spec -> (structure)

data -> (string)\[immutable]

description -> (string)

JSON Schema:

```json theme={null} [{ "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "data": "", "description": "" } }] ```

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "federation_id": string, // Represents the parent federation ID. All certificates in update should have identical parent id. "updates": [{ // If target certificate contains id - the existing one will be updates, otherwise the new one will be created. "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "data": string, // [immutable] "description": string } }] } ``` ```json theme={null} nebius iam federation-certificate update-bulk ' { "federation_id": "", "updates": [{ "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "data": "", "description": "" } }] } ' ``` *Auto generated on 15-Jul-2026* # nebius iam federation activate Source: https://docs.nebius.com/cli/reference/iam/federation/activate

Name

nebius iam federation activate

Activates an existing federation.
By default, a newly created federation is in the active state.

Synopsis

``` nebius iam federation activate --federation-id [required] --async ```

Options

`--federation-id` (string) \[required]

Target federation ID.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "federation_id": string // [required] // Target federation ID. } ``` ```json theme={null} nebius iam federation activate ' { "federation_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam federation create Source: https://docs.nebius.com/cli/reference/iam/federation/create

Name

nebius iam federation create

Creates a federation.

Synopsis

``` nebius iam federation create --active --labels --name --parent-id [required] --resource-version --saml-settings-force-authn --saml-settings-idp-issuer --saml-settings-sso-url --user-account-auto-creation --async -i, --interactive ```

Options

`--active` (bool)

Specifies if the federation in active state.

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--saml-settings-force-authn` (bool)

If "true", the identity provider MUST authenticate the presenter directly rather than rely on a previous security context.

`--saml-settings-idp-issuer` (string)

The unique identifier of the SAML Identity Provider. It usually matches the entityID from the IdP metadata.

`--saml-settings-sso-url` (string)

Identity Provider’s Single Sign-On endpoint. This is the URL where the user is redirected to start SAML login.

`--user-account-auto-creation` (bool)

If false, users with access to the federation cannot sign in automatically
and user accounts for them must be pre-created by a federation administrator.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // Federation resource metadata. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // Federation resource specification. "active": bool, // [deprecated] // 'active' field ignored. Use 'Activate/Deactivate' methods to manage federation state. A newly created federation is always active by default. Specifies if the federation in active state. "saml_settings": { // SAML federation settings. "force_authn": bool, // If "true", the identity provider MUST authenticate the presenter directly rather than rely on a previous security context. "idp_issuer": string, // The unique identifier of the SAML Identity Provider. It usually matches the entityID from the IdP metadata. "sso_url": string // Identity Provider’s Single Sign-On endpoint. This is the URL where the user is redirected to start SAML login. }, "user_account_auto_creation": bool // If false, users with access to the federation cannot sign in automatically // and user accounts for them must be pre-created by a federation administrator. } } ``` ```json theme={null} nebius iam federation create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "active": false, "saml_settings": { "force_authn": false, "idp_issuer": "", "sso_url": "" }, "user_account_auto_creation": false } } ' ``` *Auto generated on 15-Jul-2026* # nebius iam federation deactivate Source: https://docs.nebius.com/cli/reference/iam/federation/deactivate

Name

nebius iam federation deactivate

Deactivates an existing federation.
When a federation is inactive, all users under it cannot authenticate.

Synopsis

``` nebius iam federation deactivate --federation-id [required] --async ```

Options

`--federation-id` (string) \[required]

Target federation ID.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "federation_id": string // [required] // Target federation ID. } ``` ```json theme={null} nebius iam federation deactivate ' { "federation_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam federation delete Source: https://docs.nebius.com/cli/reference/iam/federation/delete

Name

nebius iam federation delete

Deletes a federation. An active federation cannot be deleted and must be deactivated first.

Synopsis

``` nebius iam federation delete [id] --id [required] --async ```

Positional Arguments

id

Target federation ID.

Options

`--id` (string) \[required]

Target federation ID.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] // Target federation ID. } ``` ```json theme={null} nebius iam federation delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam federation edit Source: https://docs.nebius.com/cli/reference/iam/federation/edit

Name

nebius iam federation edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius iam federation edit [id] --async --editor --id ```

Positional Arguments

id

Target federation ID.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

Target federation ID.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam federation edit-by-name Source: https://docs.nebius.com/cli/reference/iam/federation/edit-by-name

Name

nebius iam federation edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

Synopsis

``` nebius iam federation edit-by-name --async --editor --name --parent-id ```

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--name` (string)

`--parent-id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam federation get Source: https://docs.nebius.com/cli/reference/iam/federation/get

Name

nebius iam federation get

Retrieves information about a federation by ID.

Synopsis

``` nebius iam federation get [id] --id [required] ```

Positional Arguments

id

Target federation ID.

Options

`--id` (string) \[required]

Target federation ID.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] // Target federation ID. } ``` ```json theme={null} nebius iam federation get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam federation get-by-name Source: https://docs.nebius.com/cli/reference/iam/federation/get-by-name

Name

nebius iam federation get-by-name

Retrieves information about a federation by name and parent container.

Synopsis

``` nebius iam federation get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

`--parent-id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // [required] } ``` ```json theme={null} nebius iam federation get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam federation Source: https://docs.nebius.com/cli/reference/iam/federation/index

Name

nebius iam federation

Commands

nebius iam federation activate

Activates an existing federation.
By default, a newly created federation is in the active state.

nebius iam federation create

Creates a federation.

nebius iam federation deactivate

Deactivates an existing federation.
When a federation is inactive, all users under it cannot authenticate.

nebius iam federation delete

Deletes a federation. An active federation cannot be deleted and must be deactivated first.

nebius iam federation edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius iam federation edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

nebius iam federation get

Retrieves information about a federation by ID.

nebius iam federation get-by-name

Retrieves information about a federation by name and parent container.

nebius iam federation list

Lists federations by parent container.

nebius iam federation operation

Manage operations for Federation service.

nebius iam federation update

Updates a federation.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam federation list Source: https://docs.nebius.com/cli/reference/iam/federation/list

Name

nebius iam federation list

Lists federations by parent container.

Synopsis

``` nebius iam federation list --filter --page-size --page-token --parent-id [required] --all -i, --interactive ```

Options

`--filter` (string)

Filter expression for narrowing down the results.

`--page-size` (int64)

Maximum number of items to return in the response. Default value: 10.

`--page-token` (string)

Token for pagination, allowing the retrieval of the next set of results.

`--parent-id` (string) \[required]

Parent container ID for the federations.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "filter": string, // Filter expression for narrowing down the results. "page_size": int64, // Maximum number of items to return in the response. Default value: 10. "page_token": string, // Token for pagination, allowing the retrieval of the next set of results. "parent_id": string // [required] // Parent container ID for the federations. } ``` ```json theme={null} nebius iam federation list ' { "filter": "", "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam federation operation get Source: https://docs.nebius.com/cli/reference/iam/federation/operation/get

Name

nebius iam federation operation get

Get operation by ID.

Synopsis

``` nebius iam federation operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam federation operation Source: https://docs.nebius.com/cli/reference/iam/federation/operation/index

Name

nebius iam federation operation

Manage operations for Federation service.

Commands

nebius iam federation operation get

Get operation by ID.

nebius iam federation operation list

List operations by resource ID.

nebius iam federation operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam federation operation list Source: https://docs.nebius.com/cli/reference/iam/federation/operation/list

Name

nebius iam federation operation list

List operations by resource ID.

Synopsis

``` nebius iam federation operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam federation operation wait Source: https://docs.nebius.com/cli/reference/iam/federation/operation/wait

Name

nebius iam federation operation wait

Wait for operation to complete.

Synopsis

``` nebius iam federation operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam federation update Source: https://docs.nebius.com/cli/reference/iam/federation/update

Name

nebius iam federation update

Updates a federation.

Synopsis

``` nebius iam federation update [id] --active --id --labels --labels-add --labels-remove --name --parent-id --resource-version --saml-settings-force-authn --saml-settings-idp-issuer --saml-settings-sso-url --status-certificates-count --status-state --status-users-count --user-account-auto-creation --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--active` (bool)

Specifies if the federation in active state.

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--saml-settings-force-authn` (bool)

If "true", the identity provider MUST authenticate the presenter directly rather than rely on a previous security context.

`--saml-settings-idp-issuer` (string)

The unique identifier of the SAML Identity Provider. It usually matches the entityID from the IdP metadata.

`--saml-settings-sso-url` (string)

Identity Provider’s Single Sign-On endpoint. This is the URL where the user is redirected to start SAML login.

`--status-certificates-count` (int32)

Number of certificates attached to the SAML federation for verifying SAML responses.

`--status-state` (string)

Federation state.

A value must be one of:

  • unspecified
  • active
  • inactive

`--status-users-count` (int32)

Number of users registered in the IAM federation. This value may differ from the number of users in the identity provider.

`--user-account-auto-creation` (bool)

If false, users with access to the federation cannot sign in automatically
and user accounts for them must be pre-created by a federation administrator.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // Federation resource metadata. "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // Federation resource specification. "active": bool, // [deprecated] // 'active' field ignored. Use 'Activate/Deactivate' methods to manage federation state. A newly created federation is always active by default. Specifies if the federation in active state. "saml_settings": { // SAML federation settings. "force_authn": bool, // If "true", the identity provider MUST authenticate the presenter directly rather than rely on a previous security context. "idp_issuer": string, // The unique identifier of the SAML Identity Provider. It usually matches the entityID from the IdP metadata. "sso_url": string // Identity Provider’s Single Sign-On endpoint. This is the URL where the user is redirected to start SAML login. }, "user_account_auto_creation": bool // If false, users with access to the federation cannot sign in automatically // and user accounts for them must be pre-created by a federation administrator. }, "status": { // [deprecated] // 'status' is ignored for update requests. "certificates_count": int32, // Number of certificates attached to the SAML federation for verifying SAML responses. "state": enum( // Federation state. "UNSPECIFIED", "ACTIVE", "INACTIVE" ), "users_count": int32 // Number of users registered in the IAM federation. This value may differ from the number of users in the identity provider. } } ``` ```json theme={null} nebius iam federation update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "active": false, "saml_settings": { "force_authn": false, "idp_issuer": "", "sso_url": "" }, "user_account_auto_creation": false }, "status": { "certificates_count": 0, "state": "unspecified"|"active"|"inactive", "users_count": 0 } } ' ``` *Auto generated on 15-Jul-2026* # nebius iam get-access-token Source: https://docs.nebius.com/cli/reference/iam/get-access-token

Name

nebius iam get-access-token

Get access token for the current profile

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam group-membership create Source: https://docs.nebius.com/cli/reference/iam/group-membership/create

Name

nebius iam group-membership create

Synopsis

``` nebius iam group-membership create --labels --member-id --name --parent-id [required] --resource-version --revoke-after-hours --async -i, --interactive ```

Options

`--labels` (string->string)

Labels associated with the resource.

`--member-id` (string)

Member of the group. Can be tenant user account id or service account id.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--revoke-after-hours` (int64)

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // [required] "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "revoke_after_hours": int64, "spec": { "member_id": string // [immutable] // Member of the group. Can be tenant user account id or service account id. } } ``` ```json theme={null} nebius iam group-membership create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "revoke_after_hours": 0, "spec": { "member_id": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius iam group-membership delete Source: https://docs.nebius.com/cli/reference/iam/group-membership/delete

Name

nebius iam group-membership delete

Synopsis

``` nebius iam group-membership delete [id] --id [required] --async ```

Positional Arguments

id

ID of the resource to delete.

Options

`--id` (string) \[required]

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius iam group-membership delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam group-membership get Source: https://docs.nebius.com/cli/reference/iam/group-membership/get

Name

nebius iam group-membership get

Synopsis

``` nebius iam group-membership get [id] --id [required] ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius iam group-membership get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam group-membership get-with-attributes Source: https://docs.nebius.com/cli/reference/iam/group-membership/get-with-attributes

Name

nebius iam group-membership get-with-attributes

Synopsis

``` nebius iam group-membership get-with-attributes [id] --id [required] ```

Positional Arguments

id

ID of the resource to get-with-attributes.

Options

`--id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius iam group-membership get-with-attributes ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam group-membership Source: https://docs.nebius.com/cli/reference/iam/group-membership/index

Name

nebius iam group-membership

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam group-membership list-member-of Source: https://docs.nebius.com/cli/reference/iam/group-membership/list-member-of

Name

nebius iam group-membership list-member-of

Synopsis

``` nebius iam group-membership list-member-of --filter --page-size --page-token --subject-id [required] ```

Options

`--filter` (string)

`--page-size` (int64)

Default value: 10.

`--page-token` (string)

`--subject-id` (string) \[required]

Requested subject id. Can be tenant user account id or service account id.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "filter": string, "page_size": int64, // Default value: 10. "page_token": string, "subject_id": string // [required] // Requested subject id. Can be tenant user account id or service account id. } ``` ```json theme={null} nebius iam group-membership list-member-of ' { "filter": "", "page_size": 0, "page_token": "", "subject_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam group-membership list-members Source: https://docs.nebius.com/cli/reference/iam/group-membership/list-members

Name

nebius iam group-membership list-members

Synopsis

``` nebius iam group-membership list-members --filter --page-size --page-token --parent-id [required] ```

Options

`--filter` (string)

`--page-size` (int64)

Default value: 10.

`--page-token` (string)

`--parent-id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "filter": string, "page_size": int64, // Default value: 10. "page_token": string, "parent_id": string // [required] } ``` ```json theme={null} nebius iam group-membership list-members ' { "filter": "", "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam group-membership list-members-with-attributes Source: https://docs.nebius.com/cli/reference/iam/group-membership/list-members-with-attributes

Name

nebius iam group-membership list-members-with-attributes

Synopsis

``` nebius iam group-membership list-members-with-attributes --filter --page-size --page-token --parent-id [required] ```

Options

`--filter` (string)

`--page-size` (int64)

Default value: 10.

`--page-token` (string)

`--parent-id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "filter": string, "page_size": int64, // Default value: 10. "page_token": string, "parent_id": string // [required] } ``` ```json theme={null} nebius iam group-membership list-members-with-attributes ' { "filter": "", "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam group-membership operation get Source: https://docs.nebius.com/cli/reference/iam/group-membership/operation/get

Name

nebius iam group-membership operation get

Get operation by ID.

Synopsis

``` nebius iam group-membership operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam group-membership operation Source: https://docs.nebius.com/cli/reference/iam/group-membership/operation/index

Name

nebius iam group-membership operation

Manage operations for GroupMembership service.

Commands

nebius iam group-membership operation get

Get operation by ID.

nebius iam group-membership operation list

List operations by resource ID.

nebius iam group-membership operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam group-membership operation list Source: https://docs.nebius.com/cli/reference/iam/group-membership/operation/list

Name

nebius iam group-membership operation list

List operations by resource ID.

Synopsis

``` nebius iam group-membership operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam group-membership operation wait Source: https://docs.nebius.com/cli/reference/iam/group-membership/operation/wait

Name

nebius iam group-membership operation wait

Wait for operation to complete.

Synopsis

``` nebius iam group-membership operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam group create Source: https://docs.nebius.com/cli/reference/iam/group/create

Name

nebius iam group create

Synopsis

``` nebius iam group create --labels --name --parent-id [required] --resource-version --async -i, --interactive ```

Options

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { } } ``` ```json theme={null} nebius iam group create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { } } ' ``` *Auto generated on 15-Jul-2026* # nebius iam group delete Source: https://docs.nebius.com/cli/reference/iam/group/delete

Name

nebius iam group delete

Synopsis

``` nebius iam group delete [id] --id [required] --async ```

Positional Arguments

id

ID of the resource to delete.

Options

`--id` (string) \[required]

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius iam group delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam group edit Source: https://docs.nebius.com/cli/reference/iam/group/edit

Name

nebius iam group edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius iam group edit [id] --async --editor --id ```

Positional Arguments

id

ID of the resource to edit.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam group edit-by-name Source: https://docs.nebius.com/cli/reference/iam/group/edit-by-name

Name

nebius iam group edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

Synopsis

``` nebius iam group edit-by-name --async --editor --name --parent-id ```

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--name` (string)

`--parent-id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam group get Source: https://docs.nebius.com/cli/reference/iam/group/get

Name

nebius iam group get

Synopsis

``` nebius iam group get [id] --id [required] ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius iam group get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam group get-by-name Source: https://docs.nebius.com/cli/reference/iam/group/get-by-name

Name

nebius iam group get-by-name

Synopsis

``` nebius iam group get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

`--parent-id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // [required] } ``` ```json theme={null} nebius iam group get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam group Source: https://docs.nebius.com/cli/reference/iam/group/index

Name

nebius iam group

Commands

nebius iam group create

nebius iam group delete

nebius iam group edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius iam group edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

nebius iam group get

nebius iam group get-by-name

nebius iam group list

nebius iam group operation

Manage operations for Group service.

nebius iam group update

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam group list Source: https://docs.nebius.com/cli/reference/iam/group/list

Name

nebius iam group list

Synopsis

``` nebius iam group list --filter --page-size --page-token --parent-id [required] --all -i, --interactive ```

Options

`--filter` (string)

`--page-size` (int64)

Default value: 10.

`--page-token` (string)

`--parent-id` (string) \[required]

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "filter": string, "page_size": int64, // Default value: 10. "page_token": string, "parent_id": string // [required] } ``` ```json theme={null} nebius iam group list ' { "filter": "", "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam group operation get Source: https://docs.nebius.com/cli/reference/iam/group/operation/get

Name

nebius iam group operation get

Get operation by ID.

Synopsis

``` nebius iam group operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam group operation Source: https://docs.nebius.com/cli/reference/iam/group/operation/index

Name

nebius iam group operation

Manage operations for Group service.

Commands

nebius iam group operation get

Get operation by ID.

nebius iam group operation list

List operations by resource ID.

nebius iam group operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam group operation list Source: https://docs.nebius.com/cli/reference/iam/group/operation/list

Name

nebius iam group operation list

List operations by resource ID.

Synopsis

``` nebius iam group operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam group operation wait Source: https://docs.nebius.com/cli/reference/iam/group/operation/wait

Name

nebius iam group operation wait

Wait for operation to complete.

Synopsis

``` nebius iam group operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam group update Source: https://docs.nebius.com/cli/reference/iam/group/update

Name

nebius iam group update

Synopsis

``` nebius iam group update [id] --id --labels --labels-add --labels-remove --name --parent-id --resource-version --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { } } ``` ```json theme={null} nebius iam group update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { } } ' ``` *Auto generated on 15-Jul-2026* # nebius iam Source: https://docs.nebius.com/cli/reference/iam/index

Name

nebius iam

Commands

nebius iam access-key

\[deprecated: supported until 2026-09-01] Please use the 'iam v2 access-key' command instead. All existing keys remain accessible through the new command.

Access keys management \[deprecated].

nebius iam access-permit

nebius iam auth-public-key

nebius iam federated-credentials

\[PUBLIC PREVIEW]
The federated credentials feature is currently fully available with Nebius Managed Kubernetes issuers.
Custom external credentials providers are available only for early adopters.
Contact the support team to check whether this feature is available for your tenant.
Alternatively, you can use them in conjunction with local JWK set storage without limitations.

nebius iam federation

nebius iam federation-certificate

nebius iam get-access-token

Get access token for the current profile

nebius iam group

nebius iam group-membership

nebius iam invitation

nebius iam profile

nebius iam project

nebius iam service-account

nebius iam session-management

nebius iam static-key

nebius iam tenant

nebius iam tenant-user-account

nebius iam tenant-user-account-with-attributes

nebius iam token-exchange

nebius iam v2

nebius iam whoami

An alias of "nebius iam profile get" — Returns the current user's profile.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam invitation create Source: https://docs.nebius.com/cli/reference/iam/invitation/create

Name

nebius iam invitation create

Synopsis

``` nebius iam invitation create --description --email --expires-in --labels --name --no-send --parent-id [required] --resource-version --async -i, --interactive ```

Options

`--description` (string)

`--email` (string)

`--expires-in` (duration: 2h30m10s)

How long the invitation remains valid after creation. If omitted, the service default is used.

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--no-send` (bool)

If set, no sending is attempted (it's supposed that later a Resend method is called).

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "expires_in": "2h30m10s", // [google.protobuf.Duration] // How long the invitation remains valid after creation. If omitted, the service default is used. "metadata": { "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "no_send": bool, // If set, no sending is attempted (it's supposed that later a Resend method is called). "spec": { "description": string, "email": string // [sensitive] } } ``` ```json theme={null} nebius iam invitation create ' { "expires_in": "2h30m10s", "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "no_send": false, "spec": { "description": "", "email": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius iam invitation delete Source: https://docs.nebius.com/cli/reference/iam/invitation/delete

Name

nebius iam invitation delete

Synopsis

``` nebius iam invitation delete [id] --id [required] --async ```

Positional Arguments

id

ID of the resource to delete.

Options

`--id` (string) \[required]

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius iam invitation delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam invitation edit Source: https://docs.nebius.com/cli/reference/iam/invitation/edit

Name

nebius iam invitation edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius iam invitation edit [id] --async --editor --id ```

Positional Arguments

id

ID of the resource to edit.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam invitation get Source: https://docs.nebius.com/cli/reference/iam/invitation/get

Name

nebius iam invitation get

Synopsis

``` nebius iam invitation get [id] --id [required] ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius iam invitation get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam invitation Source: https://docs.nebius.com/cli/reference/iam/invitation/index

Name

nebius iam invitation

Commands

nebius iam invitation create

nebius iam invitation delete

nebius iam invitation edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius iam invitation get

nebius iam invitation list

nebius iam invitation operation

Manage operations for Invitation service.

nebius iam invitation resend

nebius iam invitation update

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam invitation list Source: https://docs.nebius.com/cli/reference/iam/invitation/list

Name

nebius iam invitation list

Synopsis

``` nebius iam invitation list --filter --page-size --page-token --parent-id [required] --all -i, --interactive ```

Options

`--filter` (string)

`--page-size` (int64)

`--page-token` (string)

`--parent-id` (string) \[required]

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "filter": string, // [sensitive] "page_size": int64, "page_token": string, "parent_id": string // [required] } ``` ```json theme={null} nebius iam invitation list ' { "filter": "", "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam invitation operation get Source: https://docs.nebius.com/cli/reference/iam/invitation/operation/get

Name

nebius iam invitation operation get

Get operation by ID.

Synopsis

``` nebius iam invitation operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam invitation operation Source: https://docs.nebius.com/cli/reference/iam/invitation/operation/index

Name

nebius iam invitation operation

Manage operations for Invitation service.

Commands

nebius iam invitation operation get

Get operation by ID.

nebius iam invitation operation list

List operations by resource ID.

nebius iam invitation operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam invitation operation list Source: https://docs.nebius.com/cli/reference/iam/invitation/operation/list

Name

nebius iam invitation operation list

List operations by resource ID.

Synopsis

``` nebius iam invitation operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam invitation operation wait Source: https://docs.nebius.com/cli/reference/iam/invitation/operation/wait

Name

nebius iam invitation operation wait

Wait for operation to complete.

Synopsis

``` nebius iam invitation operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam invitation resend Source: https://docs.nebius.com/cli/reference/iam/invitation/resend

Name

nebius iam invitation resend

Synopsis

``` nebius iam invitation resend [id] --id [required] --async ```

Positional Arguments

id

ID of the resource to resend.

Options

`--id` (string) \[required]

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius iam invitation resend ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam invitation update Source: https://docs.nebius.com/cli/reference/iam/invitation/update

Name

nebius iam invitation update

Synopsis

``` nebius iam invitation update [id] --description --email --id --labels --labels-add --labels-remove --name --parent-id --resource-version --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--description` (string)

`--email` (string)

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "description": string, "email": string // [sensitive] } } ``` ```json theme={null} nebius iam invitation update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "description": "", "email": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius iam profile get Source: https://docs.nebius.com/cli/reference/iam/profile/get

Name

nebius iam profile get

Returns the current user's profile.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam profile Source: https://docs.nebius.com/cli/reference/iam/profile/index

Name

nebius iam profile

Commands

nebius iam profile get

Returns the current user's profile.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam project create Source: https://docs.nebius.com/cli/reference/iam/project/create

Name

nebius iam project create

Synopsis

``` nebius iam project create --labels --name --parent-id [required] --region --resource-version --async -i, --interactive ```

Options

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--region` (string)

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "region": string // [non_empty_default] } } ``` ```json theme={null} nebius iam project create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "region": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius iam project edit Source: https://docs.nebius.com/cli/reference/iam/project/edit

Name

nebius iam project edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius iam project edit [id] --async --editor --id ```

Positional Arguments

id

ID of the resource to edit.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam project edit-by-name Source: https://docs.nebius.com/cli/reference/iam/project/edit-by-name

Name

nebius iam project edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

Synopsis

``` nebius iam project edit-by-name --async --editor --name --parent-id ```

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--name` (string)

`--parent-id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam project get Source: https://docs.nebius.com/cli/reference/iam/project/get

Name

nebius iam project get

Synopsis

``` nebius iam project get [id] --id ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string } ``` ```json theme={null} nebius iam project get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam project get-by-name Source: https://docs.nebius.com/cli/reference/iam/project/get-by-name

Name

nebius iam project get-by-name

Synopsis

``` nebius iam project get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

`--parent-id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // [required] } ``` ```json theme={null} nebius iam project get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam project Source: https://docs.nebius.com/cli/reference/iam/project/index

Name

nebius iam project

Commands

nebius iam project create

nebius iam project edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius iam project edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

nebius iam project get

nebius iam project get-by-name

nebius iam project list

nebius iam project operation

Manage operations for Project service.

nebius iam project update

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam project list Source: https://docs.nebius.com/cli/reference/iam/project/list

Name

nebius iam project list

Synopsis

``` nebius iam project list --filter --page-size --page-token --parent-id --all -i, --interactive ```

Options

`--filter` (string)

A filter to narrow down the results based on specific criteria.

`--page-size` (int64)

Specifies the maximum number of items to return in the response.
Default value: 10.

`--page-token` (string)

Token for pagination, allowing the retrieval of the next set of results.

`--parent-id` (string)

Represents the container ID.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "filter": string, // A filter to narrow down the results based on specific criteria. "page_size": int64, // Specifies the maximum number of items to return in the response. // Default value: 10. "page_token": string, // Token for pagination, allowing the retrieval of the next set of results. "parent_id": string // Represents the container ID. } ``` ```json theme={null} nebius iam project list ' { "filter": "", "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam project operation get Source: https://docs.nebius.com/cli/reference/iam/project/operation/get

Name

nebius iam project operation get

Get operation by ID.

Synopsis

``` nebius iam project operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam project operation Source: https://docs.nebius.com/cli/reference/iam/project/operation/index

Name

nebius iam project operation

Manage operations for Project service.

Commands

nebius iam project operation get

Get operation by ID.

nebius iam project operation list

List operations by resource ID.

nebius iam project operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam project operation list Source: https://docs.nebius.com/cli/reference/iam/project/operation/list

Name

nebius iam project operation list

List operations by resource ID.

Synopsis

``` nebius iam project operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam project operation wait Source: https://docs.nebius.com/cli/reference/iam/project/operation/wait

Name

nebius iam project operation wait

Wait for operation to complete.

Synopsis

``` nebius iam project operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam project update Source: https://docs.nebius.com/cli/reference/iam/project/update

Name

nebius iam project update

Synopsis

``` nebius iam project update [id] --id --labels --labels-add --labels-remove --name --parent-id --region --resource-version --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--region` (string)

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "region": string // [non_empty_default] } } ``` ```json theme={null} nebius iam project update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "region": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius iam service-account create Source: https://docs.nebius.com/cli/reference/iam/service-account/create

Name

nebius iam service-account create

Synopsis

``` nebius iam service-account create --description --labels --name --parent-id [required] --resource-version --async -i, --interactive ```

Options

`--description` (string)

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "description": string } } ``` ```json theme={null} nebius iam service-account create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "description": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius iam service-account delete Source: https://docs.nebius.com/cli/reference/iam/service-account/delete

Name

nebius iam service-account delete

Synopsis

``` nebius iam service-account delete [id] --id --async ```

Positional Arguments

id

ID of the resource to delete.

Options

`--id` (string)

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string } ``` ```json theme={null} nebius iam service-account delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam service-account edit Source: https://docs.nebius.com/cli/reference/iam/service-account/edit

Name

nebius iam service-account edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius iam service-account edit [id] --async --editor --id ```

Positional Arguments

id

ID of the resource to edit.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam service-account edit-by-name Source: https://docs.nebius.com/cli/reference/iam/service-account/edit-by-name

Name

nebius iam service-account edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

Synopsis

``` nebius iam service-account edit-by-name --async --editor --name --parent-id ```

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--name` (string)

`--parent-id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam service-account get Source: https://docs.nebius.com/cli/reference/iam/service-account/get

Name

nebius iam service-account get

Synopsis

``` nebius iam service-account get [id] --id ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string } ``` ```json theme={null} nebius iam service-account get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam service-account get-by-name Source: https://docs.nebius.com/cli/reference/iam/service-account/get-by-name

Name

nebius iam service-account get-by-name

Synopsis

``` nebius iam service-account get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

`--parent-id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // [required] } ``` ```json theme={null} nebius iam service-account get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam service-account Source: https://docs.nebius.com/cli/reference/iam/service-account/index

Name

nebius iam service-account

Commands

nebius iam service-account create

nebius iam service-account delete

nebius iam service-account edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius iam service-account edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

nebius iam service-account get

nebius iam service-account get-by-name

nebius iam service-account list

nebius iam service-account operation

Manage operations for ServiceAccount service.

nebius iam service-account update

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam service-account list Source: https://docs.nebius.com/cli/reference/iam/service-account/list

Name

nebius iam service-account list

Synopsis

``` nebius iam service-account list --filter --page-size --page-token --parent-id --all -i, --interactive ```

Options

`--filter` (string)

A filter to narrow down the results based on specific criteria.

`--page-size` (int64)

Specifies the maximum number of items to return in the response.
Default value: 10.

`--page-token` (string)

Token for pagination, allowing the retrieval of the next set of results.

`--parent-id` (string)

Represents the container ID.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "filter": string, // A filter to narrow down the results based on specific criteria. "page_size": int64, // Specifies the maximum number of items to return in the response. // Default value: 10. "page_token": string, // Token for pagination, allowing the retrieval of the next set of results. "parent_id": string // Represents the container ID. } ``` ```json theme={null} nebius iam service-account list ' { "filter": "", "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam service-account operation get Source: https://docs.nebius.com/cli/reference/iam/service-account/operation/get

Name

nebius iam service-account operation get

Get operation by ID.

Synopsis

``` nebius iam service-account operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam service-account operation Source: https://docs.nebius.com/cli/reference/iam/service-account/operation/index

Name

nebius iam service-account operation

Manage operations for ServiceAccount service.

Commands

nebius iam service-account operation get

Get operation by ID.

nebius iam service-account operation list

List operations by resource ID.

nebius iam service-account operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam service-account operation list Source: https://docs.nebius.com/cli/reference/iam/service-account/operation/list

Name

nebius iam service-account operation list

List operations by resource ID.

Synopsis

``` nebius iam service-account operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam service-account operation wait Source: https://docs.nebius.com/cli/reference/iam/service-account/operation/wait

Name

nebius iam service-account operation wait

Wait for operation to complete.

Synopsis

``` nebius iam service-account operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam service-account update Source: https://docs.nebius.com/cli/reference/iam/service-account/update

Name

nebius iam service-account update

Synopsis

``` nebius iam service-account update [id] --description --id --labels --labels-add --labels-remove --name --parent-id --resource-version --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--description` (string)

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "description": string } } ``` ```json theme={null} nebius iam service-account update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "description": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius iam session-management Source: https://docs.nebius.com/cli/reference/iam/session-management/index

Name

nebius iam session-management

Commands

nebius iam session-management revoke

Revoke sessions/tokens.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam session-management revoke Source: https://docs.nebius.com/cli/reference/iam/session-management/revoke

Name

nebius iam session-management revoke

Revoke sessions/tokens.

Synopsis

``` nebius iam session-management revoke --all-my-active --service-account-id --tenant-user-account-id ```

Options

`--all-my-active` (bool)

Revoke all active sessions and access tokens for the current user.

Mutually exclusive with: `--service-account-id`, `--tenant-user-account-id`.

`--service-account-id` (string)

Revoke all tokens for a service account.

Mutually exclusive with: `--all-my-active`, `--tenant-user-account-id`.

`--tenant-user-account-id` (string)

Revoke all active sessions and tokens for a tenant user.

Mutually exclusive with: `--all-my-active`, `--service-account-id`.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "all_my_active": bool, // Cannot be set together with: service_account_id, tenant_user_account_id // Revoke all active sessions and access tokens for the current user. "service_account_id": string, // Cannot be set together with: all_my_active, tenant_user_account_id // Revoke all tokens for a service account. "tenant_user_account_id": string // Cannot be set together with: service_account_id, all_my_active // Revoke all active sessions and tokens for a tenant user. } ``` ```json theme={null} nebius iam session-management revoke ' { "all_my_active": false } ' ``` *Auto generated on 15-Jul-2026* # nebius iam static-key delete Source: https://docs.nebius.com/cli/reference/iam/static-key/delete

Name

nebius iam static-key delete

Synopsis

``` nebius iam static-key delete [id] --id --async ```

Positional Arguments

id

Id of the static key to delete.

Options

`--id` (string)

Id of the static key to delete.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // Id of the static key to delete. } ``` ```json theme={null} nebius iam static-key delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam static-key find Source: https://docs.nebius.com/cli/reference/iam/static-key/find

Name

nebius iam static-key find

Synopsis

``` nebius iam static-key find --token ```

Options

`--token` (string)

The method accepts a static key token with and without signature as an input.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "token": string // [sensitive] // The method accepts a static key token with and without signature as an input. } ``` ```json theme={null} nebius iam static-key find ' { "token": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam static-key get Source: https://docs.nebius.com/cli/reference/iam/static-key/get

Name

nebius iam static-key get

Synopsis

``` nebius iam static-key get [id] --id ```

Positional Arguments

id

Id of the static key.

Options

`--id` (string)

Id of the static key.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // Id of the static key. } ``` ```json theme={null} nebius iam static-key get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam static-key get-by-name Source: https://docs.nebius.com/cli/reference/iam/static-key/get-by-name

Name

nebius iam static-key get-by-name

Synopsis

``` nebius iam static-key get-by-name --name --parent-id ```

Options

`--name` (string)

Name of the static key.

`--parent-id` (string)

Id of the parent container (service account).

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // Name of the static key. "parent_id": string // Id of the parent container (service account). } ``` ```json theme={null} nebius iam static-key get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam static-key Source: https://docs.nebius.com/cli/reference/iam/static-key/index

Name

nebius iam static-key

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam static-key issue Source: https://docs.nebius.com/cli/reference/iam/static-key/issue

Name

nebius iam static-key issue

Synopsis

``` nebius iam static-key issue [id] --account-service-account-id --account-user-account-id --expires-at --id --labels --name --parent-id [required] --resource-version --service [required] ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--account-service-account-id` (string)

Mutually exclusive with: `--account-user-account-id`.

`--account-user-account-id` (string)

Mutually exclusive with: `--account-service-account-id`.

`--expires-at` (timestamp: 1970-01-31T02:30:59Z)

When will the static key expire.

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--service` (string) \[required]

Service static key is to be used for.

A value must be one of:

  • observability
  • container\_registry
  • ai\_studio
  • tracto
  • linux\_identity

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "account": { // [immutable] // Account of the static key. only service accounts are supported for now. "anonymous_account": { // Cannot be set together with: user_account, service_account }, "service_account": { // Cannot be set together with: user_account, anonymous_account "id": string }, "user_account": { // Cannot be set together with: service_account, anonymous_account "id": string } }, "expiresAt": "1970-01-31T02:30:59Z", // [google.protobuf.Timestamp] // When will the static key expire. "service": enum( // [required] // Service static key is to be used for. "CLIENT_SERVICE_UNSPECIFIED", "OBSERVABILITY", "CONTAINER_REGISTRY", "AI_STUDIO", "TRACTO", "LINUX_IDENTITY" ) } } ``` ```json theme={null} nebius iam static-key issue ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "account": { "anonymous_account": { } }, "expiresAt": "1970-01-31T02:30:59Z", "service": "client_service_unspecified"|"observability"|"container_registry"|"ai_studio"|"tracto"|"linux_identity" } } ' ``` *Auto generated on 15-Jul-2026* # nebius iam static-key list Source: https://docs.nebius.com/cli/reference/iam/static-key/list

Name

nebius iam static-key list

Synopsis

``` nebius iam static-key list --filter --page-size --page-token --parent-id --all -i, --interactive ```

Options

`--filter` (string)

A filter to narrow down the results based on specific criteria.

`--page-size` (int64)

Specifies the maximum number of items to return in the response.
Default value: 10.

`--page-token` (string)

Token for pagination, allowing the retrieval of the next set of results.

`--parent-id` (string)

Represents the container ID.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "filter": string, // A filter to narrow down the results based on specific criteria. "page_size": int64, // Specifies the maximum number of items to return in the response. // Default value: 10. "page_token": string, // Token for pagination, allowing the retrieval of the next set of results. "parent_id": string // Represents the container ID. } ``` ```json theme={null} nebius iam static-key list ' { "filter": "", "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam static-key operation get Source: https://docs.nebius.com/cli/reference/iam/static-key/operation/get

Name

nebius iam static-key operation get

Get operation by ID.

Synopsis

``` nebius iam static-key operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam static-key operation Source: https://docs.nebius.com/cli/reference/iam/static-key/operation/index

Name

nebius iam static-key operation

Manage operations for StaticKey service.

Commands

nebius iam static-key operation get

Get operation by ID.

nebius iam static-key operation list

List operations by resource ID.

nebius iam static-key operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam static-key operation list Source: https://docs.nebius.com/cli/reference/iam/static-key/operation/list

Name

nebius iam static-key operation list

List operations by resource ID.

Synopsis

``` nebius iam static-key operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam static-key operation wait Source: https://docs.nebius.com/cli/reference/iam/static-key/operation/wait

Name

nebius iam static-key operation wait

Wait for operation to complete.

Synopsis

``` nebius iam static-key operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam static-key revoke Source: https://docs.nebius.com/cli/reference/iam/static-key/revoke

Name

nebius iam static-key revoke

Synopsis

``` nebius iam static-key revoke --token --async ```

Options

`--token` (string)

The method accepts a static key token with and without signature as an input.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "token": string // [sensitive] // The method accepts a static key token with and without signature as an input. } ``` ```json theme={null} nebius iam static-key revoke ' { "token": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam tenant-user-account-with-attributes get Source: https://docs.nebius.com/cli/reference/iam/tenant-user-account-with-attributes/get

Name

nebius iam tenant-user-account-with-attributes get

Synopsis

``` nebius iam tenant-user-account-with-attributes get [id] --id ```

Positional Arguments

id

Tenant user account id like 'tenantuseraccount-someuniquesuffix'.

Options

`--id` (string)

Tenant user account id like 'tenantuseraccount-someuniquesuffix'.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // Tenant user account id like 'tenantuseraccount-{region}someuniquesuffix'. } ``` ```json theme={null} nebius iam tenant-user-account-with-attributes get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam tenant-user-account-with-attributes Source: https://docs.nebius.com/cli/reference/iam/tenant-user-account-with-attributes/index

Name

nebius iam tenant-user-account-with-attributes

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam tenant-user-account-with-attributes list Source: https://docs.nebius.com/cli/reference/iam/tenant-user-account-with-attributes/list

Name

nebius iam tenant-user-account-with-attributes list

Synopsis

``` nebius iam tenant-user-account-with-attributes list --filter --page-size --page-token --parent-id --all -i, --interactive ```

Options

`--filter` (string)

`--page-size` (int64)

Specifies the maximum number of items to return in the response.
Default value: 10.

`--page-token` (string)

Token for pagination, allowing the retrieval of the next set of results.

`--parent-id` (string)

Represents the tenant ID like 'tenant-someuniquesuffix'.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "filter": string, // [sensitive] "page_size": int64, // Specifies the maximum number of items to return in the response. // Default value: 10. "page_token": string, // Token for pagination, allowing the retrieval of the next set of results. "parent_id": string // Represents the tenant ID like 'tenant-{region}someuniquesuffix'. } ``` ```json theme={null} nebius iam tenant-user-account-with-attributes list ' { "filter": "", "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam tenant-user-account block Source: https://docs.nebius.com/cli/reference/iam/tenant-user-account/block

Name

nebius iam tenant-user-account block

Synopsis

``` nebius iam tenant-user-account block [id] --id --async ```

Positional Arguments

id

ID of the resource to block.

Options

`--id` (string)

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string } ``` ```json theme={null} nebius iam tenant-user-account block ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam tenant-user-account get Source: https://docs.nebius.com/cli/reference/iam/tenant-user-account/get

Name

nebius iam tenant-user-account get

Synopsis

``` nebius iam tenant-user-account get [id] --id ```

Positional Arguments

id

Tenant user account id like 'tenantuseraccount-someuniquesuffix'.

Options

`--id` (string)

Tenant user account id like 'tenantuseraccount-someuniquesuffix'.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // Tenant user account id like 'tenantuseraccount-{region}someuniquesuffix'. } ``` ```json theme={null} nebius iam tenant-user-account get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam tenant-user-account Source: https://docs.nebius.com/cli/reference/iam/tenant-user-account/index

Name

nebius iam tenant-user-account

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam tenant-user-account list Source: https://docs.nebius.com/cli/reference/iam/tenant-user-account/list

Name

nebius iam tenant-user-account list

Synopsis

``` nebius iam tenant-user-account list --filter --page-size --page-token --parent-id --all -i, --interactive ```

Options

`--filter` (string)

`--page-size` (int64)

Specifies the maximum number of items to return in the response.
Default value: 10.

`--page-token` (string)

Token for pagination, allowing the retrieval of the next set of results.

`--parent-id` (string)

Represents the tenant ID like 'tenant-someuniqueprefix'.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "filter": string, // [sensitive] "page_size": int64, // Specifies the maximum number of items to return in the response. // Default value: 10. "page_token": string, // Token for pagination, allowing the retrieval of the next set of results. "parent_id": string // Represents the tenant ID like 'tenant-someuniqueprefix'. } ``` ```json theme={null} nebius iam tenant-user-account list ' { "filter": "", "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam tenant-user-account operation get Source: https://docs.nebius.com/cli/reference/iam/tenant-user-account/operation/get

Name

nebius iam tenant-user-account operation get

Get operation by ID.

Synopsis

``` nebius iam tenant-user-account operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam tenant-user-account operation Source: https://docs.nebius.com/cli/reference/iam/tenant-user-account/operation/index

Name

nebius iam tenant-user-account operation

Manage operations for TenantUserAccount service.

Commands

nebius iam tenant-user-account operation get

Get operation by ID.

nebius iam tenant-user-account operation list

List operations by resource ID.

nebius iam tenant-user-account operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam tenant-user-account operation list Source: https://docs.nebius.com/cli/reference/iam/tenant-user-account/operation/list

Name

nebius iam tenant-user-account operation list

List operations by resource ID.

Synopsis

``` nebius iam tenant-user-account operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam tenant-user-account operation wait Source: https://docs.nebius.com/cli/reference/iam/tenant-user-account/operation/wait

Name

nebius iam tenant-user-account operation wait

Wait for operation to complete.

Synopsis

``` nebius iam tenant-user-account operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam tenant-user-account unblock Source: https://docs.nebius.com/cli/reference/iam/tenant-user-account/unblock

Name

nebius iam tenant-user-account unblock

Synopsis

``` nebius iam tenant-user-account unblock [id] --id --async ```

Positional Arguments

id

ID of the resource to unblock.

Options

`--id` (string)

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string } ``` ```json theme={null} nebius iam tenant-user-account unblock ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam tenant get Source: https://docs.nebius.com/cli/reference/iam/tenant/get

Name

nebius iam tenant get

Synopsis

``` nebius iam tenant get [id] --id ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string } ``` ```json theme={null} nebius iam tenant get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam tenant Source: https://docs.nebius.com/cli/reference/iam/tenant/index

Name

nebius iam tenant

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam tenant list Source: https://docs.nebius.com/cli/reference/iam/tenant/list

Name

nebius iam tenant list

Synopsis

``` nebius iam tenant list --filter --page-size --page-token --all -i, --interactive ```

Options

`--filter` (string)

A filter to narrow down the results based on specific criteria.

`--page-size` (int64)

Specifies the maximum number of items to return in the response.
Default value: 10.

`--page-token` (string)

Token for pagination, allowing the retrieval of the next set of results.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "filter": string, // A filter to narrow down the results based on specific criteria. "page_size": int64, // Specifies the maximum number of items to return in the response. // Default value: 10. "page_token": string // Token for pagination, allowing the retrieval of the next set of results. } ``` ```json theme={null} nebius iam tenant list ' { "filter": "", "page_size": 0, "page_token": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam token-exchange exchange Source: https://docs.nebius.com/cli/reference/iam/token-exchange/exchange

Name

nebius iam token-exchange exchange

Synopsis

``` nebius iam token-exchange exchange --actor-token --actor-token-type --audience --grant-type --requested-token-type --resource --scopes --subject-token --subject-token-type ```

Options

`--actor-token` (string)

Optional, subject token for impersonation/delegation (who want to impersonate/delegate) in subject\_token.

`--actor-token-type` (string)

Optional, token type for the impersonation/delegation (who want to impersonate/delegate). Usually it's
urn:ietf:params:oauth:token-type:access\_token.

`--audience` (string)

Optional, name of the oauth client id on which this token will be used.

`--grant-type` (string)

Required - urn:ietf:params:oauth:grant-type:token-exchange.

`--requested-token-type` (string)

Optional type of requested token, default is urn:ietf:params:oauth:token-type:access\_token.

`--resource` (string array)

Optional, list of resources approved to use by token, if applicable.

`--scopes` (string array)

Optional (scopes of the token).

`--subject-token` (string)

Required - could be self signed JWT token.

`--subject-token-type` (string)

Required, in case of jwt - urn:ietf:params:oauth:token-type:jwt.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "actor_token": string, // [sensitive] // Optional, subject token for impersonation/delegation (who want to impersonate/delegate) in subject_token. "actor_token_type": string, // Optional, token type for the impersonation/delegation (who want to impersonate/delegate). Usually it's // urn:ietf:params:oauth:token-type:access_token. "audience": string, // Optional, name of the oauth client id on which this token will be used. "grant_type": string, // Required - urn:ietf:params:oauth:grant-type:token-exchange. "requested_token_type": string, // Optional type of requested token, default is urn:ietf:params:oauth:token-type:access_token. "resource": [string], // Optional, list of resources approved to use by token, if applicable. "scopes": [string], // Optional (scopes of the token). "subject_token": string, // [sensitive] // Required - could be self signed JWT token. "subject_token_type": string // Required, in case of jwt - urn:ietf:params:oauth:token-type:jwt. } ``` ```json theme={null} nebius iam token-exchange exchange ' { "actor_token": "", "actor_token_type": "", "audience": "", "grant_type": "", "requested_token_type": "", "resource": [""], "scopes": [""], "subject_token": "", "subject_token_type": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam token-exchange Source: https://docs.nebius.com/cli/reference/iam/token-exchange/index

Name

nebius iam token-exchange

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam v2 access-key activate Source: https://docs.nebius.com/cli/reference/iam/v2/access-key/activate

Name

nebius iam v2 access-key activate

Synopsis

``` nebius iam v2 access-key activate [id] --id --async ```

Positional Arguments

id

ID of the resource to activate.

Options

`--id` (string)

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string } ``` ```json theme={null} nebius iam v2 access-key activate ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam v2 access-key activate-by-aws-id Source: https://docs.nebius.com/cli/reference/iam/v2/access-key/activate-by-aws-id

Name

nebius iam v2 access-key activate-by-aws-id

Synopsis

``` nebius iam v2 access-key activate-by-aws-id --aws-access-key-id --async ```

Options

`--aws-access-key-id` (string)

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "aws_access_key_id": string } ``` ```json theme={null} nebius iam v2 access-key activate-by-aws-id ' { "aws_access_key_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam v2 access-key create Source: https://docs.nebius.com/cli/reference/iam/v2/access-key/create

Name

nebius iam v2 access-key create

Synopsis

``` nebius iam v2 access-key create --account-service-account-id --account-user-account-id --description --expires-at --labels --name --parent-id [required] --resource-version --secret-delivery-mode --async -i, --interactive ```

Options

`--account-service-account-id` (string)

Mutually exclusive with: `--account-user-account-id`.

`--account-user-account-id` (string)

Mutually exclusive with: `--account-service-account-id`.

`--description` (string)

`--expires-at` (timestamp: 1970-01-31T02:30:59Z)

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--secret-delivery-mode` (string)

Specifies how the secret will be delivered upon creation. This field is immutable — it cannot be changed after the resource is
created.

A value must be one of:

  • unspecified
  • inline
  • mystery\_box
  • explicit

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "account": { // [immutable] "anonymous_account": { // Cannot be set together with: user_account, service_account }, "service_account": { // Cannot be set together with: user_account, anonymous_account "id": string }, "user_account": { // Cannot be set together with: service_account, anonymous_account "id": string } }, "description": string, "expires_at": "1970-01-31T02:30:59Z", // [google.protobuf.Timestamp] [immutable] "secret_delivery_mode": enum( // [immutable] // Specifies how the secret will be delivered upon creation. This field is immutable — it cannot be changed after the resource is // created. "UNSPECIFIED", // If not specified, the default behaviour will be applied. Currently it's INLINE, later will be EXPLICIT. "INLINE", // The secret value will be returned directly in the API response. "MYSTERY_BOX", // The secret will be delivered via a MysteryBox secret, in case of terraform it is recommended to use that enum. "EXPLICIT" // The secret value will be accessible via a separate method GetSecret. ) } } ``` ```json theme={null} nebius iam v2 access-key create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "account": { "anonymous_account": { } }, "description": "", "expires_at": "1970-01-31T02:30:59Z", "secret_delivery_mode": "unspecified"|"inline"|"mystery_box"|"explicit" } } ' ``` *Auto generated on 15-Jul-2026* # nebius iam v2 access-key deactivate Source: https://docs.nebius.com/cli/reference/iam/v2/access-key/deactivate

Name

nebius iam v2 access-key deactivate

Synopsis

``` nebius iam v2 access-key deactivate [id] --id --async ```

Positional Arguments

id

ID of the resource to deactivate.

Options

`--id` (string)

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string } ``` ```json theme={null} nebius iam v2 access-key deactivate ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam v2 access-key deactivate-by-aws-id Source: https://docs.nebius.com/cli/reference/iam/v2/access-key/deactivate-by-aws-id

Name

nebius iam v2 access-key deactivate-by-aws-id

Synopsis

``` nebius iam v2 access-key deactivate-by-aws-id --aws-access-key-id --async ```

Options

`--aws-access-key-id` (string)

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "aws_access_key_id": string } ``` ```json theme={null} nebius iam v2 access-key deactivate-by-aws-id ' { "aws_access_key_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam v2 access-key delete Source: https://docs.nebius.com/cli/reference/iam/v2/access-key/delete

Name

nebius iam v2 access-key delete

Synopsis

``` nebius iam v2 access-key delete [id] --id --async ```

Positional Arguments

id

ID of the resource to delete.

Options

`--id` (string)

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string } ``` ```json theme={null} nebius iam v2 access-key delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam v2 access-key delete-by-aws-id Source: https://docs.nebius.com/cli/reference/iam/v2/access-key/delete-by-aws-id

Name

nebius iam v2 access-key delete-by-aws-id

Synopsis

``` nebius iam v2 access-key delete-by-aws-id --aws-access-key-id --async ```

Options

`--aws-access-key-id` (string)

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "aws_access_key_id": string } ``` ```json theme={null} nebius iam v2 access-key delete-by-aws-id ' { "aws_access_key_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam v2 access-key edit Source: https://docs.nebius.com/cli/reference/iam/v2/access-key/edit

Name

nebius iam v2 access-key edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius iam v2 access-key edit [id] --async --editor --id ```

Positional Arguments

id

ID of the resource to edit.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam v2 access-key get Source: https://docs.nebius.com/cli/reference/iam/v2/access-key/get

Name

nebius iam v2 access-key get

Synopsis

``` nebius iam v2 access-key get [id] --id ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string } ``` ```json theme={null} nebius iam v2 access-key get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam v2 access-key get-by-aws-id Source: https://docs.nebius.com/cli/reference/iam/v2/access-key/get-by-aws-id

Name

nebius iam v2 access-key get-by-aws-id

Synopsis

``` nebius iam v2 access-key get-by-aws-id --aws-access-key-id ```

Options

`--aws-access-key-id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "aws_access_key_id": string } ``` ```json theme={null} nebius iam v2 access-key get-by-aws-id ' { "aws_access_key_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam v2 access-key get-secret Source: https://docs.nebius.com/cli/reference/iam/v2/access-key/get-secret

Name

nebius iam v2 access-key get-secret

Synopsis

``` nebius iam v2 access-key get-secret [id] --id ```

Positional Arguments

id

ID of the resource to get-secret.

Options

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string } ``` ```json theme={null} nebius iam v2 access-key get-secret ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam v2 access-key Source: https://docs.nebius.com/cli/reference/iam/v2/access-key/index

Name

nebius iam v2 access-key

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam v2 access-key list Source: https://docs.nebius.com/cli/reference/iam/v2/access-key/list

Name

nebius iam v2 access-key list

Synopsis

``` nebius iam v2 access-key list --filter --page-size --page-token --parent-id --all -i, --interactive ```

Options

`--filter` (string)

A filter to narrow down the results based on specific criteria.

`--page-size` (int64)

Specifies the maximum number of items to return in the response.
Default value: 10.

`--page-token` (string)

Token for pagination, allowing the retrieval of the next set of results.

`--parent-id` (string)

Represents the container ID.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "filter": string, // A filter to narrow down the results based on specific criteria. "page_size": int64, // Specifies the maximum number of items to return in the response. // Default value: 10. "page_token": string, // Token for pagination, allowing the retrieval of the next set of results. "parent_id": string // Represents the container ID. } ``` ```json theme={null} nebius iam v2 access-key list ' { "filter": "", "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam v2 access-key list-by-account Source: https://docs.nebius.com/cli/reference/iam/v2/access-key/list-by-account

Name

nebius iam v2 access-key list-by-account

Synopsis

``` nebius iam v2 access-key list-by-account --account-service-account-id --account-user-account-id --filter --page-size --page-token ```

Options

`--account-service-account-id` (string)

Mutually exclusive with: `--account-user-account-id`.

`--account-user-account-id` (string)

Mutually exclusive with: `--account-service-account-id`.

`--filter` (string)

A filter to narrow down the results based on specific criteria.

`--page-size` (int64)

Specifies the maximum number of items to return in the response.
Default value: 10.

`--page-token` (string)

Token for pagination, allowing the retrieval of the next set of results.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "account": { // Represents the parent account ID. "anonymous_account": { // Cannot be set together with: user_account, service_account }, "service_account": { // Cannot be set together with: user_account, anonymous_account "id": string }, "user_account": { // Cannot be set together with: service_account, anonymous_account "id": string } }, "filter": string, // A filter to narrow down the results based on specific criteria. "page_size": int64, // Specifies the maximum number of items to return in the response. // Default value: 10. "page_token": string // Token for pagination, allowing the retrieval of the next set of results. } ``` ```json theme={null} nebius iam v2 access-key list-by-account ' { "account": { "anonymous_account": { } }, "filter": "", "page_size": 0, "page_token": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam v2 access-key operation get Source: https://docs.nebius.com/cli/reference/iam/v2/access-key/operation/get

Name

nebius iam v2 access-key operation get

Get operation by ID.

Synopsis

``` nebius iam v2 access-key operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam v2 access-key operation Source: https://docs.nebius.com/cli/reference/iam/v2/access-key/operation/index

Name

nebius iam v2 access-key operation

Manage operations for AccessKey service.

Commands

nebius iam v2 access-key operation get

Get operation by ID.

nebius iam v2 access-key operation list

List operations by resource ID.

nebius iam v2 access-key operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam v2 access-key operation list Source: https://docs.nebius.com/cli/reference/iam/v2/access-key/operation/list

Name

nebius iam v2 access-key operation list

List operations by resource ID.

Synopsis

``` nebius iam v2 access-key operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam v2 access-key operation wait Source: https://docs.nebius.com/cli/reference/iam/v2/access-key/operation/wait

Name

nebius iam v2 access-key operation wait

Wait for operation to complete.

Synopsis

``` nebius iam v2 access-key operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam v2 access-key update Source: https://docs.nebius.com/cli/reference/iam/v2/access-key/update

Name

nebius iam v2 access-key update

Synopsis

``` nebius iam v2 access-key update [id] --description --id --labels --labels-add --labels-remove --name --parent-id --resource-version --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--description` (string)

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "description": string } } ``` ```json theme={null} nebius iam v2 access-key update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "description": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius iam v2 Source: https://docs.nebius.com/cli/reference/iam/v2/index

Name

nebius iam v2

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam v2 project create Source: https://docs.nebius.com/cli/reference/iam/v2/project/create

Name

nebius iam v2 project create

Creates a new project.

Synopsis

``` nebius iam v2 project create --labels --name --parent-id [required] --region --resource-version --async -i, --interactive ```

Options

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--region` (string)

Name of the region where project resources will be created.
Example: "eu-north1".

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "region": string // Name of the region where project resources will be created. // Example: "eu-north1". } } ``` ```json theme={null} nebius iam v2 project create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "region": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius iam v2 project delete Source: https://docs.nebius.com/cli/reference/iam/v2/project/delete

Name

nebius iam v2 project delete

Deletes a project by its ID.

Synopsis

``` nebius iam v2 project delete [id] --dry-run --id --async ```

Positional Arguments

id

Identifier of project to delete.

Options

`--dry-run` (bool)

If true, performs a dry run of the deletion without actually deleting the project.

`--id` (string)

Identifier of project to delete.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "dry_run": bool, // If true, performs a dry run of the deletion without actually deleting the project. "id": string // Identifier of project to delete. } ``` ```json theme={null} nebius iam v2 project delete ' { "dry_run": false, "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam v2 project edit Source: https://docs.nebius.com/cli/reference/iam/v2/project/edit

Name

nebius iam v2 project edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius iam v2 project edit [id] --async --editor --id ```

Positional Arguments

id

Identifier of project to retrieve.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

Identifier of project to retrieve.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam v2 project edit-by-name Source: https://docs.nebius.com/cli/reference/iam/v2/project/edit-by-name

Name

nebius iam v2 project edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

Synopsis

``` nebius iam v2 project edit-by-name --async --editor --name --parent-id ```

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--name` (string)

Name of the project to retrieve.

`--parent-id` (string)

Identifier of the project parent container.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam v2 project get Source: https://docs.nebius.com/cli/reference/iam/v2/project/get

Name

nebius iam v2 project get

Retrieves a project by its ID.

Synopsis

``` nebius iam v2 project get [id] --id ```

Positional Arguments

id

Identifier of project to retrieve.

Options

`--id` (string)

Identifier of project to retrieve.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // Identifier of project to retrieve. } ``` ```json theme={null} nebius iam v2 project get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam v2 project get-by-name Source: https://docs.nebius.com/cli/reference/iam/v2/project/get-by-name

Name

nebius iam v2 project get-by-name

Retrieves a project by its name within a specified parent.

Synopsis

``` nebius iam v2 project get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

Name of the project to retrieve.

`--parent-id` (string) \[required]

Identifier of the project parent container.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] // Name of the project to retrieve. "parent_id": string // [required] // Identifier of the project parent container. } ``` ```json theme={null} nebius iam v2 project get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam v2 project Source: https://docs.nebius.com/cli/reference/iam/v2/project/index

Name

nebius iam v2 project

Commands

nebius iam v2 project create

Creates a new project.

nebius iam v2 project delete

Deletes a project by its ID.

nebius iam v2 project edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius iam v2 project edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

nebius iam v2 project get

Retrieves a project by its ID.

nebius iam v2 project get-by-name

Retrieves a project by its name within a specified parent.

nebius iam v2 project list

Lists projects under a specified parent.

nebius iam v2 project operation

Manage operations for Project service.

nebius iam v2 project update

Updates an existing project.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam v2 project list Source: https://docs.nebius.com/cli/reference/iam/v2/project/list

Name

nebius iam v2 project list

Lists projects under a specified parent.

Synopsis

``` nebius iam v2 project list --filter --page-size --page-token --parent-id --all -i, --interactive ```

Options

`--filter` (string)

A filter to narrow down the results based on specific criteria.

`--page-size` (int64)

Specifies the maximum number of items to return in the response.
Default value: 10.

`--page-token` (string)

Token for pagination, allowing the retrieval of the next set of results.

`--parent-id` (string)

Identifier of container to list projects from.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "filter": string, // A filter to narrow down the results based on specific criteria. "page_size": int64, // Specifies the maximum number of items to return in the response. // Default value: 10. "page_token": string, // Token for pagination, allowing the retrieval of the next set of results. "parent_id": string // Identifier of container to list projects from. } ``` ```json theme={null} nebius iam v2 project list ' { "filter": "", "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam v2 project operation get Source: https://docs.nebius.com/cli/reference/iam/v2/project/operation/get

Name

nebius iam v2 project operation get

Get operation by ID.

Synopsis

``` nebius iam v2 project operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam v2 project operation Source: https://docs.nebius.com/cli/reference/iam/v2/project/operation/index

Name

nebius iam v2 project operation

Manage operations for Project service.

Commands

nebius iam v2 project operation get

Get operation by ID.

nebius iam v2 project operation list

List operations by resource ID.

nebius iam v2 project operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam v2 project operation list Source: https://docs.nebius.com/cli/reference/iam/v2/project/operation/list

Name

nebius iam v2 project operation list

List operations by resource ID.

Synopsis

``` nebius iam v2 project operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam v2 project operation wait Source: https://docs.nebius.com/cli/reference/iam/v2/project/operation/wait

Name

nebius iam v2 project operation wait

Wait for operation to complete.

Synopsis

``` nebius iam v2 project operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam v2 project update Source: https://docs.nebius.com/cli/reference/iam/v2/project/update

Name

nebius iam v2 project update

Updates an existing project.

Synopsis

``` nebius iam v2 project update [id] --id --labels --labels-add --labels-remove --name --parent-id --region --resource-version --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--region` (string)

Name of the region where project resources will be created.
Example: "eu-north1".

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "region": string // Name of the region where project resources will be created. // Example: "eu-north1". } } ``` ```json theme={null} nebius iam v2 project update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "region": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius iam v2 tenant edit Source: https://docs.nebius.com/cli/reference/iam/v2/tenant/edit

Name

nebius iam v2 tenant edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius iam v2 tenant edit [id] --async --editor --id ```

Positional Arguments

id

ID of the resource to edit.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam v2 tenant edit-by-name Source: https://docs.nebius.com/cli/reference/iam/v2/tenant/edit-by-name

Name

nebius iam v2 tenant edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

Synopsis

``` nebius iam v2 tenant edit-by-name --async --editor --name --parent-id ```

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--name` (string)

`--parent-id` (string)

Only empty value is allowed. Field is needed for compatibility.
parent\_id parameter for tenants doesn't make real sense, because tenants are top-level objects.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam v2 tenant get Source: https://docs.nebius.com/cli/reference/iam/v2/tenant/get

Name

nebius iam v2 tenant get

Synopsis

``` nebius iam v2 tenant get [id] --id ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string } ``` ```json theme={null} nebius iam v2 tenant get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam v2 tenant get-by-name Source: https://docs.nebius.com/cli/reference/iam/v2/tenant/get-by-name

Name

nebius iam v2 tenant get-by-name

Synopsis

``` nebius iam v2 tenant get-by-name --name [required] --parent-id ```

Options

`--name` (string) \[required]

`--parent-id` (string)

Only empty value is allowed. Field is needed for compatibility.
parent\_id parameter for tenants doesn't make real sense, because tenants are top-level objects.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // Only empty value is allowed. Field is needed for compatibility. // parent_id parameter for tenants doesn't make real sense, because tenants are top-level objects. } ``` ```json theme={null} nebius iam v2 tenant get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam v2 tenant Source: https://docs.nebius.com/cli/reference/iam/v2/tenant/index

Name

nebius iam v2 tenant

Commands

nebius iam v2 tenant edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius iam v2 tenant edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

nebius iam v2 tenant get

nebius iam v2 tenant get-by-name

nebius iam v2 tenant list

nebius iam v2 tenant operation

Manage operations for Tenant service.

nebius iam v2 tenant update

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam v2 tenant list Source: https://docs.nebius.com/cli/reference/iam/v2/tenant/list

Name

nebius iam v2 tenant list

Synopsis

``` nebius iam v2 tenant list --filter --page-size --page-token --all -i, --interactive ```

Options

`--filter` (string)

A filter to narrow down the results based on specific criteria.

`--page-size` (int64)

Specifies the maximum number of items to return in the response.
Default value: 10.

`--page-token` (string)

Token for pagination, allowing the retrieval of the next set of results.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "filter": string, // A filter to narrow down the results based on specific criteria. "page_size": int64, // Specifies the maximum number of items to return in the response. // Default value: 10. "page_token": string // Token for pagination, allowing the retrieval of the next set of results. } ``` ```json theme={null} nebius iam v2 tenant list ' { "filter": "", "page_size": 0, "page_token": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius iam v2 tenant operation get Source: https://docs.nebius.com/cli/reference/iam/v2/tenant/operation/get

Name

nebius iam v2 tenant operation get

Get operation by ID.

Synopsis

``` nebius iam v2 tenant operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam v2 tenant operation Source: https://docs.nebius.com/cli/reference/iam/v2/tenant/operation/index

Name

nebius iam v2 tenant operation

Manage operations for Tenant service.

Commands

nebius iam v2 tenant operation get

Get operation by ID.

nebius iam v2 tenant operation list

List operations by resource ID.

nebius iam v2 tenant operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam v2 tenant operation list Source: https://docs.nebius.com/cli/reference/iam/v2/tenant/operation/list

Name

nebius iam v2 tenant operation list

List operations by resource ID.

Synopsis

``` nebius iam v2 tenant operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam v2 tenant operation wait Source: https://docs.nebius.com/cli/reference/iam/v2/tenant/operation/wait

Name

nebius iam v2 tenant operation wait

Wait for operation to complete.

Synopsis

``` nebius iam v2 tenant operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius iam v2 tenant update Source: https://docs.nebius.com/cli/reference/iam/v2/tenant/update

Name

nebius iam v2 tenant update

Synopsis

``` nebius iam v2 tenant update [id] --id --labels --labels-add --labels-remove --name --name-prefix --parent-id --resource-version --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--name-prefix` (string)

Tenant name prefix. A few random characters will be added to this prefix.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "name_prefix": string, // Tenant name prefix. A few random characters will be added to this prefix. "spec": { } } ``` ```json theme={null} nebius iam v2 tenant update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "name_prefix": "", "spec": { } } ' ``` *Auto generated on 15-Jul-2026* # nebius iam whoami Source: https://docs.nebius.com/cli/reference/iam/whoami

Name

nebius iam whoami

An alias of "nebius iam profile get" — Returns the current user's profile.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius Source: https://docs.nebius.com/cli/reference/index

Name

nebius

Manage Nebius resources.

Options

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--color` (bool)

Enable colored output.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-h, --help` (bool)

Show this message.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--insecure` (bool)

Disable transport security.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

*Auto generated on 15-Jul-2026* # nebius kms asymmetric-crypto decrypt Source: https://docs.nebius.com/cli/reference/kms/asymmetric-crypto/decrypt

Name

nebius kms asymmetric-crypto decrypt

Decrypts the ciphertext with the specified key.

Synopsis

``` nebius kms asymmetric-crypto decrypt --ciphertext [required] --key-id [required] ```

Options

`--ciphertext` (bytesBase64) \[required]

Cipher text to be decrypted.

`--key-id` (string) \[required]

ID of the asymmetric KMS key.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "ciphertext": bytes, // [required] [sensitive] // Cipher text to be decrypted. "key_id": string // [required] // ID of the asymmetric KMS key. } ``` ```json theme={null} nebius kms asymmetric-crypto decrypt ' { "ciphertext": "", "key_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius kms asymmetric-crypto get-public-key Source: https://docs.nebius.com/cli/reference/kms/asymmetric-crypto/get-public-key

Name

nebius kms asymmetric-crypto get-public-key

Retrieves the public key of an asymmetric key pair.

Synopsis

``` nebius kms asymmetric-crypto get-public-key --key-id [required] ```

Options

`--key-id` (string) \[required]

ID of the asymmetric KMS key whose public key should be returned.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "key_id": string // [required] // ID of the asymmetric KMS key whose public key should be returned. } ``` ```json theme={null} nebius kms asymmetric-crypto get-public-key ' { "key_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius kms asymmetric-crypto Source: https://docs.nebius.com/cli/reference/kms/asymmetric-crypto/index

Name

nebius kms asymmetric-crypto

Data plane for KMS asymmetric cryptography operations.

Commands

nebius kms asymmetric-crypto decrypt

Decrypts the ciphertext with the specified key.

nebius kms asymmetric-crypto get-public-key

Retrieves the public key of an asymmetric key pair.

nebius kms asymmetric-crypto sign-hash

Signs a hashed value using an asymmetric key.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius kms asymmetric-crypto sign-hash Source: https://docs.nebius.com/cli/reference/kms/asymmetric-crypto/sign-hash

Name

nebius kms asymmetric-crypto sign-hash

Signs a hashed value using an asymmetric key.

Synopsis

``` nebius kms asymmetric-crypto sign-hash --hash [required] --key-id [required] ```

Options

`--hash` (bytesBase64) \[required]

Hash to sign.

`--key-id` (string) \[required]

ID of the asymmetric KMS key to use for signing the hash.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "hash": bytes, // [required] [sensitive] // Hash to sign. "key_id": string // [required] // ID of the asymmetric KMS key to use for signing the hash. } ``` ```json theme={null} nebius kms asymmetric-crypto sign-hash ' { "hash": "", "key_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius kms asymmetric-key create Source: https://docs.nebius.com/cli/reference/kms/asymmetric-key/create

Name

nebius kms asymmetric-key create

Creates an asymmetric KMS key in the specified container.

Synopsis

``` nebius kms asymmetric-key create --algorithm [required] --description --labels --name --parent-id [required] --resource-version --async -i, --interactive ```

Options

`--algorithm` (string) \[required]

Cryptographic algorithm that should be used with the key.
Must be specified only during create operations. Cannot be updated.

A value must be one of:

  • ecdsa\_nist\_p256\_sha\_256
  • ecdsa\_nist\_p384\_sha\_384
  • rsa\_4096\_enc\_oaep\_sha\_256

`--description` (string)

Description of the key.

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // [required] // The metadata for the resource. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // [required] // The specifications for creating an asymmetric key. "algorithm": enum( // [required] [immutable] // Cryptographic algorithm that should be used with the key. // Must be specified only during create operations. Cannot be updated. "ASYMMETRIC_ALGORITHM_UNSPECIFIED", "ECDSA_NIST_P256_SHA_256", // ECDSA signature with NIST P-256 curve and SHA-256. "ECDSA_NIST_P384_SHA_384", // ECDSA signature with NIST P-384 curve and SHA-384. "RSA_4096_ENC_OAEP_SHA_256" // RSA encryption with RSA-4096 key, OAEP padding and SHA-256. ), "description": string // Description of the key. } } ``` ```json theme={null} nebius kms asymmetric-key create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "algorithm": "asymmetric_algorithm_unspecified"|"ecdsa_nist_p256_sha_256"|"ecdsa_nist_p384_sha_384"|"rsa_4096_enc_oaep_sha_256", "description": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius kms asymmetric-key delete Source: https://docs.nebius.com/cli/reference/kms/asymmetric-key/delete

Name

nebius kms asymmetric-key delete

Schedules an asymmetric KMS key for deletion.

Synopsis

``` nebius kms asymmetric-key delete [id] --id [required] --async ```

Positional Arguments

id

ID of the asymmetric KMS key to schedule for deletion.
To get the ID of an asymmetric KMS key use an \[AsymmetricKeyService.List] request.

Options

`--id` (string) \[required]

ID of the asymmetric KMS key to schedule for deletion.
To get the ID of an asymmetric KMS key use an \[AsymmetricKeyService.List] request.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] // ID of the asymmetric KMS key to schedule for deletion. // To get the ID of an asymmetric KMS key use an [AsymmetricKeyService.List] request. } ``` ```json theme={null} nebius kms asymmetric-key delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius kms asymmetric-key edit Source: https://docs.nebius.com/cli/reference/kms/asymmetric-key/edit

Name

nebius kms asymmetric-key edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius kms asymmetric-key edit [id] --async --editor --id --show-scheduled-for-deletion ```

Positional Arguments

id

ID of the asymmetric KMS key to return.
To get the ID of an asymmetric KMS key use an \[AsymmetricKeyService.List] request.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

ID of the asymmetric KMS key to return.
To get the ID of an asymmetric KMS key use an \[AsymmetricKeyService.List] request.

`--show-scheduled-for-deletion` (bool)

By default, Get doesn't return resource if it is scheduled for deletion.
If show\_scheduled\_for\_deletion = true, the Get operation returns the resource even if it is scheduled for deletion.
If show\_scheduled\_for\_deletion = false, the Get method returns the NOT\_FOUND gRPC status code.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius kms asymmetric-key edit-by-name Source: https://docs.nebius.com/cli/reference/kms/asymmetric-key/edit-by-name

Name

nebius kms asymmetric-key edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

Synopsis

``` nebius kms asymmetric-key edit-by-name --async --editor --name --parent-id ```

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--name` (string)

`--parent-id` (string)

Parent Id and name of the asymmetric KMS key to return.
To get the name of an asymmetric KMS key use an \[AsymmetricKeyService.List] request.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius kms asymmetric-key get Source: https://docs.nebius.com/cli/reference/kms/asymmetric-key/get

Name

nebius kms asymmetric-key get

Returns the specified asymmetric KMS key by id.

Synopsis

``` nebius kms asymmetric-key get [id] --id [required] --show-scheduled-for-deletion ```

Positional Arguments

id

ID of the asymmetric KMS key to return.
To get the ID of an asymmetric KMS key use an \[AsymmetricKeyService.List] request.

Options

`--id` (string) \[required]

ID of the asymmetric KMS key to return.
To get the ID of an asymmetric KMS key use an \[AsymmetricKeyService.List] request.

`--show-scheduled-for-deletion` (bool)

By default, Get doesn't return resource if it is scheduled for deletion.
If show\_scheduled\_for\_deletion = true, the Get operation returns the resource even if it is scheduled for deletion.
If show\_scheduled\_for\_deletion = false, the Get method returns the NOT\_FOUND gRPC status code.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string, // [required] // ID of the asymmetric KMS key to return. // To get the ID of an asymmetric KMS key use an [AsymmetricKeyService.List] request. "show_scheduled_for_deletion": bool // By default, Get doesn't return resource if it is scheduled for deletion. // If show_scheduled_for_deletion = true, the Get operation returns the resource even if it is scheduled for deletion. // If show_scheduled_for_deletion = false, the Get method returns the NOT_FOUND gRPC status code. } ``` ```json theme={null} nebius kms asymmetric-key get ' { "id": "", "show_scheduled_for_deletion": false } ' ``` *Auto generated on 15-Jul-2026* # nebius kms asymmetric-key get-by-name Source: https://docs.nebius.com/cli/reference/kms/asymmetric-key/get-by-name

Name

nebius kms asymmetric-key get-by-name

Returns the specified asymmetric KMS key by name.

Synopsis

``` nebius kms asymmetric-key get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

`--parent-id` (string) \[required]

Parent Id and name of the asymmetric KMS key to return.
To get the name of an asymmetric KMS key use an \[AsymmetricKeyService.List] request.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // [required] // Parent Id and name of the asymmetric KMS key to return. // To get the name of an asymmetric KMS key use an [AsymmetricKeyService.List] request. } ``` ```json theme={null} nebius kms asymmetric-key get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius kms asymmetric-key Source: https://docs.nebius.com/cli/reference/kms/asymmetric-key/index

Name

nebius kms asymmetric-key

Set of methods for managing asymmetric keys.

Commands

nebius kms asymmetric-key create

Creates an asymmetric KMS key in the specified container.

nebius kms asymmetric-key delete

Schedules an asymmetric KMS key for deletion.

nebius kms asymmetric-key edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius kms asymmetric-key edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

nebius kms asymmetric-key get

Returns the specified asymmetric KMS key by id.

nebius kms asymmetric-key get-by-name

Returns the specified asymmetric KMS key by name.

nebius kms asymmetric-key list

Returns the list of asymmetric KMS keys in the specified container.

nebius kms asymmetric-key operation

Manage operations for AsymmetricKey service.

nebius kms asymmetric-key undelete

Restores an asymmetric KMS key scheduled for deletion.

nebius kms asymmetric-key update

Updates an asymmetric KMS key.

nebius kms asymmetric-key update-deletion-delay

Update deletion delay for an asymmetric KMS key scheduled for deletion.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius kms asymmetric-key list Source: https://docs.nebius.com/cli/reference/kms/asymmetric-key/list

Name

nebius kms asymmetric-key list

Returns the list of asymmetric KMS keys in the specified container.

Synopsis

``` nebius kms asymmetric-key list --page-size --page-token --parent-id [required] --show-scheduled-for-deletion --all -i, --interactive ```

Options

`--page-size` (int64)

The maximum number of results per page to return. If the number of available
results is larger than \[page\_size], the service returns a \[ListAsymmetricKeysResponse.next\_page\_token]
that can be used to get the next page of results in subsequent list requests.
Default value: 100.

`--page-token` (string)

Page token. To get the next page of results, set \[page\_token] to the
\[ListAsymmetricKeysResponse.next\_page\_token] returned by a previous list request.

`--parent-id` (string) \[required]

ID of the container to list asymmetric KMS keys in.

`--show-scheduled-for-deletion` (bool)

By default, List operation doesn't include resources that are scheduled for deletion.
If show\_scheduled\_for\_deletion = true, the listing includes resources that are scheduled for deletion.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, // The maximum number of results per page to return. If the number of available // results is larger than [page_size], the service returns a [ListAsymmetricKeysResponse.next_page_token] // that can be used to get the next page of results in subsequent list requests. // Default value: 100. "page_token": string, // Page token. To get the next page of results, set [page_token] to the // [ListAsymmetricKeysResponse.next_page_token] returned by a previous list request. "parent_id": string, // [required] // ID of the container to list asymmetric KMS keys in. "show_scheduled_for_deletion": bool // By default, List operation doesn't include resources that are scheduled for deletion. // If show_scheduled_for_deletion = true, the listing includes resources that are scheduled for deletion. } ``` ```json theme={null} nebius kms asymmetric-key list ' { "page_size": 0, "page_token": "", "parent_id": "", "show_scheduled_for_deletion": false } ' ``` *Auto generated on 15-Jul-2026* # nebius kms asymmetric-key operation get Source: https://docs.nebius.com/cli/reference/kms/asymmetric-key/operation/get

Name

nebius kms asymmetric-key operation get

Get operation by ID.

Synopsis

``` nebius kms asymmetric-key operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius kms asymmetric-key operation Source: https://docs.nebius.com/cli/reference/kms/asymmetric-key/operation/index

Name

nebius kms asymmetric-key operation

Manage operations for AsymmetricKey service.

Commands

nebius kms asymmetric-key operation get

Get operation by ID.

nebius kms asymmetric-key operation list

List operations by resource ID.

nebius kms asymmetric-key operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius kms asymmetric-key operation list Source: https://docs.nebius.com/cli/reference/kms/asymmetric-key/operation/list

Name

nebius kms asymmetric-key operation list

List operations by resource ID.

Synopsis

``` nebius kms asymmetric-key operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius kms asymmetric-key operation wait Source: https://docs.nebius.com/cli/reference/kms/asymmetric-key/operation/wait

Name

nebius kms asymmetric-key operation wait

Wait for operation to complete.

Synopsis

``` nebius kms asymmetric-key operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius kms asymmetric-key undelete Source: https://docs.nebius.com/cli/reference/kms/asymmetric-key/undelete

Name

nebius kms asymmetric-key undelete

Restores an asymmetric KMS key scheduled for deletion.

Synopsis

``` nebius kms asymmetric-key undelete [id] --id [required] --name --async ```

Positional Arguments

id

ID of the asymmetric KMS key to restore.

Options

`--id` (string) \[required]

ID of the asymmetric KMS key to restore.

`--name` (string)

A new name in case the current one is already in use.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string, // [required] // ID of the asymmetric KMS key to restore. "name": string // A new name in case the current one is already in use. } ``` ```json theme={null} nebius kms asymmetric-key undelete ' { "id": "", "name": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius kms asymmetric-key update Source: https://docs.nebius.com/cli/reference/kms/asymmetric-key/update

Name

nebius kms asymmetric-key update

Updates an asymmetric KMS key.

Synopsis

``` nebius kms asymmetric-key update [id] --description --id --labels --labels-add --labels-remove --name --parent-id --resource-version --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--description` (string)

Description of the key.

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // [required] // The metadata for the resource. "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // The specifications for updating an asymmetric key. "description": string // Description of the key. } } ``` ```json theme={null} nebius kms asymmetric-key update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "description": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius kms asymmetric-key update-deletion-delay Source: https://docs.nebius.com/cli/reference/kms/asymmetric-key/update-deletion-delay

Name

nebius kms asymmetric-key update-deletion-delay

Update deletion delay for an asymmetric KMS key scheduled for deletion.

Synopsis

``` nebius kms asymmetric-key update-deletion-delay [id] --deletion-delay [required] --id [required] --async ```

Positional Arguments

id

ID of the asymmetric KMS key scheduled for deletion.

Options

`--deletion-delay` (duration: 2h30m10s) \[required]

Deletion delay applied from the update timestamp.
Example: "86400s" (1 day). Valid range: 86400s (1 day) to 2592000s (30 days).

`--id` (string) \[required]

ID of the asymmetric KMS key scheduled for deletion.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "deletion_delay": "2h30m10s", // [required] [google.protobuf.Duration] // Deletion delay applied from the update timestamp. // Example: "86400s" (1 day). Valid range: 86400s (1 day) to 2592000s (30 days). "id": string // [required] // ID of the asymmetric KMS key scheduled for deletion. } ``` ```json theme={null} nebius kms asymmetric-key update-deletion-delay ' { "deletion_delay": "2h30m10s", "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius kms Source: https://docs.nebius.com/cli/reference/kms/index

Name

nebius kms

Commands

nebius kms asymmetric-crypto

Data plane for KMS asymmetric cryptography operations.

nebius kms asymmetric-key

Set of methods for managing asymmetric keys.

nebius kms symmetric-crypto

Set of methods that perform symmetric encryption and decryption.

nebius kms symmetric-key

Set of methods for managing symmetric KMS keys.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius kms symmetric-crypto decrypt Source: https://docs.nebius.com/cli/reference/kms/symmetric-crypto/decrypt

Name

nebius kms symmetric-crypto decrypt

Decrypts the given ciphertext with the specified key.

Synopsis

``` nebius kms symmetric-crypto decrypt --aad-context --ciphertext --key-id [required] ```

Options

`--aad-context` (bytesBase64)

Additional authenticated data, must be the same as was provided
in the corresponding \[SymmetricEncryptRequest].
Should be encoded with base64.

`--ciphertext` (bytesBase64)

Ciphertext to be decrypted.
Should be encoded with base64.

`--key-id` (string) \[required]

ID of the symmetric KMS key to use for decryption.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "aad_context": bytes, // [sensitive] // Additional authenticated data, must be the same as was provided // in the corresponding [SymmetricEncryptRequest]. // Should be encoded with base64. "ciphertext": bytes, // [sensitive] // Ciphertext to be decrypted. // Should be encoded with base64. "key_id": string // [required] // ID of the symmetric KMS key to use for decryption. } ``` ```json theme={null} nebius kms symmetric-crypto decrypt ' { "aad_context": "", "ciphertext": "", "key_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius kms symmetric-crypto encrypt Source: https://docs.nebius.com/cli/reference/kms/symmetric-crypto/encrypt

Name

nebius kms symmetric-crypto encrypt

Encrypts given plaintext with the specified key.

Synopsis

``` nebius kms symmetric-crypto encrypt --aad-context --key-id [required] --plaintext ```

Options

`--aad-context` (bytesBase64)

Additional authenticated data (AAD context), optional.
If specified, this data will be required for decryption with the \[SymmetricDecryptRequest].
Should be encoded with base64.

`--key-id` (string) \[required]

ID of the symmetric KMS key to use for encryption.

`--plaintext` (bytesBase64)

Plaintext to be encrypted.
Should be encoded with base64.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "aad_context": bytes, // [sensitive] // Additional authenticated data (AAD context), optional. // If specified, this data will be required for decryption with the [SymmetricDecryptRequest]. // Should be encoded with base64. "key_id": string, // [required] // ID of the symmetric KMS key to use for encryption. "plaintext": bytes // [sensitive] // Plaintext to be encrypted. // Should be encoded with base64. } ``` ```json theme={null} nebius kms symmetric-crypto encrypt ' { "aad_context": "", "key_id": "", "plaintext": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius kms symmetric-crypto generate-data-key Source: https://docs.nebius.com/cli/reference/kms/symmetric-crypto/generate-data-key

Name

nebius kms symmetric-crypto generate-data-key

Generates a new symmetric data encryption key (not a KMS key) and returns
the generated key as plaintext and as ciphertext encrypted with the specified symmetric KMS key.

Synopsis

``` nebius kms symmetric-crypto generate-data-key --aad-context --data-key-spec [required] --key-id [required] --skip-plaintext ```

Options

`--aad-context` (bytesBase64)

Additional authenticated data (AAD context), optional.
If specified, this data will be required for decryption with the \[SymmetricDecryptRequest].
Should be encoded with base64.

`--data-key-spec` (string) \[required]

Encryption algorithm and key length for the generated data key.

A value must be one of:

  • aes\_128
  • aes\_256

`--key-id` (string) \[required]

ID of the symmetric KMS key that the generated data key should be encrypted with.

`--skip-plaintext` (bool)

If `true`, the method won't return the data key as plaintext.
Default value is `false`.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "aad_context": bytes, // [sensitive] // Additional authenticated data (AAD context), optional. // If specified, this data will be required for decryption with the [SymmetricDecryptRequest]. // Should be encoded with base64. "data_key_spec": enum( // [required] // Encryption algorithm and key length for the generated data key. "SYMMETRIC_ALGORITHM_UNSPECIFIED", "AES_128", // Deprecated. It is impossible to create new keys with this algorithm. // AES algorithm with 128-bit keys. "AES_256" // AES algorithm with 256-bit keys. ), "key_id": string, // [required] // ID of the symmetric KMS key that the generated data key should be encrypted with. "skip_plaintext": bool // If `true`, the method won't return the data key as plaintext. // Default value is `false`. } ``` ```json theme={null} nebius kms symmetric-crypto generate-data-key ' { "aad_context": "", "data_key_spec": "symmetric_algorithm_unspecified"|"aes_128"|"aes_256", "key_id": "", "skip_plaintext": false } ' ``` *Auto generated on 15-Jul-2026* # nebius kms symmetric-crypto Source: https://docs.nebius.com/cli/reference/kms/symmetric-crypto/index

Name

nebius kms symmetric-crypto

Set of methods that perform symmetric encryption and decryption.

Commands

nebius kms symmetric-crypto decrypt

Decrypts the given ciphertext with the specified key.

nebius kms symmetric-crypto encrypt

Encrypts given plaintext with the specified key.

nebius kms symmetric-crypto generate-data-key

Generates a new symmetric data encryption key (not a KMS key) and returns
the generated key as plaintext and as ciphertext encrypted with the specified symmetric KMS key.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius kms symmetric-key create Source: https://docs.nebius.com/cli/reference/kms/symmetric-key/create

Name

nebius kms symmetric-key create

Creates a symmetric KMS key in the specified container.

Synopsis

``` nebius kms symmetric-key create --algorithm [required] --description --labels --name --parent-id [required] --resource-version --rotation-period --async -i, --interactive ```

Options

`--algorithm` (string) \[required]

Encryption algorithm that should be used when using the key to encrypt plaintext.
Must be specified only during create operations. Cannot be updated.

A value must be one of:

  • aes\_128
  • aes\_256

`--description` (string)

Description of the key.

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--rotation-period` (duration: 2h30m10s)

Key rotation period.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // [required] "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // [required] "algorithm": enum( // [required] [immutable] // Encryption algorithm that should be used when using the key to encrypt plaintext. // Must be specified only during create operations. Cannot be updated. "SYMMETRIC_ALGORITHM_UNSPECIFIED", "AES_128", // Deprecated. It is impossible to create new keys with this algorithm. // AES algorithm with 128-bit keys. "AES_256" // AES algorithm with 256-bit keys. ), "description": string, // Description of the key. "rotation_period": "2h30m10s" // [google.protobuf.Duration] [non_empty_default] // Key rotation period. } } ``` ```json theme={null} nebius kms symmetric-key create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "algorithm": "symmetric_algorithm_unspecified"|"aes_128"|"aes_256", "description": "", "rotation_period": "2h30m10s" } } ' ``` *Auto generated on 15-Jul-2026* # nebius kms symmetric-key delete Source: https://docs.nebius.com/cli/reference/kms/symmetric-key/delete

Name

nebius kms symmetric-key delete

Schedules a symmetric KMS key for deletion.

Synopsis

``` nebius kms symmetric-key delete [id] --id [required] --async ```

Positional Arguments

id

ID of the symmetric KMS key to schedule for deletion.
To get the ID of a symmetric KMS key use a \[SymmetricKeyService.List] request.

Options

`--id` (string) \[required]

ID of the symmetric KMS key to schedule for deletion.
To get the ID of a symmetric KMS key use a \[SymmetricKeyService.List] request.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] // ID of the symmetric KMS key to schedule for deletion. // To get the ID of a symmetric KMS key use a [SymmetricKeyService.List] request. } ``` ```json theme={null} nebius kms symmetric-key delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius kms symmetric-key edit Source: https://docs.nebius.com/cli/reference/kms/symmetric-key/edit

Name

nebius kms symmetric-key edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius kms symmetric-key edit [id] --async --editor --id --show-scheduled-for-deletion ```

Positional Arguments

id

ID of the symmetric KMS key to return.
To get the ID of a symmetric KMS key use a \[SymmetricKeyService.List] request.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

ID of the symmetric KMS key to return.
To get the ID of a symmetric KMS key use a \[SymmetricKeyService.List] request.

`--show-scheduled-for-deletion` (bool)

By default, Get doesn't return resource if it is scheduled for deletion.
If show\_scheduled\_for\_deletion = true, the Get operation returns the resource even if it is scheduled for deletion.
If show\_scheduled\_for\_deletion = false, the Get method returns the NOT\_FOUND gRPC status code.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius kms symmetric-key edit-by-name Source: https://docs.nebius.com/cli/reference/kms/symmetric-key/edit-by-name

Name

nebius kms symmetric-key edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

Synopsis

``` nebius kms symmetric-key edit-by-name --async --editor --name --parent-id ```

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--name` (string)

`--parent-id` (string)

ParentId and name of the symmetric KMS key to return.
To get the name of a symmetric KMS key use a \[SymmetricKeyService.List] request.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius kms symmetric-key get Source: https://docs.nebius.com/cli/reference/kms/symmetric-key/get

Name

nebius kms symmetric-key get

Returns the specified symmetric KMS key by id.

Synopsis

``` nebius kms symmetric-key get [id] --id [required] --show-scheduled-for-deletion ```

Positional Arguments

id

ID of the symmetric KMS key to return.
To get the ID of a symmetric KMS key use a \[SymmetricKeyService.List] request.

Options

`--id` (string) \[required]

ID of the symmetric KMS key to return.
To get the ID of a symmetric KMS key use a \[SymmetricKeyService.List] request.

`--show-scheduled-for-deletion` (bool)

By default, Get doesn't return resource if it is scheduled for deletion.
If show\_scheduled\_for\_deletion = true, the Get operation returns the resource even if it is scheduled for deletion.
If show\_scheduled\_for\_deletion = false, the Get method returns the NOT\_FOUND gRPC status code.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string, // [required] // ID of the symmetric KMS key to return. // To get the ID of a symmetric KMS key use a [SymmetricKeyService.List] request. "show_scheduled_for_deletion": bool // By default, Get doesn't return resource if it is scheduled for deletion. // If show_scheduled_for_deletion = true, the Get operation returns the resource even if it is scheduled for deletion. // If show_scheduled_for_deletion = false, the Get method returns the NOT_FOUND gRPC status code. } ``` ```json theme={null} nebius kms symmetric-key get ' { "id": "", "show_scheduled_for_deletion": false } ' ``` *Auto generated on 15-Jul-2026* # nebius kms symmetric-key get-by-name Source: https://docs.nebius.com/cli/reference/kms/symmetric-key/get-by-name

Name

nebius kms symmetric-key get-by-name

Returns the specified symmetric KMS key by name.

Synopsis

``` nebius kms symmetric-key get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

`--parent-id` (string) \[required]

ParentId and name of the symmetric KMS key to return.
To get the name of a symmetric KMS key use a \[SymmetricKeyService.List] request.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // [required] // ParentId and name of the symmetric KMS key to return. // To get the name of a symmetric KMS key use a [SymmetricKeyService.List] request. } ``` ```json theme={null} nebius kms symmetric-key get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius kms symmetric-key Source: https://docs.nebius.com/cli/reference/kms/symmetric-key/index

Name

nebius kms symmetric-key

Set of methods for managing symmetric KMS keys.

Commands

nebius kms symmetric-key create

Creates a symmetric KMS key in the specified container.

nebius kms symmetric-key delete

Schedules a symmetric KMS key for deletion.

nebius kms symmetric-key edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius kms symmetric-key edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

nebius kms symmetric-key get

Returns the specified symmetric KMS key by id.

nebius kms symmetric-key get-by-name

Returns the specified symmetric KMS key by name.

nebius kms symmetric-key list

Returns the list of symmetric KMS keys in the specified container.

nebius kms symmetric-key operation

Manage operations for SymmetricKey service.

nebius kms symmetric-key rotate

Rotates the specified key: creates a new key version and makes it the primary version.
The old version remains available for decryption of ciphertext encrypted with it.

nebius kms symmetric-key undelete

Restores a symmetric KMS key scheduled for deletion.

nebius kms symmetric-key update

Updates a symmetric KMS key.

nebius kms symmetric-key update-deletion-delay

Update deletion delay for a symmetric KMS key scheduled for deletion.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius kms symmetric-key list Source: https://docs.nebius.com/cli/reference/kms/symmetric-key/list

Name

nebius kms symmetric-key list

Returns the list of symmetric KMS keys in the specified container.

Synopsis

``` nebius kms symmetric-key list --page-size --page-token --parent-id [required] --show-scheduled-for-deletion --all -i, --interactive ```

Options

`--page-size` (int64)

The maximum number of results per page to return. If the number of available
results is larger than \[page\_size], the service returns a \[ListSymmetricKeysResponse.next\_page\_token]
that can be used to get the next page of results in subsequent list requests.
Default value: 100.

`--page-token` (string)

Page token. To get the next page of results, set \[page\_token] to the
\[ListSymmetricKeysResponse.next\_page\_token] returned by a previous list request.

`--parent-id` (string) \[required]

`--show-scheduled-for-deletion` (bool)

By default, List operation doesn't include resources that are scheduled for deletion.
If show\_scheduled\_for\_deletion = true, the listing includes resources that are scheduled for deletion.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, // The maximum number of results per page to return. If the number of available // results is larger than [page_size], the service returns a [ListSymmetricKeysResponse.next_page_token] // that can be used to get the next page of results in subsequent list requests. // Default value: 100. "page_token": string, // Page token. To get the next page of results, set [page_token] to the // [ListSymmetricKeysResponse.next_page_token] returned by a previous list request. "parent_id": string, // [required] "show_scheduled_for_deletion": bool // By default, List operation doesn't include resources that are scheduled for deletion. // If show_scheduled_for_deletion = true, the listing includes resources that are scheduled for deletion. } ``` ```json theme={null} nebius kms symmetric-key list ' { "page_size": 0, "page_token": "", "parent_id": "", "show_scheduled_for_deletion": false } ' ``` *Auto generated on 15-Jul-2026* # nebius kms symmetric-key operation get Source: https://docs.nebius.com/cli/reference/kms/symmetric-key/operation/get

Name

nebius kms symmetric-key operation get

Get operation by ID.

Synopsis

``` nebius kms symmetric-key operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius kms symmetric-key operation Source: https://docs.nebius.com/cli/reference/kms/symmetric-key/operation/index

Name

nebius kms symmetric-key operation

Manage operations for SymmetricKey service.

Commands

nebius kms symmetric-key operation get

Get operation by ID.

nebius kms symmetric-key operation list

List operations by resource ID.

nebius kms symmetric-key operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius kms symmetric-key operation list Source: https://docs.nebius.com/cli/reference/kms/symmetric-key/operation/list

Name

nebius kms symmetric-key operation list

List operations by resource ID.

Synopsis

``` nebius kms symmetric-key operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius kms symmetric-key operation wait Source: https://docs.nebius.com/cli/reference/kms/symmetric-key/operation/wait

Name

nebius kms symmetric-key operation wait

Wait for operation to complete.

Synopsis

``` nebius kms symmetric-key operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius kms symmetric-key rotate Source: https://docs.nebius.com/cli/reference/kms/symmetric-key/rotate

Name

nebius kms symmetric-key rotate

Rotates the specified key: creates a new key version and makes it the primary version.
The old version remains available for decryption of ciphertext encrypted with it.

Synopsis

``` nebius kms symmetric-key rotate [id] --id [required] --async ```

Positional Arguments

id

ID of the key to be rotated.

Options

`--id` (string) \[required]

ID of the key to be rotated.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] // ID of the key to be rotated. } ``` ```json theme={null} nebius kms symmetric-key rotate ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius kms symmetric-key undelete Source: https://docs.nebius.com/cli/reference/kms/symmetric-key/undelete

Name

nebius kms symmetric-key undelete

Restores a symmetric KMS key scheduled for deletion.

Synopsis

``` nebius kms symmetric-key undelete [id] --id [required] --name --async ```

Positional Arguments

id

ID of the symmetric KMS key to restore.

Options

`--id` (string) \[required]

ID of the symmetric KMS key to restore.

`--name` (string)

A new name in case the current one is already in use.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string, // [required] // ID of the symmetric KMS key to restore. "name": string // A new name in case the current one is already in use. } ``` ```json theme={null} nebius kms symmetric-key undelete ' { "id": "", "name": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius kms symmetric-key update Source: https://docs.nebius.com/cli/reference/kms/symmetric-key/update

Name

nebius kms symmetric-key update

Updates a symmetric KMS key.

Synopsis

``` nebius kms symmetric-key update [id] --description --id --labels --labels-add --labels-remove --name --parent-id --resource-version --rotation-period --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--description` (string)

Description of the key.

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--rotation-period` (duration: 2h30m10s)

Key rotation period.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // [required] // The metadata for the resource. "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // The specifications for updating a symmetric key. "description": string, // Description of the key. "rotation_period": "2h30m10s" // [google.protobuf.Duration] [non_empty_default] // Key rotation period. } } ``` ```json theme={null} nebius kms symmetric-key update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "description": "", "rotation_period": "2h30m10s" } } ' ``` *Auto generated on 15-Jul-2026* # nebius kms symmetric-key update-deletion-delay Source: https://docs.nebius.com/cli/reference/kms/symmetric-key/update-deletion-delay

Name

nebius kms symmetric-key update-deletion-delay

Update deletion delay for a symmetric KMS key scheduled for deletion.

Synopsis

``` nebius kms symmetric-key update-deletion-delay [id] --deletion-delay [required] --id [required] --async ```

Positional Arguments

id

ID of the symmetric KMS key scheduled for deletion.

Options

`--deletion-delay` (duration: 2h30m10s) \[required]

Deletion delay applied from the update timestamp.
Example: "86400s" (1 day). Valid range: 86400s (1 day) to 2592000s (30 days).

`--id` (string) \[required]

ID of the symmetric KMS key scheduled for deletion.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "deletion_delay": "2h30m10s", // [required] [google.protobuf.Duration] // Deletion delay applied from the update timestamp. // Example: "86400s" (1 day). Valid range: 86400s (1 day) to 2592000s (30 days). "id": string // [required] // ID of the symmetric KMS key scheduled for deletion. } ``` ```json theme={null} nebius kms symmetric-key update-deletion-delay ' { "deletion_delay": "2h30m10s", "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius logging export cancel Source: https://docs.nebius.com/cli/reference/logging/export/cancel

Name

nebius logging export cancel

Cancel an in-progress export operation by its ID. Has no effect on exports that have already finished or failed.

Synopsis

``` nebius logging export cancel --id [required] ```

Positional Arguments

id

ID of the export operation to cancel, as returned by `create` or shown by `list`.

Options

`--id` (string) \[required]

ID of the export operation to cancel, as returned by `create` or shown by `list`.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "export_operation_id": string // [required] // ID of the export operation to cancel, as returned by `create` or shown by `list`. } ``` ```json theme={null} nebius logging export cancel ' { "export_operation_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius logging export create Source: https://docs.nebius.com/cli/reference/logging/export/create

Name

nebius logging export create

Create a new log export.

Synopsis

``` nebius logging export create --bucket-id --bucket-name --bucket-parent-id --filter --from --labels --log-format --object-prefix --parent-id [required] --to --async ```

Options

`--bucket-id` (string)

ID of the destination Object Storage bucket.

Mutually exclusive with: `--params-nebius-object-storage-by-name-name`, `--params-nebius-object-storage-by-name-parent-id`.

`--bucket-name` (string)

Name of the destination Object Storage bucket.

Mutually exclusive with: `--params-nebius-object-storage-id`.

`--bucket-parent-id` (string)

Project ID that owns the bucket. Required only when the bucket lives in a different project than `--parent-id`;
defaults to `--parent-id` otherwise.

Mutually exclusive with: `--params-nebius-object-storage-id`.

`--filter` (string)

LogQL match expression selecting log entries to export.

`--from` (timestamp: 1970-01-31T02:30:59Z)

Start of the time range to export, ISO 8601 (e.g. `2025-12-21T20:00:00Z`).

`--labels` (string array)

Label names to include as columns in the exported data. Empty means export all labels.

`--log-format` (string)

Output file format.

A value must be one of:

  • export\_format\_unsupported
  • json\_gzip
  • parquet

`--object-prefix` (string)

Key prefix under which exported objects are written. Defaults to `logs/`.

`--parent-id` (string) \[required]

Project ID whose logs are exported. Also used as the default owner of the destination bucket when the bucket is
resolved by name and `--bucket-parent-id` is not set.

`--to` (timestamp: 1970-01-31T02:30:59Z)

End of the time range to export, ISO 8601 (e.g. `2025-12-22T00:00:00Z`).

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "params": { // [required] // What to export and where to write it. "log": { // Export log entries selected by a LogQL match expression. "export_labels": [string], // Label names to include as columns in the exported data. Empty means export all labels. "filter": { // [required] // Time range and LogQL match expression selecting log entries to export. "from": "1970-01-31T02:30:59Z", // [required] [google.protobuf.Timestamp] // Start of the time range to export, ISO 8601 (e.g. `2025-12-21T20:00:00Z`). "match_expression": string, // LogQL match expression selecting log entries to export. "to": "1970-01-31T02:30:59Z" // [required] [google.protobuf.Timestamp] // End of the time range to export, ISO 8601 (e.g. `2025-12-22T00:00:00Z`). }, "format": enum( // [required] // Output file format. "EXPORT_FORMAT_UNSUPPORTED", "JSON_GZIP", // JSON lines (one JSON object per line) compressed with gzip. Written as `.json.gz`. "PARQUET" // Apache Parquet. Written as `.parquet`. ) }, "nebius_object_storage": { // Write the export to a Nebius Object Storage bucket. // NebiusObjectStorageDestinationRegistered nebius_object_storage_registered = 5; // to be added later // ObjectStorage object_storage = 6; // to be added later. "by_name": { // Cannot be set together with: id // Destination bucket. "name": string, // [required] // Name of the destination Object Storage bucket. "parent_id": string // Project ID that owns the bucket. Required only when the bucket lives in a different project than `--parent-id`; // defaults to `--parent-id` otherwise. }, "id": string, // Cannot be set together with: by_name // ID of the destination Object Storage bucket. "object_prefix": string // Key prefix under which exported objects are written. Defaults to `logs/`. } }, "parent_id": string // [required] // Project ID whose logs are exported. Also used as the default owner of the destination bucket when the bucket is // resolved by name and `--bucket-parent-id` is not set. } ``` ```json theme={null} nebius logging export create ' { "params": { "log": { "export_labels": [""], "filter": { "from": "1970-01-31T02:30:59Z", "match_expression": "", "to": "1970-01-31T02:30:59Z" }, "format": "export_format_unsupported"|"json_gzip"|"parquet" }, "nebius_object_storage": { "by_name": { "name": "", "parent_id": "" }, "object_prefix": "" } }, "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius logging export get Source: https://docs.nebius.com/cli/reference/logging/export/get

Name

nebius logging export get

Get the status of a single export operation by its ID.

Synopsis

``` nebius logging export get --id [required] ```

Positional Arguments

id

ID of the export operation to look up, as returned by `create` or shown by `list`.

Options

`--id` (string) \[required]

ID of the export operation to look up, as returned by `create` or shown by `list`.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "export_operation_id": string // [required] // ID of the export operation to look up, as returned by `create` or shown by `list`. } ``` ```json theme={null} nebius logging export get ' { "export_operation_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius logging export Source: https://docs.nebius.com/cli/reference/logging/export/index

Name

nebius logging export

Export logs to a specified destination.

Commands

nebius logging export cancel

Cancel an in-progress export operation by its ID. Has no effect on exports that have already finished or failed.

nebius logging export create

Create a new log export.

nebius logging export get

Get the status of a single export operation by its ID.

nebius logging export list

List export operations in the container given by `--parent-id`.

nebius logging export operation

Manage operations for LogExport service.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius logging export list Source: https://docs.nebius.com/cli/reference/logging/export/list

Name

nebius logging export list

List export operations in the container given by `--parent-id`.

Synopsis

``` nebius logging export list --order-by --page-size --page-token --parent-id [required] ```

Options

`--order-by` (string)

Sort order for the returned export operations by creation time (ascending or descending).

A value must be one of:

  • order\_by\_unspecified
  • order\_by\_asc
  • order\_by\_desc

`--page-size` (int64)

Maximum number of export operations to return in a single response page.

`--page-token` (string)

Listing continuation token. Pass an empty string to start listing from the first page.

`--parent-id` (string) \[required]

Project ID whose export operations are listed.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "order_by": enum( // Sort order for the returned export operations by creation time (ascending or descending). "ORDER_BY_UNSPECIFIED", "ORDER_BY_ASC", "ORDER_BY_DESC" ), "page_size": int64, // Maximum number of export operations to return in a single response page. "page_token": string, // Listing continuation token. Pass an empty string to start listing from the first page. "parent_id": string // [required] // Project ID whose export operations are listed. } ``` ```json theme={null} nebius logging export list ' { "order_by": "order_by_unspecified"|"order_by_asc"|"order_by_desc", "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius logging export operation get Source: https://docs.nebius.com/cli/reference/logging/export/operation/get

Name

nebius logging export operation get

Get operation by ID.

Synopsis

``` nebius logging export operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius logging export operation Source: https://docs.nebius.com/cli/reference/logging/export/operation/index

Name

nebius logging export operation

Manage operations for LogExport service.

Commands

nebius logging export operation get

Get operation by ID.

nebius logging export operation list

List operations by resource ID.

nebius logging export operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius logging export operation list Source: https://docs.nebius.com/cli/reference/logging/export/operation/list

Name

nebius logging export operation list

List operations by resource ID.

Synopsis

``` nebius logging export operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius logging export operation wait Source: https://docs.nebius.com/cli/reference/logging/export/operation/wait

Name

nebius logging export operation wait

Wait for operation to complete.

Synopsis

``` nebius logging export operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius logging Source: https://docs.nebius.com/cli/reference/logging/index

Name

nebius logging

Commands

nebius logging export

Export logs to a specified destination.

nebius logging label-values

List all possible values for a specific log label. Useful for discovering filter values before building a query expression for logs.

nebius logging labels

List log labels available for filtering. Use 'label-values' command to see the possible values for a specific label.

nebius logging metrics

Execute a LogQL metric query and display results as time series, vectors, or scalars.

nebius logging query

Fetch log entries from your project. Supports filtering by time range and custom LogQL queries. Use --follow to stream live logs.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius logging label-values Source: https://docs.nebius.com/cli/reference/logging/label-values

Name

nebius logging label-values

List all possible values for a specific log label. Useful for discovering filter values before building a query expression for logs.

Synopsis

``` nebius logging label-values

Positional Arguments

label

Label name to list values for.

query

Filter log entries using LogQL syntax.
For more information see [https://docs.nebius.com/observability/logs/query-language](https://docs.nebius.com/observability/logs/query-language).

Options

`--bucket` (string)

Log bucket to query. If not specified, you will be prompted to choose from available buckets.

`--project-id` (string)

Project ID to query logs from. Defaults to parent-id from config if not set.

`--since` (string)

Show labels from this time.
Accepts a duration (7d, 2h, 30m, 10s, 100ms, 1d12h30m, now) of time before now or a timestamp in various formats: ('2006-01-02T15:04:05.999Z', '2006-01-02T15:04:05Z', '2006-01-02 15:04:05', '2006-01-02').
Default is 1h.

`--until` (string)

Show labels up to this time.
Accepts a duration (7d, 2h, 30m, 10s, 100ms, 1d12h30m, now) of time before now or a timestamp in various formats: ('2006-01-02T15:04:05.999Z', '2006-01-02T15:04:05Z', '2006-01-02 15:04:05', '2006-01-02').
Default is now.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius logging labels Source: https://docs.nebius.com/cli/reference/logging/labels

Name

nebius logging labels

List log labels available for filtering. Use 'label-values' command to see the possible values for a specific label.

Synopsis

``` nebius logging labels [query] --bucket --project-id --since --until ```

Positional Arguments

query

Filter log entries using LogQL syntax.
For more information see [https://docs.nebius.com/observability/logs/query-language](https://docs.nebius.com/observability/logs/query-language).

Options

`--bucket` (string)

Log bucket to query. If not specified, you will be prompted to choose from available buckets.

`--project-id` (string)

Project ID to query logs from. Defaults to parent-id from config if not set.

`--since` (string)

Show labels from this time.
Accepts a duration (7d, 2h, 30m, 10s, 100ms, 1d12h30m, now) of time before now or a timestamp in various formats: ('2006-01-02T15:04:05.999Z', '2006-01-02T15:04:05Z', '2006-01-02 15:04:05', '2006-01-02').
Default is 1h.

`--until` (string)

Show labels up to this time.
Accepts a duration (7d, 2h, 30m, 10s, 100ms, 1d12h30m, now) of time before now or a timestamp in various formats: ('2006-01-02T15:04:05.999Z', '2006-01-02T15:04:05Z', '2006-01-02 15:04:05', '2006-01-02').
Default is now.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius logging metrics Source: https://docs.nebius.com/cli/reference/logging/metrics

Name

nebius logging metrics

Execute a LogQL metric query and display results as time series, vectors, or scalars.

Synopsis

``` nebius logging metrics --bucket --instant --project-id --since --step --until ```

Examples

**Error rate** ``` $ nebius logging metrics 'rate({level="error"}[15m])' --bucket my-bucket ``` **Top 5 pods by log volume over the last hour** ``` $ nebius logging metrics 'topk(5, rate({}[5m])) by (k8s_pod_name)' --bucket my-bucket --since 1h ``` **Count log lines per level** ``` $ nebius logging metrics 'sum by (level)(count_over_time({}[5m]))' --bucket my-bucket --step 5m ``` **Instant query: log count by level** ``` $ nebius logging metrics 'sum by (level)(count_over_time({}[1h]))' --bucket my-bucket --instant ``` **Log count per pod as a table** ``` $ nebius logging metrics 'sum by (k8s_pod_name)(count_over_time({}[5m]))' --bucket my-bucket --step 5m --format table ```

Positional Arguments

query

LogQL metric query using aggregation functions (rate, count\_over\_time, sum, topk, etc.).
For more information see [https://docs.nebius.com/observability/logs/query-language](https://docs.nebius.com/observability/logs/query-language).

Options

`--bucket` (string)

Log bucket to query. If not specified, you will be prompted to choose from available buckets.

`--instant` (bool)

Evaluate query at a single point in time (--until or now).

`--project-id` (string)

Project ID to query metrics from. Defaults to parent-id from config if not set.

`--since` (string)

Show metrics starting from this time.
Accepts a duration (7d, 2h, 30m, 10s, 100ms, 1d12h30m, now) of time before now or a timestamp in various formats: ('2006-01-02T15:04:05.999Z', '2006-01-02T15:04:05Z', '2006-01-02 15:04:05', '2006-01-02').
Default is 24h.

`--step` (string)

Resolution step width (e.g., '5m', '1h'). Default is auto-calculated to \~100 points.

`--until` (string)

Show metrics up to this time.
Accepts a duration (7d, 2h, 30m, 10s, 100ms, 1d12h30m, now) of time before now or a timestamp in various formats: ('2006-01-02T15:04:05.999Z', '2006-01-02T15:04:05Z', '2006-01-02 15:04:05', '2006-01-02').
Default is now.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius logging query Source: https://docs.nebius.com/cli/reference/logging/query

Name

nebius logging query

Fetch log entries from your project. Supports filtering by time range and custom LogQL queries. Use --follow to stream live logs.

Synopsis

``` nebius logging query [query] --bucket --follow --forward --limit --project-id --since --until ```

Examples

**Read error logs from a bucket** ``` $ nebius logging query '{level="error"}' --bucket my-bucket ``` **Search for exact log messages in a bucket for the last 15 minutes** ``` $ nebius logging query '{} |= "OOMKilled"' --bucket my-bucket --since 15m ``` **Stream errors with a specific service\_name label value in real time** ``` $ nebius logging query '{service_name="inference-gateway", level="error"}' --bucket my-bucket --follow ``` **Show a maximum of one thousand logs starting from the oldest for the specified time period in a table with pod and node columns** ``` $ nebius logging query \ --bucket my-bucket \ --limit 1000 \ --forward \ --since 2d \ --until 1d \ --format "table(timestamp,level,message,labels.k8s_pod_name,labels.k8s_node_name)" ```

Positional Arguments

query

Filter log entries using LogQL syntax.
For more information see [https://docs.nebius.com/observability/logs/query-language](https://docs.nebius.com/observability/logs/query-language).

Options

`--bucket` (string)

Log bucket to query. If not specified, you will be prompted to choose from available buckets.

`--follow` (bool)

Stream new log entries as they arrive. Ignores --limit and --forward.

`--forward` (bool)

Display logs in chronological order (oldest first). By default, newest logs are shown first.

`--limit` (int)

Maximum number of log entries to return. Default is 100.

`--project-id` (string)

Project ID to query logs from. Defaults to parent-id from config if not set.

`--since` (string)

Show logs starting from this time.
Accepts a duration (7d, 2h, 30m, 10s, 100ms, 1d12h30m, now) of time before now or a timestamp in various formats: ('2006-01-02T15:04:05.999Z', '2006-01-02T15:04:05Z', '2006-01-02 15:04:05', '2006-01-02').
Default is 1h.

`--until` (string)

Show logs up to this time.
Accepts a duration (7d, 2h, 30m, 10s, 100ms, 1d12h30m, now) of time before now or a timestamp in various formats: ('2006-01-02T15:04:05.999Z', '2006-01-02T15:04:05Z', '2006-01-02 15:04:05', '2006-01-02').
Default is now.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius maintenance Source: https://docs.nebius.com/cli/reference/maintenance/index

Name

nebius maintenance

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius maintenance v1alpha1 Source: https://docs.nebius.com/cli/reference/maintenance/v1alpha1/index

Name

nebius maintenance v1alpha1

Commands

nebius maintenance v1alpha1 maintenance

A set of methods for managing maintenance operations.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius maintenance v1alpha1 maintenance edit Source: https://docs.nebius.com/cli/reference/maintenance/v1alpha1/maintenance/edit

Name

nebius maintenance v1alpha1 maintenance edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius maintenance v1alpha1 maintenance edit [id] --editor --id ```

Positional Arguments

id

ID of the maintenance operation to return.
To get the maintenance ID use a \[MaintenanceService.List] request.

Options

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

ID of the maintenance operation to return.
To get the maintenance ID use a \[MaintenanceService.List] request.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius maintenance v1alpha1 maintenance get Source: https://docs.nebius.com/cli/reference/maintenance/v1alpha1/maintenance/get

Name

nebius maintenance v1alpha1 maintenance get

Returns the specified maintenance operation.
To get the list of upcoming and past maintenance operations, make a \[List] request.

Synopsis

``` nebius maintenance v1alpha1 maintenance get [id] --id [required] ```

Positional Arguments

id

ID of the maintenance operation to return.
To get the maintenance ID use a \[MaintenanceService.List] request.

Options

`--id` (string) \[required]

ID of the maintenance operation to return.
To get the maintenance ID use a \[MaintenanceService.List] request.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] // ID of the maintenance operation to return. // To get the maintenance ID use a [MaintenanceService.List] request. } ``` ```json theme={null} nebius maintenance v1alpha1 maintenance get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius maintenance v1alpha1 maintenance Source: https://docs.nebius.com/cli/reference/maintenance/v1alpha1/maintenance/index

Name

nebius maintenance v1alpha1 maintenance

A set of methods for managing maintenance operations.

Commands

nebius maintenance v1alpha1 maintenance edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius maintenance v1alpha1 maintenance get

Returns the specified maintenance operation.
To get the list of upcoming and past maintenance operations, make a \[List] request.

nebius maintenance v1alpha1 maintenance list

Retrieves the list of maintenance operations that belong
to the specified container.

nebius maintenance v1alpha1 maintenance update

Updates the specified maintenance operation.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius maintenance v1alpha1 maintenance list Source: https://docs.nebius.com/cli/reference/maintenance/v1alpha1/maintenance/list

Name

nebius maintenance v1alpha1 maintenance list

Retrieves the list of maintenance operations that belong
to the specified container.

Synopsis

``` nebius maintenance v1alpha1 maintenance list --parent-id [required] ```

Options

`--parent-id` (string) \[required]

Identifier of IAM container to list maintenance operations from.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "parent_id": string // [required] // Identifier of IAM container to list maintenance operations from. } ``` ```json theme={null} nebius maintenance v1alpha1 maintenance list ' { "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius maintenance v1alpha1 maintenance update Source: https://docs.nebius.com/cli/reference/maintenance/v1alpha1/maintenance/update

Name

nebius maintenance v1alpha1 maintenance update

Updates the specified maintenance operation.

Synopsis

``` nebius maintenance v1alpha1 maintenance update [id] --id --labels --labels-add --labels-remove --name --parent-id --resource-version --scheduled-at --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--scheduled-at` (timestamp: 1970-01-31T02:30:59Z)

Timestamp indicating when the maintenance operation is scheduled to run.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // [required] // Metadata associated with the maintenance operation. // Must include ID of the maintenance operation to update. "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // Updated specification for the maintenance operation. "scheduled_at": "1970-01-31T02:30:59Z" // [required] [google.protobuf.Timestamp] // Timestamp indicating when the maintenance operation is scheduled to run. } } ``` ```json theme={null} nebius maintenance v1alpha1 maintenance update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "scheduled_at": "1970-01-31T02:30:59Z" } } ' ``` *Auto generated on 15-Jul-2026* # nebius mk8s cluster create Source: https://docs.nebius.com/cli/reference/mk8s/cluster/create

Name

nebius mk8s cluster create

Creates a new mk8s cluster.

Synopsis

``` nebius mk8s cluster create --control-plane-audit-logs --control-plane-endpoints-public-endpoint --control-plane-endpoints-public-endpoint-allowed-cidrs --control-plane-etcd-cluster-size --control-plane-karpenter --control-plane-subnet-id [required] --control-plane-version --kube-network-service-cidrs --labels --name --parent-id [required] --resource-version --async -i, --interactive ```

Options

`--control-plane-audit-logs` (bool)

Specify configuration of the pushing k8s audit logs into service logs and show it in the UI.
By default cluster will be created without it.

`--control-plane-endpoints-public-endpoint` (bool)

Public endpoint specification. When set, a public endpoint is created.

`--control-plane-endpoints-public-endpoint-allowed-cidrs` (string array)

List of CIDR blocks from which access to public endpoint is allowed.
If field is not set, or list is empty, it means that access is not restricted at all.

`--control-plane-etcd-cluster-size` (int64)

Number of instances in etcd cluster.
3 by default.
Control plane with `etcd_cluster_size: 3` called "Highly Available" ("HA"), because it's Kubernetes API
will be available despite a failure of one control plane instance.

`--control-plane-karpenter` (bool)

Enables installation of the Karpenter inside a cluster.
Karpenter will be installed as a helm chart inside cluster
so it requires creation of at least one CPU public node group.

Please note that there is no feature parity between Karpenter node pools and
public node groups.
By default cluster will be created without it.

`--control-plane-subnet-id` (string) \[required]

Nebius VPC Subnet ID where control plane instances will be located.
Also will be default NodeGroup subnet.

`--control-plane-version` (string)

Desired Kubernetes version of the cluster. For now only acceptable format is
`.` like "1.31". Option for patch version update will be added later.

`--kube-network-service-cidrs` (string array)

CIDR blocks for Service ClusterIP allocation.
For now, only one value is supported.
Must be a valid CIDR block or prefix length.
In case of prefix length, certain CIDR is auto allocated.
Specified CIDR blocks will be reserved in Cluster.spec.control\_plane.subnet\_id to prevent address duplication.
Allowed prefix length is from "/12" to "/28".
Empty value treated as \["/16"].

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // [required] "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // [required] "control_plane": { // [required] "audit_logs": { // [meaningful_empty_value] // Specify configuration of the pushing k8s audit logs into service logs and show it in the UI. // By default cluster will be created without it. }, "endpoints": { // Specification of endpoints of cluster control plane. "public_endpoint": { // [meaningful_empty_value] // Public endpoint specification. When set, a public endpoint is created. "allowed_cidrs": [string] // List of CIDR blocks from which access to public endpoint is allowed. // If field is not set, or list is empty, it means that access is not restricted at all. } }, "etcd_cluster_size": int64, // Number of instances in etcd cluster. // 3 by default. // Control plane with `etcd_cluster_size: 3` called "Highly Available" ("HA"), because it's Kubernetes API // will be available despite a failure of one control plane instance. "karpenter": { // [meaningful_empty_value] // Enables installation of the Karpenter inside a cluster. // Karpenter will be installed as a helm chart inside cluster // so it requires creation of at least one CPU public node group. // // Please note that there is no feature parity between Karpenter node pools and // public node groups. // By default cluster will be created without it. }, "subnet_id": string, // [required] [immutable] // Nebius VPC Subnet ID where control plane instances will be located. // Also will be default NodeGroup subnet. "version": string // Desired Kubernetes version of the cluster. For now only acceptable format is // `.` like "1.31". Option for patch version update will be added later. }, "kube_network": { // Defines kubernetes network configuration, like IP allocation. "service_cidrs": [string] // [immutable] // CIDR blocks for Service ClusterIP allocation. // For now, only one value is supported. // Must be a valid CIDR block or prefix length. // In case of prefix length, certain CIDR is auto allocated. // Specified CIDR blocks will be reserved in Cluster.spec.control_plane.subnet_id to prevent address duplication. // Allowed prefix length is from "/12" to "/28". // Empty value treated as ["/16"]. } } } ``` ```json theme={null} nebius mk8s cluster create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "control_plane": { "audit_logs": { }, "endpoints": { "public_endpoint": { "allowed_cidrs": [""] } }, "etcd_cluster_size": 0, "karpenter": { }, "subnet_id": "", "version": "" }, "kube_network": { "service_cidrs": [""] } } } ' ``` *Auto generated on 15-Jul-2026* # nebius mk8s cluster delete Source: https://docs.nebius.com/cli/reference/mk8s/cluster/delete

Name

nebius mk8s cluster delete

Deletes an mk8s cluster.

Synopsis

``` nebius mk8s cluster delete [id] --id [required] --async ```

Positional Arguments

id

ID of the resource to delete.

Options

`--id` (string) \[required]

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius mk8s cluster delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius mk8s cluster edit Source: https://docs.nebius.com/cli/reference/mk8s/cluster/edit

Name

nebius mk8s cluster edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius mk8s cluster edit [id] --async --editor --id --resource-version ```

Positional Arguments

id

ID of the resource to edit.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

`--resource-version` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mk8s cluster edit-by-name Source: https://docs.nebius.com/cli/reference/mk8s/cluster/edit-by-name

Name

nebius mk8s cluster edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

Synopsis

``` nebius mk8s cluster edit-by-name --async --editor --name --parent-id ```

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--name` (string)

`--parent-id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mk8s cluster get Source: https://docs.nebius.com/cli/reference/mk8s/cluster/get

Name

nebius mk8s cluster get

Returns a specific mk8s cluster by its unique identifier.

Synopsis

``` nebius mk8s cluster get [id] --id [required] --resource-version ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string) \[required]

`--resource-version` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string, // [required] "resource_version": string } ``` ```json theme={null} nebius mk8s cluster get ' { "id": "", "resource_version": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius mk8s cluster get-by-name Source: https://docs.nebius.com/cli/reference/mk8s/cluster/get-by-name

Name

nebius mk8s cluster get-by-name

Returns a specific mk8s cluster by its unique name.

Synopsis

``` nebius mk8s cluster get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

`--parent-id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // [required] } ``` ```json theme={null} nebius mk8s cluster get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius mk8s cluster get-credentials Source: https://docs.nebius.com/cli/reference/mk8s/cluster/get-credentials

Name

nebius mk8s cluster get-credentials

create or update kubeconfig for the specified cluster

Synopsis

``` nebius mk8s cluster get-credentials --context-name --external --force --id --internal --kubeconfig ```

Positional Arguments

id

Cluster id.

Options

`--context-name` (string)

Custom kubeconfig context name.

`--external` (bool)

Use cluster external endpoint.

`--force` (bool)

Overwrite context.

`--id` (string)

Cluster id.

`--internal` (bool)

Use cluster internal endpoint.

`--kubeconfig` (string)

Kubeconfig file path.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mk8s cluster get-token Source: https://docs.nebius.com/cli/reference/mk8s/cluster/get-token

Name

nebius mk8s cluster get-token

get token for kubectl

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mk8s cluster Source: https://docs.nebius.com/cli/reference/mk8s/cluster/index

Name

nebius mk8s cluster

Commands

nebius mk8s cluster create

Creates a new mk8s cluster.

nebius mk8s cluster delete

Deletes an mk8s cluster.

nebius mk8s cluster edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius mk8s cluster edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

nebius mk8s cluster get

Returns a specific mk8s cluster by its unique identifier.

nebius mk8s cluster get-by-name

Returns a specific mk8s cluster by its unique name.

nebius mk8s cluster get-credentials

create or update kubeconfig for the specified cluster

nebius mk8s cluster get-token

get token for kubectl

nebius mk8s cluster list

Returns a list of all mk8s clusters in the specified project.

nebius mk8s cluster list-control-plane-versions

ListControlPlaneVersions returns all k8s release versions available in Nebius API.

nebius mk8s cluster operation

Manage operations for Cluster service.

nebius mk8s cluster update

Modifies an existing mk8s cluster.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mk8s cluster list Source: https://docs.nebius.com/cli/reference/mk8s/cluster/list

Name

nebius mk8s cluster list

Returns a list of all mk8s clusters in the specified project.

Synopsis

``` nebius mk8s cluster list --page-size --page-token --parent-id [required] --all -i, --interactive ```

Options

`--page-size` (int64)

Specifies the maximum number of items to return in the response.

`--page-token` (string)

Token for pagination, allowing the retrieval of the next set of results.

`--parent-id` (string) \[required]

ID of the IAM container we are listing the resources in.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, // Specifies the maximum number of items to return in the response. "page_token": string, // Token for pagination, allowing the retrieval of the next set of results. "parent_id": string // [required] // ID of the IAM container we are listing the resources in. } ``` ```json theme={null} nebius mk8s cluster list ' { "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius mk8s cluster list-control-plane-versions Source: https://docs.nebius.com/cli/reference/mk8s/cluster/list-control-plane-versions

Name

nebius mk8s cluster list-control-plane-versions

ListControlPlaneVersions returns all k8s release versions available in Nebius API.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mk8s cluster operation get Source: https://docs.nebius.com/cli/reference/mk8s/cluster/operation/get

Name

nebius mk8s cluster operation get

Get operation by ID.

Synopsis

``` nebius mk8s cluster operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mk8s cluster operation Source: https://docs.nebius.com/cli/reference/mk8s/cluster/operation/index

Name

nebius mk8s cluster operation

Manage operations for Cluster service.

Commands

nebius mk8s cluster operation get

Get operation by ID.

nebius mk8s cluster operation list

List operations by resource ID.

nebius mk8s cluster operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mk8s cluster operation list Source: https://docs.nebius.com/cli/reference/mk8s/cluster/operation/list

Name

nebius mk8s cluster operation list

List operations by resource ID.

Synopsis

``` nebius mk8s cluster operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mk8s cluster operation wait Source: https://docs.nebius.com/cli/reference/mk8s/cluster/operation/wait

Name

nebius mk8s cluster operation wait

Wait for operation to complete.

Synopsis

``` nebius mk8s cluster operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mk8s cluster update Source: https://docs.nebius.com/cli/reference/mk8s/cluster/update

Name

nebius mk8s cluster update

Modifies an existing mk8s cluster.

Synopsis

``` nebius mk8s cluster update [id] --control-plane-audit-logs --control-plane-endpoints-public-endpoint --control-plane-endpoints-public-endpoint-allowed-cidrs --control-plane-etcd-cluster-size --control-plane-karpenter --control-plane-version --id --labels --labels-add --labels-remove --name --parent-id --resource-version --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--control-plane-audit-logs` (bool)

Specify configuration of the pushing k8s audit logs into service logs and show it in the UI.
By default cluster will be created without it.

`--control-plane-endpoints-public-endpoint` (bool)

Public endpoint specification. When set, a public endpoint is created.

`--control-plane-endpoints-public-endpoint-allowed-cidrs` (string array)

List of CIDR blocks from which access to public endpoint is allowed.
If field is not set, or list is empty, it means that access is not restricted at all.

`--control-plane-etcd-cluster-size` (int64)

Number of instances in etcd cluster.
3 by default.
Control plane with `etcd_cluster_size: 3` called "Highly Available" ("HA"), because it's Kubernetes API
will be available despite a failure of one control plane instance.

`--control-plane-karpenter` (bool)

Enables installation of the Karpenter inside a cluster.
Karpenter will be installed as a helm chart inside cluster
so it requires creation of at least one CPU public node group.

Please note that there is no feature parity between Karpenter node pools and
public node groups.
By default cluster will be created without it.

`--control-plane-version` (string)

Desired Kubernetes version of the cluster. For now only acceptable format is
`.` like "1.31". Option for patch version update will be added later.

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // [required] // Metadata associated with the instance. // Includes ID of the instance to update. "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // Updated specifications for the instance. "control_plane": { // [required] "audit_logs": { // [meaningful_empty_value] // Specify configuration of the pushing k8s audit logs into service logs and show it in the UI. // By default cluster will be created without it. }, "endpoints": { // Specification of endpoints of cluster control plane. "public_endpoint": { // [meaningful_empty_value] // Public endpoint specification. When set, a public endpoint is created. "allowed_cidrs": [string] // List of CIDR blocks from which access to public endpoint is allowed. // If field is not set, or list is empty, it means that access is not restricted at all. } }, "etcd_cluster_size": int64, // Number of instances in etcd cluster. // 3 by default. // Control plane with `etcd_cluster_size: 3` called "Highly Available" ("HA"), because it's Kubernetes API // will be available despite a failure of one control plane instance. "karpenter": { // [meaningful_empty_value] // Enables installation of the Karpenter inside a cluster. // Karpenter will be installed as a helm chart inside cluster // so it requires creation of at least one CPU public node group. // // Please note that there is no feature parity between Karpenter node pools and // public node groups. // By default cluster will be created without it. }, "version": string // Desired Kubernetes version of the cluster. For now only acceptable format is // `.` like "1.31". Option for patch version update will be added later. }, "kube_network": { // Defines kubernetes network configuration, like IP allocation. } } } ``` ```json theme={null} nebius mk8s cluster update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "control_plane": { "audit_logs": { }, "endpoints": { "public_endpoint": { "allowed_cidrs": [""] } }, "etcd_cluster_size": 0, "karpenter": { }, "version": "" }, "kube_network": { } } } ' ``` *Auto generated on 15-Jul-2026* # nebius mk8s Source: https://docs.nebius.com/cli/reference/mk8s/index

Name

nebius mk8s

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mk8s node-group create Source: https://docs.nebius.com/cli/reference/mk8s/node-group/create

Name

nebius mk8s node-group create

Synopsis

``` nebius mk8s node-group create --auto-repair-conditions --autoscaling-max-node-count --autoscaling-min-node-count --fixed-node-count --labels --name --parent-id [required] --resource-version --strategy-drain-timeout --strategy-max-surge-count --strategy-max-surge-percent --strategy-max-unavailable-count --strategy-max-unavailable-percent --template-boot-disk-block-size-bytes --template-boot-disk-size-bytes --template-boot-disk-size-gibibytes --template-boot-disk-size-kibibytes --template-boot-disk-size-mebibytes --template-boot-disk-type --template-cloud-init-user-data --template-filesystems --template-gpu-cluster-id --template-gpu-settings-drivers-preset --template-local-disks-config-kubelet-ephemeral --template-local-disks-config-none --template-local-disks-passthrough-group-requested --template-max-pods --template-metadata-labels --template-network-interfaces --template-nvlink-nvl-instance-group-id --template-os --template-preemptible --template-reservation-policy-policy --template-reservation-policy-reservation-ids --template-resources-platform [required] --template-resources-preset [required] --template-service-account-id --template-taints --version --async -i, --interactive ```

Options

`--auto-repair-conditions` (json)

Conditions that determine whether a node should be auto repaired.

(structure)

disabled -> (bool)

When true, disables the default auto-repair condition rules.

Mutually exclusive with: timeout.

status -> (string)

Node condition status.

A value must be one of:

  • "condition\_status\_unspecified"
  • "true"
  • "false"
  • "unknown"

timeout -> (duration)\[google.protobuf.Duration]

The duration after which the node is automatically repaired if the condition remains in the specified status.

Mutually exclusive with: disabled.

type -> (string)\[required]

Node condition type.

JSON Schema:

```json theme={null} [{ "disabled": false, "status": "condition_status_unspecified"|"true"|"false"|"unknown", "type": "" }] ```

`--autoscaling-max-node-count` (int64)

Mutually exclusive with: `--fixed-node-count`.

`--autoscaling-min-node-count` (int64)

Mutually exclusive with: `--fixed-node-count`.

`--fixed-node-count` (int64)

Number of nodes in the group. Can be changed manually at any time.

Mutually exclusive with: `--autoscaling-max-node-count`, `--autoscaling-min-node-count`.

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--strategy-drain-timeout` (duration: 2h30m10s)

Maximum amount of time that the service will spend attempting to gracefully drain a node
(evicting its pods) before falling back to pod deletion.
A value of 0 means no timeout: the node can be drained for an unlimited time.
Important consequence of that is if PodDisruptionBudget doesn't allow evicting a pod,
then NodeGroup update with node re-creation will hang on that pod eviction.
Note that this is different from `kubectl drain --timeout`, which gives up and returns an error.

On 2026-08-01, defaults to 0.
IMPORTANT: starting from Q3 2026 new default is 10m;
for new clusters it will default to 10m,
node groups in existing clusters will be gradually migrated during Q3 to the default of 10m as well.
To get the actual value for your node group, please see 'strategy' in its status.

`--strategy-max-surge-count` (int64)

Mutually exclusive with: `--strategy-max-surge-percent`.

`--strategy-max-surge-percent` (int64)

Mutually exclusive with: `--strategy-max-surge-count`.

`--strategy-max-unavailable-count` (int64)

Mutually exclusive with: `--strategy-max-unavailable-percent`.

`--strategy-max-unavailable-percent` (int64)

Mutually exclusive with: `--strategy-max-unavailable-count`.

`--template-boot-disk-block-size-bytes` (int64)

`--template-boot-disk-size-bytes` (int64)

Mutually exclusive with: `--template-boot-disk-size-gibibytes`, `--template-boot-disk-size-kibibytes`, `--template-boot-disk-size-mebibytes`.

`--template-boot-disk-size-gibibytes` (int64)

Mutually exclusive with: `--template-boot-disk-size-bytes`, `--template-boot-disk-size-kibibytes`, `--template-boot-disk-size-mebibytes`.

`--template-boot-disk-size-kibibytes` (int64)

Mutually exclusive with: `--template-boot-disk-size-bytes`, `--template-boot-disk-size-gibibytes`, `--template-boot-disk-size-mebibytes`.

`--template-boot-disk-size-mebibytes` (int64)

Mutually exclusive with: `--template-boot-disk-size-bytes`, `--template-boot-disk-size-gibibytes`, `--template-boot-disk-size-kibibytes`.

`--template-boot-disk-type` (string)

A value must be one of:

  • unspecified
  • network\_ssd
  • network\_hdd
  • network\_ssd\_io\_m3
  • network\_ssd\_non\_replicated

`--template-cloud-init-user-data` (string)

Cloud-init user-data
Should contain at least one SSH key.

`--template-filesystems` (json)

Static attachments of Compute Filesystem.
Can be used as a workaround, until CSI for Compute Disk and Filesystem will be available.

(structure)

attach\_mode -> (string)\[required]

A value must be one of:

  • "unspecified"
  • "read\_only"
  • "read\_write"

existing\_filesystem -> (structure)

id -> (string)\[required]

mount\_tag -> (string)\[required]

Specifies the user-defined identifier, allowing to use it as a device in mount command.

JSON Schema:

```json theme={null} [{ "attach_mode": "unspecified"|"read_only"|"read_write", "existing_filesystem": { "id": "" }, "mount_tag": "" }] ```

`--template-gpu-cluster-id` (string)

`--template-gpu-settings-drivers-preset` (string)

Identifier of the predefined set of drivers included in the ComputeImage deployed on ComputeInstances that are part of the NodeGroup.
Supported presets for different platform / Kubernetes version combinations:
* `gpu-l40s-a`, `gpu-l40s-d`, `gpu-h100-sxm`, `gpu-h200-sxm`:
* `version`: 1.30 → `"cuda12"` (CUDA 12.4)
* `version`: 1.31 → `"cuda12"` (CUDA 12.4), `"cuda12.4"`, `"cuda12.8"`
* `gpu-b200-sxm`:
* `version`: 1.31 → `"cuda12"` (CUDA 12.8), `"cuda12.8"`
* `gpu-b200-sxm-a`:
* `version`: 1.31 → `"cuda12.8"`.

`--template-local-disks-config-kubelet-ephemeral` (bool)

Kubelet\_ephemeral: combine all local disks into a single storage volume and use it as kubelet's local ephemeral storage on the node
See also [https://kubernetes.io/docs/concepts/storage/ephemeral-storage/](https://kubernetes.io/docs/concepts/storage/ephemeral-storage/)

The default when LocalDisksSpecConfig is not set.

Mutually exclusive with: `--template-local-disks-config-none`.

`--template-local-disks-config-none` (bool)

None: "do nothing" - local disks will be provisioned as on a regular compute instance.

Mutually exclusive with: `--template-local-disks-config-kubelet-ephemeral`.

`--template-local-disks-passthrough-group-requested` (bool)

Passthrough local disks from the underlying host.

Devices are expected to appear in the guest as NVMe devices (nvme0, nvme1, ...),
but the exact number depends on the preset.
Enabled only when this field is explicitly set.

`--template-max-pods` (int64)

The maximum number of Pods per node for your cluster. If omitted, MK8S assigns the default value of 110. When you
configure the maximum number of Pods per node for the cluster, MK8S uses this value to allocate a CIDR range for every node
in group. The node CIDR prefix is calculated as `32 - ceil(log2(2 * max_pods))`, i.e. the smallest IPv4 subnet whose total address
count is at least `2 * max_pods`. Not all IPs are usable for workload Pods because some of them are consumed by system Pods.

`--template-metadata-labels` (string->string)

Kubernetes Node labels.

Keys and values must follow Kubernetes label syntax:
[https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/](https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/)

For now change will not be propagated to existing nodes, so will be applied only to Kubernetes Nodes created after the field change.
That behavior may change later.
So, for now you will need to manually set them to existing nodes, if that is needed.

System labels containing "kubernetes.io" and "k8s.io" will be ignored.
Field change will NOT trigger NodeGroup roll out.

`--template-network-interfaces` (json)

(structure)

public\_ip\_address -> (structure)\[meaningful\_empty\_value]

Parameters for Public IPv4 address associated with the interface.
Set to empty value, to enable it.

security\_groups -> (structure)

User provided VPC Security Groups which will be assigned to all nodes of this NodeGroup.

id -> (string)

subnet\_id -> (string)\[non\_empty\_default]

Nebius VPC Subnet ID that will be attached to a node cloud instance network interface.
By default Cluster control plane subnet\_id used.
Subnet should be located in the same network with control plane.

JSON Schema:

```json theme={null} [{ "public_ip_address": { }, "security_groups": [{ "id": "" }], "subnet_id": "" }] ```

`--template-nvlink-nvl-instance-group-id` (string)

Existing NVLInstanceGroup ID to use.

`--template-os` (string)

OS version that will be used to create the boot disk of Compute Instances in the NodeGroup.
Supported platform / Kubernetes version / OS / driver presets combinations
* `gpu-l40s-a`, `gpu-l40s-d`, `gpu-h100-sxm`, `gpu-h200-sxm`, `cpu-e1`, `cpu-e2`, `cpu-d3`:
* `drivers_preset`: `""`
* `version`: 1.30 → `"ubuntu22.04"`
* `version`: 1.31 → `"ubuntu22.04"` (default), `"ubuntu24.04"`
* `gpu-l40s-a`, `gpu-l40s-d`, `gpu-h100-sxm`, `gpu-h200-sxm`:
* `drivers_preset`: `"cuda12"` (CUDA 12.4)
* `version`: 1.30, 1.31 → `"ubuntu22.04"`
* `drivers_preset`: `"cuda12.4"`
* `version`: 1.31 → `"ubuntu22.04"`
* `drivers_preset`: `"cuda12.8"`
* `version`: 1.31 → `"ubuntu24.04"`
* `gpu-b200-sxm`:
* `drivers_preset`: `""`
* `version`: 1.30, 1.31 → `"ubuntu24.04"`
* `drivers_preset`: `"cuda12"` (CUDA 12.8)
* `version`: 1.30, 1.31 → `"ubuntu24.04"`
* `drivers_preset`: `"cuda12.8"`
* `version`: 1.31 → `"ubuntu24.04"`
* `gpu-b200-sxm-a`:
* `drivers_preset`: `""`
* `version`: 1.31 → `"ubuntu24.04"`
* `drivers_preset`: `"cuda12.8"`
* `version`: 1.31 → `"ubuntu24.04"`.

`--template-preemptible` (bool)

Configures whether the nodes in the group are preemptible.
Set to empty value to enable preemptible nodes.

`--template-reservation-policy-policy` (string)

A value must be one of:

  • auto
  • forbid
  • strict

`--template-reservation-policy-reservation-ids` (string array)

Capacity block groups, order matters.

`--template-resources-platform` (string) \[required]

`--template-resources-preset` (string) \[required]

`--template-service-account-id` (string)

The Nebius service account whose credentials will be available on the nodes of the group.
With these credentials, it is possible to make `nebius` CLI or public API requests from the nodes
without the need for extra authentication.
This service account is also used to make requests to container registry.

`resource.serviceaccount.issueAccessToken` permission is required to use this field.

`--template-taints` (json)

Kubernetes Node taints.
For now change will not be propagated to existing nodes, so will be applied only to Kubernetes Nodes created after the field change.
That behaviour may change later.
So, for now you will need to manually set them to existing nodes, if that is needed.
Field change will NOT trigger NodeGroup roll out.

(structure)

effect -> (string)\[required]

A value must be one of:

  • "effect\_unspecified"
  • "no\_execute"
  • "no\_schedule"
  • "prefer\_no\_schedule"

key -> (string)\[required]

value -> (string)\[required]

JSON Schema:

```json theme={null} [{ "effect": "effect_unspecified"|"no_execute"|"no_schedule"|"prefer_no_schedule", "key": "", "value": "" }] ```

`--version` (string)

Version is desired Kubernetes version of the cluster. For now only acceptable format is
`.` like "1.31". Option for patch version update will be added later.
By default the cluster control plane `.` version will be used.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // [required] "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // [required] "auto_repair": { // Parameters for nodes auto repair. "conditions": [{ // Conditions that determine whether a node should be auto repaired. "disabled": bool, // Cannot be set together with: timeout // When true, disables the default auto-repair condition rules. "status": enum( // Node condition status. "CONDITION_STATUS_UNSPECIFIED", "TRUE", "FALSE", "UNKNOWN" ), "timeout": "2h30m10s", // [google.protobuf.Duration] // Cannot be set together with: disabled // The duration after which the node is automatically repaired if the condition remains in the specified status. "type": string // [required] // Node condition type. }] }, "autoscaling": { // Cannot be set together with: fixed_node_count // Enables [Kubernetes Cluster Autoscaler](https://github.com/kubernetes/autoscaler/tree/master/cluster-autoscaler) // for that NodeGroup, and defines autoscaling parameters. "max_node_count": int64, "min_node_count": int64 }, "fixed_node_count": int64, // Cannot be set together with: autoscaling // Number of nodes in the group. Can be changed manually at any time. "strategy": { // Defines deployment - roll-out, or nodes re-creation during configuration change. // Allows to setup compromise in roll-out speed, extra resources consumption and workloads disruption. "drain_timeout": "2h30m10s", // [google.protobuf.Duration] // Maximum amount of time that the service will spend attempting to gracefully drain a node // (evicting its pods) before falling back to pod deletion. // A value of 0 means no timeout: the node can be drained for an unlimited time. // Important consequence of that is if PodDisruptionBudget doesn't allow evicting a pod, // then NodeGroup update with node re-creation will hang on that pod eviction. // Note that this is different from `kubectl drain --timeout`, which gives up and returns an error. // // On 2026-08-01, defaults to 0. // IMPORTANT: starting from Q3 2026 new default is 10m; // for new clusters it will default to 10m, // node groups in existing clusters will be gradually migrated during Q3 to the default of 10m as well. // To get the actual value for your node group, please see 'strategy' in its status. "max_surge": { // The maximum number of additional nodes that can be provisioned above the desired number of nodes during the update process. // // This value can be specified either as an absolute number (for example 3) or as a percentage of the desired // number of nodes (for example 5%). // // When specified as a percentage, the actual number is calculated by rounding up to the nearest whole number. // This value cannot be 0 if `max_unavailable` is also set to 0. // // On 2026-08-01, defaults to 1. // IMPORTANT: starting from Q3 2026 new default is 0; // for new clusters it will default to 0, // node groups in existing clusters will be gradually migrated during Q3 to the default of 0 as well. // To get the actual value for your node group, please see 'strategy' in its status. // // Example: If set to 25%, the node group can scale up by an additional 25% during the update, // allowing new nodes to be added before old nodes are removed, which helps minimize workload disruption. // // NOTE: // // it is user responsibility to ensure that there are enough quota for provision nodes above the desired number. // Available quota effectively limits `max_surge`. // In case of not enough quota even for one extra node, update operation will hung because of quota exhausted error. // Such error will be visible in Operation.progress_data. "count": int64, // Cannot be set together with: percent "percent": int64 // Cannot be set together with: count }, "max_unavailable": { // The maximum number of nodes that can be simultaneously unavailable during the update process. // // This value can be specified either as an absolute number (for example 3) or as a percentage of the desired // number of nodes (for example 5%). // // When specified as a percentage, the actual number is calculated by rounding down to the nearest whole number. // This value cannot be 0 if `max_surge` is also set to 0. // // On 2026-08-01, defaults to 0. // IMPORTANT: starting from Q3 2026 new default is 1; // for new clusters it will default to 1, // node groups in existing clusters will be gradually migrated during Q3 to the default of 1 as well. // To get the actual value for your node group, please see 'strategy' in its status. // // Example: If set to 20%, up to 20% of the nodes can be taken offline at once during the update, // ensuring that at least 80% of the desired nodes remain operational. "count": int64, // Cannot be set together with: percent "percent": int64 // Cannot be set together with: count } }, "template": { // [required] // Parameters for Kubernetes Node object and Nebius Compute Instance // If not written opposite a NodeTemplate field update will cause NodeGroup roll-out according NodeGroupDeploymentStrategy. "boot_disk": { // [non_empty_default] // Parameters of a Node Nebius Compute Instance boot disk. "block_size_bytes": int64, "size_bytes": int64, // Cannot be set together with: size_kibibytes, size_mebibytes, size_gibibytes "size_gibibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_mebibytes "size_kibibytes": int64, // Cannot be set together with: size_bytes, size_mebibytes, size_gibibytes "size_mebibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_gibibytes "type": enum( // [non_empty_default] "UNSPECIFIED", "NETWORK_SSD", "NETWORK_HDD", "NETWORK_SSD_IO_M3", "NETWORK_SSD_NON_REPLICATED" ) }, "cloud_init_user_data": string, // [sensitive] // Cloud-init user-data // Should contain at least one SSH key. "filesystems": [{ // Static attachments of Compute Filesystem. // Can be used as a workaround, until CSI for Compute Disk and Filesystem will be available. "attach_mode": enum( // [required] "UNSPECIFIED", "READ_ONLY", "READ_WRITE" ), "existing_filesystem": { "id": string // [required] }, "mount_tag": string // [required] // Specifies the user-defined identifier, allowing to use it as a device in mount command. }], "gpu_cluster": { // Nebius Compute GPUCluster ID that will be attached to node. "id": string }, "gpu_settings": { // GPU-related settings. "drivers_preset": string // [required] // Identifier of the predefined set of drivers included in the ComputeImage deployed on ComputeInstances that are part of the NodeGroup. // Supported presets for different platform / Kubernetes version combinations: // * `gpu-l40s-a`, `gpu-l40s-d`, `gpu-h100-sxm`, `gpu-h200-sxm`: // * `version`: 1.30 → `"cuda12"` (CUDA 12.4) // * `version`: 1.31 → `"cuda12"` (CUDA 12.4), `"cuda12.4"`, `"cuda12.8"` // * `gpu-b200-sxm`: // * `version`: 1.31 → `"cuda12"` (CUDA 12.8), `"cuda12.8"` // * `gpu-b200-sxm-a`: // * `version`: 1.31 → `"cuda12.8"`. }, "local_disks": { // Local_disks enables the provisioning of fast local drives. // This type of storage is strictly ephemeral: on node restart, all data is erased, similar to RAM. "config": { // [non_empty_default] // Config defines actions that managed Kubernetes service performs on mounted local disks // to provide them inside Kubernetes cluster with a convenient interface. // // When omitted, a default value is generated. "kubelet_ephemeral": bool, // Cannot be set together with: none // Kubelet_ephemeral: combine all local disks into a single storage volume and use it as kubelet's local ephemeral storage on the node // See also https://kubernetes.io/docs/concepts/storage/ephemeral-storage/ // // The default when LocalDisksSpecConfig is not set. "none": bool // Cannot be set together with: kubelet_ephemeral // None: "do nothing" - local disks will be provisioned as on a regular compute instance. }, "passthrough_group": { // Requests passthrough local disks from the host. // Topology of the provided disks is preserved during stop and start // for every instance of a specific platform and preset in the region. "requested": bool // Passthrough local disks from the underlying host. // // Devices are expected to appear in the guest as NVMe devices (nvme0, nvme1, ...), // but the exact number depends on the preset. // Enabled only when this field is explicitly set. } }, "max_pods": int64, // The maximum number of Pods per node for your cluster. If omitted, MK8S assigns the default value of 110. When you // configure the maximum number of Pods per node for the cluster, MK8S uses this value to allocate a CIDR range for every node // in group. The node CIDR prefix is calculated as `32 - ceil(log2(2 * max_pods))`, i.e. the smallest IPv4 subnet whose total address // count is at least `2 * max_pods`. Not all IPs are usable for workload Pods because some of them are consumed by system Pods. "metadata": { "labels": { // [map] // Kubernetes Node labels. // // Keys and values must follow Kubernetes label syntax: // https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ // // For now change will not be propagated to existing nodes, so will be applied only to Kubernetes Nodes created after the field change. // That behavior may change later. // So, for now you will need to manually set them to existing nodes, if that is needed. // // System labels containing "kubernetes.io" and "k8s.io" will be ignored. // Field change will NOT trigger NodeGroup roll out. string: string } }, "network_interfaces": [{ // [non_empty_default] "public_ip_address": { // [meaningful_empty_value] // Parameters for Public IPv4 address associated with the interface. // Set to empty value, to enable it. }, "security_groups": [{ // User provided VPC Security Groups which will be assigned to all nodes of this NodeGroup. "id": string }], "subnet_id": string // [non_empty_default] // Nebius VPC Subnet ID that will be attached to a node cloud instance network interface. // By default Cluster control plane subnet_id used. // Subnet should be located in the same network with control plane. }], "nvlink": { // NVLinkSpec configures NVLink settings for the NodeGroup. "nvl_instance_group_id": string // [immutable] // Existing NVLInstanceGroup ID to use. }, "os": string, // OS version that will be used to create the boot disk of Compute Instances in the NodeGroup. // Supported platform / Kubernetes version / OS / driver presets combinations // * `gpu-l40s-a`, `gpu-l40s-d`, `gpu-h100-sxm`, `gpu-h200-sxm`, `cpu-e1`, `cpu-e2`, `cpu-d3`: // * `drivers_preset`: `""` // * `version`: 1.30 → `"ubuntu22.04"` // * `version`: 1.31 → `"ubuntu22.04"` (default), `"ubuntu24.04"` // * `gpu-l40s-a`, `gpu-l40s-d`, `gpu-h100-sxm`, `gpu-h200-sxm`: // * `drivers_preset`: `"cuda12"` (CUDA 12.4) // * `version`: 1.30, 1.31 → `"ubuntu22.04"` // * `drivers_preset`: `"cuda12.4"` // * `version`: 1.31 → `"ubuntu22.04"` // * `drivers_preset`: `"cuda12.8"` // * `version`: 1.31 → `"ubuntu24.04"` // * `gpu-b200-sxm`: // * `drivers_preset`: `""` // * `version`: 1.30, 1.31 → `"ubuntu24.04"` // * `drivers_preset`: `"cuda12"` (CUDA 12.8) // * `version`: 1.30, 1.31 → `"ubuntu24.04"` // * `drivers_preset`: `"cuda12.8"` // * `version`: 1.31 → `"ubuntu24.04"` // * `gpu-b200-sxm-a`: // * `drivers_preset`: `""` // * `version`: 1.31 → `"ubuntu24.04"` // * `drivers_preset`: `"cuda12.8"` // * `version`: 1.31 → `"ubuntu24.04"`. "preemptible": { // [meaningful_empty_value] // Configures whether the nodes in the group are preemptible. // Set to empty value to enable preemptible nodes. }, "reservation_policy": { // Reservation_policy is an interface of the "capacity block" (or "capacity block group") mechanism of Nebius Compute. "policy": enum( "AUTO", // 1) Will try to launch instance in any reservation_ids if provided. // 2) Will try to launch instance in any of the available capacity block. // 3) Will try to launch instance in PAYG if 1 & 2 are not satisfied. "FORBID", // The instance is launched only using on-demand (PAYG) capacity. // No attempt is made to find or use a Capacity Block. // It's an error to provide reservation_ids with policy = FORBID. "STRICT" // 1) Will try to launch the instance in Capacity Blocks from reservation_ids if provided. // 2) If reservation_ids are not provided will try to launch instance in suitable & available Capacity Block. // 3) Fail otherwise. ), "reservation_ids": [string] // Capacity block groups, order matters. }, "resources": { // [required] // Resources that will have Nebius Compute Instance where Node kubelet will run. "platform": string, // [required] "preset": string }, "service_account_id": string, // The Nebius service account whose credentials will be available on the nodes of the group. // With these credentials, it is possible to make `nebius` CLI or public API requests from the nodes // without the need for extra authentication. // This service account is also used to make requests to container registry. // // `resource.serviceaccount.issueAccessToken` permission is required to use this field. "taints": [{ // Kubernetes Node taints. // For now change will not be propagated to existing nodes, so will be applied only to Kubernetes Nodes created after the field change. // That behaviour may change later. // So, for now you will need to manually set them to existing nodes, if that is needed. // Field change will NOT trigger NodeGroup roll out. "effect": enum( // [required] "EFFECT_UNSPECIFIED", "NO_EXECUTE", "NO_SCHEDULE", "PREFER_NO_SCHEDULE" ), "key": string, // [required] "value": string // [required] }] }, "version": string // Version is desired Kubernetes version of the cluster. For now only acceptable format is // `.` like "1.31". Option for patch version update will be added later. // By default the cluster control plane `.` version will be used. } } ``` ```json theme={null} nebius mk8s node-group create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "auto_repair": { "conditions": [{ "disabled": false, "status": "condition_status_unspecified"|"true"|"false"|"unknown", "type": "" }] }, "autoscaling": { "max_node_count": 0, "min_node_count": 0 }, "strategy": { "drain_timeout": "2h30m10s", "max_surge": { "count": 0 }, "max_unavailable": { "count": 0 } }, "template": { "boot_disk": { "block_size_bytes": 0, "size_bytes": 0, "type": "unspecified"|"network_ssd"|"network_hdd"|"network_ssd_io_m3"|"network_ssd_non_replicated" }, "cloud_init_user_data": "", "filesystems": [{ "attach_mode": "unspecified"|"read_only"|"read_write", "existing_filesystem": { "id": "" }, "mount_tag": "" }], "gpu_cluster": { "id": "" }, "gpu_settings": { "drivers_preset": "" }, "local_disks": { "config": { "kubelet_ephemeral": false }, "passthrough_group": { "requested": false } }, "max_pods": 0, "metadata": { "labels": { "": "" } }, "network_interfaces": [{ "public_ip_address": { }, "security_groups": [{ "id": "" }], "subnet_id": "" }], "nvlink": { "nvl_instance_group_id": "" }, "os": "", "preemptible": { }, "reservation_policy": { "policy": "auto"|"forbid"|"strict", "reservation_ids": [""] }, "resources": { "platform": "", "preset": "" }, "service_account_id": "", "taints": [{ "effect": "effect_unspecified"|"no_execute"|"no_schedule"|"prefer_no_schedule", "key": "", "value": "" }] }, "version": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius mk8s node-group delete Source: https://docs.nebius.com/cli/reference/mk8s/node-group/delete

Name

nebius mk8s node-group delete

Synopsis

``` nebius mk8s node-group delete [id] --id [required] --async ```

Positional Arguments

id

ID of the resource to delete.

Options

`--id` (string) \[required]

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius mk8s node-group delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius mk8s node-group edit Source: https://docs.nebius.com/cli/reference/mk8s/node-group/edit

Name

nebius mk8s node-group edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius mk8s node-group edit [id] --async --editor --id --resource-version ```

Positional Arguments

id

ID of the resource to edit.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

`--resource-version` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mk8s node-group edit-by-name Source: https://docs.nebius.com/cli/reference/mk8s/node-group/edit-by-name

Name

nebius mk8s node-group edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

Synopsis

``` nebius mk8s node-group edit-by-name --async --editor --name --parent-id ```

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--name` (string)

`--parent-id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mk8s node-group get Source: https://docs.nebius.com/cli/reference/mk8s/node-group/get

Name

nebius mk8s node-group get

Synopsis

``` nebius mk8s node-group get [id] --id [required] --resource-version ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string) \[required]

`--resource-version` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string, // [required] "resource_version": string } ``` ```json theme={null} nebius mk8s node-group get ' { "id": "", "resource_version": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius mk8s node-group get-by-name Source: https://docs.nebius.com/cli/reference/mk8s/node-group/get-by-name

Name

nebius mk8s node-group get-by-name

Synopsis

``` nebius mk8s node-group get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

`--parent-id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // [required] } ``` ```json theme={null} nebius mk8s node-group get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius mk8s node-group get-compatibility-matrix Source: https://docs.nebius.com/cli/reference/mk8s/node-group/get-compatibility-matrix

Name

nebius mk8s node-group get-compatibility-matrix

Synopsis

``` nebius mk8s node-group get-compatibility-matrix --cluster-kubernetes-version [required] --platform ```

Options

`--cluster-kubernetes-version` (string) \[required]

Cluster kubernetes version.

`--platform` (string)

Hardware platform for which the capabilities are requested.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "cluster_kubernetes_version": string, // [required] // Cluster kubernetes version. "platform": string // Hardware platform for which the capabilities are requested. } ``` ```json theme={null} nebius mk8s node-group get-compatibility-matrix ' { "cluster_kubernetes_version": "", "platform": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius mk8s node-group Source: https://docs.nebius.com/cli/reference/mk8s/node-group/index

Name

nebius mk8s node-group

Commands

nebius mk8s node-group create

nebius mk8s node-group delete

nebius mk8s node-group edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius mk8s node-group edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

nebius mk8s node-group get

nebius mk8s node-group get-by-name

nebius mk8s node-group get-compatibility-matrix

nebius mk8s node-group list

nebius mk8s node-group operation

Manage operations for NodeGroup service.

nebius mk8s node-group update

nebius mk8s node-group upgrade

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mk8s node-group list Source: https://docs.nebius.com/cli/reference/mk8s/node-group/list

Name

nebius mk8s node-group list

Synopsis

``` nebius mk8s node-group list --page-size --page-token --parent-id [required] --all -i, --interactive ```

Options

`--page-size` (int64)

Specifies the maximum number of items to return in the response.

`--page-token` (string)

Token for pagination, allowing the retrieval of the next set of results.

`--parent-id` (string) \[required]

ID of the parent Cluster.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, // Specifies the maximum number of items to return in the response. "page_token": string, // Token for pagination, allowing the retrieval of the next set of results. "parent_id": string // [required] // ID of the parent Cluster. } ``` ```json theme={null} nebius mk8s node-group list ' { "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius mk8s node-group operation get Source: https://docs.nebius.com/cli/reference/mk8s/node-group/operation/get

Name

nebius mk8s node-group operation get

Get operation by ID.

Synopsis

``` nebius mk8s node-group operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mk8s node-group operation Source: https://docs.nebius.com/cli/reference/mk8s/node-group/operation/index

Name

nebius mk8s node-group operation

Manage operations for NodeGroup service.

Commands

nebius mk8s node-group operation get

Get operation by ID.

nebius mk8s node-group operation list

List operations by resource ID.

nebius mk8s node-group operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mk8s node-group operation list Source: https://docs.nebius.com/cli/reference/mk8s/node-group/operation/list

Name

nebius mk8s node-group operation list

List operations by resource ID.

Synopsis

``` nebius mk8s node-group operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mk8s node-group operation wait Source: https://docs.nebius.com/cli/reference/mk8s/node-group/operation/wait

Name

nebius mk8s node-group operation wait

Wait for operation to complete.

Synopsis

``` nebius mk8s node-group operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mk8s node-group update Source: https://docs.nebius.com/cli/reference/mk8s/node-group/update

Name

nebius mk8s node-group update

Synopsis

``` nebius mk8s node-group update [id] --auto-repair-conditions --autoscaling-max-node-count --autoscaling-min-node-count --fixed-node-count --id --labels --labels-add --labels-remove --name --parent-id --resource-version --strategy-drain-timeout --strategy-max-surge-count --strategy-max-surge-percent --strategy-max-unavailable-count --strategy-max-unavailable-percent --template-boot-disk-block-size-bytes --template-boot-disk-size-bytes --template-boot-disk-size-gibibytes --template-boot-disk-size-kibibytes --template-boot-disk-size-mebibytes --template-boot-disk-type --template-cloud-init-user-data --template-filesystems --template-gpu-cluster-id --template-gpu-settings-drivers-preset --template-local-disks-config-kubelet-ephemeral --template-local-disks-config-none --template-local-disks-passthrough-group-requested --template-max-pods --template-metadata-labels --template-network-interfaces --template-os --template-preemptible --template-reservation-policy-policy --template-reservation-policy-reservation-ids --template-resources-platform --template-resources-preset --template-service-account-id --template-taints --version --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--auto-repair-conditions` (json)

Conditions that determine whether a node should be auto repaired.

(structure)

disabled -> (bool)

When true, disables the default auto-repair condition rules.

Mutually exclusive with: timeout.

status -> (string)

Node condition status.

A value must be one of:

  • "condition\_status\_unspecified"
  • "true"
  • "false"
  • "unknown"

timeout -> (duration)\[google.protobuf.Duration]

The duration after which the node is automatically repaired if the condition remains in the specified status.

Mutually exclusive with: disabled.

type -> (string)\[required]

Node condition type.

JSON Schema:

```json theme={null} [{ "disabled": false, "status": "condition_status_unspecified"|"true"|"false"|"unknown", "type": "" }] ```

`--autoscaling-max-node-count` (int64)

Mutually exclusive with: `--fixed-node-count`.

`--autoscaling-min-node-count` (int64)

Mutually exclusive with: `--fixed-node-count`.

`--fixed-node-count` (int64)

Number of nodes in the group. Can be changed manually at any time.

Mutually exclusive with: `--autoscaling-max-node-count`, `--autoscaling-min-node-count`.

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--strategy-drain-timeout` (duration: 2h30m10s)

Maximum amount of time that the service will spend attempting to gracefully drain a node
(evicting its pods) before falling back to pod deletion.
A value of 0 means no timeout: the node can be drained for an unlimited time.
Important consequence of that is if PodDisruptionBudget doesn't allow evicting a pod,
then NodeGroup update with node re-creation will hang on that pod eviction.
Note that this is different from `kubectl drain --timeout`, which gives up and returns an error.

On 2026-08-01, defaults to 0.
IMPORTANT: starting from Q3 2026 new default is 10m;
for new clusters it will default to 10m,
node groups in existing clusters will be gradually migrated during Q3 to the default of 10m as well.
To get the actual value for your node group, please see 'strategy' in its status.

`--strategy-max-surge-count` (int64)

Mutually exclusive with: `--strategy-max-surge-percent`.

`--strategy-max-surge-percent` (int64)

Mutually exclusive with: `--strategy-max-surge-count`.

`--strategy-max-unavailable-count` (int64)

Mutually exclusive with: `--strategy-max-unavailable-percent`.

`--strategy-max-unavailable-percent` (int64)

Mutually exclusive with: `--strategy-max-unavailable-count`.

`--template-boot-disk-block-size-bytes` (int64)

`--template-boot-disk-size-bytes` (int64)

Mutually exclusive with: `--template-boot-disk-size-gibibytes`, `--template-boot-disk-size-kibibytes`, `--template-boot-disk-size-mebibytes`.

`--template-boot-disk-size-gibibytes` (int64)

Mutually exclusive with: `--template-boot-disk-size-bytes`, `--template-boot-disk-size-kibibytes`, `--template-boot-disk-size-mebibytes`.

`--template-boot-disk-size-kibibytes` (int64)

Mutually exclusive with: `--template-boot-disk-size-bytes`, `--template-boot-disk-size-gibibytes`, `--template-boot-disk-size-mebibytes`.

`--template-boot-disk-size-mebibytes` (int64)

Mutually exclusive with: `--template-boot-disk-size-bytes`, `--template-boot-disk-size-gibibytes`, `--template-boot-disk-size-kibibytes`.

`--template-boot-disk-type` (string)

A value must be one of:

  • unspecified
  • network\_ssd
  • network\_hdd
  • network\_ssd\_io\_m3
  • network\_ssd\_non\_replicated

`--template-cloud-init-user-data` (string)

Cloud-init user-data
Should contain at least one SSH key.

`--template-filesystems` (json)

Static attachments of Compute Filesystem.
Can be used as a workaround, until CSI for Compute Disk and Filesystem will be available.

(structure)

attach\_mode -> (string)\[required]

A value must be one of:

  • "unspecified"
  • "read\_only"
  • "read\_write"

existing\_filesystem -> (structure)

id -> (string)\[required]

mount\_tag -> (string)\[required]

Specifies the user-defined identifier, allowing to use it as a device in mount command.

JSON Schema:

```json theme={null} [{ "attach_mode": "unspecified"|"read_only"|"read_write", "existing_filesystem": { "id": "" }, "mount_tag": "" }] ```

`--template-gpu-cluster-id` (string)

`--template-gpu-settings-drivers-preset` (string)

Identifier of the predefined set of drivers included in the ComputeImage deployed on ComputeInstances that are part of the NodeGroup.
Supported presets for different platform / Kubernetes version combinations:
* `gpu-l40s-a`, `gpu-l40s-d`, `gpu-h100-sxm`, `gpu-h200-sxm`:
* `version`: 1.30 → `"cuda12"` (CUDA 12.4)
* `version`: 1.31 → `"cuda12"` (CUDA 12.4), `"cuda12.4"`, `"cuda12.8"`
* `gpu-b200-sxm`:
* `version`: 1.31 → `"cuda12"` (CUDA 12.8), `"cuda12.8"`
* `gpu-b200-sxm-a`:
* `version`: 1.31 → `"cuda12.8"`.

`--template-local-disks-config-kubelet-ephemeral` (bool)

Kubelet\_ephemeral: combine all local disks into a single storage volume and use it as kubelet's local ephemeral storage on the node
See also [https://kubernetes.io/docs/concepts/storage/ephemeral-storage/](https://kubernetes.io/docs/concepts/storage/ephemeral-storage/)

The default when LocalDisksSpecConfig is not set.

Mutually exclusive with: `--template-local-disks-config-none`.

`--template-local-disks-config-none` (bool)

None: "do nothing" - local disks will be provisioned as on a regular compute instance.

Mutually exclusive with: `--template-local-disks-config-kubelet-ephemeral`.

`--template-local-disks-passthrough-group-requested` (bool)

Passthrough local disks from the underlying host.

Devices are expected to appear in the guest as NVMe devices (nvme0, nvme1, ...),
but the exact number depends on the preset.
Enabled only when this field is explicitly set.

`--template-max-pods` (int64)

The maximum number of Pods per node for your cluster. If omitted, MK8S assigns the default value of 110. When you
configure the maximum number of Pods per node for the cluster, MK8S uses this value to allocate a CIDR range for every node
in group. The node CIDR prefix is calculated as `32 - ceil(log2(2 * max_pods))`, i.e. the smallest IPv4 subnet whose total address
count is at least `2 * max_pods`. Not all IPs are usable for workload Pods because some of them are consumed by system Pods.

`--template-metadata-labels` (string->string)

Kubernetes Node labels.

Keys and values must follow Kubernetes label syntax:
[https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/](https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/)

For now change will not be propagated to existing nodes, so will be applied only to Kubernetes Nodes created after the field change.
That behavior may change later.
So, for now you will need to manually set them to existing nodes, if that is needed.

System labels containing "kubernetes.io" and "k8s.io" will be ignored.
Field change will NOT trigger NodeGroup roll out.

`--template-network-interfaces` (json)

(structure)

public\_ip\_address -> (structure)\[meaningful\_empty\_value]

Parameters for Public IPv4 address associated with the interface.
Set to empty value, to enable it.

security\_groups -> (structure)

User provided VPC Security Groups which will be assigned to all nodes of this NodeGroup.

id -> (string)

subnet\_id -> (string)\[non\_empty\_default]

Nebius VPC Subnet ID that will be attached to a node cloud instance network interface.
By default Cluster control plane subnet\_id used.
Subnet should be located in the same network with control plane.

JSON Schema:

```json theme={null} [{ "public_ip_address": { }, "security_groups": [{ "id": "" }], "subnet_id": "" }] ```

`--template-os` (string)

OS version that will be used to create the boot disk of Compute Instances in the NodeGroup.
Supported platform / Kubernetes version / OS / driver presets combinations
* `gpu-l40s-a`, `gpu-l40s-d`, `gpu-h100-sxm`, `gpu-h200-sxm`, `cpu-e1`, `cpu-e2`, `cpu-d3`:
* `drivers_preset`: `""`
* `version`: 1.30 → `"ubuntu22.04"`
* `version`: 1.31 → `"ubuntu22.04"` (default), `"ubuntu24.04"`
* `gpu-l40s-a`, `gpu-l40s-d`, `gpu-h100-sxm`, `gpu-h200-sxm`:
* `drivers_preset`: `"cuda12"` (CUDA 12.4)
* `version`: 1.30, 1.31 → `"ubuntu22.04"`
* `drivers_preset`: `"cuda12.4"`
* `version`: 1.31 → `"ubuntu22.04"`
* `drivers_preset`: `"cuda12.8"`
* `version`: 1.31 → `"ubuntu24.04"`
* `gpu-b200-sxm`:
* `drivers_preset`: `""`
* `version`: 1.30, 1.31 → `"ubuntu24.04"`
* `drivers_preset`: `"cuda12"` (CUDA 12.8)
* `version`: 1.30, 1.31 → `"ubuntu24.04"`
* `drivers_preset`: `"cuda12.8"`
* `version`: 1.31 → `"ubuntu24.04"`
* `gpu-b200-sxm-a`:
* `drivers_preset`: `""`
* `version`: 1.31 → `"ubuntu24.04"`
* `drivers_preset`: `"cuda12.8"`
* `version`: 1.31 → `"ubuntu24.04"`.

`--template-preemptible` (bool)

Configures whether the nodes in the group are preemptible.
Set to empty value to enable preemptible nodes.

`--template-reservation-policy-policy` (string)

A value must be one of:

  • auto
  • forbid
  • strict

`--template-reservation-policy-reservation-ids` (string array)

Capacity block groups, order matters.

`--template-resources-platform` (string)

`--template-resources-preset` (string)

`--template-service-account-id` (string)

The Nebius service account whose credentials will be available on the nodes of the group.
With these credentials, it is possible to make `nebius` CLI or public API requests from the nodes
without the need for extra authentication.
This service account is also used to make requests to container registry.

`resource.serviceaccount.issueAccessToken` permission is required to use this field.

`--template-taints` (json)

Kubernetes Node taints.
For now change will not be propagated to existing nodes, so will be applied only to Kubernetes Nodes created after the field change.
That behaviour may change later.
So, for now you will need to manually set them to existing nodes, if that is needed.
Field change will NOT trigger NodeGroup roll out.

(structure)

effect -> (string)\[required]

A value must be one of:

  • "effect\_unspecified"
  • "no\_execute"
  • "no\_schedule"
  • "prefer\_no\_schedule"

key -> (string)\[required]

value -> (string)\[required]

JSON Schema:

```json theme={null} [{ "effect": "effect_unspecified"|"no_execute"|"no_schedule"|"prefer_no_schedule", "key": "", "value": "" }] ```

`--version` (string)

Version is desired Kubernetes version of the cluster. For now only acceptable format is
`.` like "1.31". Option for patch version update will be added later.
By default the cluster control plane `.` version will be used.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // [required] "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "auto_repair": { // Parameters for nodes auto repair. "conditions": [{ // Conditions that determine whether a node should be auto repaired. "disabled": bool, // Cannot be set together with: timeout // When true, disables the default auto-repair condition rules. "status": enum( // Node condition status. "CONDITION_STATUS_UNSPECIFIED", "TRUE", "FALSE", "UNKNOWN" ), "timeout": "2h30m10s", // [google.protobuf.Duration] // Cannot be set together with: disabled // The duration after which the node is automatically repaired if the condition remains in the specified status. "type": string // [required] // Node condition type. }] }, "autoscaling": { // Cannot be set together with: fixed_node_count // Enables [Kubernetes Cluster Autoscaler](https://github.com/kubernetes/autoscaler/tree/master/cluster-autoscaler) // for that NodeGroup, and defines autoscaling parameters. "max_node_count": int64, "min_node_count": int64 }, "fixed_node_count": int64, // Cannot be set together with: autoscaling // Number of nodes in the group. Can be changed manually at any time. "strategy": { // Defines deployment - roll-out, or nodes re-creation during configuration change. // Allows to setup compromise in roll-out speed, extra resources consumption and workloads disruption. "drain_timeout": "2h30m10s", // [google.protobuf.Duration] // Maximum amount of time that the service will spend attempting to gracefully drain a node // (evicting its pods) before falling back to pod deletion. // A value of 0 means no timeout: the node can be drained for an unlimited time. // Important consequence of that is if PodDisruptionBudget doesn't allow evicting a pod, // then NodeGroup update with node re-creation will hang on that pod eviction. // Note that this is different from `kubectl drain --timeout`, which gives up and returns an error. // // On 2026-08-01, defaults to 0. // IMPORTANT: starting from Q3 2026 new default is 10m; // for new clusters it will default to 10m, // node groups in existing clusters will be gradually migrated during Q3 to the default of 10m as well. // To get the actual value for your node group, please see 'strategy' in its status. "max_surge": { // The maximum number of additional nodes that can be provisioned above the desired number of nodes during the update process. // // This value can be specified either as an absolute number (for example 3) or as a percentage of the desired // number of nodes (for example 5%). // // When specified as a percentage, the actual number is calculated by rounding up to the nearest whole number. // This value cannot be 0 if `max_unavailable` is also set to 0. // // On 2026-08-01, defaults to 1. // IMPORTANT: starting from Q3 2026 new default is 0; // for new clusters it will default to 0, // node groups in existing clusters will be gradually migrated during Q3 to the default of 0 as well. // To get the actual value for your node group, please see 'strategy' in its status. // // Example: If set to 25%, the node group can scale up by an additional 25% during the update, // allowing new nodes to be added before old nodes are removed, which helps minimize workload disruption. // // NOTE: // // it is user responsibility to ensure that there are enough quota for provision nodes above the desired number. // Available quota effectively limits `max_surge`. // In case of not enough quota even for one extra node, update operation will hung because of quota exhausted error. // Such error will be visible in Operation.progress_data. "count": int64, // Cannot be set together with: percent "percent": int64 // Cannot be set together with: count }, "max_unavailable": { // The maximum number of nodes that can be simultaneously unavailable during the update process. // // This value can be specified either as an absolute number (for example 3) or as a percentage of the desired // number of nodes (for example 5%). // // When specified as a percentage, the actual number is calculated by rounding down to the nearest whole number. // This value cannot be 0 if `max_surge` is also set to 0. // // On 2026-08-01, defaults to 0. // IMPORTANT: starting from Q3 2026 new default is 1; // for new clusters it will default to 1, // node groups in existing clusters will be gradually migrated during Q3 to the default of 1 as well. // To get the actual value for your node group, please see 'strategy' in its status. // // Example: If set to 20%, up to 20% of the nodes can be taken offline at once during the update, // ensuring that at least 80% of the desired nodes remain operational. "count": int64, // Cannot be set together with: percent "percent": int64 // Cannot be set together with: count } }, "template": { // [required] // Parameters for Kubernetes Node object and Nebius Compute Instance // If not written opposite a NodeTemplate field update will cause NodeGroup roll-out according NodeGroupDeploymentStrategy. "boot_disk": { // [non_empty_default] // Parameters of a Node Nebius Compute Instance boot disk. "block_size_bytes": int64, "size_bytes": int64, // Cannot be set together with: size_kibibytes, size_mebibytes, size_gibibytes "size_gibibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_mebibytes "size_kibibytes": int64, // Cannot be set together with: size_bytes, size_mebibytes, size_gibibytes "size_mebibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_gibibytes "type": enum( // [non_empty_default] "UNSPECIFIED", "NETWORK_SSD", "NETWORK_HDD", "NETWORK_SSD_IO_M3", "NETWORK_SSD_NON_REPLICATED" ) }, "cloud_init_user_data": string, // [sensitive] // Cloud-init user-data // Should contain at least one SSH key. "filesystems": [{ // Static attachments of Compute Filesystem. // Can be used as a workaround, until CSI for Compute Disk and Filesystem will be available. "attach_mode": enum( // [required] "UNSPECIFIED", "READ_ONLY", "READ_WRITE" ), "existing_filesystem": { "id": string // [required] }, "mount_tag": string // [required] // Specifies the user-defined identifier, allowing to use it as a device in mount command. }], "gpu_cluster": { // Nebius Compute GPUCluster ID that will be attached to node. "id": string }, "gpu_settings": { // GPU-related settings. "drivers_preset": string // [required] // Identifier of the predefined set of drivers included in the ComputeImage deployed on ComputeInstances that are part of the NodeGroup. // Supported presets for different platform / Kubernetes version combinations: // * `gpu-l40s-a`, `gpu-l40s-d`, `gpu-h100-sxm`, `gpu-h200-sxm`: // * `version`: 1.30 → `"cuda12"` (CUDA 12.4) // * `version`: 1.31 → `"cuda12"` (CUDA 12.4), `"cuda12.4"`, `"cuda12.8"` // * `gpu-b200-sxm`: // * `version`: 1.31 → `"cuda12"` (CUDA 12.8), `"cuda12.8"` // * `gpu-b200-sxm-a`: // * `version`: 1.31 → `"cuda12.8"`. }, "local_disks": { // Local_disks enables the provisioning of fast local drives. // This type of storage is strictly ephemeral: on node restart, all data is erased, similar to RAM. "config": { // [non_empty_default] // Config defines actions that managed Kubernetes service performs on mounted local disks // to provide them inside Kubernetes cluster with a convenient interface. // // When omitted, a default value is generated. "kubelet_ephemeral": bool, // Cannot be set together with: none // Kubelet_ephemeral: combine all local disks into a single storage volume and use it as kubelet's local ephemeral storage on the node // See also https://kubernetes.io/docs/concepts/storage/ephemeral-storage/ // // The default when LocalDisksSpecConfig is not set. "none": bool // Cannot be set together with: kubelet_ephemeral // None: "do nothing" - local disks will be provisioned as on a regular compute instance. }, "passthrough_group": { // Requests passthrough local disks from the host. // Topology of the provided disks is preserved during stop and start // for every instance of a specific platform and preset in the region. "requested": bool // Passthrough local disks from the underlying host. // // Devices are expected to appear in the guest as NVMe devices (nvme0, nvme1, ...), // but the exact number depends on the preset. // Enabled only when this field is explicitly set. } }, "max_pods": int64, // The maximum number of Pods per node for your cluster. If omitted, MK8S assigns the default value of 110. When you // configure the maximum number of Pods per node for the cluster, MK8S uses this value to allocate a CIDR range for every node // in group. The node CIDR prefix is calculated as `32 - ceil(log2(2 * max_pods))`, i.e. the smallest IPv4 subnet whose total address // count is at least `2 * max_pods`. Not all IPs are usable for workload Pods because some of them are consumed by system Pods. "metadata": { "labels": { // [map] // Kubernetes Node labels. // // Keys and values must follow Kubernetes label syntax: // https://kubernetes.io/docs/concepts/overview/working-with-objects/labels/ // // For now change will not be propagated to existing nodes, so will be applied only to Kubernetes Nodes created after the field change. // That behavior may change later. // So, for now you will need to manually set them to existing nodes, if that is needed. // // System labels containing "kubernetes.io" and "k8s.io" will be ignored. // Field change will NOT trigger NodeGroup roll out. string: string } }, "network_interfaces": [{ // [non_empty_default] "public_ip_address": { // [meaningful_empty_value] // Parameters for Public IPv4 address associated with the interface. // Set to empty value, to enable it. }, "security_groups": [{ // User provided VPC Security Groups which will be assigned to all nodes of this NodeGroup. "id": string }], "subnet_id": string // [non_empty_default] // Nebius VPC Subnet ID that will be attached to a node cloud instance network interface. // By default Cluster control plane subnet_id used. // Subnet should be located in the same network with control plane. }], "nvlink": { // NVLinkSpec configures NVLink settings for the NodeGroup. }, "os": string, // OS version that will be used to create the boot disk of Compute Instances in the NodeGroup. // Supported platform / Kubernetes version / OS / driver presets combinations // * `gpu-l40s-a`, `gpu-l40s-d`, `gpu-h100-sxm`, `gpu-h200-sxm`, `cpu-e1`, `cpu-e2`, `cpu-d3`: // * `drivers_preset`: `""` // * `version`: 1.30 → `"ubuntu22.04"` // * `version`: 1.31 → `"ubuntu22.04"` (default), `"ubuntu24.04"` // * `gpu-l40s-a`, `gpu-l40s-d`, `gpu-h100-sxm`, `gpu-h200-sxm`: // * `drivers_preset`: `"cuda12"` (CUDA 12.4) // * `version`: 1.30, 1.31 → `"ubuntu22.04"` // * `drivers_preset`: `"cuda12.4"` // * `version`: 1.31 → `"ubuntu22.04"` // * `drivers_preset`: `"cuda12.8"` // * `version`: 1.31 → `"ubuntu24.04"` // * `gpu-b200-sxm`: // * `drivers_preset`: `""` // * `version`: 1.30, 1.31 → `"ubuntu24.04"` // * `drivers_preset`: `"cuda12"` (CUDA 12.8) // * `version`: 1.30, 1.31 → `"ubuntu24.04"` // * `drivers_preset`: `"cuda12.8"` // * `version`: 1.31 → `"ubuntu24.04"` // * `gpu-b200-sxm-a`: // * `drivers_preset`: `""` // * `version`: 1.31 → `"ubuntu24.04"` // * `drivers_preset`: `"cuda12.8"` // * `version`: 1.31 → `"ubuntu24.04"`. "preemptible": { // [meaningful_empty_value] // Configures whether the nodes in the group are preemptible. // Set to empty value to enable preemptible nodes. }, "reservation_policy": { // Reservation_policy is an interface of the "capacity block" (or "capacity block group") mechanism of Nebius Compute. "policy": enum( "AUTO", // 1) Will try to launch instance in any reservation_ids if provided. // 2) Will try to launch instance in any of the available capacity block. // 3) Will try to launch instance in PAYG if 1 & 2 are not satisfied. "FORBID", // The instance is launched only using on-demand (PAYG) capacity. // No attempt is made to find or use a Capacity Block. // It's an error to provide reservation_ids with policy = FORBID. "STRICT" // 1) Will try to launch the instance in Capacity Blocks from reservation_ids if provided. // 2) If reservation_ids are not provided will try to launch instance in suitable & available Capacity Block. // 3) Fail otherwise. ), "reservation_ids": [string] // Capacity block groups, order matters. }, "resources": { // [required] // Resources that will have Nebius Compute Instance where Node kubelet will run. "platform": string, // [required] "preset": string }, "service_account_id": string, // The Nebius service account whose credentials will be available on the nodes of the group. // With these credentials, it is possible to make `nebius` CLI or public API requests from the nodes // without the need for extra authentication. // This service account is also used to make requests to container registry. // // `resource.serviceaccount.issueAccessToken` permission is required to use this field. "taints": [{ // Kubernetes Node taints. // For now change will not be propagated to existing nodes, so will be applied only to Kubernetes Nodes created after the field change. // That behaviour may change later. // So, for now you will need to manually set them to existing nodes, if that is needed. // Field change will NOT trigger NodeGroup roll out. "effect": enum( // [required] "EFFECT_UNSPECIFIED", "NO_EXECUTE", "NO_SCHEDULE", "PREFER_NO_SCHEDULE" ), "key": string, // [required] "value": string // [required] }] }, "version": string // Version is desired Kubernetes version of the cluster. For now only acceptable format is // `.` like "1.31". Option for patch version update will be added later. // By default the cluster control plane `.` version will be used. } } ``` ```json theme={null} nebius mk8s node-group update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "auto_repair": { "conditions": [{ "disabled": false, "status": "condition_status_unspecified"|"true"|"false"|"unknown", "type": "" }] }, "autoscaling": { "max_node_count": 0, "min_node_count": 0 }, "strategy": { "drain_timeout": "2h30m10s", "max_surge": { "count": 0 }, "max_unavailable": { "count": 0 } }, "template": { "boot_disk": { "block_size_bytes": 0, "size_bytes": 0, "type": "unspecified"|"network_ssd"|"network_hdd"|"network_ssd_io_m3"|"network_ssd_non_replicated" }, "cloud_init_user_data": "", "filesystems": [{ "attach_mode": "unspecified"|"read_only"|"read_write", "existing_filesystem": { "id": "" }, "mount_tag": "" }], "gpu_cluster": { "id": "" }, "gpu_settings": { "drivers_preset": "" }, "local_disks": { "config": { "kubelet_ephemeral": false }, "passthrough_group": { "requested": false } }, "max_pods": 0, "metadata": { "labels": { "": "" } }, "network_interfaces": [{ "public_ip_address": { }, "security_groups": [{ "id": "" }], "subnet_id": "" }], "nvlink": { }, "os": "", "preemptible": { }, "reservation_policy": { "policy": "auto"|"forbid"|"strict", "reservation_ids": [""] }, "resources": { "platform": "", "preset": "" }, "service_account_id": "", "taints": [{ "effect": "effect_unspecified"|"no_execute"|"no_schedule"|"prefer_no_schedule", "key": "", "value": "" }] }, "version": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius mk8s node-group upgrade Source: https://docs.nebius.com/cli/reference/mk8s/node-group/upgrade

Name

nebius mk8s node-group upgrade

Synopsis

``` nebius mk8s node-group upgrade [id] --id [required] --latest-infra-version --async ```

Positional Arguments

id

ID of the resource to upgrade.

Options

`--id` (string) \[required]

`--latest-infra-version` (bool)

Upgrades to the latest infra version, which includes latest supported kubernetes patch version. Kubernetes minor version remain the
same.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string, // [required] "latest_infra_version": { // [meaningful_empty_value] // Upgrades to the latest infra version, which includes latest supported kubernetes patch version. Kubernetes minor version remain the // same. } } ``` ```json theme={null} nebius mk8s node-group upgrade ' { "id": "", "latest_infra_version": { } } ' ``` *Auto generated on 15-Jul-2026* # nebius mk8s v1alpha1 cluster create Source: https://docs.nebius.com/cli/reference/mk8s/v1alpha1/cluster/create

Name

nebius mk8s v1alpha1 cluster create

Deprecated

Command cluster is deprecated. Cluster v1alpha1 API is deprecated, please migrate to v1.

Synopsis

``` nebius mk8s v1alpha1 cluster create --control-plane-endpoints-public-endpoint --control-plane-etcd-cluster-size --control-plane-subnet-id [required] --control-plane-version --kube-network-service-cidrs --labels --name --parent-id [required] --resource-version --async -i, --interactive ```

Options

`--control-plane-endpoints-public-endpoint` (bool)

PublicEndpointSpec is a specification of public endpoint for control plane.

`--control-plane-etcd-cluster-size` (int64)

Number of instances in etcd cluster.
3 by default.
Control plane with `etcd_cluster_size: 3` called "Highly Available" ("HA"), because it's Kubernetes API
will be available despite a failure of one control plane instance.

`--control-plane-subnet-id` (string) \[required]

Subnet ID where control plane instances will be located.

`--control-plane-version` (string)

Version is desired Kubernetes version of the cluster. For now only acceptable format is
`MAJOR.MINOR` like "1.31". Option for patch version update will be added later.

`--kube-network-service-cidrs` (string array)

CIDR blocks for Service ClusterIP allocation.
For now, only one value is supported.
Must be a valid CIDR block or prefix length.
In case of prefix length, certain CIDR is auto allocated.
Specified CIDR blocks will be reserved in Cluster.spec.control\_plane.subnet\_id to prevent address duplication.
Allowed prefix length is from "/12" to "/28".
Empty value treated as \["/16"].

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // [required] "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // [required] "control_plane": { // [required] "endpoints": { "public_endpoint": { // [meaningful_empty_value] // PublicEndpointSpec is a specification of public endpoint for control plane. } }, "etcd_cluster_size": int64, // Number of instances in etcd cluster. // 3 by default. // Control plane with `etcd_cluster_size: 3` called "Highly Available" ("HA"), because it's Kubernetes API // will be available despite a failure of one control plane instance. "subnet_id": string, // [required] [immutable] // Subnet ID where control plane instances will be located. "version": string // Version is desired Kubernetes version of the cluster. For now only acceptable format is // `MAJOR.MINOR` like "1.31". Option for patch version update will be added later. }, "kube_network": { // Defines kubernetes network configuration, like IP allocation. "service_cidrs": [string] // [immutable] // CIDR blocks for Service ClusterIP allocation. // For now, only one value is supported. // Must be a valid CIDR block or prefix length. // In case of prefix length, certain CIDR is auto allocated. // Specified CIDR blocks will be reserved in Cluster.spec.control_plane.subnet_id to prevent address duplication. // Allowed prefix length is from "/12" to "/28". // Empty value treated as ["/16"]. } } } ``` ```json theme={null} nebius mk8s v1alpha1 cluster create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "control_plane": { "endpoints": { "public_endpoint": { } }, "etcd_cluster_size": 0, "subnet_id": "", "version": "" }, "kube_network": { "service_cidrs": [""] } } } ' ``` *Auto generated on 15-Jul-2026* # nebius mk8s v1alpha1 cluster delete Source: https://docs.nebius.com/cli/reference/mk8s/v1alpha1/cluster/delete

Name

nebius mk8s v1alpha1 cluster delete

Deprecated

Command cluster is deprecated. Cluster v1alpha1 API is deprecated, please migrate to v1.

Synopsis

``` nebius mk8s v1alpha1 cluster delete [id] --id [required] --async ```

Positional Arguments

id

ID of the resource to delete.

Options

`--id` (string) \[required]

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius mk8s v1alpha1 cluster delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius mk8s v1alpha1 cluster edit Source: https://docs.nebius.com/cli/reference/mk8s/v1alpha1/cluster/edit

Name

nebius mk8s v1alpha1 cluster edit

Edit resource via external text editor. Uses get command to receive the current state.

Deprecated

Command cluster is deprecated. Cluster v1alpha1 API is deprecated, please migrate to v1.

Synopsis

``` nebius mk8s v1alpha1 cluster edit [id] --async --editor --id --resource-version ```

Positional Arguments

id

ID of the resource to edit.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

`--resource-version` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mk8s v1alpha1 cluster edit-by-name Source: https://docs.nebius.com/cli/reference/mk8s/v1alpha1/cluster/edit-by-name

Name

nebius mk8s v1alpha1 cluster edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

Deprecated

Command cluster is deprecated. Cluster v1alpha1 API is deprecated, please migrate to v1.

Synopsis

``` nebius mk8s v1alpha1 cluster edit-by-name --async --editor --name --parent-id ```

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--name` (string)

`--parent-id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mk8s v1alpha1 cluster get Source: https://docs.nebius.com/cli/reference/mk8s/v1alpha1/cluster/get

Name

nebius mk8s v1alpha1 cluster get

Deprecated

Command cluster is deprecated. Cluster v1alpha1 API is deprecated, please migrate to v1.

Synopsis

``` nebius mk8s v1alpha1 cluster get [id] --id [required] --resource-version ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string) \[required]

`--resource-version` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string, // [required] "resource_version": string } ``` ```json theme={null} nebius mk8s v1alpha1 cluster get ' { "id": "", "resource_version": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius mk8s v1alpha1 cluster get-by-name Source: https://docs.nebius.com/cli/reference/mk8s/v1alpha1/cluster/get-by-name

Name

nebius mk8s v1alpha1 cluster get-by-name

Deprecated

Command cluster is deprecated. Cluster v1alpha1 API is deprecated, please migrate to v1.

Synopsis

``` nebius mk8s v1alpha1 cluster get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

`--parent-id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // [required] } ``` ```json theme={null} nebius mk8s v1alpha1 cluster get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius mk8s v1alpha1 cluster get-credentials Source: https://docs.nebius.com/cli/reference/mk8s/v1alpha1/cluster/get-credentials

Name

nebius mk8s v1alpha1 cluster get-credentials

create or update kubeconfig for the specified cluster

Deprecated

Command cluster is deprecated. Cluster v1alpha1 API is deprecated, please migrate to v1.

Synopsis

``` nebius mk8s v1alpha1 cluster get-credentials --context-name --external --force --id --internal --kubeconfig ```

Positional Arguments

id

Cluster id.

Options

`--context-name` (string)

Custom kubeconfig context name.

`--external` (bool)

Use cluster external endpoint.

`--force` (bool)

Overwrite context.

`--id` (string)

Cluster id.

`--internal` (bool)

Use cluster internal endpoint.

`--kubeconfig` (string)

Kubeconfig file path.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mk8s v1alpha1 cluster get-token Source: https://docs.nebius.com/cli/reference/mk8s/v1alpha1/cluster/get-token

Name

nebius mk8s v1alpha1 cluster get-token

get token for kubectl

Deprecated

Command cluster is deprecated. Cluster v1alpha1 API is deprecated, please migrate to v1.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mk8s v1alpha1 cluster Source: https://docs.nebius.com/cli/reference/mk8s/v1alpha1/cluster/index

Name

nebius mk8s v1alpha1 cluster

Deprecated

Command cluster is deprecated. Cluster v1alpha1 API is deprecated, please migrate to v1.

Commands

nebius mk8s v1alpha1 cluster create

nebius mk8s v1alpha1 cluster delete

nebius mk8s v1alpha1 cluster edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius mk8s v1alpha1 cluster edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

nebius mk8s v1alpha1 cluster get

nebius mk8s v1alpha1 cluster get-by-name

nebius mk8s v1alpha1 cluster get-credentials

create or update kubeconfig for the specified cluster

nebius mk8s v1alpha1 cluster get-token

get token for kubectl

nebius mk8s v1alpha1 cluster list

nebius mk8s v1alpha1 cluster list-control-plane-versions

ListControlPlaneVersions returns all k8s release versions available in Nebius API.

nebius mk8s v1alpha1 cluster operation

Manage operations for Cluster service.

nebius mk8s v1alpha1 cluster update

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mk8s v1alpha1 cluster list Source: https://docs.nebius.com/cli/reference/mk8s/v1alpha1/cluster/list

Name

nebius mk8s v1alpha1 cluster list

Deprecated

Command cluster is deprecated. Cluster v1alpha1 API is deprecated, please migrate to v1.

Synopsis

``` nebius mk8s v1alpha1 cluster list --page-size --page-token --parent-id [required] --all -i, --interactive ```

Options

`--page-size` (int64)

Specifies the maximum number of items to return in the response.

`--page-token` (string)

Token for pagination, allowing the retrieval of the next set of results.

`--parent-id` (string) \[required]

ID of the IAM container we are listing the resources in.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, // Specifies the maximum number of items to return in the response. "page_token": string, // Token for pagination, allowing the retrieval of the next set of results. "parent_id": string // [required] // ID of the IAM container we are listing the resources in. } ``` ```json theme={null} nebius mk8s v1alpha1 cluster list ' { "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius mk8s v1alpha1 cluster list-control-plane-versions Source: https://docs.nebius.com/cli/reference/mk8s/v1alpha1/cluster/list-control-plane-versions

Name

nebius mk8s v1alpha1 cluster list-control-plane-versions

ListControlPlaneVersions returns all k8s release versions available in Nebius API.

Deprecated

Command cluster is deprecated. Cluster v1alpha1 API is deprecated, please migrate to v1.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mk8s v1alpha1 cluster operation get Source: https://docs.nebius.com/cli/reference/mk8s/v1alpha1/cluster/operation/get

Name

nebius mk8s v1alpha1 cluster operation get

Get operation by ID.

Deprecated

Command cluster is deprecated. Cluster v1alpha1 API is deprecated, please migrate to v1.

Synopsis

``` nebius mk8s v1alpha1 cluster operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mk8s v1alpha1 cluster operation Source: https://docs.nebius.com/cli/reference/mk8s/v1alpha1/cluster/operation/index

Name

nebius mk8s v1alpha1 cluster operation

Manage operations for Cluster service.

Deprecated

Command cluster is deprecated. Cluster v1alpha1 API is deprecated, please migrate to v1.

Commands

nebius mk8s v1alpha1 cluster operation get

Get operation by ID.

nebius mk8s v1alpha1 cluster operation list

List operations by resource ID.

nebius mk8s v1alpha1 cluster operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mk8s v1alpha1 cluster operation list Source: https://docs.nebius.com/cli/reference/mk8s/v1alpha1/cluster/operation/list

Name

nebius mk8s v1alpha1 cluster operation list

List operations by resource ID.

Deprecated

Command cluster is deprecated. Cluster v1alpha1 API is deprecated, please migrate to v1.

Synopsis

``` nebius mk8s v1alpha1 cluster operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mk8s v1alpha1 cluster operation wait Source: https://docs.nebius.com/cli/reference/mk8s/v1alpha1/cluster/operation/wait

Name

nebius mk8s v1alpha1 cluster operation wait

Wait for operation to complete.

Deprecated

Command cluster is deprecated. Cluster v1alpha1 API is deprecated, please migrate to v1.

Synopsis

``` nebius mk8s v1alpha1 cluster operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mk8s v1alpha1 cluster update Source: https://docs.nebius.com/cli/reference/mk8s/v1alpha1/cluster/update

Name

nebius mk8s v1alpha1 cluster update

Deprecated

Command cluster is deprecated. Cluster v1alpha1 API is deprecated, please migrate to v1.

Synopsis

``` nebius mk8s v1alpha1 cluster update [id] --control-plane-endpoints-public-endpoint --control-plane-etcd-cluster-size --control-plane-version --id --labels --labels-add --labels-remove --name --parent-id --resource-version --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--control-plane-endpoints-public-endpoint` (bool)

PublicEndpointSpec is a specification of public endpoint for control plane.

`--control-plane-etcd-cluster-size` (int64)

Number of instances in etcd cluster.
3 by default.
Control plane with `etcd_cluster_size: 3` called "Highly Available" ("HA"), because it's Kubernetes API
will be available despite a failure of one control plane instance.

`--control-plane-version` (string)

Version is desired Kubernetes version of the cluster. For now only acceptable format is
`MAJOR.MINOR` like "1.31". Option for patch version update will be added later.

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // [required] // Metadata associated with the instance. // Includes ID of the instance to update. "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // Updated specifications for the instance. "control_plane": { // [required] "endpoints": { "public_endpoint": { // [meaningful_empty_value] // PublicEndpointSpec is a specification of public endpoint for control plane. } }, "etcd_cluster_size": int64, // Number of instances in etcd cluster. // 3 by default. // Control plane with `etcd_cluster_size: 3` called "Highly Available" ("HA"), because it's Kubernetes API // will be available despite a failure of one control plane instance. "version": string // Version is desired Kubernetes version of the cluster. For now only acceptable format is // `MAJOR.MINOR` like "1.31". Option for patch version update will be added later. }, "kube_network": { // Defines kubernetes network configuration, like IP allocation. } } } ``` ```json theme={null} nebius mk8s v1alpha1 cluster update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "control_plane": { "endpoints": { "public_endpoint": { } }, "etcd_cluster_size": 0, "version": "" }, "kube_network": { } } } ' ``` *Auto generated on 15-Jul-2026* # nebius mk8s v1alpha1 Source: https://docs.nebius.com/cli/reference/mk8s/v1alpha1/index

Name

nebius mk8s v1alpha1

Commands

nebius mk8s v1alpha1 cluster

\[deprecated] Cluster v1alpha1 API is deprecated, please migrate to v1.

nebius mk8s v1alpha1 node-group

\[deprecated] NodeGroup v1alpha1 API is deprecated, please migrate to v1.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mk8s v1alpha1 node-group create Source: https://docs.nebius.com/cli/reference/mk8s/v1alpha1/node-group/create

Name

nebius mk8s v1alpha1 node-group create

Deprecated

Command node-group is deprecated. NodeGroup v1alpha1 API is deprecated, please migrate to v1.

Synopsis

``` nebius mk8s v1alpha1 node-group create --auto-repair-conditions --autoscaling-max-node-count --autoscaling-min-node-count --fixed-node-count --labels --name --parent-id [required] --resource-version --strategy-drain-timeout --strategy-max-surge-count --strategy-max-surge-percent --strategy-max-unavailable-count --strategy-max-unavailable-percent --template-boot-disk-block-size-bytes --template-boot-disk-size-bytes --template-boot-disk-size-gibibytes --template-boot-disk-size-kibibytes --template-boot-disk-size-mebibytes --template-boot-disk-type --template-cloud-init-user-data --template-filesystems --template-gpu-cluster-id --template-gpu-settings-drivers-preset --template-metadata-labels --template-network-interfaces --template-os --template-preemptible --template-resources-platform [required] --template-resources-preset [required] --template-service-account-id --template-taints --version --async -i, --interactive ```

Options

`--auto-repair-conditions` (json)

Conditions that determine whether a node should be auto repaired.

(structure)

disabled -> (bool)

When true, disables the default auto-repair condition rules.

Mutually exclusive with: timeout.

status -> (string)

Node condition status.

A value must be one of:

  • "condition\_status\_unspecified"
  • "true"
  • "false"
  • "unknown"

timeout -> (duration)\[google.protobuf.Duration]

The duration after which the node is automatically repaired if the condition remains in the specified status.

Mutually exclusive with: disabled.

type -> (string)\[required]

Node condition type.

JSON Schema:

```json theme={null} [{ "disabled": false, "status": "condition_status_unspecified"|"true"|"false"|"unknown", "type": "" }] ```

`--autoscaling-max-node-count` (int64)

Mutually exclusive with: `--fixed-node-count`.

`--autoscaling-min-node-count` (int64)

Mutually exclusive with: `--fixed-node-count`.

`--fixed-node-count` (int64)

Mutually exclusive with: `--autoscaling-max-node-count`, `--autoscaling-min-node-count`.

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--strategy-drain-timeout` (duration: 2h30m10s)

DrainTimeout is the total amount of time that the service will spend on draining a node.
By default, node can be drained without any time limitations.
NOTE: NodeDrainTimeout is different from `kubectl drain --timeout`.

`--strategy-max-surge-count` (int64)

Mutually exclusive with: `--strategy-max-surge-percent`.

`--strategy-max-surge-percent` (int64)

Mutually exclusive with: `--strategy-max-surge-count`.

`--strategy-max-unavailable-count` (int64)

Mutually exclusive with: `--strategy-max-unavailable-percent`.

`--strategy-max-unavailable-percent` (int64)

Mutually exclusive with: `--strategy-max-unavailable-count`.

`--template-boot-disk-block-size-bytes` (int64)

`--template-boot-disk-size-bytes` (int64)

Mutually exclusive with: `--template-boot-disk-size-gibibytes`, `--template-boot-disk-size-kibibytes`, `--template-boot-disk-size-mebibytes`.

`--template-boot-disk-size-gibibytes` (int64)

Mutually exclusive with: `--template-boot-disk-size-bytes`, `--template-boot-disk-size-kibibytes`, `--template-boot-disk-size-mebibytes`.

`--template-boot-disk-size-kibibytes` (int64)

Mutually exclusive with: `--template-boot-disk-size-bytes`, `--template-boot-disk-size-gibibytes`, `--template-boot-disk-size-mebibytes`.

`--template-boot-disk-size-mebibytes` (int64)

Mutually exclusive with: `--template-boot-disk-size-bytes`, `--template-boot-disk-size-gibibytes`, `--template-boot-disk-size-kibibytes`.

`--template-boot-disk-type` (string)

A value must be one of:

  • unspecified
  • network\_ssd
  • network\_hdd
  • network\_ssd\_io\_m3
  • network\_ssd\_non\_replicated

`--template-cloud-init-user-data` (string)

Cloud-init user-data. Must contain at least one SSH key.

`--template-filesystems` (json)

(structure)

attach\_mode -> (string)\[required]

A value must be one of:

  • "unspecified"
  • "read\_only"
  • "read\_write"

device\_name -> (string)\[required]

existing\_filesystem -> (structure)

id -> (string)\[required]

JSON Schema:

```json theme={null} [{ "attach_mode": "unspecified"|"read_only"|"read_write", "device_name": "", "existing_filesystem": { "id": "" } }] ```

`--template-gpu-cluster-id` (string)

`--template-gpu-settings-drivers-preset` (string)

Identifier of the predefined set of drivers included in the ComputeImage deployed on ComputeInstances that are part of the NodeGroup.
Supported presets for different platform / k8s version combinations:
* gpu-l40s-a, gpu-l40s-d, gpu-h100-sxm, gpu-h200-sxm:
* k8s: 1.30 → "cuda12" (CUDA 12.4)
* k8s: 1.31 → "cuda12" (CUDA 12.4), "cuda12.4", "cuda12.8"
* gpu-b200-sxm:
* k8s: 1.31 → "cuda12" (CUDA 12.8), "cuda12.8"
* gpu-b200-sxm-a:
* k8s: 1.31 → "cuda12.8".

`--template-metadata-labels` (string->string)

Labels will be propagated into nodes metadata.
System labels containing "kubernetes.io" and "k8s.io" will not be propagated.
On update labels they will not be updated in nodes right away, only on node group update.

`--template-network-interfaces` (json)

(structure)

public\_ip\_address -> (structure)\[meaningful\_empty\_value]

Public IPv4 address associated with the interface.

subnet\_id -> (string)\[non\_empty\_default]

Subnet ID that will be attached to a node cloud instance network interface.
By default control plane subnet\_id used.
Subnet should be located in the same network with control plane and have same parent ID as cluster.

JSON Schema:

```json theme={null} [{ "public_ip_address": { }, "subnet_id": "" }] ```

`--template-os` (string)

OS version that will be used to create the boot disk of Compute Instances in the NodeGroup.
Supported platform / k8s version / OS / driver presets combinations
* gpu-l40s-a, gpu-l40s-d, gpu-h100-sxm, gpu-h200-sxm, cpu-e1, cpu-e2, cpu-d3:
* drivers\_preset: ""
* k8s: 1.30 → "ubuntu22.04"
* k8s: 1.31 → "ubuntu22.04" (default), "ubuntu24.04"
* gpu-l40s-a, gpu-l40s-d, gpu-h100-sxm, gpu-h200-sxm:
* drivers\_preset: "cuda12" (CUDA 12.4)
* k8s: 1.30, 1.31 → "ubuntu22.04"
* drivers\_preset: "cuda12.4"
* k8s: 1.31 → "ubuntu22.04"
* drivers\_preset: "cuda12.8"
* k8s: 1.31 → "ubuntu24.04"
* gpu-b200-sxm:
* drivers\_preset: ""
* k8s: 1.30, 1.31 → "ubuntu24.04"
* drivers\_preset: "cuda12" (CUDA 12.8)
* k8s: 1.30, 1.31 → "ubuntu24.04"
* drivers\_preset: "cuda12.8"
* k8s: 1.31 → "ubuntu24.04"
* gpu-b200-sxm-a:
* drivers\_preset: ""
* k8s: 1.31 → "ubuntu24.04"
* drivers\_preset: "cuda12.8"
* k8s: 1.31 → "ubuntu24.04".

`--template-preemptible` (bool)

Configures whether the nodes in the group are preemptible.
Set to empty value to enable preemptible nodes.

`--template-resources-platform` (string) \[required]

`--template-resources-preset` (string) \[required]

`--template-service-account-id` (string)

The Nebius service account whose credentials will be available on the nodes of the group. With these credentials, it is possible to
make `nebius` CLI or public API requests from the nodes without the need for extra authentication. This service account is also used to
make requests to container registry.

`resource.serviceaccount.issueAccessToken` permission is required to use this field.

`--template-taints` (json)

(structure)

effect -> (string)\[required]

A value must be one of:

  • "effect\_unspecified"
  • "no\_execute"
  • "no\_schedule"
  • "prefer\_no\_schedule"

key -> (string)\[required]

value -> (string)\[required]

JSON Schema:

```json theme={null} [{ "effect": "effect_unspecified"|"no_execute"|"no_schedule"|"prefer_no_schedule", "key": "", "value": "" }] ```

`--version` (string)

Version is desired Kubernetes version of the cluster. For now only acceptable format is
`MAJOR.MINOR` like "1.31". Option for patch version update will be added later.
By default the cluster control plane MAJOR.MINOR version will be used.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // [required] "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // [required] "auto_repair": { // Parameters for nodes auto repair. "conditions": [{ // Conditions that determine whether a node should be auto repaired. "disabled": bool, // Cannot be set together with: timeout // When true, disables the default auto-repair condition rules. "status": enum( // Node condition status. "CONDITION_STATUS_UNSPECIFIED", "TRUE", "FALSE", "UNKNOWN" ), "timeout": "2h30m10s", // [google.protobuf.Duration] // Cannot be set together with: disabled // The duration after which the node is automatically repaired if the condition remains in the specified status. "type": string // [required] // Node condition type. }] }, "autoscaling": { // Cannot be set together with: fixed_node_count "max_node_count": int64, "min_node_count": int64 }, "fixed_node_count": int64, // Cannot be set together with: autoscaling "strategy": { "drain_timeout": "2h30m10s", // [google.protobuf.Duration] // DrainTimeout is the total amount of time that the service will spend on draining a node. // By default, node can be drained without any time limitations. // NOTE: NodeDrainTimeout is different from `kubectl drain --timeout`. "max_surge": { // The maximum number of machines that can be scheduled above the // desired number of machines. // Value can be an absolute number (ex: 5) or a percentage of // desired machines (ex: 10%). // This can not be 0 if MaxUnavailable is 0. // Absolute number is calculated from percentage by rounding up. // Defaults to 1. // Example: when this is set to 30%, the new MachineSet can be scaled // up immediately when the rolling update starts, such that the total // number of old and new machines do not exceed 130% of desired // machines. Once old machines have been killed, new MachineSet can // be scaled up further, ensuring that total number of machines running // at any time during the update is at most 130% of desired machines. "count": int64, // Cannot be set together with: percent "percent": int64 // Cannot be set together with: count }, "max_unavailable": { // The maximum number of machines that can be unavailable during the update. // Value can be an absolute number (ex: 5) or a percentage of desired // machines (ex: 10%). // Absolute number is calculated from percentage by rounding down. // This can not be 0 if MaxSurge is 0. // Defaults to 0. // Example: when this is set to 30%, the old MachineSet can be scaled // down to 70% of desired machines immediately when the rolling update // starts. Once new machines are ready, old MachineSet can be scaled // down further, followed by scaling up the new MachineSet, ensuring // that the total number of machines available at all times // during the update is at least 70% of desired machines. "count": int64, // Cannot be set together with: percent "percent": int64 // Cannot be set together with: count } }, "template": { // [required] "boot_disk": { // [non_empty_default] "block_size_bytes": int64, "size_bytes": int64, // Cannot be set together with: size_kibibytes, size_mebibytes, size_gibibytes "size_gibibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_mebibytes "size_kibibytes": int64, // Cannot be set together with: size_bytes, size_mebibytes, size_gibibytes "size_mebibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_gibibytes "type": enum( // [non_empty_default] "UNSPECIFIED", "NETWORK_SSD", // The list of available types will be clarified later, it is not final version. "NETWORK_HDD", "NETWORK_SSD_IO_M3", "NETWORK_SSD_NON_REPLICATED" ) }, "cloud_init_user_data": string, // [sensitive] // Cloud-init user-data. Must contain at least one SSH key. "filesystems": [{ "attach_mode": enum( // [required] "UNSPECIFIED", "READ_ONLY", "READ_WRITE" ), "device_name": string, // [required] "existing_filesystem": { "id": string // [required] } }], "gpu_cluster": { "id": string }, "gpu_settings": { // GPU-related settings. "drivers_preset": string // [required] // Identifier of the predefined set of drivers included in the ComputeImage deployed on ComputeInstances that are part of the NodeGroup. // Supported presets for different platform / k8s version combinations: // - gpu-l40s-a, gpu-l40s-d, gpu-h100-sxm, gpu-h200-sxm: // - k8s: 1.30 → "cuda12" (CUDA 12.4) // - k8s: 1.31 → "cuda12" (CUDA 12.4), "cuda12.4", "cuda12.8" // - gpu-b200-sxm: // - k8s: 1.31 → "cuda12" (CUDA 12.8), "cuda12.8" // - gpu-b200-sxm-a: // - k8s: 1.31 → "cuda12.8". }, "metadata": { "labels": { // [map] // Labels will be propagated into nodes metadata. // System labels containing "kubernetes.io" and "k8s.io" will not be propagated. // On update labels they will not be updated in nodes right away, only on node group update. string: string } }, "network_interfaces": [{ // [non_empty_default] "public_ip_address": { // [meaningful_empty_value] // Public IPv4 address associated with the interface. }, "subnet_id": string // [non_empty_default] // Subnet ID that will be attached to a node cloud instance network interface. // By default control plane subnet_id used. // Subnet should be located in the same network with control plane and have same parent ID as cluster. }], "os": string, // OS version that will be used to create the boot disk of Compute Instances in the NodeGroup. // Supported platform / k8s version / OS / driver presets combinations // - gpu-l40s-a, gpu-l40s-d, gpu-h100-sxm, gpu-h200-sxm, cpu-e1, cpu-e2, cpu-d3: // - drivers_preset: "" // - k8s: 1.30 → "ubuntu22.04" // - k8s: 1.31 → "ubuntu22.04" (default), "ubuntu24.04" // - gpu-l40s-a, gpu-l40s-d, gpu-h100-sxm, gpu-h200-sxm: // - drivers_preset: "cuda12" (CUDA 12.4) // - k8s: 1.30, 1.31 → "ubuntu22.04" // - drivers_preset: "cuda12.4" // - k8s: 1.31 → "ubuntu22.04" // - drivers_preset: "cuda12.8" // - k8s: 1.31 → "ubuntu24.04" // - gpu-b200-sxm: // - drivers_preset: "" // - k8s: 1.30, 1.31 → "ubuntu24.04" // - drivers_preset: "cuda12" (CUDA 12.8) // - k8s: 1.30, 1.31 → "ubuntu24.04" // - drivers_preset: "cuda12.8" // - k8s: 1.31 → "ubuntu24.04" // - gpu-b200-sxm-a: // - drivers_preset: "" // - k8s: 1.31 → "ubuntu24.04" // - drivers_preset: "cuda12.8" // - k8s: 1.31 → "ubuntu24.04". "preemptible": { // [meaningful_empty_value] // Configures whether the nodes in the group are preemptible. // Set to empty value to enable preemptible nodes. }, "resources": { // [required] "platform": string, // [required] "preset": string }, "service_account_id": string, // The Nebius service account whose credentials will be available on the nodes of the group. With these credentials, it is possible to // make `nebius` CLI or public API requests from the nodes without the need for extra authentication. This service account is also used to // make requests to container registry. // // `resource.serviceaccount.issueAccessToken` permission is required to use this field. "taints": [{ "effect": enum( // [required] "EFFECT_UNSPECIFIED", "NO_EXECUTE", "NO_SCHEDULE", "PREFER_NO_SCHEDULE" ), "key": string, // [required] "value": string // [required] }] }, "version": string // Version is desired Kubernetes version of the cluster. For now only acceptable format is // `MAJOR.MINOR` like "1.31". Option for patch version update will be added later. // By default the cluster control plane MAJOR.MINOR version will be used. } } ``` ```json theme={null} nebius mk8s v1alpha1 node-group create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "auto_repair": { "conditions": [{ "disabled": false, "status": "condition_status_unspecified"|"true"|"false"|"unknown", "type": "" }] }, "autoscaling": { "max_node_count": 0, "min_node_count": 0 }, "strategy": { "drain_timeout": "2h30m10s", "max_surge": { "count": 0 }, "max_unavailable": { "count": 0 } }, "template": { "boot_disk": { "block_size_bytes": 0, "size_bytes": 0, "type": "unspecified"|"network_ssd"|"network_hdd"|"network_ssd_io_m3"|"network_ssd_non_replicated" }, "cloud_init_user_data": "", "filesystems": [{ "attach_mode": "unspecified"|"read_only"|"read_write", "device_name": "", "existing_filesystem": { "id": "" } }], "gpu_cluster": { "id": "" }, "gpu_settings": { "drivers_preset": "" }, "metadata": { "labels": { "": "" } }, "network_interfaces": [{ "public_ip_address": { }, "subnet_id": "" }], "os": "", "preemptible": { }, "resources": { "platform": "", "preset": "" }, "service_account_id": "", "taints": [{ "effect": "effect_unspecified"|"no_execute"|"no_schedule"|"prefer_no_schedule", "key": "", "value": "" }] }, "version": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius mk8s v1alpha1 node-group delete Source: https://docs.nebius.com/cli/reference/mk8s/v1alpha1/node-group/delete

Name

nebius mk8s v1alpha1 node-group delete

Deprecated

Command node-group is deprecated. NodeGroup v1alpha1 API is deprecated, please migrate to v1.

Synopsis

``` nebius mk8s v1alpha1 node-group delete [id] --id [required] --async ```

Positional Arguments

id

ID of the resource to delete.

Options

`--id` (string) \[required]

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius mk8s v1alpha1 node-group delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius mk8s v1alpha1 node-group edit Source: https://docs.nebius.com/cli/reference/mk8s/v1alpha1/node-group/edit

Name

nebius mk8s v1alpha1 node-group edit

Edit resource via external text editor. Uses get command to receive the current state.

Deprecated

Command node-group is deprecated. NodeGroup v1alpha1 API is deprecated, please migrate to v1.

Synopsis

``` nebius mk8s v1alpha1 node-group edit [id] --async --editor --id --resource-version ```

Positional Arguments

id

ID of the resource to edit.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

`--resource-version` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mk8s v1alpha1 node-group edit-by-name Source: https://docs.nebius.com/cli/reference/mk8s/v1alpha1/node-group/edit-by-name

Name

nebius mk8s v1alpha1 node-group edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

Deprecated

Command node-group is deprecated. NodeGroup v1alpha1 API is deprecated, please migrate to v1.

Synopsis

``` nebius mk8s v1alpha1 node-group edit-by-name --async --editor --name --parent-id ```

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--name` (string)

`--parent-id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mk8s v1alpha1 node-group get Source: https://docs.nebius.com/cli/reference/mk8s/v1alpha1/node-group/get

Name

nebius mk8s v1alpha1 node-group get

Deprecated

Command node-group is deprecated. NodeGroup v1alpha1 API is deprecated, please migrate to v1.

Synopsis

``` nebius mk8s v1alpha1 node-group get [id] --id [required] --resource-version ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string) \[required]

`--resource-version` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string, // [required] "resource_version": string } ``` ```json theme={null} nebius mk8s v1alpha1 node-group get ' { "id": "", "resource_version": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius mk8s v1alpha1 node-group get-by-name Source: https://docs.nebius.com/cli/reference/mk8s/v1alpha1/node-group/get-by-name

Name

nebius mk8s v1alpha1 node-group get-by-name

Deprecated

Command node-group is deprecated. NodeGroup v1alpha1 API is deprecated, please migrate to v1.

Synopsis

``` nebius mk8s v1alpha1 node-group get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

`--parent-id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // [required] } ``` ```json theme={null} nebius mk8s v1alpha1 node-group get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius mk8s v1alpha1 node-group Source: https://docs.nebius.com/cli/reference/mk8s/v1alpha1/node-group/index

Name

nebius mk8s v1alpha1 node-group

Deprecated

Command node-group is deprecated. NodeGroup v1alpha1 API is deprecated, please migrate to v1.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mk8s v1alpha1 node-group list Source: https://docs.nebius.com/cli/reference/mk8s/v1alpha1/node-group/list

Name

nebius mk8s v1alpha1 node-group list

Deprecated

Command node-group is deprecated. NodeGroup v1alpha1 API is deprecated, please migrate to v1.

Synopsis

``` nebius mk8s v1alpha1 node-group list --page-size --page-token --parent-id [required] --all -i, --interactive ```

Options

`--page-size` (int64)

Specifies the maximum number of items to return in the response.

`--page-token` (string)

Token for pagination, allowing the retrieval of the next set of results.

`--parent-id` (string) \[required]

ID of the parent Cluster.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, // Specifies the maximum number of items to return in the response. "page_token": string, // Token for pagination, allowing the retrieval of the next set of results. "parent_id": string // [required] // ID of the parent Cluster. } ``` ```json theme={null} nebius mk8s v1alpha1 node-group list ' { "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius mk8s v1alpha1 node-group operation get Source: https://docs.nebius.com/cli/reference/mk8s/v1alpha1/node-group/operation/get

Name

nebius mk8s v1alpha1 node-group operation get

Get operation by ID.

Deprecated

Command node-group is deprecated. NodeGroup v1alpha1 API is deprecated, please migrate to v1.

Synopsis

``` nebius mk8s v1alpha1 node-group operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mk8s v1alpha1 node-group operation Source: https://docs.nebius.com/cli/reference/mk8s/v1alpha1/node-group/operation/index

Name

nebius mk8s v1alpha1 node-group operation

Manage operations for NodeGroup service.

Deprecated

Command node-group is deprecated. NodeGroup v1alpha1 API is deprecated, please migrate to v1.

Commands

nebius mk8s v1alpha1 node-group operation get

Get operation by ID.

nebius mk8s v1alpha1 node-group operation list

List operations by resource ID.

nebius mk8s v1alpha1 node-group operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mk8s v1alpha1 node-group operation list Source: https://docs.nebius.com/cli/reference/mk8s/v1alpha1/node-group/operation/list

Name

nebius mk8s v1alpha1 node-group operation list

List operations by resource ID.

Deprecated

Command node-group is deprecated. NodeGroup v1alpha1 API is deprecated, please migrate to v1.

Synopsis

``` nebius mk8s v1alpha1 node-group operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mk8s v1alpha1 node-group operation wait Source: https://docs.nebius.com/cli/reference/mk8s/v1alpha1/node-group/operation/wait

Name

nebius mk8s v1alpha1 node-group operation wait

Wait for operation to complete.

Deprecated

Command node-group is deprecated. NodeGroup v1alpha1 API is deprecated, please migrate to v1.

Synopsis

``` nebius mk8s v1alpha1 node-group operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mk8s v1alpha1 node-group update Source: https://docs.nebius.com/cli/reference/mk8s/v1alpha1/node-group/update

Name

nebius mk8s v1alpha1 node-group update

Deprecated

Command node-group is deprecated. NodeGroup v1alpha1 API is deprecated, please migrate to v1.

Synopsis

``` nebius mk8s v1alpha1 node-group update [id] --auto-repair-conditions --autoscaling-max-node-count --autoscaling-min-node-count --fixed-node-count --id --labels --labels-add --labels-remove --name --parent-id --resource-version --strategy-drain-timeout --strategy-max-surge-count --strategy-max-surge-percent --strategy-max-unavailable-count --strategy-max-unavailable-percent --template-boot-disk-block-size-bytes --template-boot-disk-size-bytes --template-boot-disk-size-gibibytes --template-boot-disk-size-kibibytes --template-boot-disk-size-mebibytes --template-boot-disk-type --template-cloud-init-user-data --template-filesystems --template-gpu-cluster-id --template-gpu-settings-drivers-preset --template-metadata-labels --template-network-interfaces --template-os --template-preemptible --template-resources-platform --template-resources-preset --template-service-account-id --template-taints --version --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--auto-repair-conditions` (json)

Conditions that determine whether a node should be auto repaired.

(structure)

disabled -> (bool)

When true, disables the default auto-repair condition rules.

Mutually exclusive with: timeout.

status -> (string)

Node condition status.

A value must be one of:

  • "condition\_status\_unspecified"
  • "true"
  • "false"
  • "unknown"

timeout -> (duration)\[google.protobuf.Duration]

The duration after which the node is automatically repaired if the condition remains in the specified status.

Mutually exclusive with: disabled.

type -> (string)\[required]

Node condition type.

JSON Schema:

```json theme={null} [{ "disabled": false, "status": "condition_status_unspecified"|"true"|"false"|"unknown", "type": "" }] ```

`--autoscaling-max-node-count` (int64)

Mutually exclusive with: `--fixed-node-count`.

`--autoscaling-min-node-count` (int64)

Mutually exclusive with: `--fixed-node-count`.

`--fixed-node-count` (int64)

Mutually exclusive with: `--autoscaling-max-node-count`, `--autoscaling-min-node-count`.

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--strategy-drain-timeout` (duration: 2h30m10s)

DrainTimeout is the total amount of time that the service will spend on draining a node.
By default, node can be drained without any time limitations.
NOTE: NodeDrainTimeout is different from `kubectl drain --timeout`.

`--strategy-max-surge-count` (int64)

Mutually exclusive with: `--strategy-max-surge-percent`.

`--strategy-max-surge-percent` (int64)

Mutually exclusive with: `--strategy-max-surge-count`.

`--strategy-max-unavailable-count` (int64)

Mutually exclusive with: `--strategy-max-unavailable-percent`.

`--strategy-max-unavailable-percent` (int64)

Mutually exclusive with: `--strategy-max-unavailable-count`.

`--template-boot-disk-block-size-bytes` (int64)

`--template-boot-disk-size-bytes` (int64)

Mutually exclusive with: `--template-boot-disk-size-gibibytes`, `--template-boot-disk-size-kibibytes`, `--template-boot-disk-size-mebibytes`.

`--template-boot-disk-size-gibibytes` (int64)

Mutually exclusive with: `--template-boot-disk-size-bytes`, `--template-boot-disk-size-kibibytes`, `--template-boot-disk-size-mebibytes`.

`--template-boot-disk-size-kibibytes` (int64)

Mutually exclusive with: `--template-boot-disk-size-bytes`, `--template-boot-disk-size-gibibytes`, `--template-boot-disk-size-mebibytes`.

`--template-boot-disk-size-mebibytes` (int64)

Mutually exclusive with: `--template-boot-disk-size-bytes`, `--template-boot-disk-size-gibibytes`, `--template-boot-disk-size-kibibytes`.

`--template-boot-disk-type` (string)

A value must be one of:

  • unspecified
  • network\_ssd
  • network\_hdd
  • network\_ssd\_io\_m3
  • network\_ssd\_non\_replicated

`--template-cloud-init-user-data` (string)

Cloud-init user-data. Must contain at least one SSH key.

`--template-filesystems` (json)

(structure)

attach\_mode -> (string)\[required]

A value must be one of:

  • "unspecified"
  • "read\_only"
  • "read\_write"

device\_name -> (string)\[required]

existing\_filesystem -> (structure)

id -> (string)\[required]

JSON Schema:

```json theme={null} [{ "attach_mode": "unspecified"|"read_only"|"read_write", "device_name": "", "existing_filesystem": { "id": "" } }] ```

`--template-gpu-cluster-id` (string)

`--template-gpu-settings-drivers-preset` (string)

Identifier of the predefined set of drivers included in the ComputeImage deployed on ComputeInstances that are part of the NodeGroup.
Supported presets for different platform / k8s version combinations:
* gpu-l40s-a, gpu-l40s-d, gpu-h100-sxm, gpu-h200-sxm:
* k8s: 1.30 → "cuda12" (CUDA 12.4)
* k8s: 1.31 → "cuda12" (CUDA 12.4), "cuda12.4", "cuda12.8"
* gpu-b200-sxm:
* k8s: 1.31 → "cuda12" (CUDA 12.8), "cuda12.8"
* gpu-b200-sxm-a:
* k8s: 1.31 → "cuda12.8".

`--template-metadata-labels` (string->string)

Labels will be propagated into nodes metadata.
System labels containing "kubernetes.io" and "k8s.io" will not be propagated.
On update labels they will not be updated in nodes right away, only on node group update.

`--template-network-interfaces` (json)

(structure)

public\_ip\_address -> (structure)\[meaningful\_empty\_value]

Public IPv4 address associated with the interface.

subnet\_id -> (string)\[non\_empty\_default]

Subnet ID that will be attached to a node cloud instance network interface.
By default control plane subnet\_id used.
Subnet should be located in the same network with control plane and have same parent ID as cluster.

JSON Schema:

```json theme={null} [{ "public_ip_address": { }, "subnet_id": "" }] ```

`--template-os` (string)

OS version that will be used to create the boot disk of Compute Instances in the NodeGroup.
Supported platform / k8s version / OS / driver presets combinations
* gpu-l40s-a, gpu-l40s-d, gpu-h100-sxm, gpu-h200-sxm, cpu-e1, cpu-e2, cpu-d3:
* drivers\_preset: ""
* k8s: 1.30 → "ubuntu22.04"
* k8s: 1.31 → "ubuntu22.04" (default), "ubuntu24.04"
* gpu-l40s-a, gpu-l40s-d, gpu-h100-sxm, gpu-h200-sxm:
* drivers\_preset: "cuda12" (CUDA 12.4)
* k8s: 1.30, 1.31 → "ubuntu22.04"
* drivers\_preset: "cuda12.4"
* k8s: 1.31 → "ubuntu22.04"
* drivers\_preset: "cuda12.8"
* k8s: 1.31 → "ubuntu24.04"
* gpu-b200-sxm:
* drivers\_preset: ""
* k8s: 1.30, 1.31 → "ubuntu24.04"
* drivers\_preset: "cuda12" (CUDA 12.8)
* k8s: 1.30, 1.31 → "ubuntu24.04"
* drivers\_preset: "cuda12.8"
* k8s: 1.31 → "ubuntu24.04"
* gpu-b200-sxm-a:
* drivers\_preset: ""
* k8s: 1.31 → "ubuntu24.04"
* drivers\_preset: "cuda12.8"
* k8s: 1.31 → "ubuntu24.04".

`--template-preemptible` (bool)

Configures whether the nodes in the group are preemptible.
Set to empty value to enable preemptible nodes.

`--template-resources-platform` (string)

`--template-resources-preset` (string)

`--template-service-account-id` (string)

The Nebius service account whose credentials will be available on the nodes of the group. With these credentials, it is possible to
make `nebius` CLI or public API requests from the nodes without the need for extra authentication. This service account is also used to
make requests to container registry.

`resource.serviceaccount.issueAccessToken` permission is required to use this field.

`--template-taints` (json)

(structure)

effect -> (string)\[required]

A value must be one of:

  • "effect\_unspecified"
  • "no\_execute"
  • "no\_schedule"
  • "prefer\_no\_schedule"

key -> (string)\[required]

value -> (string)\[required]

JSON Schema:

```json theme={null} [{ "effect": "effect_unspecified"|"no_execute"|"no_schedule"|"prefer_no_schedule", "key": "", "value": "" }] ```

`--version` (string)

Version is desired Kubernetes version of the cluster. For now only acceptable format is
`MAJOR.MINOR` like "1.31". Option for patch version update will be added later.
By default the cluster control plane MAJOR.MINOR version will be used.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // [required] "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "auto_repair": { // Parameters for nodes auto repair. "conditions": [{ // Conditions that determine whether a node should be auto repaired. "disabled": bool, // Cannot be set together with: timeout // When true, disables the default auto-repair condition rules. "status": enum( // Node condition status. "CONDITION_STATUS_UNSPECIFIED", "TRUE", "FALSE", "UNKNOWN" ), "timeout": "2h30m10s", // [google.protobuf.Duration] // Cannot be set together with: disabled // The duration after which the node is automatically repaired if the condition remains in the specified status. "type": string // [required] // Node condition type. }] }, "autoscaling": { // Cannot be set together with: fixed_node_count "max_node_count": int64, "min_node_count": int64 }, "fixed_node_count": int64, // Cannot be set together with: autoscaling "strategy": { "drain_timeout": "2h30m10s", // [google.protobuf.Duration] // DrainTimeout is the total amount of time that the service will spend on draining a node. // By default, node can be drained without any time limitations. // NOTE: NodeDrainTimeout is different from `kubectl drain --timeout`. "max_surge": { // The maximum number of machines that can be scheduled above the // desired number of machines. // Value can be an absolute number (ex: 5) or a percentage of // desired machines (ex: 10%). // This can not be 0 if MaxUnavailable is 0. // Absolute number is calculated from percentage by rounding up. // Defaults to 1. // Example: when this is set to 30%, the new MachineSet can be scaled // up immediately when the rolling update starts, such that the total // number of old and new machines do not exceed 130% of desired // machines. Once old machines have been killed, new MachineSet can // be scaled up further, ensuring that total number of machines running // at any time during the update is at most 130% of desired machines. "count": int64, // Cannot be set together with: percent "percent": int64 // Cannot be set together with: count }, "max_unavailable": { // The maximum number of machines that can be unavailable during the update. // Value can be an absolute number (ex: 5) or a percentage of desired // machines (ex: 10%). // Absolute number is calculated from percentage by rounding down. // This can not be 0 if MaxSurge is 0. // Defaults to 0. // Example: when this is set to 30%, the old MachineSet can be scaled // down to 70% of desired machines immediately when the rolling update // starts. Once new machines are ready, old MachineSet can be scaled // down further, followed by scaling up the new MachineSet, ensuring // that the total number of machines available at all times // during the update is at least 70% of desired machines. "count": int64, // Cannot be set together with: percent "percent": int64 // Cannot be set together with: count } }, "template": { // [required] "boot_disk": { // [non_empty_default] "block_size_bytes": int64, "size_bytes": int64, // Cannot be set together with: size_kibibytes, size_mebibytes, size_gibibytes "size_gibibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_mebibytes "size_kibibytes": int64, // Cannot be set together with: size_bytes, size_mebibytes, size_gibibytes "size_mebibytes": int64, // Cannot be set together with: size_bytes, size_kibibytes, size_gibibytes "type": enum( // [non_empty_default] "UNSPECIFIED", "NETWORK_SSD", // The list of available types will be clarified later, it is not final version. "NETWORK_HDD", "NETWORK_SSD_IO_M3", "NETWORK_SSD_NON_REPLICATED" ) }, "cloud_init_user_data": string, // [sensitive] // Cloud-init user-data. Must contain at least one SSH key. "filesystems": [{ "attach_mode": enum( // [required] "UNSPECIFIED", "READ_ONLY", "READ_WRITE" ), "device_name": string, // [required] "existing_filesystem": { "id": string // [required] } }], "gpu_cluster": { "id": string }, "gpu_settings": { // GPU-related settings. "drivers_preset": string // [required] // Identifier of the predefined set of drivers included in the ComputeImage deployed on ComputeInstances that are part of the NodeGroup. // Supported presets for different platform / k8s version combinations: // - gpu-l40s-a, gpu-l40s-d, gpu-h100-sxm, gpu-h200-sxm: // - k8s: 1.30 → "cuda12" (CUDA 12.4) // - k8s: 1.31 → "cuda12" (CUDA 12.4), "cuda12.4", "cuda12.8" // - gpu-b200-sxm: // - k8s: 1.31 → "cuda12" (CUDA 12.8), "cuda12.8" // - gpu-b200-sxm-a: // - k8s: 1.31 → "cuda12.8". }, "metadata": { "labels": { // [map] // Labels will be propagated into nodes metadata. // System labels containing "kubernetes.io" and "k8s.io" will not be propagated. // On update labels they will not be updated in nodes right away, only on node group update. string: string } }, "network_interfaces": [{ // [non_empty_default] "public_ip_address": { // [meaningful_empty_value] // Public IPv4 address associated with the interface. }, "subnet_id": string // [non_empty_default] // Subnet ID that will be attached to a node cloud instance network interface. // By default control plane subnet_id used. // Subnet should be located in the same network with control plane and have same parent ID as cluster. }], "os": string, // OS version that will be used to create the boot disk of Compute Instances in the NodeGroup. // Supported platform / k8s version / OS / driver presets combinations // - gpu-l40s-a, gpu-l40s-d, gpu-h100-sxm, gpu-h200-sxm, cpu-e1, cpu-e2, cpu-d3: // - drivers_preset: "" // - k8s: 1.30 → "ubuntu22.04" // - k8s: 1.31 → "ubuntu22.04" (default), "ubuntu24.04" // - gpu-l40s-a, gpu-l40s-d, gpu-h100-sxm, gpu-h200-sxm: // - drivers_preset: "cuda12" (CUDA 12.4) // - k8s: 1.30, 1.31 → "ubuntu22.04" // - drivers_preset: "cuda12.4" // - k8s: 1.31 → "ubuntu22.04" // - drivers_preset: "cuda12.8" // - k8s: 1.31 → "ubuntu24.04" // - gpu-b200-sxm: // - drivers_preset: "" // - k8s: 1.30, 1.31 → "ubuntu24.04" // - drivers_preset: "cuda12" (CUDA 12.8) // - k8s: 1.30, 1.31 → "ubuntu24.04" // - drivers_preset: "cuda12.8" // - k8s: 1.31 → "ubuntu24.04" // - gpu-b200-sxm-a: // - drivers_preset: "" // - k8s: 1.31 → "ubuntu24.04" // - drivers_preset: "cuda12.8" // - k8s: 1.31 → "ubuntu24.04". "preemptible": { // [meaningful_empty_value] // Configures whether the nodes in the group are preemptible. // Set to empty value to enable preemptible nodes. }, "resources": { // [required] "platform": string, // [required] "preset": string }, "service_account_id": string, // The Nebius service account whose credentials will be available on the nodes of the group. With these credentials, it is possible to // make `nebius` CLI or public API requests from the nodes without the need for extra authentication. This service account is also used to // make requests to container registry. // // `resource.serviceaccount.issueAccessToken` permission is required to use this field. "taints": [{ "effect": enum( // [required] "EFFECT_UNSPECIFIED", "NO_EXECUTE", "NO_SCHEDULE", "PREFER_NO_SCHEDULE" ), "key": string, // [required] "value": string // [required] }] }, "version": string // Version is desired Kubernetes version of the cluster. For now only acceptable format is // `MAJOR.MINOR` like "1.31". Option for patch version update will be added later. // By default the cluster control plane MAJOR.MINOR version will be used. } } ``` ```json theme={null} nebius mk8s v1alpha1 node-group update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "auto_repair": { "conditions": [{ "disabled": false, "status": "condition_status_unspecified"|"true"|"false"|"unknown", "type": "" }] }, "autoscaling": { "max_node_count": 0, "min_node_count": 0 }, "strategy": { "drain_timeout": "2h30m10s", "max_surge": { "count": 0 }, "max_unavailable": { "count": 0 } }, "template": { "boot_disk": { "block_size_bytes": 0, "size_bytes": 0, "type": "unspecified"|"network_ssd"|"network_hdd"|"network_ssd_io_m3"|"network_ssd_non_replicated" }, "cloud_init_user_data": "", "filesystems": [{ "attach_mode": "unspecified"|"read_only"|"read_write", "device_name": "", "existing_filesystem": { "id": "" } }], "gpu_cluster": { "id": "" }, "gpu_settings": { "drivers_preset": "" }, "metadata": { "labels": { "": "" } }, "network_interfaces": [{ "public_ip_address": { }, "subnet_id": "" }], "os": "", "preemptible": { }, "resources": { "platform": "", "preset": "" }, "service_account_id": "", "taints": [{ "effect": "effect_unspecified"|"no_execute"|"no_schedule"|"prefer_no_schedule", "key": "", "value": "" }] }, "version": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius mk8s v1alpha1 node-group upgrade Source: https://docs.nebius.com/cli/reference/mk8s/v1alpha1/node-group/upgrade

Name

nebius mk8s v1alpha1 node-group upgrade

Deprecated

Command node-group is deprecated. NodeGroup v1alpha1 API is deprecated, please migrate to v1.

Synopsis

``` nebius mk8s v1alpha1 node-group upgrade [id] --id [required] --latest-infra-version --async ```

Positional Arguments

id

ID of the resource to upgrade.

Options

`--id` (string) \[required]

`--latest-infra-version` (bool)

Upgrades to the latest infra version, which includes latest supported kubernetes patch version. Kubernetes minor version remain the
same.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string, // [required] "latest_infra_version": { // [meaningful_empty_value] // Upgrades to the latest infra version, which includes latest supported kubernetes patch version. Kubernetes minor version remain the // same. } } ``` ```json theme={null} nebius mk8s v1alpha1 node-group upgrade ' { "id": "", "latest_infra_version": { } } ' ``` *Auto generated on 15-Jul-2026* # nebius msp Source: https://docs.nebius.com/cli/reference/msp/index

Name

nebius msp

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius msp mlflow Source: https://docs.nebius.com/cli/reference/msp/mlflow/index

Name

nebius msp mlflow

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius msp mlflow v1alpha1 cluster create Source: https://docs.nebius.com/cli/reference/msp/mlflow/v1alpha1/cluster/create

Name

nebius msp mlflow v1alpha1 cluster create

Creates a cluster.

Synopsis

``` nebius msp mlflow v1alpha1 cluster create --admin-password [required] --admin-username [required] --description --labels --name --network-id [required] --parent-id [required] --public-access --resource-version --service-account-id [required] --size --storage-bucket-name --async -i, --interactive ```

Options

`--admin-password` (string) \[required]

MLflow admin password.

`--admin-username` (string) \[required]

MLflow admin username.

`--description` (string)

Description of the cluster.

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--network-id` (string) \[required]

ID of the vpc network.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--public-access` (bool)

Either make cluster public accessible or accessible only via private VPC.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--service-account-id` (string) \[required]

Id of the service account that will be used to access S3 bucket (and create one if not provided).

`--size` (string)

Size defines how much resources will be allocated to mlflow
See supported sizes in the documentation. Default size is the smallest available in the region.

`--storage-bucket-name` (string)

Name of the Nebius S3 bucket for MLflow artifacts. If not provided, will be created under the same parent.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // [required] // Metadata associated with the new cluster. Must include parent_id in which we create the cluster. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // [required] // Specification for the new cluster. "admin_password": string, // [required] [sensitive] [input_only] // MLflow admin password. "admin_username": string, // [required] // MLflow admin username. "description": string, // Description of the cluster. "network_id": string, // [required] [immutable] // ID of the vpc network. "public_access": bool, // Either make cluster public accessible or accessible only via private VPC. "service_account_id": string, // [required] // Id of the service account that will be used to access S3 bucket (and create one if not provided). "size": string, // [non_empty_default] // Size defines how much resources will be allocated to mlflow // See supported sizes in the documentation. Default size is the smallest available in the region. "storage_bucket_name": string // Name of the Nebius S3 bucket for MLflow artifacts. If not provided, will be created under the same parent. } } ``` ```json theme={null} nebius msp mlflow v1alpha1 cluster create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "admin_password": "", "admin_username": "", "description": "", "network_id": "", "public_access": false, "service_account_id": "", "size": "", "storage_bucket_name": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius msp mlflow v1alpha1 cluster delete Source: https://docs.nebius.com/cli/reference/msp/mlflow/v1alpha1/cluster/delete

Name

nebius msp mlflow v1alpha1 cluster delete

Delete a cluster.

Synopsis

``` nebius msp mlflow v1alpha1 cluster delete [id] --id [required] --async ```

Positional Arguments

id

ID of the cluster to delete.

Options

`--id` (string) \[required]

ID of the cluster to delete.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] // ID of the cluster to delete. } ``` ```json theme={null} nebius msp mlflow v1alpha1 cluster delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius msp mlflow v1alpha1 cluster get Source: https://docs.nebius.com/cli/reference/msp/mlflow/v1alpha1/cluster/get

Name

nebius msp mlflow v1alpha1 cluster get

Returns the specified cluster.

Synopsis

``` nebius msp mlflow v1alpha1 cluster get [id] --id [required] ```

Positional Arguments

id

ID of the cluster to retrieve.

Options

`--id` (string) \[required]

ID of the cluster to retrieve.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] // ID of the cluster to retrieve. } ``` ```json theme={null} nebius msp mlflow v1alpha1 cluster get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius msp mlflow v1alpha1 cluster get-by-name Source: https://docs.nebius.com/cli/reference/msp/mlflow/v1alpha1/cluster/get-by-name

Name

nebius msp mlflow v1alpha1 cluster get-by-name

Returns the specified cluster.

Synopsis

``` nebius msp mlflow v1alpha1 cluster get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

Name of the cluster.

`--parent-id` (string) \[required]

Identifier of IAM container to get cluster from.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] // Name of the cluster. "parent_id": string // [required] // Identifier of IAM container to get cluster from. } ``` ```json theme={null} nebius msp mlflow v1alpha1 cluster get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius msp mlflow v1alpha1 cluster Source: https://docs.nebius.com/cli/reference/msp/mlflow/v1alpha1/cluster/index

Name

nebius msp mlflow v1alpha1 cluster

Commands

nebius msp mlflow v1alpha1 cluster create

Creates a cluster.

nebius msp mlflow v1alpha1 cluster delete

Delete a cluster.

nebius msp mlflow v1alpha1 cluster get

Returns the specified cluster.

nebius msp mlflow v1alpha1 cluster get-by-name

Returns the specified cluster.

nebius msp mlflow v1alpha1 cluster list

Retrieves a list of clusters.

nebius msp mlflow v1alpha1 cluster operation

Manage operations for Cluster service.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius msp mlflow v1alpha1 cluster list Source: https://docs.nebius.com/cli/reference/msp/mlflow/v1alpha1/cluster/list

Name

nebius msp mlflow v1alpha1 cluster list

Retrieves a list of clusters.

Synopsis

``` nebius msp mlflow v1alpha1 cluster list --page-size --page-token --parent-id [required] --all -i, --interactive ```

Options

`--page-size` (int64)

Specifies the maximum number of items to return in the response. Default value is 100.

`--page-token` (string)

Token for pagination, allowing the retrieval of the next set of results.

`--parent-id` (string) \[required]

Identifier of IAM container to list clusters from.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, // Specifies the maximum number of items to return in the response. Default value is 100. "page_token": string, // Token for pagination, allowing the retrieval of the next set of results. "parent_id": string // [required] // Identifier of IAM container to list clusters from. } ``` ```json theme={null} nebius msp mlflow v1alpha1 cluster list ' { "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius msp mlflow v1alpha1 cluster operation get Source: https://docs.nebius.com/cli/reference/msp/mlflow/v1alpha1/cluster/operation/get

Name

nebius msp mlflow v1alpha1 cluster operation get

Get operation by ID.

Synopsis

``` nebius msp mlflow v1alpha1 cluster operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius msp mlflow v1alpha1 cluster operation Source: https://docs.nebius.com/cli/reference/msp/mlflow/v1alpha1/cluster/operation/index

Name

nebius msp mlflow v1alpha1 cluster operation

Manage operations for Cluster service.

Commands

nebius msp mlflow v1alpha1 cluster operation get

Get operation by ID.

nebius msp mlflow v1alpha1 cluster operation list

List operations by resource ID.

nebius msp mlflow v1alpha1 cluster operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius msp mlflow v1alpha1 cluster operation list Source: https://docs.nebius.com/cli/reference/msp/mlflow/v1alpha1/cluster/operation/list

Name

nebius msp mlflow v1alpha1 cluster operation list

List operations by resource ID.

Synopsis

``` nebius msp mlflow v1alpha1 cluster operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius msp mlflow v1alpha1 cluster operation wait Source: https://docs.nebius.com/cli/reference/msp/mlflow/v1alpha1/cluster/operation/wait

Name

nebius msp mlflow v1alpha1 cluster operation wait

Wait for operation to complete.

Synopsis

``` nebius msp mlflow v1alpha1 cluster operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius msp mlflow v1alpha1 Source: https://docs.nebius.com/cli/reference/msp/mlflow/v1alpha1/index

Name

nebius msp mlflow v1alpha1

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius msp postgresql Source: https://docs.nebius.com/cli/reference/msp/postgresql/index

Name

nebius msp postgresql

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius msp postgresql v1alpha1 backup create Source: https://docs.nebius.com/cli/reference/msp/postgresql/v1alpha1/backup/create

Name

nebius msp postgresql v1alpha1 backup create

Creates a new on-demand backup.

Synopsis

``` nebius msp postgresql v1alpha1 backup create --cluster-id [required] --async -i, --interactive ```

Options

`--cluster-id` (string) \[required]

ID of the PostgreSQL cluster that holds backup.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "cluster_id": string // [required] // ID of the PostgreSQL cluster that holds backup. } ``` ```json theme={null} nebius msp postgresql v1alpha1 backup create ' { "cluster_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius msp postgresql v1alpha1 backup delete Source: https://docs.nebius.com/cli/reference/msp/postgresql/v1alpha1/backup/delete

Name

nebius msp postgresql v1alpha1 backup delete

Deletes an on-demand backup.

Synopsis

``` nebius msp postgresql v1alpha1 backup delete --backup-id [required] --cluster-id [required] --async ```

Options

`--backup-id` (string) \[required]

ID of the designated backup.

`--cluster-id` (string) \[required]

ID of the PostgreSQL cluster that holds backup.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "backup_id": string, // [required] // ID of the designated backup. "cluster_id": string // [required] // ID of the PostgreSQL cluster that holds backup. } ``` ```json theme={null} nebius msp postgresql v1alpha1 backup delete ' { "backup_id": "", "cluster_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius msp postgresql v1alpha1 backup get Source: https://docs.nebius.com/cli/reference/msp/postgresql/v1alpha1/backup/get

Name

nebius msp postgresql v1alpha1 backup get

Returns the specified PostgreSQL Cluster backup.
To get the list of available PostgreSQL Cluster backups, make a \[List] or \[ListByCluster] request.

Synopsis

``` nebius msp postgresql v1alpha1 backup get --backup-id [required] --cluster-id [required] ```

Options

`--backup-id` (string) \[required]

ID of the designated backup.

`--cluster-id` (string) \[required]

ID of the PostgreSQL cluster that holds backup.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "backup_id": string, // [required] // ID of the designated backup. "cluster_id": string // [required] // ID of the PostgreSQL cluster that holds backup. } ``` ```json theme={null} nebius msp postgresql v1alpha1 backup get ' { "backup_id": "", "cluster_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius msp postgresql v1alpha1 backup Source: https://docs.nebius.com/cli/reference/msp/postgresql/v1alpha1/backup/index

Name

nebius msp postgresql v1alpha1 backup

A set of methods for managing PostgreSQL Cluster backups.

Commands

nebius msp postgresql v1alpha1 backup create

Creates a new on-demand backup.

nebius msp postgresql v1alpha1 backup delete

Deletes an on-demand backup.

nebius msp postgresql v1alpha1 backup get

Returns the specified PostgreSQL Cluster backup.
To get the list of available PostgreSQL Cluster backups, make a \[List] or \[ListByCluster] request.

nebius msp postgresql v1alpha1 backup list

Retrieves the list of PostgreSQL Cluster backups by project.

nebius msp postgresql v1alpha1 backup list-by-cluster

Retrieves the list of PostgreSQL Cluster backups by cluster.

nebius msp postgresql v1alpha1 backup operation

Manage operations for Backup service.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius msp postgresql v1alpha1 backup list Source: https://docs.nebius.com/cli/reference/msp/postgresql/v1alpha1/backup/list

Name

nebius msp postgresql v1alpha1 backup list

Retrieves the list of PostgreSQL Cluster backups by project.

Synopsis

``` nebius msp postgresql v1alpha1 backup list --parent-id [required] ```

Options

`--parent-id` (string) \[required]

Identifier of IAM container to list backups from.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "parent_id": string // [required] // Identifier of IAM container to list backups from. } ``` ```json theme={null} nebius msp postgresql v1alpha1 backup list ' { "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius msp postgresql v1alpha1 backup list-by-cluster Source: https://docs.nebius.com/cli/reference/msp/postgresql/v1alpha1/backup/list-by-cluster

Name

nebius msp postgresql v1alpha1 backup list-by-cluster

Retrieves the list of PostgreSQL Cluster backups by cluster.

Synopsis

``` nebius msp postgresql v1alpha1 backup list-by-cluster --cluster-id [required] ```

Options

`--cluster-id` (string) \[required]

ID of the PostgreSQL cluster to list backups from.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "cluster_id": string // [required] // ID of the PostgreSQL cluster to list backups from. } ``` ```json theme={null} nebius msp postgresql v1alpha1 backup list-by-cluster ' { "cluster_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius msp postgresql v1alpha1 backup operation get Source: https://docs.nebius.com/cli/reference/msp/postgresql/v1alpha1/backup/operation/get

Name

nebius msp postgresql v1alpha1 backup operation get

Get operation by ID.

Synopsis

``` nebius msp postgresql v1alpha1 backup operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius msp postgresql v1alpha1 backup operation Source: https://docs.nebius.com/cli/reference/msp/postgresql/v1alpha1/backup/operation/index

Name

nebius msp postgresql v1alpha1 backup operation

Manage operations for Backup service.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius msp postgresql v1alpha1 backup operation list Source: https://docs.nebius.com/cli/reference/msp/postgresql/v1alpha1/backup/operation/list

Name

nebius msp postgresql v1alpha1 backup operation list

List operations by resource ID.

Synopsis

``` nebius msp postgresql v1alpha1 backup operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius msp postgresql v1alpha1 backup operation wait Source: https://docs.nebius.com/cli/reference/msp/postgresql/v1alpha1/backup/operation/wait

Name

nebius msp postgresql v1alpha1 backup operation wait

Wait for operation to complete.

Synopsis

``` nebius msp postgresql v1alpha1 backup operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius msp postgresql v1alpha1 cluster create Source: https://docs.nebius.com/cli/reference/msp/postgresql/v1alpha1/cluster/create

Name

nebius msp postgresql v1alpha1 cluster create

Creates a PostgreSQL cluster in the specified folder.

Synopsis

``` nebius msp postgresql v1alpha1 cluster create --backup-backup-window-start --backup-retention-policy --bootstrap-db-name [required] --bootstrap-user-name [required] --bootstrap-user-password --config-pooler-config-max-pool-size --config-pooler-config-pooling-mode --config-postgresql-config-16-autovacuum-analyze-scale-factor --config-postgresql-config-16-autovacuum-naptime --config-postgresql-config-16-autovacuum-vacuum-cost-delay --config-postgresql-config-16-autovacuum-vacuum-cost-limit --config-postgresql-config-16-autovacuum-vacuum-scale-factor --config-postgresql-config-16-autovacuum-work-mem --config-postgresql-config-16-default-transaction-read-only --config-postgresql-config-16-idle-in-transaction-session-timeout --config-postgresql-config-16-max-connections --config-postgresql-config-16-search-path --config-postgresql-config-16-shared-buffers --config-postgresql-config-16-statement-timeout --config-public-access --config-template-disk-size-gibibytes [required] --config-template-disk-type [required] --config-template-hosts-count [required] --config-template-resources-platform [required] --config-template-resources-preset [required] --config-version [required] --description --labels --name --network-id [required] --parent-id [required] --resource-version --async -i, --interactive ```

Options

`--backup-backup-window-start` (string)

Backup window start in "HH:MM:SS" format (UTC Time).

`--backup-retention-policy` (string)

Retention policy to be used for backups and WALs (i.e. '7d').

`--bootstrap-db-name` (string) \[required]

Name of the PostgreSQL database. 1-63 characters long.

`--bootstrap-user-name` (string) \[required]

Name of the bootstrap PostgreSQL user.

`--bootstrap-user-password` (string)

Password of the bootstrap PostgreSQL user.

`--config-pooler-config-max-pool-size` (int64)

Maximum number of connections in the pool for a single user/database pair.

`--config-pooler-config-pooling-mode` (string)

Mode that the connection pooler is working in.

A value must be one of:

  • pooling\_mode\_unspecified
  • session
  • transaction

`--config-postgresql-config-16-autovacuum-analyze-scale-factor` (float64)

`--config-postgresql-config-16-autovacuum-naptime` (int64)

In seconds.

`--config-postgresql-config-16-autovacuum-vacuum-cost-delay` (int64)

In milliseconds.

`--config-postgresql-config-16-autovacuum-vacuum-cost-limit` (int64)

`--config-postgresql-config-16-autovacuum-vacuum-scale-factor` (float64)

`--config-postgresql-config-16-autovacuum-work-mem` (int64)

In kilobytes.

`--config-postgresql-config-16-default-transaction-read-only` (bool)

`--config-postgresql-config-16-idle-in-transaction-session-timeout` (int64)

In milliseconds.

`--config-postgresql-config-16-max-connections` (int64)

`--config-postgresql-config-16-search-path` (string)

`--config-postgresql-config-16-shared-buffers` (int64)

In kilobytes.

`--config-postgresql-config-16-statement-timeout` (int64)

In milliseconds.

`--config-public-access` (bool)

Either make cluster public accessible or accessible only via private VPC.

`--config-template-disk-size-gibibytes` (int64) \[required]

`--config-template-disk-type` (string) \[required]

`--config-template-hosts-count` (int64) \[required]

`--config-template-resources-platform` (string) \[required]

`--config-template-resources-preset` (string) \[required]

`--config-version` (string) \[required]

Version of PostgreSQL used in the cluster.
Possible values: `16`.

`--description` (string)

Description of the PostgreSQL cluster.

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--network-id` (string) \[required]

Network ID in which the cluster is created.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // [required] // Metadata associated with the new cluster. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // [required] // Specification for the new cluster. "backup": { // [immutable] "backup_window_start": string, // Backup window start in "HH:MM:SS" format (UTC Time). "retention_policy": string // Retention policy to be used for backups and WALs (i.e. '7d'). }, "bootstrap": { // [required] "db_name": string, // [required] [immutable] // Name of the PostgreSQL database. 1-63 characters long. "user_name": string, // [required] [immutable] // Name of the bootstrap PostgreSQL user. "user_password": string // [sensitive] [input_only] // Password of the bootstrap PostgreSQL user. }, "config": { // [required] "pooler_config": { // Configuration of the connection pooler. "max_pool_size": int64, // [optional] // Maximum number of connections in the pool for a single user/database pair. "pooling_mode": enum( // Mode that the connection pooler is working in. "POOLING_MODE_UNSPECIFIED", "SESSION", // Session pooling mode. "TRANSACTION" // Transaction pooling mode. ) }, "postgresql_config_16": { // Configuration parameters for postgres. "autovacuum_analyze_scale_factor": double, // [optional] "autovacuum_naptime": int64, // [optional] // In seconds. "autovacuum_vacuum_cost_delay": int64, // [optional] // In milliseconds. "autovacuum_vacuum_cost_limit": int64, // [optional] "autovacuum_vacuum_scale_factor": double, // [optional] "autovacuum_work_mem": int64, // [optional] // In kilobytes. "default_transaction_read_only": bool, // [optional] "idle_in_transaction_session_timeout": int64, // [optional] // In milliseconds. "max_connections": int64, // [optional] "search_path": string, // [optional] "shared_buffers": int64, // [optional] // In kilobytes. "statement_timeout": int64 // [optional] // In milliseconds. }, "public_access": bool, // Either make cluster public accessible or accessible only via private VPC. "template": { // [required] // Resources allocated to PostgreSQL hosts. "disk": { // [required] "size_gibibytes": int64, // [required] "type": string // [required] }, "hosts": { // [required] "count": int64 // [required] }, "resources": { // [required] // Reduced msp.v1alpha1.resource.TemplateSpec. "platform": string, // [required] "preset": string // [required] } }, "version": string // [required] [immutable] // Version of PostgreSQL used in the cluster. // Possible values: `16`. }, "description": string, // [immutable] // Description of the PostgreSQL cluster. "network_id": string // [required] [immutable] // Network ID in which the cluster is created. } } ``` ```json theme={null} nebius msp postgresql v1alpha1 cluster create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "backup": { "backup_window_start": "", "retention_policy": "" }, "bootstrap": { "db_name": "", "user_name": "", "user_password": "" }, "config": { "pooler_config": { "max_pool_size": 0, "pooling_mode": "pooling_mode_unspecified"|"session"|"transaction" }, "postgresql_config_16": { "autovacuum_analyze_scale_factor": 0.0, "autovacuum_naptime": 0, "autovacuum_vacuum_cost_delay": 0, "autovacuum_vacuum_cost_limit": 0, "autovacuum_vacuum_scale_factor": 0.0, "autovacuum_work_mem": 0, "default_transaction_read_only": false, "idle_in_transaction_session_timeout": 0, "max_connections": 0, "search_path": "", "shared_buffers": 0, "statement_timeout": 0 }, "public_access": false, "template": { "disk": { "size_gibibytes": 0, "type": "" }, "hosts": { "count": 0 }, "resources": { "platform": "", "preset": "" } }, "version": "" }, "description": "", "network_id": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius msp postgresql v1alpha1 cluster delete Source: https://docs.nebius.com/cli/reference/msp/postgresql/v1alpha1/cluster/delete

Name

nebius msp postgresql v1alpha1 cluster delete

Deletes the specified PostgreSQL cluster.

Synopsis

``` nebius msp postgresql v1alpha1 cluster delete [id] --id --async ```

Positional Arguments

id

ID of the PostgreSQL cluster to delete.
To get the PostgreSQL cluster ID, use a \[ClusterService.List] request.

Options

`--id` (string)

ID of the PostgreSQL cluster to delete.
To get the PostgreSQL cluster ID, use a \[ClusterService.List] request.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // ID of the PostgreSQL cluster to delete. // To get the PostgreSQL cluster ID, use a [ClusterService.List] request. } ``` ```json theme={null} nebius msp postgresql v1alpha1 cluster delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius msp postgresql v1alpha1 cluster edit Source: https://docs.nebius.com/cli/reference/msp/postgresql/v1alpha1/cluster/edit

Name

nebius msp postgresql v1alpha1 cluster edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius msp postgresql v1alpha1 cluster edit [id] --async --editor --id ```

Positional Arguments

id

ID of the PostgreSQL Cluster resource to return.
To get the cluster ID use a \[ClusterService.List] request.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

ID of the PostgreSQL Cluster resource to return.
To get the cluster ID use a \[ClusterService.List] request.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius msp postgresql v1alpha1 cluster edit-by-name Source: https://docs.nebius.com/cli/reference/msp/postgresql/v1alpha1/cluster/edit-by-name

Name

nebius msp postgresql v1alpha1 cluster edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

Synopsis

``` nebius msp postgresql v1alpha1 cluster edit-by-name --async --editor --name --parent-id ```

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--name` (string)

`--parent-id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius msp postgresql v1alpha1 cluster get Source: https://docs.nebius.com/cli/reference/msp/postgresql/v1alpha1/cluster/get

Name

nebius msp postgresql v1alpha1 cluster get

Returns the specified PostgreSQL Cluster resource.
To get the list of available PostgreSQL Cluster resources, make a \[List] request.

Synopsis

``` nebius msp postgresql v1alpha1 cluster get [id] --id [required] ```

Positional Arguments

id

ID of the PostgreSQL Cluster resource to return.
To get the cluster ID use a \[ClusterService.List] request.

Options

`--id` (string) \[required]

ID of the PostgreSQL Cluster resource to return.
To get the cluster ID use a \[ClusterService.List] request.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] // ID of the PostgreSQL Cluster resource to return. // To get the cluster ID use a [ClusterService.List] request. } ``` ```json theme={null} nebius msp postgresql v1alpha1 cluster get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius msp postgresql v1alpha1 cluster get-by-name Source: https://docs.nebius.com/cli/reference/msp/postgresql/v1alpha1/cluster/get-by-name

Name

nebius msp postgresql v1alpha1 cluster get-by-name

Returns the specified PostgreSQL Cluster resource by name.

Synopsis

``` nebius msp postgresql v1alpha1 cluster get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

`--parent-id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // [required] } ``` ```json theme={null} nebius msp postgresql v1alpha1 cluster get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius msp postgresql v1alpha1 cluster get-for-backup Source: https://docs.nebius.com/cli/reference/msp/postgresql/v1alpha1/cluster/get-for-backup

Name

nebius msp postgresql v1alpha1 cluster get-for-backup

Returns the specified PostgreSQL Cluster resource for backup.
It should be used as a hint of cluster configuration in case of backup restoration.

Synopsis

``` nebius msp postgresql v1alpha1 cluster get-for-backup [id] --backup-id [required] --id [required] ```

Positional Arguments

id

ID of the PostgreSQL cluster that holds backup.

Options

`--backup-id` (string) \[required]

ID of the backup for which source cluster is requested.

`--id` (string) \[required]

ID of the PostgreSQL cluster that holds backup.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "backup_id": string, // [required] // ID of the backup for which source cluster is requested. "id": string // [required] // ID of the PostgreSQL cluster that holds backup. } ``` ```json theme={null} nebius msp postgresql v1alpha1 cluster get-for-backup ' { "backup_id": "", "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius msp postgresql v1alpha1 cluster Source: https://docs.nebius.com/cli/reference/msp/postgresql/v1alpha1/cluster/index

Name

nebius msp postgresql v1alpha1 cluster

A set of methods for managing PostgreSQL Cluster resources.

Commands

nebius msp postgresql v1alpha1 cluster create

Creates a PostgreSQL cluster in the specified folder.

nebius msp postgresql v1alpha1 cluster delete

Deletes the specified PostgreSQL cluster.

nebius msp postgresql v1alpha1 cluster edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius msp postgresql v1alpha1 cluster edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

nebius msp postgresql v1alpha1 cluster get

Returns the specified PostgreSQL Cluster resource.
To get the list of available PostgreSQL Cluster resources, make a \[List] request.

nebius msp postgresql v1alpha1 cluster get-by-name

Returns the specified PostgreSQL Cluster resource by name.

nebius msp postgresql v1alpha1 cluster get-for-backup

Returns the specified PostgreSQL Cluster resource for backup.
It should be used as a hint of cluster configuration in case of backup restoration.

nebius msp postgresql v1alpha1 cluster list

Retrieves the list of PostgreSQL Cluster resources that belong
to the specified folder.

nebius msp postgresql v1alpha1 cluster operation

Manage operations for Cluster service.

nebius msp postgresql v1alpha1 cluster restore

Creates a new PostgreSQL cluster from a previously created backup.

nebius msp postgresql v1alpha1 cluster start

Wakes up suspended PostgreSQL cluster.

nebius msp postgresql v1alpha1 cluster stop

Suspends the PostgreSQL cluster to save resources.

nebius msp postgresql v1alpha1 cluster update

Updates the PostgreSQL cluster.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius msp postgresql v1alpha1 cluster list Source: https://docs.nebius.com/cli/reference/msp/postgresql/v1alpha1/cluster/list

Name

nebius msp postgresql v1alpha1 cluster list

Retrieves the list of PostgreSQL Cluster resources that belong
to the specified folder.

Synopsis

``` nebius msp postgresql v1alpha1 cluster list --page-size --page-token --parent-id [required] --all -i, --interactive ```

Options

`--page-size` (int64)

Specifies the maximum number of items to return in the response.

`--page-token` (string)

Token for pagination, allowing the retrieval of the next set of results.

`--parent-id` (string) \[required]

Identifier of IAM container to list clusters from.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, // Specifies the maximum number of items to return in the response. "page_token": string, // Token for pagination, allowing the retrieval of the next set of results. "parent_id": string // [required] // Identifier of IAM container to list clusters from. } ``` ```json theme={null} nebius msp postgresql v1alpha1 cluster list ' { "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius msp postgresql v1alpha1 cluster operation get Source: https://docs.nebius.com/cli/reference/msp/postgresql/v1alpha1/cluster/operation/get

Name

nebius msp postgresql v1alpha1 cluster operation get

Get operation by ID.

Synopsis

``` nebius msp postgresql v1alpha1 cluster operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius msp postgresql v1alpha1 cluster operation Source: https://docs.nebius.com/cli/reference/msp/postgresql/v1alpha1/cluster/operation/index

Name

nebius msp postgresql v1alpha1 cluster operation

Manage operations for Cluster service.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius msp postgresql v1alpha1 cluster operation list Source: https://docs.nebius.com/cli/reference/msp/postgresql/v1alpha1/cluster/operation/list

Name

nebius msp postgresql v1alpha1 cluster operation list

List operations by resource ID.

Synopsis

``` nebius msp postgresql v1alpha1 cluster operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius msp postgresql v1alpha1 cluster operation wait Source: https://docs.nebius.com/cli/reference/msp/postgresql/v1alpha1/cluster/operation/wait

Name

nebius msp postgresql v1alpha1 cluster operation wait

Wait for operation to complete.

Synopsis

``` nebius msp postgresql v1alpha1 cluster operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius msp postgresql v1alpha1 cluster restore Source: https://docs.nebius.com/cli/reference/msp/postgresql/v1alpha1/cluster/restore

Name

nebius msp postgresql v1alpha1 cluster restore

Creates a new PostgreSQL cluster from a previously created backup.

Synopsis

``` nebius msp postgresql v1alpha1 cluster restore [id] --backup-backup-window-start --backup-id [required] --backup-retention-policy --bootstrap-db-name [required] --bootstrap-user-name [required] --bootstrap-user-password --config-pooler-config-max-pool-size --config-pooler-config-pooling-mode --config-postgresql-config-16-autovacuum-analyze-scale-factor --config-postgresql-config-16-autovacuum-naptime --config-postgresql-config-16-autovacuum-vacuum-cost-delay --config-postgresql-config-16-autovacuum-vacuum-cost-limit --config-postgresql-config-16-autovacuum-vacuum-scale-factor --config-postgresql-config-16-autovacuum-work-mem --config-postgresql-config-16-default-transaction-read-only --config-postgresql-config-16-idle-in-transaction-session-timeout --config-postgresql-config-16-max-connections --config-postgresql-config-16-search-path --config-postgresql-config-16-shared-buffers --config-postgresql-config-16-statement-timeout --config-public-access --config-template-disk-size-gibibytes [required] --config-template-disk-type [required] --config-template-hosts-count [required] --config-template-resources-platform [required] --config-template-resources-preset [required] --config-version [required] --description --id --labels --name --network-id [required] --parent-id [required] --recovery-time --resource-version --source-cluster-id [required] --async ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--backup-backup-window-start` (string)

Backup window start in "HH:MM:SS" format (UTC Time).

`--backup-id` (string) \[required]

ID of the backup to restore from.

`--backup-retention-policy` (string)

Retention policy to be used for backups and WALs (i.e. '7d').

`--bootstrap-db-name` (string) \[required]

Name of the PostgreSQL database. 1-63 characters long.

`--bootstrap-user-name` (string) \[required]

Name of the bootstrap PostgreSQL user.

`--bootstrap-user-password` (string)

Password of the bootstrap PostgreSQL user.

`--config-pooler-config-max-pool-size` (int64)

Maximum number of connections in the pool for a single user/database pair.

`--config-pooler-config-pooling-mode` (string)

Mode that the connection pooler is working in.

A value must be one of:

  • pooling\_mode\_unspecified
  • session
  • transaction

`--config-postgresql-config-16-autovacuum-analyze-scale-factor` (float64)

`--config-postgresql-config-16-autovacuum-naptime` (int64)

In seconds.

`--config-postgresql-config-16-autovacuum-vacuum-cost-delay` (int64)

In milliseconds.

`--config-postgresql-config-16-autovacuum-vacuum-cost-limit` (int64)

`--config-postgresql-config-16-autovacuum-vacuum-scale-factor` (float64)

`--config-postgresql-config-16-autovacuum-work-mem` (int64)

In kilobytes.

`--config-postgresql-config-16-default-transaction-read-only` (bool)

`--config-postgresql-config-16-idle-in-transaction-session-timeout` (int64)

In milliseconds.

`--config-postgresql-config-16-max-connections` (int64)

`--config-postgresql-config-16-search-path` (string)

`--config-postgresql-config-16-shared-buffers` (int64)

In kilobytes.

`--config-postgresql-config-16-statement-timeout` (int64)

In milliseconds.

`--config-public-access` (bool)

Either make cluster public accessible or accessible only via private VPC.

`--config-template-disk-size-gibibytes` (int64) \[required]

`--config-template-disk-type` (string) \[required]

`--config-template-hosts-count` (int64) \[required]

`--config-template-resources-platform` (string) \[required]

`--config-template-resources-preset` (string) \[required]

`--config-version` (string) \[required]

Version of PostgreSQL used in the cluster.
Possible values: `16`.

`--description` (string)

Description of the PostgreSQL cluster.

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--network-id` (string) \[required]

Network ID in which the cluster is created.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--recovery-time` (timestamp: 1970-01-31T02:30:59Z)

Timestamp for point in time recovery.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--source-cluster-id` (string) \[required]

ID of the PostgreSQL cluster to restore from.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "backup_id": string, // [required] // ID of the backup to restore from. "metadata": { // [required] // Metadata associated with the new cluster. "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "recovery_time": "1970-01-31T02:30:59Z", // [google.protobuf.Timestamp] // Timestamp for point in time recovery. "source_cluster_id": string, // [required] // ID of the PostgreSQL cluster to restore from. "spec": { // [required] // Specification for the new cluster. "backup": { // [immutable] "backup_window_start": string, // Backup window start in "HH:MM:SS" format (UTC Time). "retention_policy": string // Retention policy to be used for backups and WALs (i.e. '7d'). }, "bootstrap": { // [required] "db_name": string, // [required] [immutable] // Name of the PostgreSQL database. 1-63 characters long. "user_name": string, // [required] [immutable] // Name of the bootstrap PostgreSQL user. "user_password": string // [sensitive] [input_only] // Password of the bootstrap PostgreSQL user. }, "config": { // [required] "pooler_config": { // Configuration of the connection pooler. "max_pool_size": int64, // [optional] // Maximum number of connections in the pool for a single user/database pair. "pooling_mode": enum( // Mode that the connection pooler is working in. "POOLING_MODE_UNSPECIFIED", "SESSION", // Session pooling mode. "TRANSACTION" // Transaction pooling mode. ) }, "postgresql_config_16": { // Configuration parameters for postgres. "autovacuum_analyze_scale_factor": double, // [optional] "autovacuum_naptime": int64, // [optional] // In seconds. "autovacuum_vacuum_cost_delay": int64, // [optional] // In milliseconds. "autovacuum_vacuum_cost_limit": int64, // [optional] "autovacuum_vacuum_scale_factor": double, // [optional] "autovacuum_work_mem": int64, // [optional] // In kilobytes. "default_transaction_read_only": bool, // [optional] "idle_in_transaction_session_timeout": int64, // [optional] // In milliseconds. "max_connections": int64, // [optional] "search_path": string, // [optional] "shared_buffers": int64, // [optional] // In kilobytes. "statement_timeout": int64 // [optional] // In milliseconds. }, "public_access": bool, // Either make cluster public accessible or accessible only via private VPC. "template": { // [required] // Resources allocated to PostgreSQL hosts. "disk": { // [required] "size_gibibytes": int64, // [required] "type": string // [required] }, "hosts": { // [required] "count": int64 // [required] }, "resources": { // [required] // Reduced msp.v1alpha1.resource.TemplateSpec. "platform": string, // [required] "preset": string // [required] } }, "version": string // [required] [immutable] // Version of PostgreSQL used in the cluster. // Possible values: `16`. }, "description": string, // [immutable] // Description of the PostgreSQL cluster. "network_id": string // [required] [immutable] // Network ID in which the cluster is created. } } ``` ```json theme={null} nebius msp postgresql v1alpha1 cluster restore ' { "backup_id": "", "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "recovery_time": "1970-01-31T02:30:59Z", "source_cluster_id": "", "spec": { "backup": { "backup_window_start": "", "retention_policy": "" }, "bootstrap": { "db_name": "", "user_name": "", "user_password": "" }, "config": { "pooler_config": { "max_pool_size": 0, "pooling_mode": "pooling_mode_unspecified"|"session"|"transaction" }, "postgresql_config_16": { "autovacuum_analyze_scale_factor": 0.0, "autovacuum_naptime": 0, "autovacuum_vacuum_cost_delay": 0, "autovacuum_vacuum_cost_limit": 0, "autovacuum_vacuum_scale_factor": 0.0, "autovacuum_work_mem": 0, "default_transaction_read_only": false, "idle_in_transaction_session_timeout": 0, "max_connections": 0, "search_path": "", "shared_buffers": 0, "statement_timeout": 0 }, "public_access": false, "template": { "disk": { "size_gibibytes": 0, "type": "" }, "hosts": { "count": 0 }, "resources": { "platform": "", "preset": "" } }, "version": "" }, "description": "", "network_id": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius msp postgresql v1alpha1 cluster start Source: https://docs.nebius.com/cli/reference/msp/postgresql/v1alpha1/cluster/start

Name

nebius msp postgresql v1alpha1 cluster start

Wakes up suspended PostgreSQL cluster.

Synopsis

``` nebius msp postgresql v1alpha1 cluster start [id] --id [required] --async ```

Positional Arguments

id

ID of the PostgreSQL Cluster resource to resume.
To get the cluster ID use a \[ClusterService.List] request.

Options

`--id` (string) \[required]

ID of the PostgreSQL Cluster resource to resume.
To get the cluster ID use a \[ClusterService.List] request.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] // ID of the PostgreSQL Cluster resource to resume. // To get the cluster ID use a [ClusterService.List] request. } ``` ```json theme={null} nebius msp postgresql v1alpha1 cluster start ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius msp postgresql v1alpha1 cluster stop Source: https://docs.nebius.com/cli/reference/msp/postgresql/v1alpha1/cluster/stop

Name

nebius msp postgresql v1alpha1 cluster stop

Suspends the PostgreSQL cluster to save resources.

Synopsis

``` nebius msp postgresql v1alpha1 cluster stop [id] --id [required] --async ```

Positional Arguments

id

ID of the PostgreSQL Cluster resource to pause.
To get the cluster ID use a \[ClusterService.List] request.

Options

`--id` (string) \[required]

ID of the PostgreSQL Cluster resource to pause.
To get the cluster ID use a \[ClusterService.List] request.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] // ID of the PostgreSQL Cluster resource to pause. // To get the cluster ID use a [ClusterService.List] request. } ``` ```json theme={null} nebius msp postgresql v1alpha1 cluster stop ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius msp postgresql v1alpha1 cluster update Source: https://docs.nebius.com/cli/reference/msp/postgresql/v1alpha1/cluster/update

Name

nebius msp postgresql v1alpha1 cluster update

Updates the PostgreSQL cluster.

Synopsis

``` nebius msp postgresql v1alpha1 cluster update [id] --bootstrap-user-password --config-pooler-config-max-pool-size --config-pooler-config-pooling-mode --config-postgresql-config-16-autovacuum-analyze-scale-factor --config-postgresql-config-16-autovacuum-naptime --config-postgresql-config-16-autovacuum-vacuum-cost-delay --config-postgresql-config-16-autovacuum-vacuum-cost-limit --config-postgresql-config-16-autovacuum-vacuum-scale-factor --config-postgresql-config-16-autovacuum-work-mem --config-postgresql-config-16-default-transaction-read-only --config-postgresql-config-16-idle-in-transaction-session-timeout --config-postgresql-config-16-max-connections --config-postgresql-config-16-search-path --config-postgresql-config-16-shared-buffers --config-postgresql-config-16-statement-timeout --config-public-access --config-template-disk-size-gibibytes --config-template-disk-type --config-template-hosts-count --config-template-resources-platform --config-template-resources-preset --id --labels --labels-add --labels-remove --name --parent-id --resource-version --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--bootstrap-user-password` (string)

Password of the bootstrap PostgreSQL user.

`--config-pooler-config-max-pool-size` (int64)

Maximum number of connections in the pool for a single user/database pair.

`--config-pooler-config-pooling-mode` (string)

Mode that the connection pooler is working in.

A value must be one of:

  • pooling\_mode\_unspecified
  • session
  • transaction

`--config-postgresql-config-16-autovacuum-analyze-scale-factor` (float64)

`--config-postgresql-config-16-autovacuum-naptime` (int64)

In seconds.

`--config-postgresql-config-16-autovacuum-vacuum-cost-delay` (int64)

In milliseconds.

`--config-postgresql-config-16-autovacuum-vacuum-cost-limit` (int64)

`--config-postgresql-config-16-autovacuum-vacuum-scale-factor` (float64)

`--config-postgresql-config-16-autovacuum-work-mem` (int64)

In kilobytes.

`--config-postgresql-config-16-default-transaction-read-only` (bool)

`--config-postgresql-config-16-idle-in-transaction-session-timeout` (int64)

In milliseconds.

`--config-postgresql-config-16-max-connections` (int64)

`--config-postgresql-config-16-search-path` (string)

`--config-postgresql-config-16-shared-buffers` (int64)

In kilobytes.

`--config-postgresql-config-16-statement-timeout` (int64)

In milliseconds.

`--config-public-access` (bool)

Either make cluster public accessible or accessible only via private VPC.

`--config-template-disk-size-gibibytes` (int64)

`--config-template-disk-type` (string)

`--config-template-hosts-count` (int64)

`--config-template-resources-platform` (string)

`--config-template-resources-preset` (string)

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // [required] // Metadata associated with the cluster. Must include id of the cluster we are going to update. "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // Updated specification for the cluster. "bootstrap": { // [required] "user_password": string // [sensitive] [input_only] // Password of the bootstrap PostgreSQL user. }, "config": { // [required] "pooler_config": { // Configuration of the connection pooler. "max_pool_size": int64, // [optional] // Maximum number of connections in the pool for a single user/database pair. "pooling_mode": enum( // Mode that the connection pooler is working in. "POOLING_MODE_UNSPECIFIED", "SESSION", // Session pooling mode. "TRANSACTION" // Transaction pooling mode. ) }, "postgresql_config_16": { // Configuration parameters for postgres. "autovacuum_analyze_scale_factor": double, // [optional] "autovacuum_naptime": int64, // [optional] // In seconds. "autovacuum_vacuum_cost_delay": int64, // [optional] // In milliseconds. "autovacuum_vacuum_cost_limit": int64, // [optional] "autovacuum_vacuum_scale_factor": double, // [optional] "autovacuum_work_mem": int64, // [optional] // In kilobytes. "default_transaction_read_only": bool, // [optional] "idle_in_transaction_session_timeout": int64, // [optional] // In milliseconds. "max_connections": int64, // [optional] "search_path": string, // [optional] "shared_buffers": int64, // [optional] // In kilobytes. "statement_timeout": int64 // [optional] // In milliseconds. }, "public_access": bool, // Either make cluster public accessible or accessible only via private VPC. "template": { // [required] // Resources allocated to PostgreSQL hosts. "disk": { // [required] "size_gibibytes": int64, // [required] "type": string // [required] }, "hosts": { // [required] "count": int64 // [required] }, "resources": { // [required] // Reduced msp.v1alpha1.resource.TemplateSpec. "platform": string, // [required] "preset": string // [required] } } } } } ``` ```json theme={null} nebius msp postgresql v1alpha1 cluster update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "bootstrap": { "user_password": "" }, "config": { "pooler_config": { "max_pool_size": 0, "pooling_mode": "pooling_mode_unspecified"|"session"|"transaction" }, "postgresql_config_16": { "autovacuum_analyze_scale_factor": 0.0, "autovacuum_naptime": 0, "autovacuum_vacuum_cost_delay": 0, "autovacuum_vacuum_cost_limit": 0, "autovacuum_vacuum_scale_factor": 0.0, "autovacuum_work_mem": 0, "default_transaction_read_only": false, "idle_in_transaction_session_timeout": 0, "max_connections": 0, "search_path": "", "shared_buffers": 0, "statement_timeout": 0 }, "public_access": false, "template": { "disk": { "size_gibibytes": 0, "type": "" }, "hosts": { "count": 0 }, "resources": { "platform": "", "preset": "" } } } } } ' ``` *Auto generated on 15-Jul-2026* # nebius msp postgresql v1alpha1 Source: https://docs.nebius.com/cli/reference/msp/postgresql/v1alpha1/index

Name

nebius msp postgresql v1alpha1

Commands

nebius msp postgresql v1alpha1 backup

A set of methods for managing PostgreSQL Cluster backups.

nebius msp postgresql v1alpha1 cluster

A set of methods for managing PostgreSQL Cluster resources.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mysterybox Source: https://docs.nebius.com/cli/reference/mysterybox/index

Name

nebius mysterybox

Commands

nebius mysterybox payload

nebius mysterybox secret

A set of methods for managing secrets.

nebius mysterybox secret-version

A set of methods for managing secret's versions.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mysterybox payload get Source: https://docs.nebius.com/cli/reference/mysterybox/payload/get

Name

nebius mysterybox payload get

Returns the secret's payload in its decrypted format.

Synopsis

``` nebius mysterybox payload get --secret-id --version-id ```

Options

`--secret-id` (string)

`--version-id` (string)

Desired version of the secret. If not provided, the primary version of the secret will be returned.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "secret_id": string, "version_id": string // [non_empty_default] // Desired version of the secret. If not provided, the primary version of the secret will be returned. } ``` ```json theme={null} nebius mysterybox payload get ' { "secret_id": "", "version_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius mysterybox payload get-by-key Source: https://docs.nebius.com/cli/reference/mysterybox/payload/get-by-key

Name

nebius mysterybox payload get-by-key

Returns the secret's payload value by key in its decrypted format.

Synopsis

``` nebius mysterybox payload get-by-key --key [required] --secret-id --version-id ```

Options

`--key` (string) \[required]

Payload's key to be retrieved.

`--secret-id` (string)

`--version-id` (string)

Desired version of the secret. If not provided, the primary version of the secret will be returned.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "key": string, // [required] // Payload's key to be retrieved. "secret_id": string, "version_id": string // [non_empty_default] // Desired version of the secret. If not provided, the primary version of the secret will be returned. } ``` ```json theme={null} nebius mysterybox payload get-by-key ' { "key": "", "secret_id": "", "version_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius mysterybox payload Source: https://docs.nebius.com/cli/reference/mysterybox/payload/index

Name

nebius mysterybox payload

Commands

nebius mysterybox payload get

Returns the secret's payload in its decrypted format.

nebius mysterybox payload get-by-key

Returns the secret's payload value by key in its decrypted format.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mysterybox secret-version create Source: https://docs.nebius.com/cli/reference/mysterybox/secret-version/create

Name

nebius mysterybox secret-version create

Creates a new secret version in the specified container.

Synopsis

``` nebius mysterybox secret-version create --description --labels --name --parent-id [required] --payload [required] --resource-version --set-primary --async -i, --interactive ```

Options

`--description` (string)

Description of the version.

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--payload` (json) \[required]

Payload entries related to the version.

(structure)

binary\_value -> (bytes)\[sensitive]

The binary data to encrypt and store in the version of the secret.

Mutually exclusive with: string\_value.

key -> (string)\[required] \[sensitive]

Non-confidential key of the payload entry.

string\_value -> (string)\[sensitive]

The text data to encrypt and store in the version of the secret.

Mutually exclusive with: binary\_value.

JSON Schema:

```json theme={null} [{ "binary_value": "", "key": "" }] ```

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--set-primary` (bool)

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "description": string, // [immutable] // Description of the version. "payload": [{ // [required] [immutable] [input_only] // Payload entries related to the version. "binary_value": bytes, // [sensitive] // Cannot be set together with: string_value // The binary data to encrypt and store in the version of the secret. "key": string, // [required] [sensitive] // Non-confidential key of the payload entry. "string_value": string // [sensitive] // Cannot be set together with: binary_value // The text data to encrypt and store in the version of the secret. }], "set_primary": bool // [input_only] } } ``` ```json theme={null} nebius mysterybox secret-version create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "description": "", "payload": [{ "binary_value": "", "key": "" }], "set_primary": false } } ' ``` *Auto generated on 15-Jul-2026* # nebius mysterybox secret-version delete Source: https://docs.nebius.com/cli/reference/mysterybox/secret-version/delete

Name

nebius mysterybox secret-version delete

Soft delete secret version.

Synopsis

``` nebius mysterybox secret-version delete [id] --id [required] --async ```

Positional Arguments

id

ID of the secret version to soft-delete.

Options

`--id` (string) \[required]

ID of the secret version to soft-delete.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] // ID of the secret version to soft-delete. } ``` ```json theme={null} nebius mysterybox secret-version delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius mysterybox secret-version get Source: https://docs.nebius.com/cli/reference/mysterybox/secret-version/get

Name

nebius mysterybox secret-version get

Returns the specified secret version, without its Payload.

Synopsis

``` nebius mysterybox secret-version get [id] --id [required] --show-scheduled-for-deletion ```

Positional Arguments

id

ID of secret versions to return.

Options

`--id` (string) \[required]

ID of secret versions to return.

`--show-scheduled-for-deletion` (bool)

By default, Get doesn't return resource if it is scheduled for deletion.
If show\_scheduled\_for\_deletion = true, the Get operation returns the resource even if it is scheduled for deletion.
If show\_scheduled\_for\_deletion = false, the Get method returns the NOT\_FOUND gRPC status code.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string, // [required] // ID of secret versions to return. "show_scheduled_for_deletion": bool // By default, Get doesn't return resource if it is scheduled for deletion. // If show_scheduled_for_deletion = true, the Get operation returns the resource even if it is scheduled for deletion. // If show_scheduled_for_deletion = false, the Get method returns the NOT_FOUND gRPC status code. } ``` ```json theme={null} nebius mysterybox secret-version get ' { "id": "", "show_scheduled_for_deletion": false } ' ``` *Auto generated on 15-Jul-2026* # nebius mysterybox secret-version Source: https://docs.nebius.com/cli/reference/mysterybox/secret-version/index

Name

nebius mysterybox secret-version

A set of methods for managing secret's versions.

Commands

nebius mysterybox secret-version create

Creates a new secret version in the specified container.

nebius mysterybox secret-version delete

Soft delete secret version.

nebius mysterybox secret-version get

Returns the specified secret version, without its Payload.

nebius mysterybox secret-version list

Returns the list of secret versions in a specified container, without its Payload.

nebius mysterybox secret-version operation

Manage operations for SecretVersion service.

nebius mysterybox secret-version undelete

Undelete secret version.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mysterybox secret-version list Source: https://docs.nebius.com/cli/reference/mysterybox/secret-version/list

Name

nebius mysterybox secret-version list

Returns the list of secret versions in a specified container, without its Payload.

Synopsis

``` nebius mysterybox secret-version list --page-size --page-token --parent-id [required] --show-scheduled-for-deletion --all -i, --interactive ```

Options

`--page-size` (int64)

The maximum number of results per page to return. If the number of available
results is larger than \[page\_size], the service returns a \[ListSecretVersionsResponse.next\_page\_token]
that can be used to get the next page of results in subsequent list requests.
Default value: 100.

`--page-token` (string)

Page token. To get the next page of results, set \[page\_token] to the
\[ListSecretVersionsResponse.next\_page\_token] returned by a previous list request.

`--parent-id` (string) \[required]

Secret id related to the version.

`--show-scheduled-for-deletion` (bool)

By default, List operation doesn't include resources that are scheduled for deletion.
If show\_scheduled\_for\_deletion = true, the listing includes resources that are scheduled for deletion.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, // The maximum number of results per page to return. If the number of available // results is larger than [page_size], the service returns a [ListSecretVersionsResponse.next_page_token] // that can be used to get the next page of results in subsequent list requests. // Default value: 100. "page_token": string, // Page token. To get the next page of results, set [page_token] to the // [ListSecretVersionsResponse.next_page_token] returned by a previous list request. "parent_id": string, // [required] // Secret id related to the version. "show_scheduled_for_deletion": bool // By default, List operation doesn't include resources that are scheduled for deletion. // If show_scheduled_for_deletion = true, the listing includes resources that are scheduled for deletion. } ``` ```json theme={null} nebius mysterybox secret-version list ' { "page_size": 0, "page_token": "", "parent_id": "", "show_scheduled_for_deletion": false } ' ``` *Auto generated on 15-Jul-2026* # nebius mysterybox secret-version operation get Source: https://docs.nebius.com/cli/reference/mysterybox/secret-version/operation/get

Name

nebius mysterybox secret-version operation get

Get operation by ID.

Synopsis

``` nebius mysterybox secret-version operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mysterybox secret-version operation Source: https://docs.nebius.com/cli/reference/mysterybox/secret-version/operation/index

Name

nebius mysterybox secret-version operation

Manage operations for SecretVersion service.

Commands

nebius mysterybox secret-version operation get

Get operation by ID.

nebius mysterybox secret-version operation list

List operations by resource ID.

nebius mysterybox secret-version operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mysterybox secret-version operation list Source: https://docs.nebius.com/cli/reference/mysterybox/secret-version/operation/list

Name

nebius mysterybox secret-version operation list

List operations by resource ID.

Synopsis

``` nebius mysterybox secret-version operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mysterybox secret-version operation wait Source: https://docs.nebius.com/cli/reference/mysterybox/secret-version/operation/wait

Name

nebius mysterybox secret-version operation wait

Wait for operation to complete.

Synopsis

``` nebius mysterybox secret-version operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mysterybox secret-version undelete Source: https://docs.nebius.com/cli/reference/mysterybox/secret-version/undelete

Name

nebius mysterybox secret-version undelete

Undelete secret version.

Synopsis

``` nebius mysterybox secret-version undelete [id] --id [required] --async ```

Positional Arguments

id

ID of the secret version to soft-delete.

Options

`--id` (string) \[required]

ID of the secret version to soft-delete.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] // ID of the secret version to soft-delete. } ``` ```json theme={null} nebius mysterybox secret-version undelete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius mysterybox secret create Source: https://docs.nebius.com/cli/reference/mysterybox/secret/create

Name

nebius mysterybox secret create

Creates a new secret in the specified container.

Synopsis

``` nebius mysterybox secret create --description --labels --name --parent-id [required] --primary-version-id --resource-version --secret-version-description --secret-version-payload --secret-version-set-primary --async -i, --interactive ```

Options

`--description` (string)

Description of the secret.

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--primary-version-id` (string)

Specifies the primary version of the secret to update its payload. This parameter should only be provided during update operations.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--secret-version-description` (string)

Description of the version.

`--secret-version-payload` (json)

Payload entries related to the version.

(structure)

binary\_value -> (bytes)\[sensitive]

The binary data to encrypt and store in the version of the secret.

Mutually exclusive with: string\_value.

key -> (string)\[required] \[sensitive]

Non-confidential key of the payload entry.

string\_value -> (string)\[sensitive]

The text data to encrypt and store in the version of the secret.

Mutually exclusive with: binary\_value.

JSON Schema:

```json theme={null} [{ "binary_value": "", "key": "" }] ```

`--secret-version-set-primary` (bool)

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "description": string, // Description of the secret. "primary_version_id": string, // [optional] [non_empty_default] // Specifies the primary version of the secret to update its payload. This parameter should only be provided during update operations. "secret_version": { // [immutable] [input_only] // Secret's version specification, defines the secret version, including its payload. This parameter must be specified only during create // operations. "description": string, // [immutable] // Description of the version. "payload": [{ // [required] [immutable] [input_only] // Payload entries related to the version. "binary_value": bytes, // [sensitive] // Cannot be set together with: string_value // The binary data to encrypt and store in the version of the secret. "key": string, // [required] [sensitive] // Non-confidential key of the payload entry. "string_value": string // [sensitive] // Cannot be set together with: binary_value // The text data to encrypt and store in the version of the secret. }], "set_primary": bool // [input_only] } } } ``` ```json theme={null} nebius mysterybox secret create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "description": "", "primary_version_id": "", "secret_version": { "description": "", "payload": [{ "binary_value": "", "key": "" }], "set_primary": false } } } ' ``` *Auto generated on 15-Jul-2026* # nebius mysterybox secret delete Source: https://docs.nebius.com/cli/reference/mysterybox/secret/delete

Name

nebius mysterybox secret delete

Soft delete secret.

Synopsis

``` nebius mysterybox secret delete [id] --id [required] --async ```

Positional Arguments

id

ID of the secret to soft-delete.

Options

`--id` (string) \[required]

ID of the secret to soft-delete.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] // ID of the secret to soft-delete. } ``` ```json theme={null} nebius mysterybox secret delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius mysterybox secret edit Source: https://docs.nebius.com/cli/reference/mysterybox/secret/edit

Name

nebius mysterybox secret edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius mysterybox secret edit [id] --async --editor --id --show-scheduled-for-deletion ```

Positional Arguments

id

ID of secret to return.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

ID of secret to return.

`--show-scheduled-for-deletion` (bool)

By default, Get doesn't return resource if it is scheduled for deletion.
If show\_scheduled\_for\_deletion = true, the Get operation returns the resource even if it is scheduled for deletion.
If show\_scheduled\_for\_deletion = false, the Get method returns the NOT\_FOUND gRPC status code.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mysterybox secret edit-by-name Source: https://docs.nebius.com/cli/reference/mysterybox/secret/edit-by-name

Name

nebius mysterybox secret edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

Synopsis

``` nebius mysterybox secret edit-by-name --async --editor --name --parent-id ```

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--name` (string)

`--parent-id` (string)

ParentId and name of the secret to return.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mysterybox secret get Source: https://docs.nebius.com/cli/reference/mysterybox/secret/get

Name

nebius mysterybox secret get

Returns the specified secret, without its Payload.

Synopsis

``` nebius mysterybox secret get [id] --id [required] --show-scheduled-for-deletion ```

Positional Arguments

id

ID of secret to return.

Options

`--id` (string) \[required]

ID of secret to return.

`--show-scheduled-for-deletion` (bool)

By default, Get doesn't return resource if it is scheduled for deletion.
If show\_scheduled\_for\_deletion = true, the Get operation returns the resource even if it is scheduled for deletion.
If show\_scheduled\_for\_deletion = false, the Get method returns the NOT\_FOUND gRPC status code.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string, // [required] // ID of secret to return. "show_scheduled_for_deletion": bool // By default, Get doesn't return resource if it is scheduled for deletion. // If show_scheduled_for_deletion = true, the Get operation returns the resource even if it is scheduled for deletion. // If show_scheduled_for_deletion = false, the Get method returns the NOT_FOUND gRPC status code. } ``` ```json theme={null} nebius mysterybox secret get ' { "id": "", "show_scheduled_for_deletion": false } ' ``` *Auto generated on 15-Jul-2026* # nebius mysterybox secret get-by-name Source: https://docs.nebius.com/cli/reference/mysterybox/secret/get-by-name

Name

nebius mysterybox secret get-by-name

Returns the specified secret by name, without its Payload.

Synopsis

``` nebius mysterybox secret get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

`--parent-id` (string) \[required]

ParentId and name of the secret to return.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // [required] // ParentId and name of the secret to return. } ``` ```json theme={null} nebius mysterybox secret get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius mysterybox secret Source: https://docs.nebius.com/cli/reference/mysterybox/secret/index

Name

nebius mysterybox secret

A set of methods for managing secrets.

Commands

nebius mysterybox secret create

Creates a new secret in the specified container.

nebius mysterybox secret delete

Soft delete secret.

nebius mysterybox secret edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius mysterybox secret edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

nebius mysterybox secret get

Returns the specified secret, without its Payload.

nebius mysterybox secret get-by-name

Returns the specified secret by name, without its Payload.

nebius mysterybox secret list

Returns the list of secrets in a specified container, without its Payload.

nebius mysterybox secret operation

Manage operations for Secret service.

nebius mysterybox secret undelete

Undelete secret version.

nebius mysterybox secret update

Updates an existing secret, excluded its Payload.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mysterybox secret list Source: https://docs.nebius.com/cli/reference/mysterybox/secret/list

Name

nebius mysterybox secret list

Returns the list of secrets in a specified container, without its Payload.

Synopsis

``` nebius mysterybox secret list --page-size --page-token --parent-id [required] --show-scheduled-for-deletion --all -i, --interactive ```

Options

`--page-size` (int64)

The maximum number of results per page to return. If the number of available
results is larger than \[page\_size], the service returns a \[ListSecretsResponse.next\_page\_token]
that can be used to get the next page of results in subsequent list requests.
Default value: 100.

`--page-token` (string)

Page token. To get the next page of results, set \[page\_token] to the
\[ListSecretsResponse.next\_page\_token] returned by a previous list request.

`--parent-id` (string) \[required]

ParentId of the secret to return.

`--show-scheduled-for-deletion` (bool)

By default, List operation doesn't include resources that are scheduled for deletion.
If show\_scheduled\_for\_deletion = true, the listing includes resources that are scheduled for deletion.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, // The maximum number of results per page to return. If the number of available // results is larger than [page_size], the service returns a [ListSecretsResponse.next_page_token] // that can be used to get the next page of results in subsequent list requests. // Default value: 100. "page_token": string, // Page token. To get the next page of results, set [page_token] to the // [ListSecretsResponse.next_page_token] returned by a previous list request. "parent_id": string, // [required] // ParentId of the secret to return. "show_scheduled_for_deletion": bool // By default, List operation doesn't include resources that are scheduled for deletion. // If show_scheduled_for_deletion = true, the listing includes resources that are scheduled for deletion. } ``` ```json theme={null} nebius mysterybox secret list ' { "page_size": 0, "page_token": "", "parent_id": "", "show_scheduled_for_deletion": false } ' ``` *Auto generated on 15-Jul-2026* # nebius mysterybox secret operation get Source: https://docs.nebius.com/cli/reference/mysterybox/secret/operation/get

Name

nebius mysterybox secret operation get

Get operation by ID.

Synopsis

``` nebius mysterybox secret operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mysterybox secret operation Source: https://docs.nebius.com/cli/reference/mysterybox/secret/operation/index

Name

nebius mysterybox secret operation

Manage operations for Secret service.

Commands

nebius mysterybox secret operation get

Get operation by ID.

nebius mysterybox secret operation list

List operations by resource ID.

nebius mysterybox secret operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mysterybox secret operation list Source: https://docs.nebius.com/cli/reference/mysterybox/secret/operation/list

Name

nebius mysterybox secret operation list

List operations by resource ID.

Synopsis

``` nebius mysterybox secret operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mysterybox secret operation wait Source: https://docs.nebius.com/cli/reference/mysterybox/secret/operation/wait

Name

nebius mysterybox secret operation wait

Wait for operation to complete.

Synopsis

``` nebius mysterybox secret operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius mysterybox secret undelete Source: https://docs.nebius.com/cli/reference/mysterybox/secret/undelete

Name

nebius mysterybox secret undelete

Undelete secret version.

Synopsis

``` nebius mysterybox secret undelete [id] --id [required] --name --async ```

Positional Arguments

id

ID of the secret version to soft-delete.

Options

`--id` (string) \[required]

ID of the secret version to soft-delete.

`--name` (string)

A new Secret name in case the current one is already in use.
Empty value in name field means "use original name for undeleted Secret".
Undelete will fail if a Secret with the same name already exists.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string, // [required] // ID of the secret version to soft-delete. "name": string // A new Secret name in case the current one is already in use. // Empty value in name field means "use original name for undeleted Secret". // Undelete will fail if a Secret with the same name already exists. } ``` ```json theme={null} nebius mysterybox secret undelete ' { "id": "", "name": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius mysterybox secret update Source: https://docs.nebius.com/cli/reference/mysterybox/secret/update

Name

nebius mysterybox secret update

Updates an existing secret, excluded its Payload.

Synopsis

``` nebius mysterybox secret update [id] --description --id --labels --labels-add --labels-remove --name --parent-id --primary-version-id --resource-version --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--description` (string)

Description of the secret.

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--primary-version-id` (string)

Specifies the primary version of the secret to update its payload. This parameter should only be provided during update operations.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "description": string, // Description of the secret. "primary_version_id": string // [optional] [non_empty_default] // Specifies the primary version of the secret to update its payload. This parameter should only be provided during update operations. } } ``` ```json theme={null} nebius mysterybox secret update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "description": "", "primary_version_id": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius profile activate Source: https://docs.nebius.com/cli/reference/profile/activate

Name

nebius profile activate

Activate the specified profile

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius profile active Source: https://docs.nebius.com/cli/reference/profile/active

Name

nebius profile active

Print active profile name, set in the config, regardless of CLI flags and environment variables. It can be set by 'profile activate' command.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius profile create Source: https://docs.nebius.com/cli/reference/profile/create

Name

nebius profile create

Create a new profile

Synopsis

``` nebius profile create [profile] --endpoint --federated-subject-credentials-file-path --federation-endpoint --federation-id --parent-id --private-key-file --private-key-file-path --public-key-id --service-account-file --service-account-file-path --service-account-id --skip-auth --tenant-id --token-endpoint --token-file ```

Options

`--endpoint` (string)

API endpoint.

`--federated-subject-credentials-file-path` (string)

File path to a federated subject credentials.
Will be saved as path and read each time when used.

`--federation-endpoint` (string)

Federation endpoint.

`--federation-id` (string)

Federation ID.

`--parent-id` (string)

Parent ID to operate on by default.

`--private-key-file` (string)

File with a private key for the service account.

`--private-key-file-path` (string)

File path to a private key for the service account.
Will be saved as path and read each time when used.

`--public-key-id` (string)

Service account public key ID.

`--service-account-file` (string)

File with the info about the service account (credentials JSON file).

`--service-account-file-path` (string)

File path to the service account credentials JSON file.
Will be saved as path and read each time when used.

`--service-account-id` (string)

Service account ID.

`--skip-auth` (bool)

Skip cloud authentication.

`--tenant-id` (string)

Tenant ID to operate on by default.

`--token-endpoint` (string)

Endpoint with a IAM token for authentication (will be saved and used each time when needed).

`--token-file` (string)

File with a IAM token for authentication.
Will be saved as path and read each time when used.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius profile current Source: https://docs.nebius.com/cli/reference/profile/current

Name

nebius profile current

Print current profile name, selected by CLI. It can be either the active profile from the config or the profile from --profile flag, or from the environment variable NEBIUS\_PROFILE.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius profile delete Source: https://docs.nebius.com/cli/reference/profile/delete

Name

nebius profile delete

Delete the specified profile

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius profile Source: https://docs.nebius.com/cli/reference/profile/index

Name

nebius profile

Manage configuration profiles

Commands

nebius profile activate

Activate the specified profile

nebius profile active

Print active profile name, set in the config.

nebius profile create

Create a new profile

nebius profile current

Print current profile name.

nebius profile delete

Delete the specified profile

nebius profile list

List profiles

nebius profile update

Update a profile

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius profile list Source: https://docs.nebius.com/cli/reference/profile/list

Name

nebius profile list

List profiles

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius profile update Source: https://docs.nebius.com/cli/reference/profile/update

Name

nebius profile update

Update a profile

Synopsis

``` nebius profile update [profile] --endpoint --federated-subject-credentials-file-path --federation-endpoint --federation-id --parent-id --private-key-file --private-key-file-path --public-key-id --service-account-file --service-account-file-path --service-account-id --skip-auth --tenant-id --token-endpoint --token-file ```

Options

`--endpoint` (string)

API endpoint.

`--federated-subject-credentials-file-path` (string)

File path to a federated subject credentials.
Will be saved as path and read each time when used.

`--federation-endpoint` (string)

Federation endpoint.

`--federation-id` (string)

Federation ID.

`--parent-id` (string)

Parent ID to operate on by default.

`--private-key-file` (string)

File with a private key for the service account.

`--private-key-file-path` (string)

File path to a private key for the service account.
Will be saved as path and read each time when used.

`--public-key-id` (string)

Service account public key ID.

`--service-account-file` (string)

File with the info about the service account (credentials JSON file).

`--service-account-file-path` (string)

File path to the service account credentials JSON file.
Will be saved as path and read each time when used.

`--service-account-id` (string)

Service account ID.

`--skip-auth` (bool)

Skip cloud authentication.

`--tenant-id` (string)

Tenant ID to operate on by default.

`--token-endpoint` (string)

Endpoint with a IAM token for authentication (will be saved and used each time when needed).

`--token-file` (string)

File with a IAM token for authentication.
Will be saved as path and read each time when used.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius quotas Source: https://docs.nebius.com/cli/reference/quotas/index

Name

nebius quotas

Commands

nebius quotas quota-allowance

Manages quota allowances for tenants and projects, including listing, retrieval, and lifecycle operations.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius quotas quota-allowance create Source: https://docs.nebius.com/cli/reference/quotas/quota-allowance/create

Name

nebius quotas quota-allowance create

Creates a quota allowance for a Project.
If the quota already exists, its value is replaced with the provided one.

Synopsis

``` nebius quotas quota-allowance create --labels --limit --name --parent-id [required] --region --resource-version --async -i, --interactive ```

Options

`--labels` (string->string)

Labels associated with the resource.

`--limit` (uint64)

Total amount of resources allocated.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--region` (string)

Name of the region where the quota is allocated.
Example: "eu-north1".

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // [required] "limit": uint64, // [optional] // Total amount of resources allocated. "region": string // [immutable] // Name of the region where the quota is allocated. // Example: "eu-north1". } } ``` ```json theme={null} nebius quotas quota-allowance create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "limit": 0, "region": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius quotas quota-allowance delete Source: https://docs.nebius.com/cli/reference/quotas/quota-allowance/delete

Name

nebius quotas quota-allowance delete

Deletes a quota by its ID.
This is used to reset the quota value. It does not remove the quota entry.

Synopsis

``` nebius quotas quota-allowance delete [id] --id [required] --async ```

Positional Arguments

id

ID of the quota.

Options

`--id` (string) \[required]

ID of the quota.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] [identifier] // ID of the quota. } ``` ```json theme={null} nebius quotas quota-allowance delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius quotas quota-allowance edit Source: https://docs.nebius.com/cli/reference/quotas/quota-allowance/edit

Name

nebius quotas quota-allowance edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius quotas quota-allowance edit [id] --async --editor --id ```

Positional Arguments

id

ID of the quota.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

ID of the quota.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius quotas quota-allowance edit-by-name Source: https://docs.nebius.com/cli/reference/quotas/quota-allowance/edit-by-name

Name

nebius quotas quota-allowance edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

Synopsis

``` nebius quotas quota-allowance edit-by-name --async --editor --name --parent-id --region ```

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--name` (string)

Name of the quota.
Example: "compute.disk.size.network-ssd".

`--parent-id` (string)

ID of the Container to list quotas for.

`--region` (string)

Name of the region where the quota is allocated.
Example: "eu-north1".

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius quotas quota-allowance get Source: https://docs.nebius.com/cli/reference/quotas/quota-allowance/get

Name

nebius quotas quota-allowance get

Gets a quota allowance by its ID.

Synopsis

``` nebius quotas quota-allowance get [id] --id [required] ```

Positional Arguments

id

ID of the quota.

Options

`--id` (string) \[required]

ID of the quota.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] [identifier] // ID of the quota. } ``` ```json theme={null} nebius quotas quota-allowance get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius quotas quota-allowance get-by-name Source: https://docs.nebius.com/cli/reference/quotas/quota-allowance/get-by-name

Name

nebius quotas quota-allowance get-by-name

Gets a quota allowance for a Tenant or Project by container ID, region, and name.

Synopsis

``` nebius quotas quota-allowance get-by-name --name [required] --parent-id [required] --region [required] ```

Options

`--name` (string) \[required]

Name of the quota.
Example: "compute.disk.size.network-ssd".

`--parent-id` (string) \[required]

ID of the Container to list quotas for.

`--region` (string) \[required]

Name of the region where the quota is allocated.
Example: "eu-north1".

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] // Name of the quota. // Example: "compute.disk.size.network-ssd". "parent_id": string, // [required] // ID of the Container to list quotas for. "region": string // [required] // Name of the region where the quota is allocated. // Example: "eu-north1". } ``` ```json theme={null} nebius quotas quota-allowance get-by-name ' { "name": "", "parent_id": "", "region": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius quotas quota-allowance Source: https://docs.nebius.com/cli/reference/quotas/quota-allowance/index

Name

nebius quotas quota-allowance

Manages quota allowances for tenants and projects, including listing, retrieval, and lifecycle operations.

Commands

nebius quotas quota-allowance create

Creates a quota allowance for a Project.
If the quota already exists, its value is replaced with the provided one.

nebius quotas quota-allowance delete

Deletes a quota by its ID.
This is used to reset the quota value. It does not remove the quota entry.

nebius quotas quota-allowance edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius quotas quota-allowance edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

nebius quotas quota-allowance get

Gets a quota allowance by its ID.

nebius quotas quota-allowance get-by-name

Gets a quota allowance for a Tenant or Project by container ID, region, and name.

nebius quotas quota-allowance list

Lists quota allowances for the specified Tenant or Project.

nebius quotas quota-allowance operation

Manage operations for QuotaAllowance service.

nebius quotas quota-allowance update

Updates a quota allowance by its ID.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius quotas quota-allowance list Source: https://docs.nebius.com/cli/reference/quotas/quota-allowance/list

Name

nebius quotas quota-allowance list

Lists quota allowances for the specified Tenant or Project.

Synopsis

``` nebius quotas quota-allowance list --page-size --page-token --parent-id [required] --all -i, --interactive ```

Options

`--page-size` (int64)

Page size. Must be between \[1...1000].
Optional; if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Pass an empty string to start listing from the first page.

`--parent-id` (string) \[required]

ID of the Container to list quotas for.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, // Page size. Must be between [1...1000]. // Optional; if not specified, a reasonable default will be chosen by the service. "page_token": string, // Listing continuation token. Pass an empty string to start listing from the first page. "parent_id": string // [required] // ID of the Container to list quotas for. } ``` ```json theme={null} nebius quotas quota-allowance list ' { "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius quotas quota-allowance operation get Source: https://docs.nebius.com/cli/reference/quotas/quota-allowance/operation/get

Name

nebius quotas quota-allowance operation get

Get operation by ID.

Synopsis

``` nebius quotas quota-allowance operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius quotas quota-allowance operation Source: https://docs.nebius.com/cli/reference/quotas/quota-allowance/operation/index

Name

nebius quotas quota-allowance operation

Manage operations for QuotaAllowance service.

Commands

nebius quotas quota-allowance operation get

Get operation by ID.

nebius quotas quota-allowance operation list

List operations by resource ID.

nebius quotas quota-allowance operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius quotas quota-allowance operation list Source: https://docs.nebius.com/cli/reference/quotas/quota-allowance/operation/list

Name

nebius quotas quota-allowance operation list

List operations by resource ID.

Synopsis

``` nebius quotas quota-allowance operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius quotas quota-allowance operation wait Source: https://docs.nebius.com/cli/reference/quotas/quota-allowance/operation/wait

Name

nebius quotas quota-allowance operation wait

Wait for operation to complete.

Synopsis

``` nebius quotas quota-allowance operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius quotas quota-allowance update Source: https://docs.nebius.com/cli/reference/quotas/quota-allowance/update

Name

nebius quotas quota-allowance update

Updates a quota allowance by its ID.

Synopsis

``` nebius quotas quota-allowance update [id] --id --labels --labels-add --labels-remove --limit --name --parent-id --resource-version --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--limit` (uint64)

Total amount of resources allocated.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // [required] "limit": uint64 // [optional] // Total amount of resources allocated. } } ``` ```json theme={null} nebius quotas quota-allowance update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "limit": 0 } } ' ``` *Auto generated on 15-Jul-2026* # nebius registry configure-helper Source: https://docs.nebius.com/cli/reference/registry/configure-helper

Name

nebius registry configure-helper

Configure docker credential-helper for auth

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius registry create Source: https://docs.nebius.com/cli/reference/registry/create

Name

nebius registry create

Synopsis

``` nebius registry create --description --labels --name --parent-id [required] --resource-version --async -i, --interactive ```

Options

`--description` (string)

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "description": string } } ``` ```json theme={null} nebius registry create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "description": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius registry create-helper Source: https://docs.nebius.com/cli/reference/registry/create-helper

Name

nebius registry create-helper

Create docker credential helper to login

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius registry delete Source: https://docs.nebius.com/cli/reference/registry/delete

Name

nebius registry delete

Synopsis

``` nebius registry delete [id] --id [required] --async ```

Positional Arguments

id

ID of the resource to delete.

Options

`--id` (string) \[required]

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius registry delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius registry docker-credential get Source: https://docs.nebius.com/cli/reference/registry/docker-credential/get

Name

nebius registry docker-credential get

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius registry docker-credential Source: https://docs.nebius.com/cli/reference/registry/docker-credential/index

Name

nebius registry docker-credential

Use docker credential helper to login

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius registry edit Source: https://docs.nebius.com/cli/reference/registry/edit

Name

nebius registry edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius registry edit [id] --async --editor --id ```

Positional Arguments

id

ID of the resource to edit.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius registry get Source: https://docs.nebius.com/cli/reference/registry/get

Name

nebius registry get

Synopsis

``` nebius registry get [id] --id [required] ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius registry get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius registry image delete Source: https://docs.nebius.com/cli/reference/registry/image/delete

Name

nebius registry image delete

Synopsis

``` nebius registry image delete [id] --id [required] --async ```

Positional Arguments

id

ID of the resource to delete.

Options

`--id` (string) \[required]

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius registry image delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius registry image get Source: https://docs.nebius.com/cli/reference/registry/image/get

Name

nebius registry image get

Synopsis

``` nebius registry image get [id] --id [required] ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius registry image get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius registry image Source: https://docs.nebius.com/cli/reference/registry/image/index

Name

nebius registry image

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius registry image list Source: https://docs.nebius.com/cli/reference/registry/image/list

Name

nebius registry image list

Synopsis

``` nebius registry image list --filter --page-size --page-token --parent-id --all -i, --interactive ```

Options

`--filter` (string)

`--page-size` (int64)

`--page-token` (string)

`--parent-id` (string)

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "filter": string, "page_size": int64, "page_token": string, "parent_id": string } ``` ```json theme={null} nebius registry image list ' { "filter": "", "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius registry image operation get Source: https://docs.nebius.com/cli/reference/registry/image/operation/get

Name

nebius registry image operation get

Get operation by ID.

Synopsis

``` nebius registry image operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius registry image operation Source: https://docs.nebius.com/cli/reference/registry/image/operation/index

Name

nebius registry image operation

Manage operations for Artifact service.

Commands

nebius registry image operation get

Get operation by ID.

nebius registry image operation list

List operations by resource ID.

nebius registry image operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius registry image operation list Source: https://docs.nebius.com/cli/reference/registry/image/operation/list

Name

nebius registry image operation list

List operations by resource ID.

Synopsis

``` nebius registry image operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius registry image operation wait Source: https://docs.nebius.com/cli/reference/registry/image/operation/wait

Name

nebius registry image operation wait

Wait for operation to complete.

Synopsis

``` nebius registry image operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius registry Source: https://docs.nebius.com/cli/reference/registry/index

Name

nebius registry

Commands

nebius registry configure-helper

Configure docker credential-helper for auth

nebius registry create

nebius registry create-helper

Create docker credential helper to login

nebius registry delete

nebius registry docker-credential

Use docker credential helper to login

nebius registry edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius registry get

nebius registry image

nebius registry list

nebius registry operation

Manage operations for Registry service.

nebius registry update

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius registry list Source: https://docs.nebius.com/cli/reference/registry/list

Name

nebius registry list

Synopsis

``` nebius registry list --filter --page-size --page-token --parent-id --all -i, --interactive ```

Options

`--filter` (string)

`--page-size` (int64)

`--page-token` (string)

`--parent-id` (string)

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "filter": string, "page_size": int64, "page_token": string, "parent_id": string } ``` ```json theme={null} nebius registry list ' { "filter": "", "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius registry operation get Source: https://docs.nebius.com/cli/reference/registry/operation/get

Name

nebius registry operation get

Get operation by ID.

Synopsis

``` nebius registry operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius registry operation Source: https://docs.nebius.com/cli/reference/registry/operation/index

Name

nebius registry operation

Manage operations for Registry service.

Commands

nebius registry operation get

Get operation by ID.

nebius registry operation list

List operations by resource ID.

nebius registry operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius registry operation list Source: https://docs.nebius.com/cli/reference/registry/operation/list

Name

nebius registry operation list

List operations by resource ID.

Synopsis

``` nebius registry operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius registry operation wait Source: https://docs.nebius.com/cli/reference/registry/operation/wait

Name

nebius registry operation wait

Wait for operation to complete.

Synopsis

``` nebius registry operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius registry update Source: https://docs.nebius.com/cli/reference/registry/update

Name

nebius registry update

Synopsis

``` nebius registry update [id] --description --id --labels --labels-add --labels-remove --name --parent-id --resource-version --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--description` (string)

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "description": string } } ``` ```json theme={null} nebius registry update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "description": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius storage bucket create Source: https://docs.nebius.com/cli/reference/storage/bucket/create

Name

nebius storage bucket create

Synopsis

``` nebius storage bucket create --bucket-policy-rules --cors-rules --default-storage-class --force-storage-class --labels --lifecycle-configuration-last-access-filter-conditions --lifecycle-configuration-rules --max-size-bytes --name --object-audit-logging --parent-id [required] --resource-version --versioning-policy --async -i, --interactive ```

Options

`--bucket-policy-rules` (json)

Rule specifies which role must be given to a subject to access a set of objects with given
prefixes or a whole bucket.

(structure)

anonymous -> (structure)\[meaningful\_empty\_value]

Enable anonymous access. Only read-only roles are allowed in anonymous mode.

Mutually exclusive with: group\_id.

group\_id -> (string)

Group ID to grant access to.

Mutually exclusive with: anonymous.

paths -> (string)

A list of paths each of which is either a full object key or a prefix ending with a
single "*" wildcard character. A rule is only applied to objects matching any of paths.
If there is a path equal to "*", a rule applies to a whole bucket.

roles -> (string)

A set of roles which a subject will have. All `storage.*` roles are supported.

JSON Schema:

```json theme={null} [{ "anonymous": { }, "paths": [""], "roles": [""] }] ```

`--cors-rules` (json)

CORS rules.

(structure)

allowed\_headers -> (string)

Headers that are allowed in a preflight request through the Access-Control-Request-Headers header.

allowed\_methods -> (string)\[required]

HTTP methods CORS is allowed for: GET, PUT, POST, DELETE, HEAD.

allowed\_origins -> (string)\[required]

The origins that you want to allow cross-domain requests from. Single wildcard \* is allowed.

expose\_headers -> (string)

Headers in the response that you want customers to be able to access from their applications.

id -> (string)\[optional]

Optional rule identifier.

max\_age\_seconds -> (int32)\[optional]

Time in seconds that your browser can cache the response for a preflight request as identified by the resource.

JSON Schema:

```json theme={null} [{ "allowed_headers": [""], "allowed_methods": [""], "allowed_origins": [""], "expose_headers": [""], "id": "", "max_age_seconds": 0 }] ```

`--default-storage-class` (string)

Storage class to use by default for uploads to the bucket. It may be overridden by `x-amz-storage-class` header.
If not set - STANDARD is used as a default storage class.

A value must be one of:

  • storage\_class\_unspecified
  • standard
  • enhanced\_throughput
  • intelligent
  • filesystem

`--force-storage-class` (bool)

Flag to force usage of default\_storage\_class, ignoring `x-amz-storage-class` header.

`--labels` (string->string)

Labels associated with the resource.

`--lifecycle-configuration-last-access-filter-conditions` (json)

A request is included in `days_since_last_access` calculations if:
* The first condition matching the request has `INCLUDE` type.
OR
* The request doesn't match any conditions.

(structure)

methods -> (string)

The s3 methods to match.
An empty list matches all methods.

A value must be one of:

  • "method\_unspecified"
  • "get\_object"
  • "head\_object"
  • "get\_object\_tagging"
  • "copy\_object"
  • "upload\_part\_copy"

type -> (string)\[required]

A value must be one of:

  • "type\_unspecified"
  • "include"
  • "exclude"

user\_agents -> (string)

User agents to match. Condition is satisfied if the request's user agent contains any of these substrings.
An empty list matches all user agents.

JSON Schema:

```json theme={null} [{ "methods": "method_unspecified"|"get_object"|"head_object"|"get_object_tagging"|"copy_object"|"upload_part_copy", "type": "type_unspecified"|"include"|"exclude" , "user_agents": [""] }] ```

`--lifecycle-configuration-rules` (json)

(structure)

abort\_incomplete\_multipart\_upload -> (structure)

Specifies the days since the initiation of an incomplete multipart upload that
the system will wait before permanently removing all parts of the upload.

days\_after\_initiation -> (int32)

Specifies the days since the initiation of an incomplete multipart upload that
the system will wait before permanently removing all parts of the upload.

expiration -> (structure)

Specifies the expiration for the lifecycle of the object in the form of date, days and,
whether the object has a delete marker.

date -> (timestamp)\[google.protobuf.Timestamp]

Indicates at what date the object will be deleted. The time is always midnight UTC.

Mutually exclusive with: days.

days -> (int32)

Indicates the lifetime, in days, of the objects that are subject to the rule.
The value must be a non-zero positive integer.

Mutually exclusive with: date.

expired\_object\_delete\_marker -> (bool)

Indicates whether the system will remove a "delete marker" with no noncurrent versions.
If set to true, the "delete marker" will be permanently removed.
If set to false the policy takes no action.
This cannot be specified with Days or Date in a LifecycleExpiration Policy.

filter -> (structure)\[non\_empty\_default]

The Filter is used to identify objects that a Lifecycle Rule applies to.
The Lifecycle Rule will apply to any object matching all of the predicates
configured inside (using logical AND).

object\_size\_greater\_than\_bytes -> (int64)

Minimum object size to which the rule applies.

object\_size\_less\_than\_bytes -> (int64)

Maximum object size to which the rule applies.

prefix -> (string)

Prefix identifying one or more objects to which the rule applies.
If prefix is empty, the rule applies to all objects in the bucket.

tags -> (structure)

Tags to filter objects by their tagging. Rule applies only to objects that
match all tags in a filter.

key -> (string)

value -> (string)

id -> (string)\[required]

Unique identifier for the rule per configuration.
The value cannot be longer than 255 characters.

noncurrent\_version\_expiration -> (structure)

Specifies when noncurrent object versions expire.
It works only on a bucket that has versioning enabled (or suspended).

newer\_noncurrent\_versions -> (int32)\[optional]

Specifies how many noncurrent versions the system will retain.

noncurrent\_days -> (int32)

Specifies the number of days an object is noncurrent before the system will expire it.

noncurrent\_version\_transition -> (structure)

Specifies the transition for the lifecycle of a noncurrent object.
It works only on a bucket that has versioning enabled (or suspended).

newer\_noncurrent\_versions -> (int32)\[optional]

Specifies how many noncurrent versions the system will retain without transition.

noncurrent\_days -> (int32)

Specifies the number of days an object is noncurrent before the system will transit it.

storage\_class -> (string)

Target storage class to transit to.

A value must be one of:

  • "storage\_class\_unspecified"
  • "standard"
  • "enhanced\_throughput"
  • "intelligent"
  • "filesystem"

status -> (string)\[required]

A value must be one of:

  • "status\_unspecified"
  • "enabled"
  • "disabled"

transition -> (structure)

Specifies the transition for the lifecycle of an object in the form of date or days and
target storage class to transit object to.

date -> (timestamp)\[google.protobuf.Timestamp]

Indicates at what date the object will be transited. The time is always midnight UTC.

Mutually exclusive with: days, days\_since\_last\_access.

days -> (int32)

Amount of days since object was uploaded before it's transited to a new storage class.
The value must be a non-zero positive integer.

Mutually exclusive with: date, days\_since\_last\_access.

days\_since\_last\_access -> (int32)

The number of days since the object was last accessed before it is transitioned.

Mutually exclusive with: date, days.

storage\_class -> (string)

Target storage class to transit to.

A value must be one of:

  • "storage\_class\_unspecified"
  • "standard"
  • "enhanced\_throughput"
  • "intelligent"
  • "filesystem"

JSON Schema:

```json theme={null} [{ "abort_incomplete_multipart_upload": { "days_after_initiation": 0 }, "expiration": { "date": "1970-01-31T02:30:59Z", "expired_object_delete_marker": false }, "filter": { "object_size_greater_than_bytes": 0, "object_size_less_than_bytes": 0, "prefix": "", "tags": [{ "key": "", "value": "" }] }, "id": "", "noncurrent_version_expiration": { "newer_noncurrent_versions": 0, "noncurrent_days": 0 }, "noncurrent_version_transition": { "newer_noncurrent_versions": 0, "noncurrent_days": 0, "storage_class": "storage_class_unspecified"|"standard"|"enhanced_throughput"|"intelligent"|"filesystem" }, "status": "status_unspecified"|"enabled"|"disabled", "transition": { "date": "1970-01-31T02:30:59Z", "storage_class": "storage_class_unspecified"|"standard"|"enhanced_throughput"|"intelligent"|"filesystem" } }] ```

`--max-size-bytes` (int64)

Maximum bucket size.
Zero means unlimited.
Actual limit can be lower if customer doesn't have enough quota.
Real bucket size can go a little higher if customer writes too fast.

`--name` (string)

Human readable name for the resource.

`--object-audit-logging` (string)

Object audit logging specifies which requests must be logged - none, all or mutational only.

A value must be one of:

  • object\_audit\_logging\_unspecified
  • none
  • mutate\_only
  • all

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--versioning-policy` (string)

Supports transitions:
* disabled -> enabled
* disabled -> suspended
* enabled \<-> suspended.

A value must be one of:

  • versioning\_policy\_unspecified
  • disabled
  • enabled
  • suspended

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // [required] "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // [non_empty_default] "bucket_policy": { // Bucket policy specifies granular permissions for a bucket. "rules": [{ // Rule specifies which role must be given to a subject to access a set of objects with given // prefixes or a whole bucket. "anonymous": { // [meaningful_empty_value] // Cannot be set together with: group_id // Enable anonymous access. Only read-only roles are allowed in anonymous mode. }, "group_id": string, // Cannot be set together with: anonymous // Group ID to grant access to. "paths": [string], // A list of paths each of which is either a full object key or a prefix ending with a // single "*" wildcard character. A rule is only applied to objects matching any of paths. // If there is a path equal to "*", a rule applies to a whole bucket. "roles": [string] // A set of roles which a subject will have. All `storage.*` roles are supported. }] }, "cors": { // Cross-origin resource sharing configuration. "rules": [{ // CORS rules. "allowed_headers": [string], // Headers that are allowed in a preflight request through the Access-Control-Request-Headers header. "allowed_methods": [string], // [required] // HTTP methods CORS is allowed for: GET, PUT, POST, DELETE, HEAD. "allowed_origins": [string], // [required] // The origins that you want to allow cross-domain requests from. Single wildcard * is allowed. "expose_headers": [string], // Headers in the response that you want customers to be able to access from their applications. "id": string, // [optional] // Optional rule identifier. "max_age_seconds": int32 // [optional] // Time in seconds that your browser can cache the response for a preflight request as identified by the resource. }] }, "default_storage_class": enum( // Storage class to use by default for uploads to the bucket. It may be overridden by `x-amz-storage-class` header. // If not set - STANDARD is used as a default storage class. "STORAGE_CLASS_UNSPECIFIED", "STANDARD", "ENHANCED_THROUGHPUT", "INTELLIGENT", "FILESYSTEM" // Special storage class only for filesystem buckets. ), "force_storage_class": bool, // Flag to force usage of default_storage_class, ignoring `x-amz-storage-class` header. "lifecycle_configuration": { "last_access_filter": { // Specifies which requests are included in `days_since_last_access` calculations for all transition rules. "conditions": [{ // A request is included in `days_since_last_access` calculations if: // - The first condition matching the request has `INCLUDE` type. // OR // - The request doesn't match any conditions. "methods": enum( // The s3 methods to match. // An empty list matches all methods. "METHOD_UNSPECIFIED", "GET_OBJECT", "HEAD_OBJECT", "GET_OBJECT_TAGGING", "COPY_OBJECT", // Copy object method reads the source object. // We account for those operations as source object accesses when calculating `days_since_last_access` for source object. "UPLOAD_PART_COPY" // Upload part copy method reads the source object. // We account for those operations as source object accesses when calculating `days_since_last_access` for source object. ), "type": enum( // [required] "TYPE_UNSPECIFIED", "INCLUDE", // If an include type condition is the first condition that the request match, the request will be included in // `days_since_last_access` calculation. "EXCLUDE" // If an exclude type condition is the first condition that the request match, the request will be ignored in `days_since_last_access` // calculation. ), "user_agents": [string] // User agents to match. Condition is satisfied if the request's user agent contains any of these substrings. // An empty list matches all user agents. }] }, "rules": [{ "abort_incomplete_multipart_upload": { // Specifies the days since the initiation of an incomplete multipart upload that // the system will wait before permanently removing all parts of the upload. "days_after_initiation": int32 // Specifies the days since the initiation of an incomplete multipart upload that // the system will wait before permanently removing all parts of the upload. }, "expiration": { // Specifies the expiration for the lifecycle of the object in the form of date, days and, // whether the object has a delete marker. "date": "1970-01-31T02:30:59Z", // [google.protobuf.Timestamp] // Cannot be set together with: days // Indicates at what date the object will be deleted. The time is always midnight UTC. "days": int32, // Cannot be set together with: date // Indicates the lifetime, in days, of the objects that are subject to the rule. // The value must be a non-zero positive integer. "expired_object_delete_marker": bool // Indicates whether the system will remove a "delete marker" with no noncurrent versions. // If set to true, the "delete marker" will be permanently removed. // If set to false the policy takes no action. // This cannot be specified with Days or Date in a LifecycleExpiration Policy. }, "filter": { // [non_empty_default] // The Filter is used to identify objects that a Lifecycle Rule applies to. // The Lifecycle Rule will apply to any object matching all of the predicates // configured inside (using logical AND). "object_size_greater_than_bytes": int64, // Minimum object size to which the rule applies. "object_size_less_than_bytes": int64, // Maximum object size to which the rule applies. "prefix": string, // Prefix identifying one or more objects to which the rule applies. // If prefix is empty, the rule applies to all objects in the bucket. "tags": [{ // Tags to filter objects by their tagging. Rule applies only to objects that // match all tags in a filter. "key": string, "value": string }] }, "id": string, // [required] // Unique identifier for the rule per configuration. // The value cannot be longer than 255 characters. "noncurrent_version_expiration": { // Specifies when noncurrent object versions expire. // It works only on a bucket that has versioning enabled (or suspended). "newer_noncurrent_versions": int32, // [optional] // Specifies how many noncurrent versions the system will retain. "noncurrent_days": int32 // Specifies the number of days an object is noncurrent before the system will expire it. }, "noncurrent_version_transition": { // Specifies the transition for the lifecycle of a noncurrent object. // It works only on a bucket that has versioning enabled (or suspended). "newer_noncurrent_versions": int32, // [optional] // Specifies how many noncurrent versions the system will retain without transition. "noncurrent_days": int32, // Specifies the number of days an object is noncurrent before the system will transit it. "storage_class": enum( // Target storage class to transit to. "STORAGE_CLASS_UNSPECIFIED", "STANDARD", "ENHANCED_THROUGHPUT", "INTELLIGENT", "FILESYSTEM" // Special storage class only for filesystem buckets. ) }, "status": enum( // [required] "STATUS_UNSPECIFIED", "ENABLED", "DISABLED" ), "transition": { // Specifies the transition for the lifecycle of an object in the form of date or days and // target storage class to transit object to. "date": "1970-01-31T02:30:59Z", // [google.protobuf.Timestamp] // Cannot be set together with: days, days_since_last_access // Indicates at what date the object will be transited. The time is always midnight UTC. "days": int32, // Cannot be set together with: date, days_since_last_access // Amount of days since object was uploaded before it's transited to a new storage class. // The value must be a non-zero positive integer. "days_since_last_access": int32, // Cannot be set together with: date, days // The number of days since the object was last accessed before it is transitioned. "storage_class": enum( // Target storage class to transit to. "STORAGE_CLASS_UNSPECIFIED", "STANDARD", "ENHANCED_THROUGHPUT", "INTELLIGENT", "FILESYSTEM" // Special storage class only for filesystem buckets. ) } }] }, "max_size_bytes": int64, // Maximum bucket size. // Zero means unlimited. // Actual limit can be lower if customer doesn't have enough quota. // Real bucket size can go a little higher if customer writes too fast. "object_audit_logging": enum( // Object audit logging specifies which requests must be logged - none, all or mutational only. "OBJECT_AUDIT_LOGGING_UNSPECIFIED", "NONE", // Logging is disabled. "MUTATE_ONLY", // Logging enabled only for mutating requests. "ALL" // Logging enabled for all requests. ), "versioning_policy": enum( // [non_empty_default] // Supports transitions: // * disabled -> enabled // * disabled -> suspended // * enabled <-> suspended. "VERSIONING_POLICY_UNSPECIFIED", "DISABLED", "ENABLED", "SUSPENDED" ) } } ``` ```json theme={null} nebius storage bucket create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "bucket_policy": { "rules": [{ "anonymous": { }, "paths": [""], "roles": [""] }] }, "cors": { "rules": [{ "allowed_headers": [""], "allowed_methods": [""], "allowed_origins": [""], "expose_headers": [""], "id": "", "max_age_seconds": 0 }] }, "default_storage_class": "storage_class_unspecified"|"standard"|"enhanced_throughput"|"intelligent"|"filesystem", "force_storage_class": false, "lifecycle_configuration": { "last_access_filter": { "conditions": [{ "methods": "method_unspecified"|"get_object"|"head_object"|"get_object_tagging"|"copy_object"|"upload_part_copy", "type": "type_unspecified"|"include"|"exclude" , "user_agents": [""] }] }, "rules": [{ "abort_incomplete_multipart_upload": { "days_after_initiation": 0 }, "expiration": { "date": "1970-01-31T02:30:59Z", "expired_object_delete_marker": false }, "filter": { "object_size_greater_than_bytes": 0, "object_size_less_than_bytes": 0, "prefix": "", "tags": [{ "key": "", "value": "" }] }, "id": "", "noncurrent_version_expiration": { "newer_noncurrent_versions": 0, "noncurrent_days": 0 }, "noncurrent_version_transition": { "newer_noncurrent_versions": 0, "noncurrent_days": 0, "storage_class": "storage_class_unspecified"|"standard"|"enhanced_throughput"|"intelligent"|"filesystem" }, "status": "status_unspecified"|"enabled"|"disabled", "transition": { "date": "1970-01-31T02:30:59Z", "storage_class": "storage_class_unspecified"|"standard"|"enhanced_throughput"|"intelligent"|"filesystem" } }] }, "max_size_bytes": 0, "object_audit_logging": "object_audit_logging_unspecified"|"none"|"mutate_only"|"all" , "versioning_policy": "versioning_policy_unspecified"|"disabled"|"enabled"|"suspended" } } ' ``` *Auto generated on 15-Jul-2026* # nebius storage bucket delete Source: https://docs.nebius.com/cli/reference/storage/bucket/delete

Name

nebius storage bucket delete

Synopsis

``` nebius storage bucket delete [id] --id [required] --purge-at --ttl --async ```

Positional Arguments

id

ID of the resource to delete.

Options

`--id` (string) \[required]

`--purge-at` (timestamp: 1970-01-31T02:30:59Z)

Absolute purging time: status.purge\_at will be set to this value.

Mutually exclusive with: `--ttl`.

`--ttl` (duration: 2h30m10s)

Relative purging time: status.purge\_at will be set to (current timestamp + ttl).

Mutually exclusive with: `--purge-at`.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string, // [required] "purge_at": "1970-01-31T02:30:59Z", // [google.protobuf.Timestamp] // Cannot be set together with: ttl // Absolute purging time: status.purge_at will be set to this value. "ttl": "2h30m10s" // [google.protobuf.Duration] // Cannot be set together with: purge_at // Relative purging time: status.purge_at will be set to (current timestamp + ttl). } ``` ```json theme={null} nebius storage bucket delete ' { "id": "", "purge_at": "1970-01-31T02:30:59Z" } ' ``` *Auto generated on 15-Jul-2026* # nebius storage bucket edit Source: https://docs.nebius.com/cli/reference/storage/bucket/edit

Name

nebius storage bucket edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius storage bucket edit [id] --async --editor --id ```

Positional Arguments

id

ID of the resource to edit.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius storage bucket edit-by-name Source: https://docs.nebius.com/cli/reference/storage/bucket/edit-by-name

Name

nebius storage bucket edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

Synopsis

``` nebius storage bucket edit-by-name --async --editor --name --parent-id ```

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--name` (string)

`--parent-id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius storage bucket get Source: https://docs.nebius.com/cli/reference/storage/bucket/get

Name

nebius storage bucket get

Synopsis

``` nebius storage bucket get [id] --id [required] ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius storage bucket get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius storage bucket get-by-name Source: https://docs.nebius.com/cli/reference/storage/bucket/get-by-name

Name

nebius storage bucket get-by-name

Synopsis

``` nebius storage bucket get-by-name --name [required] --parent-id ```

Options

`--name` (string) \[required]

`--parent-id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string } ``` ```json theme={null} nebius storage bucket get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius storage bucket Source: https://docs.nebius.com/cli/reference/storage/bucket/index

Name

nebius storage bucket

Commands

nebius storage bucket create

nebius storage bucket delete

nebius storage bucket edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius storage bucket edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

nebius storage bucket get

nebius storage bucket get-by-name

nebius storage bucket list

nebius storage bucket operation

Manage operations for Bucket service.

nebius storage bucket purge

Purge instantly deletes the bucket in ScheduledForDeletion state.
It can be used only for buckets in ScheduledForDeletion state.
If you want to delete Active bucket instantly, use Delete with zero ttl.

nebius storage bucket undelete

Undelete recovers the bucket from ScheduledForDeletion state to Active.

nebius storage bucket update

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius storage bucket list Source: https://docs.nebius.com/cli/reference/storage/bucket/list

Name

nebius storage bucket list

Synopsis

``` nebius storage bucket list --filter --page-size --page-token --parent-id [required] --all -i, --interactive ```

Options

`--filter` (string)

A filter to narrow down the results based on specific criteria.

`--page-size` (int64)

Specifies the maximum number of items to return in the response.

`--page-token` (string)

Token for pagination, allowing the retrieval of the next set of results.

`--parent-id` (string) \[required]

Represents the container ID.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "filter": string, // A filter to narrow down the results based on specific criteria. "page_size": int64, // Specifies the maximum number of items to return in the response. "page_token": string, // Token for pagination, allowing the retrieval of the next set of results. "parent_id": string // [required] // Represents the container ID. } ``` ```json theme={null} nebius storage bucket list ' { "filter": "", "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius storage bucket operation get Source: https://docs.nebius.com/cli/reference/storage/bucket/operation/get

Name

nebius storage bucket operation get

Get operation by ID.

Synopsis

``` nebius storage bucket operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius storage bucket operation Source: https://docs.nebius.com/cli/reference/storage/bucket/operation/index

Name

nebius storage bucket operation

Manage operations for Bucket service.

Commands

nebius storage bucket operation get

Get operation by ID.

nebius storage bucket operation list

List operations by resource ID.

nebius storage bucket operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius storage bucket operation list Source: https://docs.nebius.com/cli/reference/storage/bucket/operation/list

Name

nebius storage bucket operation list

List operations by resource ID.

Synopsis

``` nebius storage bucket operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius storage bucket operation wait Source: https://docs.nebius.com/cli/reference/storage/bucket/operation/wait

Name

nebius storage bucket operation wait

Wait for operation to complete.

Synopsis

``` nebius storage bucket operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius storage bucket purge Source: https://docs.nebius.com/cli/reference/storage/bucket/purge

Name

nebius storage bucket purge

Purge instantly deletes the bucket in ScheduledForDeletion state.
It can be used only for buckets in ScheduledForDeletion state.
If you want to delete Active bucket instantly, use Delete with zero ttl.

Synopsis

``` nebius storage bucket purge [id] --id [required] --async ```

Positional Arguments

id

ID of the resource to purge.

Options

`--id` (string) \[required]

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius storage bucket purge ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius storage bucket undelete Source: https://docs.nebius.com/cli/reference/storage/bucket/undelete

Name

nebius storage bucket undelete

Undelete recovers the bucket from ScheduledForDeletion state to Active.

Synopsis

``` nebius storage bucket undelete [id] --id [required] --async ```

Positional Arguments

id

ID of the resource to undelete.

Options

`--id` (string) \[required]

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius storage bucket undelete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius storage bucket update Source: https://docs.nebius.com/cli/reference/storage/bucket/update

Name

nebius storage bucket update

Synopsis

``` nebius storage bucket update [id] --bucket-policy-rules --cors-rules --default-storage-class --force-storage-class --id --labels --labels-add --labels-remove --lifecycle-configuration-last-access-filter-conditions --lifecycle-configuration-rules --max-size-bytes --name --object-audit-logging --parent-id --resource-version --versioning-policy --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--bucket-policy-rules` (json)

Rule specifies which role must be given to a subject to access a set of objects with given
prefixes or a whole bucket.

(structure)

anonymous -> (structure)\[meaningful\_empty\_value]

Enable anonymous access. Only read-only roles are allowed in anonymous mode.

Mutually exclusive with: group\_id.

group\_id -> (string)

Group ID to grant access to.

Mutually exclusive with: anonymous.

paths -> (string)

A list of paths each of which is either a full object key or a prefix ending with a
single "*" wildcard character. A rule is only applied to objects matching any of paths.
If there is a path equal to "*", a rule applies to a whole bucket.

roles -> (string)

A set of roles which a subject will have. All `storage.*` roles are supported.

JSON Schema:

```json theme={null} [{ "anonymous": { }, "paths": [""], "roles": [""] }] ```

`--cors-rules` (json)

CORS rules.

(structure)

allowed\_headers -> (string)

Headers that are allowed in a preflight request through the Access-Control-Request-Headers header.

allowed\_methods -> (string)\[required]

HTTP methods CORS is allowed for: GET, PUT, POST, DELETE, HEAD.

allowed\_origins -> (string)\[required]

The origins that you want to allow cross-domain requests from. Single wildcard \* is allowed.

expose\_headers -> (string)

Headers in the response that you want customers to be able to access from their applications.

id -> (string)\[optional]

Optional rule identifier.

max\_age\_seconds -> (int32)\[optional]

Time in seconds that your browser can cache the response for a preflight request as identified by the resource.

JSON Schema:

```json theme={null} [{ "allowed_headers": [""], "allowed_methods": [""], "allowed_origins": [""], "expose_headers": [""], "id": "", "max_age_seconds": 0 }] ```

`--default-storage-class` (string)

Storage class to use by default for uploads to the bucket. It may be overridden by `x-amz-storage-class` header.
If not set - STANDARD is used as a default storage class.

A value must be one of:

  • storage\_class\_unspecified
  • standard
  • enhanced\_throughput
  • intelligent
  • filesystem

`--force-storage-class` (bool)

Flag to force usage of default\_storage\_class, ignoring `x-amz-storage-class` header.

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--lifecycle-configuration-last-access-filter-conditions` (json)

A request is included in `days_since_last_access` calculations if:
* The first condition matching the request has `INCLUDE` type.
OR
* The request doesn't match any conditions.

(structure)

methods -> (string)

The s3 methods to match.
An empty list matches all methods.

A value must be one of:

  • "method\_unspecified"
  • "get\_object"
  • "head\_object"
  • "get\_object\_tagging"
  • "copy\_object"
  • "upload\_part\_copy"

type -> (string)\[required]

A value must be one of:

  • "type\_unspecified"
  • "include"
  • "exclude"

user\_agents -> (string)

User agents to match. Condition is satisfied if the request's user agent contains any of these substrings.
An empty list matches all user agents.

JSON Schema:

```json theme={null} [{ "methods": "method_unspecified"|"get_object"|"head_object"|"get_object_tagging"|"copy_object"|"upload_part_copy", "type": "type_unspecified"|"include"|"exclude" , "user_agents": [""] }] ```

`--lifecycle-configuration-rules` (json)

(structure)

abort\_incomplete\_multipart\_upload -> (structure)

Specifies the days since the initiation of an incomplete multipart upload that
the system will wait before permanently removing all parts of the upload.

days\_after\_initiation -> (int32)

Specifies the days since the initiation of an incomplete multipart upload that
the system will wait before permanently removing all parts of the upload.

expiration -> (structure)

Specifies the expiration for the lifecycle of the object in the form of date, days and,
whether the object has a delete marker.

date -> (timestamp)\[google.protobuf.Timestamp]

Indicates at what date the object will be deleted. The time is always midnight UTC.

Mutually exclusive with: days.

days -> (int32)

Indicates the lifetime, in days, of the objects that are subject to the rule.
The value must be a non-zero positive integer.

Mutually exclusive with: date.

expired\_object\_delete\_marker -> (bool)

Indicates whether the system will remove a "delete marker" with no noncurrent versions.
If set to true, the "delete marker" will be permanently removed.
If set to false the policy takes no action.
This cannot be specified with Days or Date in a LifecycleExpiration Policy.

filter -> (structure)\[non\_empty\_default]

The Filter is used to identify objects that a Lifecycle Rule applies to.
The Lifecycle Rule will apply to any object matching all of the predicates
configured inside (using logical AND).

object\_size\_greater\_than\_bytes -> (int64)

Minimum object size to which the rule applies.

object\_size\_less\_than\_bytes -> (int64)

Maximum object size to which the rule applies.

prefix -> (string)

Prefix identifying one or more objects to which the rule applies.
If prefix is empty, the rule applies to all objects in the bucket.

tags -> (structure)

Tags to filter objects by their tagging. Rule applies only to objects that
match all tags in a filter.

key -> (string)

value -> (string)

id -> (string)\[required]

Unique identifier for the rule per configuration.
The value cannot be longer than 255 characters.

noncurrent\_version\_expiration -> (structure)

Specifies when noncurrent object versions expire.
It works only on a bucket that has versioning enabled (or suspended).

newer\_noncurrent\_versions -> (int32)\[optional]

Specifies how many noncurrent versions the system will retain.

noncurrent\_days -> (int32)

Specifies the number of days an object is noncurrent before the system will expire it.

noncurrent\_version\_transition -> (structure)

Specifies the transition for the lifecycle of a noncurrent object.
It works only on a bucket that has versioning enabled (or suspended).

newer\_noncurrent\_versions -> (int32)\[optional]

Specifies how many noncurrent versions the system will retain without transition.

noncurrent\_days -> (int32)

Specifies the number of days an object is noncurrent before the system will transit it.

storage\_class -> (string)

Target storage class to transit to.

A value must be one of:

  • "storage\_class\_unspecified"
  • "standard"
  • "enhanced\_throughput"
  • "intelligent"
  • "filesystem"

status -> (string)\[required]

A value must be one of:

  • "status\_unspecified"
  • "enabled"
  • "disabled"

transition -> (structure)

Specifies the transition for the lifecycle of an object in the form of date or days and
target storage class to transit object to.

date -> (timestamp)\[google.protobuf.Timestamp]

Indicates at what date the object will be transited. The time is always midnight UTC.

Mutually exclusive with: days, days\_since\_last\_access.

days -> (int32)

Amount of days since object was uploaded before it's transited to a new storage class.
The value must be a non-zero positive integer.

Mutually exclusive with: date, days\_since\_last\_access.

days\_since\_last\_access -> (int32)

The number of days since the object was last accessed before it is transitioned.

Mutually exclusive with: date, days.

storage\_class -> (string)

Target storage class to transit to.

A value must be one of:

  • "storage\_class\_unspecified"
  • "standard"
  • "enhanced\_throughput"
  • "intelligent"
  • "filesystem"

JSON Schema:

```json theme={null} [{ "abort_incomplete_multipart_upload": { "days_after_initiation": 0 }, "expiration": { "date": "1970-01-31T02:30:59Z", "expired_object_delete_marker": false }, "filter": { "object_size_greater_than_bytes": 0, "object_size_less_than_bytes": 0, "prefix": "", "tags": [{ "key": "", "value": "" }] }, "id": "", "noncurrent_version_expiration": { "newer_noncurrent_versions": 0, "noncurrent_days": 0 }, "noncurrent_version_transition": { "newer_noncurrent_versions": 0, "noncurrent_days": 0, "storage_class": "storage_class_unspecified"|"standard"|"enhanced_throughput"|"intelligent"|"filesystem" }, "status": "status_unspecified"|"enabled"|"disabled", "transition": { "date": "1970-01-31T02:30:59Z", "storage_class": "storage_class_unspecified"|"standard"|"enhanced_throughput"|"intelligent"|"filesystem" } }] ```

`--max-size-bytes` (int64)

Maximum bucket size.
Zero means unlimited.
Actual limit can be lower if customer doesn't have enough quota.
Real bucket size can go a little higher if customer writes too fast.

`--name` (string)

Human readable name for the resource.

`--object-audit-logging` (string)

Object audit logging specifies which requests must be logged - none, all or mutational only.

A value must be one of:

  • object\_audit\_logging\_unspecified
  • none
  • mutate\_only
  • all

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--versioning-policy` (string)

Supports transitions:
* disabled -> enabled
* disabled -> suspended
* enabled \<-> suspended.

A value must be one of:

  • versioning\_policy\_unspecified
  • disabled
  • enabled
  • suspended

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // [required] "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "bucket_policy": { // Bucket policy specifies granular permissions for a bucket. "rules": [{ // Rule specifies which role must be given to a subject to access a set of objects with given // prefixes or a whole bucket. "anonymous": { // [meaningful_empty_value] // Cannot be set together with: group_id // Enable anonymous access. Only read-only roles are allowed in anonymous mode. }, "group_id": string, // Cannot be set together with: anonymous // Group ID to grant access to. "paths": [string], // A list of paths each of which is either a full object key or a prefix ending with a // single "*" wildcard character. A rule is only applied to objects matching any of paths. // If there is a path equal to "*", a rule applies to a whole bucket. "roles": [string] // A set of roles which a subject will have. All `storage.*` roles are supported. }] }, "cors": { // Cross-origin resource sharing configuration. "rules": [{ // CORS rules. "allowed_headers": [string], // Headers that are allowed in a preflight request through the Access-Control-Request-Headers header. "allowed_methods": [string], // [required] // HTTP methods CORS is allowed for: GET, PUT, POST, DELETE, HEAD. "allowed_origins": [string], // [required] // The origins that you want to allow cross-domain requests from. Single wildcard * is allowed. "expose_headers": [string], // Headers in the response that you want customers to be able to access from their applications. "id": string, // [optional] // Optional rule identifier. "max_age_seconds": int32 // [optional] // Time in seconds that your browser can cache the response for a preflight request as identified by the resource. }] }, "default_storage_class": enum( // Storage class to use by default for uploads to the bucket. It may be overridden by `x-amz-storage-class` header. // If not set - STANDARD is used as a default storage class. "STORAGE_CLASS_UNSPECIFIED", "STANDARD", "ENHANCED_THROUGHPUT", "INTELLIGENT", "FILESYSTEM" // Special storage class only for filesystem buckets. ), "force_storage_class": bool, // Flag to force usage of default_storage_class, ignoring `x-amz-storage-class` header. "lifecycle_configuration": { "last_access_filter": { // Specifies which requests are included in `days_since_last_access` calculations for all transition rules. "conditions": [{ // A request is included in `days_since_last_access` calculations if: // - The first condition matching the request has `INCLUDE` type. // OR // - The request doesn't match any conditions. "methods": enum( // The s3 methods to match. // An empty list matches all methods. "METHOD_UNSPECIFIED", "GET_OBJECT", "HEAD_OBJECT", "GET_OBJECT_TAGGING", "COPY_OBJECT", // Copy object method reads the source object. // We account for those operations as source object accesses when calculating `days_since_last_access` for source object. "UPLOAD_PART_COPY" // Upload part copy method reads the source object. // We account for those operations as source object accesses when calculating `days_since_last_access` for source object. ), "type": enum( // [required] "TYPE_UNSPECIFIED", "INCLUDE", // If an include type condition is the first condition that the request match, the request will be included in // `days_since_last_access` calculation. "EXCLUDE" // If an exclude type condition is the first condition that the request match, the request will be ignored in `days_since_last_access` // calculation. ), "user_agents": [string] // User agents to match. Condition is satisfied if the request's user agent contains any of these substrings. // An empty list matches all user agents. }] }, "rules": [{ "abort_incomplete_multipart_upload": { // Specifies the days since the initiation of an incomplete multipart upload that // the system will wait before permanently removing all parts of the upload. "days_after_initiation": int32 // Specifies the days since the initiation of an incomplete multipart upload that // the system will wait before permanently removing all parts of the upload. }, "expiration": { // Specifies the expiration for the lifecycle of the object in the form of date, days and, // whether the object has a delete marker. "date": "1970-01-31T02:30:59Z", // [google.protobuf.Timestamp] // Cannot be set together with: days // Indicates at what date the object will be deleted. The time is always midnight UTC. "days": int32, // Cannot be set together with: date // Indicates the lifetime, in days, of the objects that are subject to the rule. // The value must be a non-zero positive integer. "expired_object_delete_marker": bool // Indicates whether the system will remove a "delete marker" with no noncurrent versions. // If set to true, the "delete marker" will be permanently removed. // If set to false the policy takes no action. // This cannot be specified with Days or Date in a LifecycleExpiration Policy. }, "filter": { // [non_empty_default] // The Filter is used to identify objects that a Lifecycle Rule applies to. // The Lifecycle Rule will apply to any object matching all of the predicates // configured inside (using logical AND). "object_size_greater_than_bytes": int64, // Minimum object size to which the rule applies. "object_size_less_than_bytes": int64, // Maximum object size to which the rule applies. "prefix": string, // Prefix identifying one or more objects to which the rule applies. // If prefix is empty, the rule applies to all objects in the bucket. "tags": [{ // Tags to filter objects by their tagging. Rule applies only to objects that // match all tags in a filter. "key": string, "value": string }] }, "id": string, // [required] // Unique identifier for the rule per configuration. // The value cannot be longer than 255 characters. "noncurrent_version_expiration": { // Specifies when noncurrent object versions expire. // It works only on a bucket that has versioning enabled (or suspended). "newer_noncurrent_versions": int32, // [optional] // Specifies how many noncurrent versions the system will retain. "noncurrent_days": int32 // Specifies the number of days an object is noncurrent before the system will expire it. }, "noncurrent_version_transition": { // Specifies the transition for the lifecycle of a noncurrent object. // It works only on a bucket that has versioning enabled (or suspended). "newer_noncurrent_versions": int32, // [optional] // Specifies how many noncurrent versions the system will retain without transition. "noncurrent_days": int32, // Specifies the number of days an object is noncurrent before the system will transit it. "storage_class": enum( // Target storage class to transit to. "STORAGE_CLASS_UNSPECIFIED", "STANDARD", "ENHANCED_THROUGHPUT", "INTELLIGENT", "FILESYSTEM" // Special storage class only for filesystem buckets. ) }, "status": enum( // [required] "STATUS_UNSPECIFIED", "ENABLED", "DISABLED" ), "transition": { // Specifies the transition for the lifecycle of an object in the form of date or days and // target storage class to transit object to. "date": "1970-01-31T02:30:59Z", // [google.protobuf.Timestamp] // Cannot be set together with: days, days_since_last_access // Indicates at what date the object will be transited. The time is always midnight UTC. "days": int32, // Cannot be set together with: date, days_since_last_access // Amount of days since object was uploaded before it's transited to a new storage class. // The value must be a non-zero positive integer. "days_since_last_access": int32, // Cannot be set together with: date, days // The number of days since the object was last accessed before it is transitioned. "storage_class": enum( // Target storage class to transit to. "STORAGE_CLASS_UNSPECIFIED", "STANDARD", "ENHANCED_THROUGHPUT", "INTELLIGENT", "FILESYSTEM" // Special storage class only for filesystem buckets. ) } }] }, "max_size_bytes": int64, // Maximum bucket size. // Zero means unlimited. // Actual limit can be lower if customer doesn't have enough quota. // Real bucket size can go a little higher if customer writes too fast. "object_audit_logging": enum( // Object audit logging specifies which requests must be logged - none, all or mutational only. "OBJECT_AUDIT_LOGGING_UNSPECIFIED", "NONE", // Logging is disabled. "MUTATE_ONLY", // Logging enabled only for mutating requests. "ALL" // Logging enabled for all requests. ), "versioning_policy": enum( // [non_empty_default] // Supports transitions: // * disabled -> enabled // * disabled -> suspended // * enabled <-> suspended. "VERSIONING_POLICY_UNSPECIFIED", "DISABLED", "ENABLED", "SUSPENDED" ) } } ``` ```json theme={null} nebius storage bucket update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "bucket_policy": { "rules": [{ "anonymous": { }, "paths": [""], "roles": [""] }] }, "cors": { "rules": [{ "allowed_headers": [""], "allowed_methods": [""], "allowed_origins": [""], "expose_headers": [""], "id": "", "max_age_seconds": 0 }] }, "default_storage_class": "storage_class_unspecified"|"standard"|"enhanced_throughput"|"intelligent"|"filesystem", "force_storage_class": false, "lifecycle_configuration": { "last_access_filter": { "conditions": [{ "methods": "method_unspecified"|"get_object"|"head_object"|"get_object_tagging"|"copy_object"|"upload_part_copy", "type": "type_unspecified"|"include"|"exclude" , "user_agents": [""] }] }, "rules": [{ "abort_incomplete_multipart_upload": { "days_after_initiation": 0 }, "expiration": { "date": "1970-01-31T02:30:59Z", "expired_object_delete_marker": false }, "filter": { "object_size_greater_than_bytes": 0, "object_size_less_than_bytes": 0, "prefix": "", "tags": [{ "key": "", "value": "" }] }, "id": "", "noncurrent_version_expiration": { "newer_noncurrent_versions": 0, "noncurrent_days": 0 }, "noncurrent_version_transition": { "newer_noncurrent_versions": 0, "noncurrent_days": 0, "storage_class": "storage_class_unspecified"|"standard"|"enhanced_throughput"|"intelligent"|"filesystem" }, "status": "status_unspecified"|"enabled"|"disabled", "transition": { "date": "1970-01-31T02:30:59Z", "storage_class": "storage_class_unspecified"|"standard"|"enhanced_throughput"|"intelligent"|"filesystem" } }] }, "max_size_bytes": 0, "object_audit_logging": "object_audit_logging_unspecified"|"none"|"mutate_only"|"all" , "versioning_policy": "versioning_policy_unspecified"|"disabled"|"enabled"|"suspended" } } ' ``` *Auto generated on 15-Jul-2026* # nebius storage Source: https://docs.nebius.com/cli/reference/storage/index

Name

nebius storage

Commands

nebius storage bucket

nebius storage transfer

TransferService provides functionality for creating and managing transfers
that migrate data from other providers or across different regions of Nebius Object Storage.

nebius storage v1alpha1

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius storage transfer create Source: https://docs.nebius.com/cli/reference/storage/transfer/create

Name

nebius storage transfer create

Synopsis

``` nebius storage transfer create --after-n-empty-iterations-empty-iterations-threshold --after-one-iteration --destination-nebius-access-key-access-key-id --destination-nebius-access-key-secret-access-key --destination-nebius-bucket-name --destination-nebius-region --destination-prefix --destination-s3-compatible-access-key-access-key-id --destination-s3-compatible-access-key-secret-access-key --destination-s3-compatible-anonymous --destination-s3-compatible-bucket-name --destination-s3-compatible-endpoint --destination-s3-compatible-region --enable-deletes-in-destination --infinite --inter-iteration-interval --labels --limiters-bandwidth-bytes-per-second --limiters-requests-per-second --name --overwrite-strategy [required] --parent-id [required] --resource-version --source-azure-blob-storage-anonymous --source-azure-blob-storage-azure-storage-account-access-key --source-azure-blob-storage-azure-storage-account-account-name --source-azure-blob-storage-container-name --source-azure-blob-storage-endpoint --source-nebius-access-key-access-key-id --source-nebius-access-key-secret-access-key --source-nebius-anonymous --source-nebius-bucket-name --source-nebius-region --source-prefix --source-s3-compatible-access-key-access-key-id --source-s3-compatible-access-key-secret-access-key --source-s3-compatible-anonymous --source-s3-compatible-bucket-name --source-s3-compatible-endpoint --source-s3-compatible-region --touch-unmanaged --async -i, --interactive ```

Options

`--after-n-empty-iterations-empty-iterations-threshold` (uint32)

Number of consecutive iterations with zero transferred objects required to stop transfer.

Mutually exclusive with: `--after-one-iteration`, `--infinite`.

`--after-one-iteration` (bool)

Mutually exclusive with: `--after-n-empty-iterations-empty-iterations-threshold`, `--infinite`.

`--destination-nebius-access-key-access-key-id` (string)

Access key ID.

Mutually exclusive with: `--destination-s3-compatible-access-key-access-key-id`, `--destination-s3-compatible-access-key-secret-access-key`, `--destination-s3-compatible-anonymous`, `--destination-s3-compatible-bucket-name`, `--destination-s3-compatible-endpoint`, `--destination-s3-compatible-region`.

`--destination-nebius-access-key-secret-access-key` (string)

Secret access key.

Mutually exclusive with: `--destination-s3-compatible-access-key-access-key-id`, `--destination-s3-compatible-access-key-secret-access-key`, `--destination-s3-compatible-anonymous`, `--destination-s3-compatible-bucket-name`, `--destination-s3-compatible-endpoint`, `--destination-s3-compatible-region`.

`--destination-nebius-bucket-name` (string)

Name of the destination bucket.

Mutually exclusive with: `--destination-s3-compatible-access-key-access-key-id`, `--destination-s3-compatible-access-key-secret-access-key`, `--destination-s3-compatible-anonymous`, `--destination-s3-compatible-bucket-name`, `--destination-s3-compatible-endpoint`, `--destination-s3-compatible-region`.

`--destination-nebius-region` (string)

Nebius region where the destination bucket is located.

Mutually exclusive with: `--destination-s3-compatible-access-key-access-key-id`, `--destination-s3-compatible-access-key-secret-access-key`, `--destination-s3-compatible-anonymous`, `--destination-s3-compatible-bucket-name`, `--destination-s3-compatible-endpoint`, `--destination-s3-compatible-region`.

`--destination-prefix` (string)

Prefix to add to the beginning of each transferred object key in the destination.
During transfer, the resulting object key in the destination is computed
by removing source.prefix (if provided) from the original key and then prepending destination.prefix.
Important: This transformation may result in an empty object key or one that exceeds allowed length limits.
Use prefixes that guarantee valid resulting object keys for your objects after transformation.

`--destination-s3-compatible-access-key-access-key-id` (string)

Access key ID.

Mutually exclusive with: `--destination-nebius-access-key-access-key-id`, `--destination-nebius-access-key-secret-access-key`, `--destination-nebius-bucket-name`, `--destination-nebius-region`, `--destination-s3-compatible-anonymous`.

`--destination-s3-compatible-access-key-secret-access-key` (string)

Secret access key.

Mutually exclusive with: `--destination-nebius-access-key-access-key-id`, `--destination-nebius-access-key-secret-access-key`, `--destination-nebius-bucket-name`, `--destination-nebius-region`, `--destination-s3-compatible-anonymous`.

`--destination-s3-compatible-anonymous` (bool)

Mutually exclusive with: `--destination-nebius-access-key-access-key-id`, `--destination-nebius-access-key-secret-access-key`, `--destination-nebius-bucket-name`, `--destination-nebius-region`, `--destination-s3-compatible-access-key-access-key-id`, `--destination-s3-compatible-access-key-secret-access-key`.

`--destination-s3-compatible-bucket-name` (string)

Name of the destination bucket.

Mutually exclusive with: `--destination-nebius-access-key-access-key-id`, `--destination-nebius-access-key-secret-access-key`, `--destination-nebius-bucket-name`, `--destination-nebius-region`.

`--destination-s3-compatible-endpoint` (string)

The endpoint must be in the form of a URL, starting with the protocol (https),
followed by the endpoint address without a trailing slash.
Example: "[https://storage.some-cloud\"](https://storage.some-cloud\");.

Mutually exclusive with: `--destination-nebius-access-key-access-key-id`, `--destination-nebius-access-key-secret-access-key`, `--destination-nebius-bucket-name`, `--destination-nebius-region`.

`--destination-s3-compatible-region` (string)

S3-compatible provider region where destination bucket is located.

Mutually exclusive with: `--destination-nebius-access-key-access-key-id`, `--destination-nebius-access-key-secret-access-key`, `--destination-nebius-bucket-name`, `--destination-nebius-region`.

`--enable-deletes-in-destination` (bool)

If enable\_deletes\_in\_destination flag is set, service will delete objects that exist in destination, but don't exist in source.
If touch\_unmanaged flag isn't set, we do not delete objects that haven't been created by Data Transfer service.

`--infinite` (bool)

Infinite transfers do not stop automatically and can be stopped manually by the user.

Mutually exclusive with: `--after-n-empty-iterations-empty-iterations-threshold`, `--after-one-iteration`.

`--inter-iteration-interval` (duration: 2h30m10s)

The time to wait since the previous iteration before starting the next one.
Default is 15 minutes if not specified.

`--labels` (string->string)

Labels associated with the resource.

`--limiters-bandwidth-bytes-per-second` (uint64)

Maximum bandwidth in bytes per second. If set to zero, default limit will be applied.

`--limiters-requests-per-second` (uint64)

Maximum number of requests per second. If set to zero, default limit will be applied.

`--name` (string)

Human readable name for the resource.

`--overwrite-strategy` (string) \[required]

Overwrite strategy set logic of overwrite already existed objects in destination bucket.

A value must be one of:

  • never
  • if\_newer

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--source-azure-blob-storage-anonymous` (bool)

Mutually exclusive with: `--source-azure-blob-storage-azure-storage-account-access-key`, `--source-azure-blob-storage-azure-storage-account-account-name`, `--source-nebius-access-key-access-key-id`, `--source-nebius-access-key-secret-access-key`, `--source-nebius-anonymous`, `--source-nebius-bucket-name`, `--source-nebius-region`, `--source-s3-compatible-access-key-access-key-id`, `--source-s3-compatible-access-key-secret-access-key`, `--source-s3-compatible-anonymous`, `--source-s3-compatible-bucket-name`, `--source-s3-compatible-endpoint`, `--source-s3-compatible-region`.

`--source-azure-blob-storage-azure-storage-account-access-key` (string)

Storage account access key.

Mutually exclusive with: `--source-azure-blob-storage-anonymous`, `--source-nebius-access-key-access-key-id`, `--source-nebius-access-key-secret-access-key`, `--source-nebius-anonymous`, `--source-nebius-bucket-name`, `--source-nebius-region`, `--source-s3-compatible-access-key-access-key-id`, `--source-s3-compatible-access-key-secret-access-key`, `--source-s3-compatible-anonymous`, `--source-s3-compatible-bucket-name`, `--source-s3-compatible-endpoint`, `--source-s3-compatible-region`.

`--source-azure-blob-storage-azure-storage-account-account-name` (string)

Storage account name.

Mutually exclusive with: `--source-azure-blob-storage-anonymous`, `--source-nebius-access-key-access-key-id`, `--source-nebius-access-key-secret-access-key`, `--source-nebius-anonymous`, `--source-nebius-bucket-name`, `--source-nebius-region`, `--source-s3-compatible-access-key-access-key-id`, `--source-s3-compatible-access-key-secret-access-key`, `--source-s3-compatible-anonymous`, `--source-s3-compatible-bucket-name`, `--source-s3-compatible-endpoint`, `--source-s3-compatible-region`.

`--source-azure-blob-storage-container-name` (string)

Name of the source Azure Blob Storage container.

Mutually exclusive with: `--source-nebius-access-key-access-key-id`, `--source-nebius-access-key-secret-access-key`, `--source-nebius-anonymous`, `--source-nebius-bucket-name`, `--source-nebius-region`, `--source-s3-compatible-access-key-access-key-id`, `--source-s3-compatible-access-key-secret-access-key`, `--source-s3-compatible-anonymous`, `--source-s3-compatible-bucket-name`, `--source-s3-compatible-endpoint`, `--source-s3-compatible-region`.

`--source-azure-blob-storage-endpoint` (string)

The endpoint must be in the form of a URL, starting with the protocol (https),
followed by the endpoint address without a trailing slash.
Example: "[https://storageaccountname.blob.core.windows.net\"](https://storageaccountname.blob.core.windows.net\");.

Mutually exclusive with: `--source-nebius-access-key-access-key-id`, `--source-nebius-access-key-secret-access-key`, `--source-nebius-anonymous`, `--source-nebius-bucket-name`, `--source-nebius-region`, `--source-s3-compatible-access-key-access-key-id`, `--source-s3-compatible-access-key-secret-access-key`, `--source-s3-compatible-anonymous`, `--source-s3-compatible-bucket-name`, `--source-s3-compatible-endpoint`, `--source-s3-compatible-region`.

`--source-nebius-access-key-access-key-id` (string)

Access key ID.

Mutually exclusive with: `--source-azure-blob-storage-anonymous`, `--source-azure-blob-storage-azure-storage-account-access-key`, `--source-azure-blob-storage-azure-storage-account-account-name`, `--source-azure-blob-storage-container-name`, `--source-azure-blob-storage-endpoint`, `--source-nebius-anonymous`, `--source-s3-compatible-access-key-access-key-id`, `--source-s3-compatible-access-key-secret-access-key`, `--source-s3-compatible-anonymous`, `--source-s3-compatible-bucket-name`, `--source-s3-compatible-endpoint`, `--source-s3-compatible-region`.

`--source-nebius-access-key-secret-access-key` (string)

Secret access key.

Mutually exclusive with: `--source-azure-blob-storage-anonymous`, `--source-azure-blob-storage-azure-storage-account-access-key`, `--source-azure-blob-storage-azure-storage-account-account-name`, `--source-azure-blob-storage-container-name`, `--source-azure-blob-storage-endpoint`, `--source-nebius-anonymous`, `--source-s3-compatible-access-key-access-key-id`, `--source-s3-compatible-access-key-secret-access-key`, `--source-s3-compatible-anonymous`, `--source-s3-compatible-bucket-name`, `--source-s3-compatible-endpoint`, `--source-s3-compatible-region`.

`--source-nebius-anonymous` (bool)

Mutually exclusive with: `--source-azure-blob-storage-anonymous`, `--source-azure-blob-storage-azure-storage-account-access-key`, `--source-azure-blob-storage-azure-storage-account-account-name`, `--source-azure-blob-storage-container-name`, `--source-azure-blob-storage-endpoint`, `--source-nebius-access-key-access-key-id`, `--source-nebius-access-key-secret-access-key`, `--source-s3-compatible-access-key-access-key-id`, `--source-s3-compatible-access-key-secret-access-key`, `--source-s3-compatible-anonymous`, `--source-s3-compatible-bucket-name`, `--source-s3-compatible-endpoint`, `--source-s3-compatible-region`.

`--source-nebius-bucket-name` (string)

Name of the source bucket.

Mutually exclusive with: `--source-azure-blob-storage-anonymous`, `--source-azure-blob-storage-azure-storage-account-access-key`, `--source-azure-blob-storage-azure-storage-account-account-name`, `--source-azure-blob-storage-container-name`, `--source-azure-blob-storage-endpoint`, `--source-s3-compatible-access-key-access-key-id`, `--source-s3-compatible-access-key-secret-access-key`, `--source-s3-compatible-anonymous`, `--source-s3-compatible-bucket-name`, `--source-s3-compatible-endpoint`, `--source-s3-compatible-region`.

`--source-nebius-region` (string)

Nebius region where the source bucket is located.

Mutually exclusive with: `--source-azure-blob-storage-anonymous`, `--source-azure-blob-storage-azure-storage-account-access-key`, `--source-azure-blob-storage-azure-storage-account-account-name`, `--source-azure-blob-storage-container-name`, `--source-azure-blob-storage-endpoint`, `--source-s3-compatible-access-key-access-key-id`, `--source-s3-compatible-access-key-secret-access-key`, `--source-s3-compatible-anonymous`, `--source-s3-compatible-bucket-name`, `--source-s3-compatible-endpoint`, `--source-s3-compatible-region`.

`--source-prefix` (string)

Prefix to filter objects in the source. Only objects whose keys start with this prefix will be transferred.
During transfer, the resulting object key in the destination is computed
by removing source.prefix from the original key and then prepending destination.prefix (if provided).
Important: This transformation may result in an empty object key or one that exceeds allowed length limits.
Use prefixes that guarantee valid resulting object keys for your objects after transformation.

`--source-s3-compatible-access-key-access-key-id` (string)

Access key ID.

Mutually exclusive with: `--source-azure-blob-storage-anonymous`, `--source-azure-blob-storage-azure-storage-account-access-key`, `--source-azure-blob-storage-azure-storage-account-account-name`, `--source-azure-blob-storage-container-name`, `--source-azure-blob-storage-endpoint`, `--source-nebius-access-key-access-key-id`, `--source-nebius-access-key-secret-access-key`, `--source-nebius-anonymous`, `--source-nebius-bucket-name`, `--source-nebius-region`, `--source-s3-compatible-anonymous`.

`--source-s3-compatible-access-key-secret-access-key` (string)

Secret access key.

Mutually exclusive with: `--source-azure-blob-storage-anonymous`, `--source-azure-blob-storage-azure-storage-account-access-key`, `--source-azure-blob-storage-azure-storage-account-account-name`, `--source-azure-blob-storage-container-name`, `--source-azure-blob-storage-endpoint`, `--source-nebius-access-key-access-key-id`, `--source-nebius-access-key-secret-access-key`, `--source-nebius-anonymous`, `--source-nebius-bucket-name`, `--source-nebius-region`, `--source-s3-compatible-anonymous`.

`--source-s3-compatible-anonymous` (bool)

Mutually exclusive with: `--source-azure-blob-storage-anonymous`, `--source-azure-blob-storage-azure-storage-account-access-key`, `--source-azure-blob-storage-azure-storage-account-account-name`, `--source-azure-blob-storage-container-name`, `--source-azure-blob-storage-endpoint`, `--source-nebius-access-key-access-key-id`, `--source-nebius-access-key-secret-access-key`, `--source-nebius-anonymous`, `--source-nebius-bucket-name`, `--source-nebius-region`, `--source-s3-compatible-access-key-access-key-id`, `--source-s3-compatible-access-key-secret-access-key`.

`--source-s3-compatible-bucket-name` (string)

Name of the source bucket.

Mutually exclusive with: `--source-azure-blob-storage-anonymous`, `--source-azure-blob-storage-azure-storage-account-access-key`, `--source-azure-blob-storage-azure-storage-account-account-name`, `--source-azure-blob-storage-container-name`, `--source-azure-blob-storage-endpoint`, `--source-nebius-access-key-access-key-id`, `--source-nebius-access-key-secret-access-key`, `--source-nebius-anonymous`, `--source-nebius-bucket-name`, `--source-nebius-region`.

`--source-s3-compatible-endpoint` (string)

The endpoint must be in the form of a URL, starting with the protocol (https),
followed by the endpoint address without a trailing slash.
Example: "[https://storage.some-cloud\"](https://storage.some-cloud\");.

Mutually exclusive with: `--source-azure-blob-storage-anonymous`, `--source-azure-blob-storage-azure-storage-account-access-key`, `--source-azure-blob-storage-azure-storage-account-account-name`, `--source-azure-blob-storage-container-name`, `--source-azure-blob-storage-endpoint`, `--source-nebius-access-key-access-key-id`, `--source-nebius-access-key-secret-access-key`, `--source-nebius-anonymous`, `--source-nebius-bucket-name`, `--source-nebius-region`.

`--source-s3-compatible-region` (string)

S3-compatible provider region where source bucket is located.

Mutually exclusive with: `--source-azure-blob-storage-anonymous`, `--source-azure-blob-storage-azure-storage-account-access-key`, `--source-azure-blob-storage-azure-storage-account-account-name`, `--source-azure-blob-storage-container-name`, `--source-azure-blob-storage-endpoint`, `--source-nebius-access-key-access-key-id`, `--source-nebius-access-key-secret-access-key`, `--source-nebius-anonymous`, `--source-nebius-bucket-name`, `--source-nebius-region`.

`--touch-unmanaged` (bool)

If touch\_unmanaged flag is set, service will be allowed to overwrite and delete from destination objects that were not
created by Data Transfer Service. If this flag is false, Data Transfer Service will never overwrite or delete objects
that haven't been created by Data Transfer service.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // [required] "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // [required] "after_n_empty_iterations": { // Cannot be set together with: after_one_iteration, infinite "empty_iterations_threshold": uint32 // [required] // Number of consecutive iterations with zero transferred objects required to stop transfer. }, "after_one_iteration": { // [meaningful_empty_value] // Cannot be set together with: after_n_empty_iterations, infinite }, "destination": { // [required] // Destination to which the transfer writes data. "nebius": { // Cannot be set together with: s3_compatible "access_key": { "access_key_id": string, // [required] // Access key ID. "secret_access_key": string // [sensitive] [input_only] // Secret access key. }, "bucket_name": string, // [required] [immutable] // Name of the destination bucket. "region": string // [required] [immutable] // Nebius region where the destination bucket is located. }, "prefix": string, // [immutable] // Prefix to add to the beginning of each transferred object key in the destination. // During transfer, the resulting object key in the destination is computed // by removing source.prefix (if provided) from the original key and then prepending destination.prefix. // Important: This transformation may result in an empty object key or one that exceeds allowed length limits. // Use prefixes that guarantee valid resulting object keys for your objects after transformation. "s3_compatible": { // Cannot be set together with: nebius "access_key": { // Cannot be set together with: anonymous "access_key_id": string, // [required] // Access key ID. "secret_access_key": string // [sensitive] [input_only] // Secret access key. }, "anonymous": { // [meaningful_empty_value] // Cannot be set together with: access_key }, "bucket_name": string, // [required] [immutable] // Name of the destination bucket. "endpoint": string, // [required] [immutable] // The endpoint must be in the form of a URL, starting with the protocol (https), // followed by the endpoint address without a trailing slash. // Example: "https://storage.some-cloud". "region": string // [required] [immutable] // S3-compatible provider region where destination bucket is located. } }, "enable_deletes_in_destination": bool, // [immutable] // If enable_deletes_in_destination flag is set, service will delete objects that exist in destination, but don't exist in source. // If touch_unmanaged flag isn't set, we do not delete objects that haven't been created by Data Transfer service. "infinite": { // [meaningful_empty_value] // Cannot be set together with: after_one_iteration, after_n_empty_iterations // Infinite transfers do not stop automatically and can be stopped manually by the user. }, "inter_iteration_interval": "2h30m10s", // [google.protobuf.Duration] [non_empty_default] // The time to wait since the previous iteration before starting the next one. // Default is 15 minutes if not specified. "limiters": { // Limiters applied to source bucket operations. These limits include all operations // required for transfer (HeadObject, GetObject, ListObjects). For details about // which operations are used, see public documentation: http://docs.nebius.com/object-storage/transfer/quickstart#background. // // Note: Since the service performs comparable request volumes and data transfers // to both source and destination, these limits will indirectly constrain // destination operations as well. "bandwidth_bytes_per_second": uint64, // Maximum bandwidth in bytes per second. If set to zero, default limit will be applied. "requests_per_second": uint64 // Maximum number of requests per second. If set to zero, default limit will be applied. }, "overwrite_strategy": enum( // [required] [immutable] // Overwrite strategy set logic of overwrite already existed objects in destination bucket. "OVERWRITE_STRATEGY_UNSPECIFIED", "NEVER", // Never overwrite objects that exist in the destination. // If object exists in destination bucket, skip it. // Safest option to prevent any data loss. "IF_NEWER" // Overwrite only if source object is newer than destination. // Comparison based on Last-Modified timestamp. // Recommended for incremental sync scenarios. // If touch_unmanaged flag isn't set, we do not overwrite objects that haven't been created by Data Transfer service. ), "source": { // [required] // Source from which the transfer reads data. "azure_blob_storage": { // Cannot be set together with: nebius, s3_compatible "anonymous": { // [meaningful_empty_value] // Cannot be set together with: azure_storage_account }, "azure_storage_account": { // Cannot be set together with: anonymous "access_key": string, // [sensitive] [input_only] // Storage account access key. "account_name": string // [required] // Storage account name. }, "container_name": string, // [required] [immutable] // Name of the source Azure Blob Storage container. "endpoint": string // [required] [immutable] // The endpoint must be in the form of a URL, starting with the protocol (https), // followed by the endpoint address without a trailing slash. // Example: "https://storageaccountname.blob.core.windows.net". }, "nebius": { // Cannot be set together with: s3_compatible, azure_blob_storage "access_key": { // Cannot be set together with: anonymous "access_key_id": string, // [required] // Access key ID. "secret_access_key": string // [sensitive] [input_only] // Secret access key. }, "anonymous": { // [meaningful_empty_value] // Cannot be set together with: access_key }, "bucket_name": string, // [required] [immutable] // Name of the source bucket. "region": string // [required] [immutable] // Nebius region where the source bucket is located. }, "prefix": string, // [immutable] // Prefix to filter objects in the source. Only objects whose keys start with this prefix will be transferred. // During transfer, the resulting object key in the destination is computed // by removing source.prefix from the original key and then prepending destination.prefix (if provided). // Important: This transformation may result in an empty object key or one that exceeds allowed length limits. // Use prefixes that guarantee valid resulting object keys for your objects after transformation. "s3_compatible": { // Cannot be set together with: nebius, azure_blob_storage "access_key": { // Cannot be set together with: anonymous "access_key_id": string, // [required] // Access key ID. "secret_access_key": string // [sensitive] [input_only] // Secret access key. }, "anonymous": { // [meaningful_empty_value] // Cannot be set together with: access_key }, "bucket_name": string, // [required] [immutable] // Name of the source bucket. "endpoint": string, // [required] [immutable] // The endpoint must be in the form of a URL, starting with the protocol (https), // followed by the endpoint address without a trailing slash. // Example: "https://storage.some-cloud". "region": string // [required] [immutable] // S3-compatible provider region where source bucket is located. } }, "touch_unmanaged": bool // [immutable] // If touch_unmanaged flag is set, service will be allowed to overwrite and delete from destination objects that were not // created by Data Transfer Service. If this flag is false, Data Transfer Service will never overwrite or delete objects // that haven't been created by Data Transfer service. } } ``` ```json theme={null} nebius storage transfer create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "after_n_empty_iterations": { "empty_iterations_threshold": 0 }, "destination": { "nebius": { "access_key": { "access_key_id": "", "secret_access_key": "" }, "bucket_name": "", "region": "" }, "prefix": "" }, "enable_deletes_in_destination": false, "inter_iteration_interval": "2h30m10s", "limiters": { "bandwidth_bytes_per_second": 0, "requests_per_second": 0 }, "overwrite_strategy": "overwrite_strategy_unspecified"|"never"|"if_newer", "source": { "azure_blob_storage": { "anonymous": { }, "container_name": "", "endpoint": "" }, "prefix": "" }, "touch_unmanaged": false } } ' ``` *Auto generated on 15-Jul-2026* # nebius storage transfer delete Source: https://docs.nebius.com/cli/reference/storage/transfer/delete

Name

nebius storage transfer delete

Fully delete a transfer along with its history. If the transfer is active, it will be stopped and then deleted.

Synopsis

``` nebius storage transfer delete [id] --id [required] --resource-version --async ```

Positional Arguments

id

ID of the resource to delete.

Options

`--id` (string) \[required]

`--resource-version` (int64)

Optional: expected transfer version (`metadata.resource_version`)
* If specified, ensures that only the requested version is deleted (and a `FAILED_PRECONDITION` error is returned on version mismatch)
* If not specified or set to `0`, the latest version will be deleted.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string, // [required] "resource_version": int64 // Optional: expected transfer version (`metadata.resource_version`) // - If specified, ensures that only the requested version is deleted (and a `FAILED_PRECONDITION` error is returned on version mismatch) // - If not specified or set to `0`, the latest version will be deleted. } ``` ```json theme={null} nebius storage transfer delete ' { "id": "", "resource_version": 0 } ' ``` *Auto generated on 15-Jul-2026* # nebius storage transfer edit Source: https://docs.nebius.com/cli/reference/storage/transfer/edit

Name

nebius storage transfer edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius storage transfer edit [id] --async --editor --id ```

Positional Arguments

id

ID of the resource to edit.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius storage transfer edit-by-name Source: https://docs.nebius.com/cli/reference/storage/transfer/edit-by-name

Name

nebius storage transfer edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

Synopsis

``` nebius storage transfer edit-by-name --async --editor --name --parent-id ```

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--name` (string)

`--parent-id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius storage transfer get Source: https://docs.nebius.com/cli/reference/storage/transfer/get

Name

nebius storage transfer get

Synopsis

``` nebius storage transfer get [id] --id [required] ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius storage transfer get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius storage transfer get-by-name Source: https://docs.nebius.com/cli/reference/storage/transfer/get-by-name

Name

nebius storage transfer get-by-name

Synopsis

``` nebius storage transfer get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

`--parent-id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // [required] } ``` ```json theme={null} nebius storage transfer get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius storage transfer get-iteration-history Source: https://docs.nebius.com/cli/reference/storage/transfer/get-iteration-history

Name

nebius storage transfer get-iteration-history

Get transfer iteration history.

Synopsis

``` nebius storage transfer get-iteration-history --page-size --page-token --transfer-id [required] ```

Options

`--page-size` (int64)

Specifies the maximum number of items to return in the response.

`--page-token` (string)

Token for pagination, allowing the retrieval of the next set of results.

`--transfer-id` (string) \[required]

ID of the transfer whose iteration history to return.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, // Specifies the maximum number of items to return in the response. "page_token": string, // Token for pagination, allowing the retrieval of the next set of results. "transfer_id": string // [required] // ID of the transfer whose iteration history to return. } ``` ```json theme={null} nebius storage transfer get-iteration-history ' { "page_size": 0, "page_token": "", "transfer_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius storage transfer Source: https://docs.nebius.com/cli/reference/storage/transfer/index

Name

nebius storage transfer

TransferService provides functionality for creating and managing transfers
that migrate data from other providers or across different regions of Nebius Object Storage.

Commands

nebius storage transfer create

nebius storage transfer delete

Fully delete a transfer along with its history. If the transfer is active, it will be stopped and then deleted.

nebius storage transfer edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius storage transfer edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

nebius storage transfer get

nebius storage transfer get-by-name

nebius storage transfer get-iteration-history

Get transfer iteration history.

nebius storage transfer list

nebius storage transfer operation

Manage operations for Transfer service.

nebius storage transfer resume

Resume stopped or failed transfer.

nebius storage transfer stop

Stop active transfer. If the transfer is currently moving data,
it will be transitioned to the Stopping state and will move to the Stopped state once all processes have been stopped.
If the transfer is waiting between iterations, it will stop immediately.
Only transfers in Active state can be stopped.

nebius storage transfer update

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius storage transfer list Source: https://docs.nebius.com/cli/reference/storage/transfer/list

Name

nebius storage transfer list

Synopsis

``` nebius storage transfer list --page-size --page-token --parent-id [required] --all -i, --interactive ```

Options

`--page-size` (int64)

Specifies the maximum number of items to return in the response. Default: 10.

`--page-token` (string)

Token for pagination, allowing the retrieval of the next set of results.

`--parent-id` (string) \[required]

Represents the container ID.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, // Specifies the maximum number of items to return in the response. Default: 10. "page_token": string, // Token for pagination, allowing the retrieval of the next set of results. "parent_id": string // [required] // Represents the container ID. } ``` ```json theme={null} nebius storage transfer list ' { "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius storage transfer operation get Source: https://docs.nebius.com/cli/reference/storage/transfer/operation/get

Name

nebius storage transfer operation get

Get operation by ID.

Synopsis

``` nebius storage transfer operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius storage transfer operation Source: https://docs.nebius.com/cli/reference/storage/transfer/operation/index

Name

nebius storage transfer operation

Manage operations for Transfer service.

Commands

nebius storage transfer operation get

Get operation by ID.

nebius storage transfer operation list

List operations by resource ID.

nebius storage transfer operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius storage transfer operation list Source: https://docs.nebius.com/cli/reference/storage/transfer/operation/list

Name

nebius storage transfer operation list

List operations by resource ID.

Synopsis

``` nebius storage transfer operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius storage transfer operation wait Source: https://docs.nebius.com/cli/reference/storage/transfer/operation/wait

Name

nebius storage transfer operation wait

Wait for operation to complete.

Synopsis

``` nebius storage transfer operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius storage transfer resume Source: https://docs.nebius.com/cli/reference/storage/transfer/resume

Name

nebius storage transfer resume

Resume stopped or failed transfer.

Synopsis

``` nebius storage transfer resume [id] --id [required] --async ```

Positional Arguments

id

ID of the resource to resume.

Options

`--id` (string) \[required]

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius storage transfer resume ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius storage transfer stop Source: https://docs.nebius.com/cli/reference/storage/transfer/stop

Name

nebius storage transfer stop

Stop active transfer. If the transfer is currently moving data,
it will be transitioned to the Stopping state and will move to the Stopped state once all processes have been stopped.
If the transfer is waiting between iterations, it will stop immediately.
Only transfers in Active state can be stopped.

Synopsis

``` nebius storage transfer stop [id] --id [required] --async ```

Positional Arguments

id

ID of the resource to stop.

Options

`--id` (string) \[required]

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius storage transfer stop ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius storage transfer update Source: https://docs.nebius.com/cli/reference/storage/transfer/update

Name

nebius storage transfer update

Synopsis

``` nebius storage transfer update [id] --after-n-empty-iterations-empty-iterations-threshold --after-one-iteration --destination-nebius-access-key-access-key-id --destination-nebius-access-key-secret-access-key --destination-s3-compatible-access-key-access-key-id --destination-s3-compatible-access-key-secret-access-key --destination-s3-compatible-anonymous --id --infinite --inter-iteration-interval --labels --labels-add --labels-remove --limiters-bandwidth-bytes-per-second --limiters-requests-per-second --name --parent-id --resource-version --source-azure-blob-storage-anonymous --source-azure-blob-storage-azure-storage-account-access-key --source-azure-blob-storage-azure-storage-account-account-name --source-nebius-access-key-access-key-id --source-nebius-access-key-secret-access-key --source-nebius-anonymous --source-s3-compatible-access-key-access-key-id --source-s3-compatible-access-key-secret-access-key --source-s3-compatible-anonymous --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--after-n-empty-iterations-empty-iterations-threshold` (uint32)

Number of consecutive iterations with zero transferred objects required to stop transfer.

Mutually exclusive with: `--after-one-iteration`, `--infinite`.

`--after-one-iteration` (bool)

Mutually exclusive with: `--after-n-empty-iterations-empty-iterations-threshold`, `--infinite`.

`--destination-nebius-access-key-access-key-id` (string)

Access key ID.

Mutually exclusive with: `--destination-s3-compatible-access-key-access-key-id`, `--destination-s3-compatible-access-key-secret-access-key`, `--destination-s3-compatible-anonymous`.

`--destination-nebius-access-key-secret-access-key` (string)

Secret access key.

Mutually exclusive with: `--destination-s3-compatible-access-key-access-key-id`, `--destination-s3-compatible-access-key-secret-access-key`, `--destination-s3-compatible-anonymous`.

`--destination-s3-compatible-access-key-access-key-id` (string)

Access key ID.

Mutually exclusive with: `--destination-nebius-access-key-access-key-id`, `--destination-nebius-access-key-secret-access-key`, `--destination-s3-compatible-anonymous`.

`--destination-s3-compatible-access-key-secret-access-key` (string)

Secret access key.

Mutually exclusive with: `--destination-nebius-access-key-access-key-id`, `--destination-nebius-access-key-secret-access-key`, `--destination-s3-compatible-anonymous`.

`--destination-s3-compatible-anonymous` (bool)

Mutually exclusive with: `--destination-nebius-access-key-access-key-id`, `--destination-nebius-access-key-secret-access-key`, `--destination-s3-compatible-access-key-access-key-id`, `--destination-s3-compatible-access-key-secret-access-key`.

`--id` (string)

Identifier for the resource, unique for its resource type.

`--infinite` (bool)

Infinite transfers do not stop automatically and can be stopped manually by the user.

Mutually exclusive with: `--after-n-empty-iterations-empty-iterations-threshold`, `--after-one-iteration`.

`--inter-iteration-interval` (duration: 2h30m10s)

The time to wait since the previous iteration before starting the next one.
Default is 15 minutes if not specified.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--limiters-bandwidth-bytes-per-second` (uint64)

Maximum bandwidth in bytes per second. If set to zero, default limit will be applied.

`--limiters-requests-per-second` (uint64)

Maximum number of requests per second. If set to zero, default limit will be applied.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--source-azure-blob-storage-anonymous` (bool)

Mutually exclusive with: `--source-azure-blob-storage-azure-storage-account-access-key`, `--source-azure-blob-storage-azure-storage-account-account-name`, `--source-nebius-access-key-access-key-id`, `--source-nebius-access-key-secret-access-key`, `--source-nebius-anonymous`, `--source-s3-compatible-access-key-access-key-id`, `--source-s3-compatible-access-key-secret-access-key`, `--source-s3-compatible-anonymous`.

`--source-azure-blob-storage-azure-storage-account-access-key` (string)

Storage account access key.

Mutually exclusive with: `--source-azure-blob-storage-anonymous`, `--source-nebius-access-key-access-key-id`, `--source-nebius-access-key-secret-access-key`, `--source-nebius-anonymous`, `--source-s3-compatible-access-key-access-key-id`, `--source-s3-compatible-access-key-secret-access-key`, `--source-s3-compatible-anonymous`.

`--source-azure-blob-storage-azure-storage-account-account-name` (string)

Storage account name.

Mutually exclusive with: `--source-azure-blob-storage-anonymous`, `--source-nebius-access-key-access-key-id`, `--source-nebius-access-key-secret-access-key`, `--source-nebius-anonymous`, `--source-s3-compatible-access-key-access-key-id`, `--source-s3-compatible-access-key-secret-access-key`, `--source-s3-compatible-anonymous`.

`--source-nebius-access-key-access-key-id` (string)

Access key ID.

Mutually exclusive with: `--source-azure-blob-storage-anonymous`, `--source-azure-blob-storage-azure-storage-account-access-key`, `--source-azure-blob-storage-azure-storage-account-account-name`, `--source-nebius-anonymous`, `--source-s3-compatible-access-key-access-key-id`, `--source-s3-compatible-access-key-secret-access-key`, `--source-s3-compatible-anonymous`.

`--source-nebius-access-key-secret-access-key` (string)

Secret access key.

Mutually exclusive with: `--source-azure-blob-storage-anonymous`, `--source-azure-blob-storage-azure-storage-account-access-key`, `--source-azure-blob-storage-azure-storage-account-account-name`, `--source-nebius-anonymous`, `--source-s3-compatible-access-key-access-key-id`, `--source-s3-compatible-access-key-secret-access-key`, `--source-s3-compatible-anonymous`.

`--source-nebius-anonymous` (bool)

Mutually exclusive with: `--source-azure-blob-storage-anonymous`, `--source-azure-blob-storage-azure-storage-account-access-key`, `--source-azure-blob-storage-azure-storage-account-account-name`, `--source-nebius-access-key-access-key-id`, `--source-nebius-access-key-secret-access-key`, `--source-s3-compatible-access-key-access-key-id`, `--source-s3-compatible-access-key-secret-access-key`, `--source-s3-compatible-anonymous`.

`--source-s3-compatible-access-key-access-key-id` (string)

Access key ID.

Mutually exclusive with: `--source-azure-blob-storage-anonymous`, `--source-azure-blob-storage-azure-storage-account-access-key`, `--source-azure-blob-storage-azure-storage-account-account-name`, `--source-nebius-access-key-access-key-id`, `--source-nebius-access-key-secret-access-key`, `--source-nebius-anonymous`, `--source-s3-compatible-anonymous`.

`--source-s3-compatible-access-key-secret-access-key` (string)

Secret access key.

Mutually exclusive with: `--source-azure-blob-storage-anonymous`, `--source-azure-blob-storage-azure-storage-account-access-key`, `--source-azure-blob-storage-azure-storage-account-account-name`, `--source-nebius-access-key-access-key-id`, `--source-nebius-access-key-secret-access-key`, `--source-nebius-anonymous`, `--source-s3-compatible-anonymous`.

`--source-s3-compatible-anonymous` (bool)

Mutually exclusive with: `--source-azure-blob-storage-anonymous`, `--source-azure-blob-storage-azure-storage-account-access-key`, `--source-azure-blob-storage-azure-storage-account-account-name`, `--source-nebius-access-key-access-key-id`, `--source-nebius-access-key-secret-access-key`, `--source-nebius-anonymous`, `--source-s3-compatible-access-key-access-key-id`, `--source-s3-compatible-access-key-secret-access-key`.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // [required] "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // [required] "after_n_empty_iterations": { // Cannot be set together with: after_one_iteration, infinite "empty_iterations_threshold": uint32 // [required] // Number of consecutive iterations with zero transferred objects required to stop transfer. }, "after_one_iteration": { // [meaningful_empty_value] // Cannot be set together with: after_n_empty_iterations, infinite }, "destination": { // [required] // Destination to which the transfer writes data. "nebius": { // Cannot be set together with: s3_compatible "access_key": { "access_key_id": string, // [required] // Access key ID. "secret_access_key": string // [sensitive] [input_only] // Secret access key. } }, "s3_compatible": { // Cannot be set together with: nebius "access_key": { // Cannot be set together with: anonymous "access_key_id": string, // [required] // Access key ID. "secret_access_key": string // [sensitive] [input_only] // Secret access key. }, "anonymous": { // [meaningful_empty_value] // Cannot be set together with: access_key } } }, "infinite": { // [meaningful_empty_value] // Cannot be set together with: after_one_iteration, after_n_empty_iterations // Infinite transfers do not stop automatically and can be stopped manually by the user. }, "inter_iteration_interval": "2h30m10s", // [google.protobuf.Duration] [non_empty_default] // The time to wait since the previous iteration before starting the next one. // Default is 15 minutes if not specified. "limiters": { // Limiters applied to source bucket operations. These limits include all operations // required for transfer (HeadObject, GetObject, ListObjects). For details about // which operations are used, see public documentation: http://docs.nebius.com/object-storage/transfer/quickstart#background. // // Note: Since the service performs comparable request volumes and data transfers // to both source and destination, these limits will indirectly constrain // destination operations as well. "bandwidth_bytes_per_second": uint64, // Maximum bandwidth in bytes per second. If set to zero, default limit will be applied. "requests_per_second": uint64 // Maximum number of requests per second. If set to zero, default limit will be applied. }, "source": { // [required] // Source from which the transfer reads data. "azure_blob_storage": { // Cannot be set together with: nebius, s3_compatible "anonymous": { // [meaningful_empty_value] // Cannot be set together with: azure_storage_account }, "azure_storage_account": { // Cannot be set together with: anonymous "access_key": string, // [sensitive] [input_only] // Storage account access key. "account_name": string // [required] // Storage account name. } }, "nebius": { // Cannot be set together with: s3_compatible, azure_blob_storage "access_key": { // Cannot be set together with: anonymous "access_key_id": string, // [required] // Access key ID. "secret_access_key": string // [sensitive] [input_only] // Secret access key. }, "anonymous": { // [meaningful_empty_value] // Cannot be set together with: access_key } }, "s3_compatible": { // Cannot be set together with: nebius, azure_blob_storage "access_key": { // Cannot be set together with: anonymous "access_key_id": string, // [required] // Access key ID. "secret_access_key": string // [sensitive] [input_only] // Secret access key. }, "anonymous": { // [meaningful_empty_value] // Cannot be set together with: access_key } } } } } ``` ```json theme={null} nebius storage transfer update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "after_n_empty_iterations": { "empty_iterations_threshold": 0 }, "destination": { "nebius": { "access_key": { "access_key_id": "", "secret_access_key": "" } } }, "inter_iteration_interval": "2h30m10s", "limiters": { "bandwidth_bytes_per_second": 0, "requests_per_second": 0 }, "source": { "azure_blob_storage": { "anonymous": { } } } } } ' ``` *Auto generated on 15-Jul-2026* # nebius storage v1alpha1 Source: https://docs.nebius.com/cli/reference/storage/v1alpha1/index

Name

nebius storage v1alpha1

Commands

nebius storage v1alpha1 transfer

\[deprecated: supported until 2026-06-01] Please use the 'storage transfer' command instead. All existing transfers remain accessible through the new command.

TransferService provides functionality for creating and managing transfers
that migrate data from other S3 providers or across different regions of Nebius Object Storage.
Each transfer consists of consecutive iterations where the service lists objects in the source bucket and
moves those that need to be transferred according to the specified overwrite strategy.
After an iteration completes, the transfer will stop if its stop condition is met. Otherwise,
it will wait for the defined inter-iteration interval before starting the next iteration.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius storage v1alpha1 transfer create Source: https://docs.nebius.com/cli/reference/storage/v1alpha1/transfer/create

Name

nebius storage v1alpha1 transfer create

Deprecated

Command transfer is deprecated and will be removed on 2026-06-01. Please use the 'storage transfer' command instead. All existing transfers remain accessible through the new command.

Synopsis

``` nebius storage v1alpha1 transfer create --after-n-empty-iterations-empty-iterations-threshold --after-one-iteration --destination-bucket-name [required] --destination-credentials-access-key-access-key-id --destination-credentials-access-key-secret-access-key --destination-credentials-anonymous --destination-credentials-azure-access-key-access-key --destination-credentials-azure-access-key-account-name --destination-endpoint --destination-prefix --destination-region --infinite --inter-iteration-interval --labels --name --overwrite-strategy [required] --parent-id [required] --resource-version --source-bucket-name [required] --source-credentials-access-key-access-key-id --source-credentials-access-key-secret-access-key --source-credentials-anonymous --source-credentials-azure-access-key-access-key --source-credentials-azure-access-key-account-name --source-endpoint [required] --source-limiters-bandwidth-bytes-per-second --source-limiters-requests-per-second --source-prefix --source-region [required] --async -i, --interactive ```

Options

`--after-n-empty-iterations-empty-iterations-threshold` (uint32)

Number of consecutive iterations with zero transferred objects required to stop transfer.

Mutually exclusive with: `--after-one-iteration`, `--infinite`.

`--after-one-iteration` (bool)

Mutually exclusive with: `--after-n-empty-iterations-empty-iterations-threshold`, `--infinite`.

`--destination-bucket-name` (string) \[required]

`--destination-credentials-access-key-access-key-id` (string)

Mutually exclusive with: `--destination-credentials-anonymous`, `--destination-credentials-azure-access-key-access-key`, `--destination-credentials-azure-access-key-account-name`.

`--destination-credentials-access-key-secret-access-key` (string)

Mutually exclusive with: `--destination-credentials-anonymous`, `--destination-credentials-azure-access-key-access-key`, `--destination-credentials-azure-access-key-account-name`.

`--destination-credentials-anonymous` (bool)

Mutually exclusive with: `--destination-credentials-access-key-access-key-id`, `--destination-credentials-access-key-secret-access-key`, `--destination-credentials-azure-access-key-access-key`, `--destination-credentials-azure-access-key-account-name`.

`--destination-credentials-azure-access-key-access-key` (string)

Mutually exclusive with: `--destination-credentials-access-key-access-key-id`, `--destination-credentials-access-key-secret-access-key`, `--destination-credentials-anonymous`.

`--destination-credentials-azure-access-key-account-name` (string)

Mutually exclusive with: `--destination-credentials-access-key-access-key-id`, `--destination-credentials-access-key-secret-access-key`, `--destination-credentials-anonymous`.

`--destination-endpoint` (string)

The endpoint must be in the form of a URL, starting with the protocol (https),
followed by the endpoint address without a trailing slash.
Example: [https://storage.us-central1.nebius.cloud](https://storage.us-central1.nebius.cloud).

`--destination-prefix` (string)

Prefix to add to the beginning of each transferred object key in the destination bucket.
During transfer, the resulting object key in the destination bucket is computed
by removing source.prefix (if provided) from the original key and then prepending destination.prefix.
Important: This transformation may result in an empty object key or one that exceeds allowed length limits.
Use prefixes that guarantee valid resulting object keys for your objects after transformation.

`--destination-region` (string)

`--infinite` (bool)

Infinite transfers do not stop automatically and can be stopped manually by the user.

Mutually exclusive with: `--after-n-empty-iterations-empty-iterations-threshold`, `--after-one-iteration`.

`--inter-iteration-interval` (duration: 2h30m10s)

Time to wait between transfer iterations. Default is 15 minutes if not specified.

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--overwrite-strategy` (string) \[required]

Overwrite strategy set logic of overwrite already existed objects in destination bucket.

A value must be one of:

  • never
  • if\_newer
  • always

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--source-bucket-name` (string) \[required]

`--source-credentials-access-key-access-key-id` (string)

Mutually exclusive with: `--source-credentials-anonymous`, `--source-credentials-azure-access-key-access-key`, `--source-credentials-azure-access-key-account-name`.

`--source-credentials-access-key-secret-access-key` (string)

Mutually exclusive with: `--source-credentials-anonymous`, `--source-credentials-azure-access-key-access-key`, `--source-credentials-azure-access-key-account-name`.

`--source-credentials-anonymous` (bool)

Mutually exclusive with: `--source-credentials-access-key-access-key-id`, `--source-credentials-access-key-secret-access-key`, `--source-credentials-azure-access-key-access-key`, `--source-credentials-azure-access-key-account-name`.

`--source-credentials-azure-access-key-access-key` (string)

Mutually exclusive with: `--source-credentials-access-key-access-key-id`, `--source-credentials-access-key-secret-access-key`, `--source-credentials-anonymous`.

`--source-credentials-azure-access-key-account-name` (string)

Mutually exclusive with: `--source-credentials-access-key-access-key-id`, `--source-credentials-access-key-secret-access-key`, `--source-credentials-anonymous`.

`--source-endpoint` (string) \[required]

The endpoint must be in the form of a URL, starting with the protocol (https),
followed by the endpoint address without a trailing slash.
Example: [https://storage.us-central1.nebius.cloud](https://storage.us-central1.nebius.cloud).

`--source-limiters-bandwidth-bytes-per-second` (uint64)

Maximum bandwidth in bytes per second. If set to zero, default limit will be applied.

`--source-limiters-requests-per-second` (uint64)

Maximum number of requests per second. If set to zero, default limit will be applied.

`--source-prefix` (string)

Prefix to filter objects in the source bucket. Only objects whose keys start with this prefix will be transferred.
During transfer, the resulting object key in the destination bucket is computed
by removing source.prefix from the original key and then prepending destination.prefix (if provided).
Important: This transformation may result in an empty object key or one that exceeds allowed length limits.
Use prefixes that guarantee valid resulting object keys for your objects after transformation.

`--source-region` (string) \[required]

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // [required] "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // [required] "after_n_empty_iterations": { // Cannot be set together with: after_one_iteration, infinite "empty_iterations_threshold": uint32 // [required] // Number of consecutive iterations with zero transferred objects required to stop transfer. }, "after_one_iteration": { // [meaningful_empty_value] // Cannot be set together with: after_n_empty_iterations, infinite }, "destination": { // [required] "bucket_name": string, // [required] [immutable] "credentials": { // [input_only] // Credentials for accessing the destination bucket. These credentials must have head and write permissions. // This parameter must be specified only during create operations. "access_key": { // Cannot be set together with: anonymous, azure_access_key "access_key_id": string, // [required] [sensitive] "secret_access_key": string // [required] [sensitive] }, "anonymous": { // [meaningful_empty_value] // Cannot be set together with: access_key, azure_access_key }, "azure_access_key": { // Cannot be set together with: anonymous, access_key "access_key": string, // [required] [sensitive] "account_name": string // [required] [sensitive] } }, "endpoint": string, // [immutable] // The endpoint must be in the form of a URL, starting with the protocol (https), // followed by the endpoint address without a trailing slash. // Example: https://storage.us-central1.nebius.cloud. "prefix": string, // [immutable] // Prefix to add to the beginning of each transferred object key in the destination bucket. // During transfer, the resulting object key in the destination bucket is computed // by removing source.prefix (if provided) from the original key and then prepending destination.prefix. // Important: This transformation may result in an empty object key or one that exceeds allowed length limits. // Use prefixes that guarantee valid resulting object keys for your objects after transformation. "region": string // [immutable] }, "infinite": { // [meaningful_empty_value] // Cannot be set together with: after_one_iteration, after_n_empty_iterations // Infinite transfers do not stop automatically and can be stopped manually by the user. }, "inter_iteration_interval": "2h30m10s", // [google.protobuf.Duration] [non_empty_default] // Time to wait between transfer iterations. Default is 15 minutes if not specified. "overwrite_strategy": enum( // [required] // Overwrite strategy set logic of overwrite already existed objects in destination bucket. "OVERWRITE_STRATEGY_UNSPECIFIED", "NEVER", // Never overwrite objects that exist in the destination. // If object exists in destination bucket, skip it. // Safest option to prevent data loss. "IF_NEWER", // Overwrite only if source object is newer than destination. // Comparison based on Last-Modified timestamp. // Recommended for incremental sync scenarios. "ALWAYS" // Always overwrite destination objects unconditionally. // Use with caution - may cause data loss in destination. // Suitable for full bucket synchronization. ), "source": { // [required] "bucket_name": string, // [required] [immutable] "credentials": { // [input_only] // Credentials for accessing the source bucket. These credentials must have list and get permissions. // This parameter must be specified only during create operations. "access_key": { // Cannot be set together with: anonymous, azure_access_key "access_key_id": string, // [required] [sensitive] "secret_access_key": string // [required] [sensitive] }, "anonymous": { // [meaningful_empty_value] // Cannot be set together with: access_key, azure_access_key }, "azure_access_key": { // Cannot be set together with: anonymous, access_key "access_key": string, // [required] [sensitive] "account_name": string // [required] [sensitive] } }, "endpoint": string, // [required] [immutable] // The endpoint must be in the form of a URL, starting with the protocol (https), // followed by the endpoint address without a trailing slash. // Example: https://storage.us-central1.nebius.cloud. "limiters": { // Limiters applied to source bucket operations. These limits include all operations // required for transfer (HeadObject, GetObject, ListObjects). For details about // which operations are used, see public documentation: http://docs.nebius.com/object-storage/transfer/quickstart#background. // // Note: Since the service performs comparable request volumes and data transfers // to both source and destination, these limits will indirectly constrain // destination operations as well. "bandwidth_bytes_per_second": uint64, // Maximum bandwidth in bytes per second. If set to zero, default limit will be applied. "requests_per_second": uint64 // Maximum number of requests per second. If set to zero, default limit will be applied. }, "prefix": string, // [immutable] // Prefix to filter objects in the source bucket. Only objects whose keys start with this prefix will be transferred. // During transfer, the resulting object key in the destination bucket is computed // by removing source.prefix from the original key and then prepending destination.prefix (if provided). // Important: This transformation may result in an empty object key or one that exceeds allowed length limits. // Use prefixes that guarantee valid resulting object keys for your objects after transformation. "region": string // [required] [immutable] } } } ``` ```json theme={null} nebius storage v1alpha1 transfer create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "after_n_empty_iterations": { "empty_iterations_threshold": 0 }, "destination": { "bucket_name": "", "credentials": { "access_key": { "access_key_id": "", "secret_access_key": "" } }, "endpoint": "", "prefix": "", "region": "" }, "inter_iteration_interval": "2h30m10s", "overwrite_strategy": "overwrite_strategy_unspecified"|"never"|"if_newer"|"always", "source": { "bucket_name": "", "credentials": { "access_key": { "access_key_id": "", "secret_access_key": "" } }, "endpoint": "", "limiters": { "bandwidth_bytes_per_second": 0, "requests_per_second": 0 }, "prefix": "", "region": "" } } } ' ``` *Auto generated on 15-Jul-2026* # nebius storage v1alpha1 transfer delete Source: https://docs.nebius.com/cli/reference/storage/v1alpha1/transfer/delete

Name

nebius storage v1alpha1 transfer delete

Fully delete a transfer along with its history. Only stopped or failed transfers can be deleted.

Deprecated

Command transfer is deprecated and will be removed on 2026-06-01. Please use the 'storage transfer' command instead. All existing transfers remain accessible through the new command.

Synopsis

``` nebius storage v1alpha1 transfer delete [id] --id [required] --resource-version --async ```

Positional Arguments

id

ID of the resource to delete.

Options

`--id` (string) \[required]

`--resource-version` (int64)

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string, // [required] "resource_version": int64 } ``` ```json theme={null} nebius storage v1alpha1 transfer delete ' { "id": "", "resource_version": 0 } ' ``` *Auto generated on 15-Jul-2026* # nebius storage v1alpha1 transfer edit Source: https://docs.nebius.com/cli/reference/storage/v1alpha1/transfer/edit

Name

nebius storage v1alpha1 transfer edit

Edit resource via external text editor. Uses get command to receive the current state.

Deprecated

Command transfer is deprecated and will be removed on 2026-06-01. Please use the 'storage transfer' command instead. All existing transfers remain accessible through the new command.

Synopsis

``` nebius storage v1alpha1 transfer edit [id] --async --editor --id ```

Positional Arguments

id

ID of the resource to edit.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius storage v1alpha1 transfer edit-by-name Source: https://docs.nebius.com/cli/reference/storage/v1alpha1/transfer/edit-by-name

Name

nebius storage v1alpha1 transfer edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

Deprecated

Command transfer is deprecated and will be removed on 2026-06-01. Please use the 'storage transfer' command instead. All existing transfers remain accessible through the new command.

Synopsis

``` nebius storage v1alpha1 transfer edit-by-name --async --editor --name --parent-id ```

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--name` (string)

`--parent-id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius storage v1alpha1 transfer get Source: https://docs.nebius.com/cli/reference/storage/v1alpha1/transfer/get

Name

nebius storage v1alpha1 transfer get

Deprecated

Command transfer is deprecated and will be removed on 2026-06-01. Please use the 'storage transfer' command instead. All existing transfers remain accessible through the new command.

Synopsis

``` nebius storage v1alpha1 transfer get [id] --id [required] ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius storage v1alpha1 transfer get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius storage v1alpha1 transfer get-by-name Source: https://docs.nebius.com/cli/reference/storage/v1alpha1/transfer/get-by-name

Name

nebius storage v1alpha1 transfer get-by-name

Deprecated

Command transfer is deprecated and will be removed on 2026-06-01. Please use the 'storage transfer' command instead. All existing transfers remain accessible through the new command.

Synopsis

``` nebius storage v1alpha1 transfer get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

`--parent-id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // [required] } ``` ```json theme={null} nebius storage v1alpha1 transfer get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius storage v1alpha1 transfer get-iteration-history Source: https://docs.nebius.com/cli/reference/storage/v1alpha1/transfer/get-iteration-history

Name

nebius storage v1alpha1 transfer get-iteration-history

Deprecated

Command transfer is deprecated and will be removed on 2026-06-01. Please use the 'storage transfer' command instead. All existing transfers remain accessible through the new command.

Synopsis

``` nebius storage v1alpha1 transfer get-iteration-history --page-size --page-token --transfer-id [required] ```

Options

`--page-size` (int64)

Specifies the maximum number of items to return in the response.

`--page-token` (string)

Token for pagination, allowing the retrieval of the next set of results.

`--transfer-id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, // Specifies the maximum number of items to return in the response. "page_token": string, // Token for pagination, allowing the retrieval of the next set of results. "transfer_id": string // [required] } ``` ```json theme={null} nebius storage v1alpha1 transfer get-iteration-history ' { "page_size": 0, "page_token": "", "transfer_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius storage v1alpha1 transfer Source: https://docs.nebius.com/cli/reference/storage/v1alpha1/transfer/index

Name

nebius storage v1alpha1 transfer

TransferService provides functionality for creating and managing transfers
that migrate data from other S3 providers or across different regions of Nebius Object Storage.
Each transfer consists of consecutive iterations where the service lists objects in the source bucket and
moves those that need to be transferred according to the specified overwrite strategy.
After an iteration completes, the transfer will stop if its stop condition is met. Otherwise,
it will wait for the defined inter-iteration interval before starting the next iteration.

Deprecated

Command transfer is deprecated and will be removed on 2026-06-01. Please use the 'storage transfer' command instead. All existing transfers remain accessible through the new command.

Commands

nebius storage v1alpha1 transfer create

nebius storage v1alpha1 transfer delete

Fully delete a transfer along with its history. Only stopped or failed transfers can be deleted.

nebius storage v1alpha1 transfer edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius storage v1alpha1 transfer edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

nebius storage v1alpha1 transfer get

nebius storage v1alpha1 transfer get-by-name

nebius storage v1alpha1 transfer get-iteration-history

nebius storage v1alpha1 transfer list

nebius storage v1alpha1 transfer operation

Manage operations for Transfer service.

nebius storage v1alpha1 transfer resume

Resume stopped or failed transfer.

nebius storage v1alpha1 transfer stop

Stop active transfer. If the transfer is currently moving data,
it will be transitioned to the Stopping state and will move to the Stopped state once all processes have been stopped.
If the transfer is waiting between iterations, it will stop immediately.
Only transfer in Active state can be stopped.

nebius storage v1alpha1 transfer update

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius storage v1alpha1 transfer list Source: https://docs.nebius.com/cli/reference/storage/v1alpha1/transfer/list

Name

nebius storage v1alpha1 transfer list

Deprecated

Command transfer is deprecated and will be removed on 2026-06-01. Please use the 'storage transfer' command instead. All existing transfers remain accessible through the new command.

Synopsis

``` nebius storage v1alpha1 transfer list --page-size --page-token --parent-id [required] --all -i, --interactive ```

Options

`--page-size` (int64)

Specifies the maximum number of items to return in the response. Default: 10.

`--page-token` (string)

Token for pagination, allowing the retrieval of the next set of results.

`--parent-id` (string) \[required]

Represents the container ID.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, // Specifies the maximum number of items to return in the response. Default: 10. "page_token": string, // Token for pagination, allowing the retrieval of the next set of results. "parent_id": string // [required] // Represents the container ID. } ``` ```json theme={null} nebius storage v1alpha1 transfer list ' { "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius storage v1alpha1 transfer operation get Source: https://docs.nebius.com/cli/reference/storage/v1alpha1/transfer/operation/get

Name

nebius storage v1alpha1 transfer operation get

Get operation by ID.

Deprecated

Command transfer is deprecated and will be removed on 2026-06-01. Please use the 'storage transfer' command instead. All existing transfers remain accessible through the new command.

Synopsis

``` nebius storage v1alpha1 transfer operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius storage v1alpha1 transfer operation Source: https://docs.nebius.com/cli/reference/storage/v1alpha1/transfer/operation/index

Name

nebius storage v1alpha1 transfer operation

Manage operations for Transfer service.

Deprecated

Command transfer is deprecated and will be removed on 2026-06-01. Please use the 'storage transfer' command instead. All existing transfers remain accessible through the new command.

Commands

nebius storage v1alpha1 transfer operation get

Get operation by ID.

nebius storage v1alpha1 transfer operation list

List operations by resource ID.

nebius storage v1alpha1 transfer operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius storage v1alpha1 transfer operation list Source: https://docs.nebius.com/cli/reference/storage/v1alpha1/transfer/operation/list

Name

nebius storage v1alpha1 transfer operation list

List operations by resource ID.

Deprecated

Command transfer is deprecated and will be removed on 2026-06-01. Please use the 'storage transfer' command instead. All existing transfers remain accessible through the new command.

Synopsis

``` nebius storage v1alpha1 transfer operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius storage v1alpha1 transfer operation wait Source: https://docs.nebius.com/cli/reference/storage/v1alpha1/transfer/operation/wait

Name

nebius storage v1alpha1 transfer operation wait

Wait for operation to complete.

Deprecated

Command transfer is deprecated and will be removed on 2026-06-01. Please use the 'storage transfer' command instead. All existing transfers remain accessible through the new command.

Synopsis

``` nebius storage v1alpha1 transfer operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius storage v1alpha1 transfer resume Source: https://docs.nebius.com/cli/reference/storage/v1alpha1/transfer/resume

Name

nebius storage v1alpha1 transfer resume

Resume stopped or failed transfer.

Deprecated

Command transfer is deprecated and will be removed on 2026-06-01. Please use the 'storage transfer' command instead. All existing transfers remain accessible through the new command.

Synopsis

``` nebius storage v1alpha1 transfer resume [id] --id [required] --async ```

Positional Arguments

id

ID of the resource to resume.

Options

`--id` (string) \[required]

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius storage v1alpha1 transfer resume ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius storage v1alpha1 transfer stop Source: https://docs.nebius.com/cli/reference/storage/v1alpha1/transfer/stop

Name

nebius storage v1alpha1 transfer stop

Stop active transfer. If the transfer is currently moving data,
it will be transitioned to the Stopping state and will move to the Stopped state once all processes have been stopped.
If the transfer is waiting between iterations, it will stop immediately.
Only transfer in Active state can be stopped.

Deprecated

Command transfer is deprecated and will be removed on 2026-06-01. Please use the 'storage transfer' command instead. All existing transfers remain accessible through the new command.

Synopsis

``` nebius storage v1alpha1 transfer stop [id] --id [required] --async ```

Positional Arguments

id

ID of the resource to stop.

Options

`--id` (string) \[required]

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius storage v1alpha1 transfer stop ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius storage v1alpha1 transfer update Source: https://docs.nebius.com/cli/reference/storage/v1alpha1/transfer/update

Name

nebius storage v1alpha1 transfer update

Deprecated

Command transfer is deprecated and will be removed on 2026-06-01. Please use the 'storage transfer' command instead. All existing transfers remain accessible through the new command.

Synopsis

``` nebius storage v1alpha1 transfer update [id] --after-n-empty-iterations-empty-iterations-threshold --after-one-iteration --destination-credentials-access-key-access-key-id --destination-credentials-access-key-secret-access-key --destination-credentials-anonymous --destination-credentials-azure-access-key-access-key --destination-credentials-azure-access-key-account-name --id --infinite --inter-iteration-interval --labels --labels-add --labels-remove --name --overwrite-strategy --parent-id --resource-version --source-credentials-access-key-access-key-id --source-credentials-access-key-secret-access-key --source-credentials-anonymous --source-credentials-azure-access-key-access-key --source-credentials-azure-access-key-account-name --source-limiters-bandwidth-bytes-per-second --source-limiters-requests-per-second --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--after-n-empty-iterations-empty-iterations-threshold` (uint32)

Number of consecutive iterations with zero transferred objects required to stop transfer.

Mutually exclusive with: `--after-one-iteration`, `--infinite`.

`--after-one-iteration` (bool)

Mutually exclusive with: `--after-n-empty-iterations-empty-iterations-threshold`, `--infinite`.

`--destination-credentials-access-key-access-key-id` (string)

Mutually exclusive with: `--destination-credentials-anonymous`, `--destination-credentials-azure-access-key-access-key`, `--destination-credentials-azure-access-key-account-name`.

`--destination-credentials-access-key-secret-access-key` (string)

Mutually exclusive with: `--destination-credentials-anonymous`, `--destination-credentials-azure-access-key-access-key`, `--destination-credentials-azure-access-key-account-name`.

`--destination-credentials-anonymous` (bool)

Mutually exclusive with: `--destination-credentials-access-key-access-key-id`, `--destination-credentials-access-key-secret-access-key`, `--destination-credentials-azure-access-key-access-key`, `--destination-credentials-azure-access-key-account-name`.

`--destination-credentials-azure-access-key-access-key` (string)

Mutually exclusive with: `--destination-credentials-access-key-access-key-id`, `--destination-credentials-access-key-secret-access-key`, `--destination-credentials-anonymous`.

`--destination-credentials-azure-access-key-account-name` (string)

Mutually exclusive with: `--destination-credentials-access-key-access-key-id`, `--destination-credentials-access-key-secret-access-key`, `--destination-credentials-anonymous`.

`--id` (string)

Identifier for the resource, unique for its resource type.

`--infinite` (bool)

Infinite transfers do not stop automatically and can be stopped manually by the user.

Mutually exclusive with: `--after-n-empty-iterations-empty-iterations-threshold`, `--after-one-iteration`.

`--inter-iteration-interval` (duration: 2h30m10s)

Time to wait between transfer iterations. Default is 15 minutes if not specified.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--overwrite-strategy` (string)

Overwrite strategy set logic of overwrite already existed objects in destination bucket.

A value must be one of:

  • overwrite\_strategy\_unspecified
  • never
  • if\_newer
  • always

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--source-credentials-access-key-access-key-id` (string)

Mutually exclusive with: `--source-credentials-anonymous`, `--source-credentials-azure-access-key-access-key`, `--source-credentials-azure-access-key-account-name`.

`--source-credentials-access-key-secret-access-key` (string)

Mutually exclusive with: `--source-credentials-anonymous`, `--source-credentials-azure-access-key-access-key`, `--source-credentials-azure-access-key-account-name`.

`--source-credentials-anonymous` (bool)

Mutually exclusive with: `--source-credentials-access-key-access-key-id`, `--source-credentials-access-key-secret-access-key`, `--source-credentials-azure-access-key-access-key`, `--source-credentials-azure-access-key-account-name`.

`--source-credentials-azure-access-key-access-key` (string)

Mutually exclusive with: `--source-credentials-access-key-access-key-id`, `--source-credentials-access-key-secret-access-key`, `--source-credentials-anonymous`.

`--source-credentials-azure-access-key-account-name` (string)

Mutually exclusive with: `--source-credentials-access-key-access-key-id`, `--source-credentials-access-key-secret-access-key`, `--source-credentials-anonymous`.

`--source-limiters-bandwidth-bytes-per-second` (uint64)

Maximum bandwidth in bytes per second. If set to zero, default limit will be applied.

`--source-limiters-requests-per-second` (uint64)

Maximum number of requests per second. If set to zero, default limit will be applied.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // [required] "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // [required] "after_n_empty_iterations": { // Cannot be set together with: after_one_iteration, infinite "empty_iterations_threshold": uint32 // [required] // Number of consecutive iterations with zero transferred objects required to stop transfer. }, "after_one_iteration": { // [meaningful_empty_value] // Cannot be set together with: after_n_empty_iterations, infinite }, "destination": { // [required] "credentials": { // [input_only] // Credentials for accessing the destination bucket. These credentials must have head and write permissions. // This parameter must be specified only during create operations. "access_key": { // Cannot be set together with: anonymous, azure_access_key "access_key_id": string, // [required] [sensitive] "secret_access_key": string // [required] [sensitive] }, "anonymous": { // [meaningful_empty_value] // Cannot be set together with: access_key, azure_access_key }, "azure_access_key": { // Cannot be set together with: anonymous, access_key "access_key": string, // [required] [sensitive] "account_name": string // [required] [sensitive] } } }, "infinite": { // [meaningful_empty_value] // Cannot be set together with: after_one_iteration, after_n_empty_iterations // Infinite transfers do not stop automatically and can be stopped manually by the user. }, "inter_iteration_interval": "2h30m10s", // [google.protobuf.Duration] [non_empty_default] // Time to wait between transfer iterations. Default is 15 minutes if not specified. "overwrite_strategy": enum( // [required] // Overwrite strategy set logic of overwrite already existed objects in destination bucket. "OVERWRITE_STRATEGY_UNSPECIFIED", "NEVER", // Never overwrite objects that exist in the destination. // If object exists in destination bucket, skip it. // Safest option to prevent data loss. "IF_NEWER", // Overwrite only if source object is newer than destination. // Comparison based on Last-Modified timestamp. // Recommended for incremental sync scenarios. "ALWAYS" // Always overwrite destination objects unconditionally. // Use with caution - may cause data loss in destination. // Suitable for full bucket synchronization. ), "source": { // [required] "credentials": { // [input_only] // Credentials for accessing the source bucket. These credentials must have list and get permissions. // This parameter must be specified only during create operations. "access_key": { // Cannot be set together with: anonymous, azure_access_key "access_key_id": string, // [required] [sensitive] "secret_access_key": string // [required] [sensitive] }, "anonymous": { // [meaningful_empty_value] // Cannot be set together with: access_key, azure_access_key }, "azure_access_key": { // Cannot be set together with: anonymous, access_key "access_key": string, // [required] [sensitive] "account_name": string // [required] [sensitive] } }, "limiters": { // Limiters applied to source bucket operations. These limits include all operations // required for transfer (HeadObject, GetObject, ListObjects). For details about // which operations are used, see public documentation: http://docs.nebius.com/object-storage/transfer/quickstart#background. // // Note: Since the service performs comparable request volumes and data transfers // to both source and destination, these limits will indirectly constrain // destination operations as well. "bandwidth_bytes_per_second": uint64, // Maximum bandwidth in bytes per second. If set to zero, default limit will be applied. "requests_per_second": uint64 // Maximum number of requests per second. If set to zero, default limit will be applied. } } } } ``` ```json theme={null} nebius storage v1alpha1 transfer update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "after_n_empty_iterations": { "empty_iterations_threshold": 0 }, "destination": { "credentials": { "access_key": { "access_key_id": "", "secret_access_key": "" } } }, "inter_iteration_interval": "2h30m10s", "overwrite_strategy": "overwrite_strategy_unspecified"|"never"|"if_newer"|"always", "source": { "credentials": { "access_key": { "access_key_id": "", "secret_access_key": "" } }, "limiters": { "bandwidth_bytes_per_second": 0, "requests_per_second": 0 } } } } ' ``` *Auto generated on 15-Jul-2026* # nebius tunnel create Source: https://docs.nebius.com/cli/reference/tunnel/create

Name

nebius tunnel create

Creates a new tunnel.

Synopsis

``` nebius tunnel create --description --labels --name --parent-id [required] --resource-version --title --async -i, --interactive ```

Options

`--description` (string)

Arbitrary description of the tunnel provided by the user.

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--title` (string)

Human-readable display name for the tunnel.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // Metadata for the new tunnel. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // Specification for the new tunnel. "description": string, // Arbitrary description of the tunnel provided by the user. "title": string // Human-readable display name for the tunnel. } } ``` ```json theme={null} nebius tunnel create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "description": "", "title": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius tunnel delete Source: https://docs.nebius.com/cli/reference/tunnel/delete

Name

nebius tunnel delete

Deletes a tunnel by its identifier.

Synopsis

``` nebius tunnel delete [id] --id [required] --async ```

Positional Arguments

id

Unique identifier of the tunnel to delete.

Options

`--id` (string) \[required]

Unique identifier of the tunnel to delete.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] // Unique identifier of the tunnel to delete. } ``` ```json theme={null} nebius tunnel delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius tunnel edit Source: https://docs.nebius.com/cli/reference/tunnel/edit

Name

nebius tunnel edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius tunnel edit [id] --async --editor --id ```

Positional Arguments

id

Unique identifier of the tunnel.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

Unique identifier of the tunnel.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius tunnel get Source: https://docs.nebius.com/cli/reference/tunnel/get

Name

nebius tunnel get

Retrieves a tunnel by its identifier.

Synopsis

``` nebius tunnel get [id] --id [required] ```

Positional Arguments

id

Unique identifier of the tunnel.

Options

`--id` (string) \[required]

Unique identifier of the tunnel.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] // Unique identifier of the tunnel. } ``` ```json theme={null} nebius tunnel get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius tunnel Source: https://docs.nebius.com/cli/reference/tunnel/index

Name

nebius tunnel

Commands

nebius tunnel create

Creates a new tunnel.

nebius tunnel delete

Deletes a tunnel by its identifier.

nebius tunnel edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius tunnel get

Retrieves a tunnel by its identifier.

nebius tunnel list

Lists all tunnels within a parent.

nebius tunnel operation

Manage operations for Tunnel service.

nebius tunnel update

Updates an existing tunnel.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius tunnel list Source: https://docs.nebius.com/cli/reference/tunnel/list

Name

nebius tunnel list

Lists all tunnels within a parent.

Synopsis

``` nebius tunnel list --filter --page-size --page-token --parent-id [required] --all -i, --interactive ```

Options

`--filter` (string)

Filter expression for narrowing results.

`--page-size` (int64)

Maximum number of items to return per page.

`--page-token` (string)

Token for retrieving the next page of results.

`--parent-id` (string) \[required]

Identifier of the parent project.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "filter": string, // Filter expression for narrowing results. "page_size": int64, // Maximum number of items to return per page. "page_token": string, // Token for retrieving the next page of results. "parent_id": string // [required] // Identifier of the parent project. } ``` ```json theme={null} nebius tunnel list ' { "filter": "", "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius tunnel operation get Source: https://docs.nebius.com/cli/reference/tunnel/operation/get

Name

nebius tunnel operation get

Get operation by ID.

Synopsis

``` nebius tunnel operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius tunnel operation Source: https://docs.nebius.com/cli/reference/tunnel/operation/index

Name

nebius tunnel operation

Manage operations for Tunnel service.

Commands

nebius tunnel operation get

Get operation by ID.

nebius tunnel operation list

List operations by resource ID.

nebius tunnel operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius tunnel operation list Source: https://docs.nebius.com/cli/reference/tunnel/operation/list

Name

nebius tunnel operation list

List operations by resource ID.

Synopsis

``` nebius tunnel operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius tunnel operation wait Source: https://docs.nebius.com/cli/reference/tunnel/operation/wait

Name

nebius tunnel operation wait

Wait for operation to complete.

Synopsis

``` nebius tunnel operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius tunnel update Source: https://docs.nebius.com/cli/reference/tunnel/update

Name

nebius tunnel update

Updates an existing tunnel.

Synopsis

``` nebius tunnel update [id] --description --id --labels --labels-add --labels-remove --name --parent-id --resource-version --title --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--description` (string)

Arbitrary description of the tunnel provided by the user.

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--title` (string)

Human-readable display name for the tunnel.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // [required] // Metadata identifying the tunnel to update. The `id` field is required; // `resource_version`, when non-zero, enables optimistic concurrency control. "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // [required] // New specification for the tunnel. "description": string, // Arbitrary description of the tunnel provided by the user. "title": string // Human-readable display name for the tunnel. } } ``` ```json theme={null} nebius tunnel update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "description": "", "title": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius update Source: https://docs.nebius.com/cli/reference/update

Name

nebius update

Update Nebius CLI

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius version Source: https://docs.nebius.com/cli/reference/version

Name

nebius version

Display Nebius CLI version

Synopsis

``` nebius version --full ```

Options

`--full` (bool)

Display full version.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc allocation create Source: https://docs.nebius.com/cli/reference/vpc/allocation/create

Name

nebius vpc allocation create

Synopsis

``` nebius vpc allocation create --ipv4-private-cidr --ipv4-private-pool-id --ipv4-private-subnet-id --ipv4-public-cidr --ipv4-public-pool-id --ipv4-public-subnet-id --labels --name --parent-id [required] --resource-version --async -i, --interactive ```

Options

`--ipv4-private-cidr` (string)

A single IP address (e.g 10.1.2.1), a CIDR block (e.g., "10.1.2.0/24") or
a prefix length (e.g., "/32").
If prefix length is specified, the CIDR block will be auto-allocated from
the available space in the pool or subnet.
If not specified, defaults to "/32".

Mutually exclusive with: `--ipv4-public-cidr`, `--ipv4-public-pool-id`, `--ipv4-public-subnet-id`.

`--ipv4-private-pool-id` (string)

ID of the pool that allocation will receive its IP address from.

Mutually exclusive with: `--ipv4-private-subnet-id`, `--ipv4-public-cidr`, `--ipv4-public-pool-id`, `--ipv4-public-subnet-id`.

`--ipv4-private-subnet-id` (string)

ID of the subnet that allocation will be associated with.
IP address of the allocation must be within a CIDR block associated
with this subnet.
In order to assign an allocation to a resource (i.e. network interface)
both must be associated with the same subnet.

Mutually exclusive with: `--ipv4-private-pool-id`, `--ipv4-public-cidr`, `--ipv4-public-pool-id`, `--ipv4-public-subnet-id`.

`--ipv4-public-cidr` (string)

A single IP address (e.g. 1.2.3.4), a CIDR block (e.g., "1.2.3.4/24")
or a prefix length (e.g., "/32").
If prefix length is specified, the CIDR block will be auto-allocated from
the available space in the pool or subnet.
If not specified, defaults to "/32".

Mutually exclusive with: `--ipv4-private-cidr`, `--ipv4-private-pool-id`, `--ipv4-private-subnet-id`.

`--ipv4-public-pool-id` (string)

ID of the pool that allocation will receive its IP address from.

Mutually exclusive with: `--ipv4-private-cidr`, `--ipv4-private-pool-id`, `--ipv4-private-subnet-id`, `--ipv4-public-subnet-id`.

`--ipv4-public-subnet-id` (string)

ID of the subnet that allocation will be associated with.
IP address of the allocation must be within a CIDR block associated with
this subnet.
Assigning an allocation to a resource (i.e. network interface) requires
both to be associated with the same subnet.

Mutually exclusive with: `--ipv4-private-cidr`, `--ipv4-private-pool-id`, `--ipv4-private-subnet-id`, `--ipv4-public-pool-id`.

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // [required] "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // [required] "ipv4_private": { // Cannot be set together with: ipv4_public "cidr": string, // [immutable] // A single IP address (e.g 10.1.2.1), a CIDR block (e.g., "10.1.2.0/24") or // a prefix length (e.g., "/32"). // If prefix length is specified, the CIDR block will be auto-allocated from // the available space in the pool or subnet. // If not specified, defaults to "/32". "pool_id": string, // [immutable] // Cannot be set together with: subnet_id // ID of the pool that allocation will receive its IP address from. "subnet_id": string // [immutable] // Cannot be set together with: pool_id // ID of the subnet that allocation will be associated with. // IP address of the allocation must be within a CIDR block associated // with this subnet. // In order to assign an allocation to a resource (i.e. network interface) // both must be associated with the same subnet. }, "ipv4_public": { // Cannot be set together with: ipv4_private "cidr": string, // [immutable] // A single IP address (e.g. 1.2.3.4), a CIDR block (e.g., "1.2.3.4/24") // or a prefix length (e.g., "/32"). // If prefix length is specified, the CIDR block will be auto-allocated from // the available space in the pool or subnet. // If not specified, defaults to "/32". "pool_id": string, // [immutable] // Cannot be set together with: subnet_id // ID of the pool that allocation will receive its IP address from. "subnet_id": string // [immutable] // Cannot be set together with: pool_id // ID of the subnet that allocation will be associated with. // IP address of the allocation must be within a CIDR block associated with // this subnet. // Assigning an allocation to a resource (i.e. network interface) requires // both to be associated with the same subnet. } } } ``` ```json theme={null} nebius vpc allocation create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "ipv4_private": { "cidr": "", "pool_id": "" } } } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc allocation delete Source: https://docs.nebius.com/cli/reference/vpc/allocation/delete

Name

nebius vpc allocation delete

Synopsis

``` nebius vpc allocation delete [id] --id [required] --async ```

Positional Arguments

id

ID of the resource to delete.

Options

`--id` (string) \[required]

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius vpc allocation delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc allocation edit Source: https://docs.nebius.com/cli/reference/vpc/allocation/edit

Name

nebius vpc allocation edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius vpc allocation edit [id] --async --editor --id ```

Positional Arguments

id

ID of the resource to edit.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc allocation edit-by-name Source: https://docs.nebius.com/cli/reference/vpc/allocation/edit-by-name

Name

nebius vpc allocation edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

Synopsis

``` nebius vpc allocation edit-by-name --async --editor --name --parent-id ```

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--name` (string)

`--parent-id` (string)

ID of the project.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc allocation get Source: https://docs.nebius.com/cli/reference/vpc/allocation/get

Name

nebius vpc allocation get

Synopsis

``` nebius vpc allocation get [id] --id [required] ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius vpc allocation get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc allocation get-by-name Source: https://docs.nebius.com/cli/reference/vpc/allocation/get-by-name

Name

nebius vpc allocation get-by-name

Synopsis

``` nebius vpc allocation get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

`--parent-id` (string) \[required]

ID of the project.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // [required] // ID of the project. } ``` ```json theme={null} nebius vpc allocation get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc allocation Source: https://docs.nebius.com/cli/reference/vpc/allocation/index

Name

nebius vpc allocation

Commands

nebius vpc allocation create

nebius vpc allocation delete

nebius vpc allocation edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius vpc allocation edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

nebius vpc allocation get

nebius vpc allocation get-by-name

nebius vpc allocation list

nebius vpc allocation list-by-pool

nebius vpc allocation list-by-subnet

nebius vpc allocation operation

Manage operations for Allocation service.

nebius vpc allocation update

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc allocation list Source: https://docs.nebius.com/cli/reference/vpc/allocation/list

Name

nebius vpc allocation list

Synopsis

``` nebius vpc allocation list --page-size --page-token --parent-id [required] --all -i, --interactive ```

Options

`--page-size` (int64)

`--page-token` (string)

`--parent-id` (string) \[required]

ID of the project.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, "page_token": string, "parent_id": string // [required] // ID of the project. } ``` ```json theme={null} nebius vpc allocation list ' { "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc allocation list-by-pool Source: https://docs.nebius.com/cli/reference/vpc/allocation/list-by-pool

Name

nebius vpc allocation list-by-pool

Synopsis

``` nebius vpc allocation list-by-pool --page-size --page-token --pool-id [required] ```

Options

`--page-size` (int64)

`--page-token` (string)

`--pool-id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, "page_token": string, "pool_id": string // [required] } ``` ```json theme={null} nebius vpc allocation list-by-pool ' { "page_size": 0, "page_token": "", "pool_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc allocation list-by-subnet Source: https://docs.nebius.com/cli/reference/vpc/allocation/list-by-subnet

Name

nebius vpc allocation list-by-subnet

Synopsis

``` nebius vpc allocation list-by-subnet --page-size --page-token --subnet-id [required] ```

Options

`--page-size` (int64)

`--page-token` (string)

`--subnet-id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, "page_token": string, "subnet_id": string // [required] } ``` ```json theme={null} nebius vpc allocation list-by-subnet ' { "page_size": 0, "page_token": "", "subnet_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc allocation operation get Source: https://docs.nebius.com/cli/reference/vpc/allocation/operation/get

Name

nebius vpc allocation operation get

Get operation by ID.

Synopsis

``` nebius vpc allocation operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc allocation operation Source: https://docs.nebius.com/cli/reference/vpc/allocation/operation/index

Name

nebius vpc allocation operation

Manage operations for Allocation service.

Commands

nebius vpc allocation operation get

Get operation by ID.

nebius vpc allocation operation list

List operations by resource ID.

nebius vpc allocation operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc allocation operation list Source: https://docs.nebius.com/cli/reference/vpc/allocation/operation/list

Name

nebius vpc allocation operation list

List operations by resource ID.

Synopsis

``` nebius vpc allocation operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc allocation operation wait Source: https://docs.nebius.com/cli/reference/vpc/allocation/operation/wait

Name

nebius vpc allocation operation wait

Wait for operation to complete.

Synopsis

``` nebius vpc allocation operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc allocation update Source: https://docs.nebius.com/cli/reference/vpc/allocation/update

Name

nebius vpc allocation update

Synopsis

``` nebius vpc allocation update [id] --id --labels --labels-add --labels-remove --name --parent-id --resource-version --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "ipv4_private": { // Cannot be set together with: ipv4_public }, "ipv4_public": { // Cannot be set together with: ipv4_private } } } ``` ```json theme={null} nebius vpc allocation update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "ipv4_private": { } } } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc Source: https://docs.nebius.com/cli/reference/vpc/index

Name

nebius vpc

Commands

nebius vpc allocation

nebius vpc network

nebius vpc pool

nebius vpc route

nebius vpc route-table

nebius vpc security-group

SecurityGroupService provides operations for managing security groups.

nebius vpc security-rule

SecurityRuleService provides operations for managing security rules.

nebius vpc subnet

nebius vpc target-group

nebius vpc v1alpha1

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc network create Source: https://docs.nebius.com/cli/reference/vpc/network/create

Name

nebius vpc network create

Synopsis

``` nebius vpc network create --ipv4-private-pools-pools --ipv4-public-pools-pools --labels --name --parent-id [required] --resource-version --async -i, --interactive ```

Options

`--ipv4-private-pools-pools` (json)

(structure)

id -> (string)\[required]

ID of the pool.

JSON Schema:

```json theme={null} [{ "id": "" }] ```

`--ipv4-public-pools-pools` (json)

(structure)

id -> (string)\[required]

ID of the pool.

JSON Schema:

```json theme={null} [{ "id": "" }] ```

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // [required] "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "ipv4_private_pools": { // [non_empty_default] // Pools for private IPv4 addresses. // Default private pools will be created if not specified. // Default private pools are referred here // https://docs.nebius.com/vpc/addressing/available-addresses. "pools": [{ "id": string // [required] // ID of the pool. }] }, "ipv4_public_pools": { // [non_empty_default] // Pools for public IPv4 addresses. // Default public pool will be used if not specified. "pools": [{ "id": string // [required] // ID of the pool. }] } } } ``` ```json theme={null} nebius vpc network create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "ipv4_private_pools": { "pools": [{ "id": "" }] }, "ipv4_public_pools": { "pools": [{ "id": "" }] } } } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc network create-default Source: https://docs.nebius.com/cli/reference/vpc/network/create-default

Name

nebius vpc network create-default

Synopsis

``` nebius vpc network create-default [id] --id --labels --name --parent-id [required] --resource-version --async ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // [required] "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. } } ``` ```json theme={null} nebius vpc network create-default ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 } } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc network delete Source: https://docs.nebius.com/cli/reference/vpc/network/delete

Name

nebius vpc network delete

Synopsis

``` nebius vpc network delete [id] --id [required] --async ```

Positional Arguments

id

ID of the resource to delete.

Options

`--id` (string) \[required]

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius vpc network delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc network edit Source: https://docs.nebius.com/cli/reference/vpc/network/edit

Name

nebius vpc network edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius vpc network edit [id] --async --editor --id ```

Positional Arguments

id

ID of the resource to edit.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc network edit-by-name Source: https://docs.nebius.com/cli/reference/vpc/network/edit-by-name

Name

nebius vpc network edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

Synopsis

``` nebius vpc network edit-by-name --async --editor --name --parent-id ```

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--name` (string)

`--parent-id` (string)

ID of the project.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc network get Source: https://docs.nebius.com/cli/reference/vpc/network/get

Name

nebius vpc network get

Synopsis

``` nebius vpc network get [id] --id [required] ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius vpc network get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc network get-by-name Source: https://docs.nebius.com/cli/reference/vpc/network/get-by-name

Name

nebius vpc network get-by-name

Synopsis

``` nebius vpc network get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

`--parent-id` (string) \[required]

ID of the project.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // [required] // ID of the project. } ``` ```json theme={null} nebius vpc network get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc network Source: https://docs.nebius.com/cli/reference/vpc/network/index

Name

nebius vpc network

Commands

nebius vpc network create

nebius vpc network create-default

nebius vpc network delete

nebius vpc network edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius vpc network edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

nebius vpc network get

nebius vpc network get-by-name

nebius vpc network list

nebius vpc network operation

Manage operations for Network service.

nebius vpc network update

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc network list Source: https://docs.nebius.com/cli/reference/vpc/network/list

Name

nebius vpc network list

Synopsis

``` nebius vpc network list --page-size --page-token --parent-id [required] --all -i, --interactive ```

Options

`--page-size` (int64)

`--page-token` (string)

`--parent-id` (string) \[required]

ID of the project.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, "page_token": string, "parent_id": string // [required] // ID of the project. } ``` ```json theme={null} nebius vpc network list ' { "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc network operation get Source: https://docs.nebius.com/cli/reference/vpc/network/operation/get

Name

nebius vpc network operation get

Get operation by ID.

Synopsis

``` nebius vpc network operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc network operation Source: https://docs.nebius.com/cli/reference/vpc/network/operation/index

Name

nebius vpc network operation

Manage operations for Network service.

Commands

nebius vpc network operation get

Get operation by ID.

nebius vpc network operation list

List operations by resource ID.

nebius vpc network operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc network operation list Source: https://docs.nebius.com/cli/reference/vpc/network/operation/list

Name

nebius vpc network operation list

List operations by resource ID.

Synopsis

``` nebius vpc network operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc network operation wait Source: https://docs.nebius.com/cli/reference/vpc/network/operation/wait

Name

nebius vpc network operation wait

Wait for operation to complete.

Synopsis

``` nebius vpc network operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc network update Source: https://docs.nebius.com/cli/reference/vpc/network/update

Name

nebius vpc network update

Synopsis

``` nebius vpc network update [id] --id --ipv4-private-pools-pools --ipv4-public-pools-pools --labels --labels-add --labels-remove --name --parent-id --resource-version --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--id` (string)

Identifier for the resource, unique for its resource type.

`--ipv4-private-pools-pools` (json)

(structure)

id -> (string)\[required]

ID of the pool.

JSON Schema:

```json theme={null} [{ "id": "" }] ```

`--ipv4-public-pools-pools` (json)

(structure)

id -> (string)\[required]

ID of the pool.

JSON Schema:

```json theme={null} [{ "id": "" }] ```

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "ipv4_private_pools": { // [non_empty_default] // Pools for private IPv4 addresses. // Default private pools will be created if not specified. // Default private pools are referred here // https://docs.nebius.com/vpc/addressing/available-addresses. "pools": [{ "id": string // [required] // ID of the pool. }] }, "ipv4_public_pools": { // [non_empty_default] // Pools for public IPv4 addresses. // Default public pool will be used if not specified. "pools": [{ "id": string // [required] // ID of the pool. }] } } } ``` ```json theme={null} nebius vpc network update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "ipv4_private_pools": { "pools": [{ "id": "" }] }, "ipv4_public_pools": { "pools": [{ "id": "" }] } } } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc pool create Source: https://docs.nebius.com/cli/reference/vpc/pool/create

Name

nebius vpc pool create

Synopsis

``` nebius vpc pool create --cidrs --labels --name --parent-id [required] --resource-version --source-pool-id --version [required] --visibility [required] --async -i, --interactive ```

Options

`--cidrs` (json)

CIDR blocks defined by the pool.

(structure)

cidr -> (string)\[required]

A CIDR block (e.g., "10.1.2.0/24") or a prefix length (e.g., "/24").
If prefix length is specified, the CIDR block will be auto-allocated from
the available space in the parent pool.

max\_mask\_length -> (int64)\[non\_empty\_default]

Maximum mask length for this pool child pools and allocations.
Default max\_mask\_length is 32 for IPv4.

state -> (string)\[non\_empty\_default]

Controls provisioning of IP addresses from the CIDR block to other pools
or allocations. Defaults to AVAILABLE.

A value must be one of:

  • "state\_unspecified"
  • "available"
  • "disabled"

JSON Schema:

```json theme={null} [{ "cidr": "", "max_mask_length": 0, "state": "state_unspecified"|"available"|"disabled" }] ```

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--source-pool-id` (string)

ID of the source pool.
CIDR blocks of a pool must be within the range defined by its source pool.

`--version` (string) \[required]

IP version of the pool.

A value must be one of:

  • ipv4
  • ipv6

`--visibility` (string) \[required]

Configures whether the pool is private or public.
Only public pools IP addresses are routable in the Internet.

A value must be one of:

  • private
  • public

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // [required] "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // [required] "cidrs": [{ // CIDR blocks defined by the pool. "cidr": string, // [required] // A CIDR block (e.g., "10.1.2.0/24") or a prefix length (e.g., "/24"). // If prefix length is specified, the CIDR block will be auto-allocated from // the available space in the parent pool. "max_mask_length": int64, // [non_empty_default] // Maximum mask length for this pool child pools and allocations. // Default max_mask_length is 32 for IPv4. "state": enum( // [non_empty_default] // Controls provisioning of IP addresses from the CIDR block to other pools // or allocations. Defaults to AVAILABLE. "STATE_UNSPECIFIED", // Not used, mandated by the protocol. "AVAILABLE", // Default state. Provision of the IP addresses from this CIDR block is allowed. "DISABLED" // Provision of the IP addresses from this CIDR block is denied. ) }], "source_pool_id": string, // [immutable] // ID of the source pool. // CIDR blocks of a pool must be within the range defined by its source pool. "version": enum( // [required] [immutable] // IP version of the pool. "IP_VERSION_UNSPECIFIED", // Default, unspecified IP version. "IPV4", // IPv4 address. "IPV6" // IPv6 address. ), "visibility": enum( // [required] [immutable] // Configures whether the pool is private or public. // Only public pools IP addresses are routable in the Internet. "IP_VISIBILITY_UNSPECIFIED", // Default, unspecified IP visibility. "PRIVATE", // Private address. "PUBLIC" // Public address. ) } } ``` ```json theme={null} nebius vpc pool create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "cidrs": [{ "cidr": "", "max_mask_length": 0, "state": "state_unspecified"|"available"|"disabled" }], "source_pool_id": "", "version": "ip_version_unspecified"|"ipv4"|"ipv6" , "visibility": "ip_visibility_unspecified"|"private"|"public" } } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc pool delete Source: https://docs.nebius.com/cli/reference/vpc/pool/delete

Name

nebius vpc pool delete

Synopsis

``` nebius vpc pool delete [id] --id [required] --async ```

Positional Arguments

id

ID of the resource to delete.

Options

`--id` (string) \[required]

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius vpc pool delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc pool edit Source: https://docs.nebius.com/cli/reference/vpc/pool/edit

Name

nebius vpc pool edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius vpc pool edit [id] --async --editor --id ```

Positional Arguments

id

ID of the resource to edit.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc pool edit-by-name Source: https://docs.nebius.com/cli/reference/vpc/pool/edit-by-name

Name

nebius vpc pool edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

Synopsis

``` nebius vpc pool edit-by-name --async --editor --name --parent-id ```

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--name` (string)

`--parent-id` (string)

ID of the project.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc pool get Source: https://docs.nebius.com/cli/reference/vpc/pool/get

Name

nebius vpc pool get

Synopsis

``` nebius vpc pool get [id] --id [required] ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius vpc pool get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc pool get-by-name Source: https://docs.nebius.com/cli/reference/vpc/pool/get-by-name

Name

nebius vpc pool get-by-name

Synopsis

``` nebius vpc pool get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

`--parent-id` (string) \[required]

ID of the project.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // [required] // ID of the project. } ``` ```json theme={null} nebius vpc pool get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc pool Source: https://docs.nebius.com/cli/reference/vpc/pool/index

Name

nebius vpc pool

Commands

nebius vpc pool create

nebius vpc pool delete

nebius vpc pool edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius vpc pool edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

nebius vpc pool get

nebius vpc pool get-by-name

nebius vpc pool list

nebius vpc pool list-by-source-pool

nebius vpc pool operation

Manage operations for Pool service.

nebius vpc pool update

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc pool list Source: https://docs.nebius.com/cli/reference/vpc/pool/list

Name

nebius vpc pool list

Synopsis

``` nebius vpc pool list --page-size --page-token --parent-id [required] --all -i, --interactive ```

Options

`--page-size` (int64)

`--page-token` (string)

`--parent-id` (string) \[required]

ID of the project.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, "page_token": string, "parent_id": string // [required] // ID of the project. } ``` ```json theme={null} nebius vpc pool list ' { "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc pool list-by-source-pool Source: https://docs.nebius.com/cli/reference/vpc/pool/list-by-source-pool

Name

nebius vpc pool list-by-source-pool

Synopsis

``` nebius vpc pool list-by-source-pool --page-size --page-token --pool-id [required] ```

Options

`--page-size` (int64)

`--page-token` (string)

`--pool-id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, "page_token": string, "pool_id": string // [required] } ``` ```json theme={null} nebius vpc pool list-by-source-pool ' { "page_size": 0, "page_token": "", "pool_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc pool operation get Source: https://docs.nebius.com/cli/reference/vpc/pool/operation/get

Name

nebius vpc pool operation get

Get operation by ID.

Synopsis

``` nebius vpc pool operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc pool operation Source: https://docs.nebius.com/cli/reference/vpc/pool/operation/index

Name

nebius vpc pool operation

Manage operations for Pool service.

Commands

nebius vpc pool operation get

Get operation by ID.

nebius vpc pool operation list

List operations by resource ID.

nebius vpc pool operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc pool operation list Source: https://docs.nebius.com/cli/reference/vpc/pool/operation/list

Name

nebius vpc pool operation list

List operations by resource ID.

Synopsis

``` nebius vpc pool operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc pool operation wait Source: https://docs.nebius.com/cli/reference/vpc/pool/operation/wait

Name

nebius vpc pool operation wait

Wait for operation to complete.

Synopsis

``` nebius vpc pool operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc pool update Source: https://docs.nebius.com/cli/reference/vpc/pool/update

Name

nebius vpc pool update

Synopsis

``` nebius vpc pool update [id] --cidrs --id --labels --labels-add --labels-remove --name --parent-id --resource-version --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--cidrs` (json)

CIDR blocks defined by the pool.

(structure)

cidr -> (string)\[required]

A CIDR block (e.g., "10.1.2.0/24") or a prefix length (e.g., "/24").
If prefix length is specified, the CIDR block will be auto-allocated from
the available space in the parent pool.

max\_mask\_length -> (int64)\[non\_empty\_default]

Maximum mask length for this pool child pools and allocations.
Default max\_mask\_length is 32 for IPv4.

state -> (string)\[non\_empty\_default]

Controls provisioning of IP addresses from the CIDR block to other pools
or allocations. Defaults to AVAILABLE.

A value must be one of:

  • "state\_unspecified"
  • "available"
  • "disabled"

JSON Schema:

```json theme={null} [{ "cidr": "", "max_mask_length": 0, "state": "state_unspecified"|"available"|"disabled" }] ```

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "cidrs": [{ // CIDR blocks defined by the pool. "cidr": string, // [required] // A CIDR block (e.g., "10.1.2.0/24") or a prefix length (e.g., "/24"). // If prefix length is specified, the CIDR block will be auto-allocated from // the available space in the parent pool. "max_mask_length": int64, // [non_empty_default] // Maximum mask length for this pool child pools and allocations. // Default max_mask_length is 32 for IPv4. "state": enum( // [non_empty_default] // Controls provisioning of IP addresses from the CIDR block to other pools // or allocations. Defaults to AVAILABLE. "STATE_UNSPECIFIED", // Not used, mandated by the protocol. "AVAILABLE", // Default state. Provision of the IP addresses from this CIDR block is allowed. "DISABLED" // Provision of the IP addresses from this CIDR block is denied. ) }] } } ``` ```json theme={null} nebius vpc pool update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "cidrs": [{ "cidr": "", "max_mask_length": 0, "state": "state_unspecified"|"available"|"disabled" }] } } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc route-table create Source: https://docs.nebius.com/cli/reference/vpc/route-table/create

Name

nebius vpc route-table create

Synopsis

``` nebius vpc route-table create --labels --name --network-id [required] --parent-id [required] --resource-version --async -i, --interactive ```

Options

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--network-id` (string) \[required]

ID of the VPC network this route table belongs to.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // [required] "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // [required] "network_id": string // [required] [immutable] // ID of the VPC network this route table belongs to. } } ``` ```json theme={null} nebius vpc route-table create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "network_id": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc route-table delete Source: https://docs.nebius.com/cli/reference/vpc/route-table/delete

Name

nebius vpc route-table delete

Synopsis

``` nebius vpc route-table delete [id] --id [required] --async ```

Positional Arguments

id

ID of the resource to delete.

Options

`--id` (string) \[required]

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius vpc route-table delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc route-table edit Source: https://docs.nebius.com/cli/reference/vpc/route-table/edit

Name

nebius vpc route-table edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius vpc route-table edit [id] --async --editor --id ```

Positional Arguments

id

ID of the resource to edit.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc route-table edit-by-name Source: https://docs.nebius.com/cli/reference/vpc/route-table/edit-by-name

Name

nebius vpc route-table edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

Synopsis

``` nebius vpc route-table edit-by-name --async --editor --name --parent-id ```

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--name` (string)

`--parent-id` (string)

ID of the Project.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc route-table get Source: https://docs.nebius.com/cli/reference/vpc/route-table/get

Name

nebius vpc route-table get

Synopsis

``` nebius vpc route-table get [id] --id [required] ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius vpc route-table get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc route-table get-by-name Source: https://docs.nebius.com/cli/reference/vpc/route-table/get-by-name

Name

nebius vpc route-table get-by-name

Synopsis

``` nebius vpc route-table get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

`--parent-id` (string) \[required]

ID of the Project.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // [required] // ID of the Project. } ``` ```json theme={null} nebius vpc route-table get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc route-table Source: https://docs.nebius.com/cli/reference/vpc/route-table/index

Name

nebius vpc route-table

Commands

nebius vpc route-table create

nebius vpc route-table delete

nebius vpc route-table edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius vpc route-table edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

nebius vpc route-table get

nebius vpc route-table get-by-name

nebius vpc route-table list

nebius vpc route-table list-by-network

nebius vpc route-table operation

Manage operations for RouteTable service.

nebius vpc route-table update

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc route-table list Source: https://docs.nebius.com/cli/reference/vpc/route-table/list

Name

nebius vpc route-table list

Synopsis

``` nebius vpc route-table list --page-size --page-token --parent-id [required] --all -i, --interactive ```

Options

`--page-size` (int64)

`--page-token` (string)

`--parent-id` (string) \[required]

ID of the Project.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, "page_token": string, "parent_id": string // [required] // ID of the Project. } ``` ```json theme={null} nebius vpc route-table list ' { "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc route-table list-by-network Source: https://docs.nebius.com/cli/reference/vpc/route-table/list-by-network

Name

nebius vpc route-table list-by-network

Synopsis

``` nebius vpc route-table list-by-network --network-id [required] --page-size --page-token ```

Options

`--network-id` (string) \[required]

`--page-size` (int64)

`--page-token` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "network_id": string, // [required] "page_size": int64, "page_token": string } ``` ```json theme={null} nebius vpc route-table list-by-network ' { "network_id": "", "page_size": 0, "page_token": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc route-table operation get Source: https://docs.nebius.com/cli/reference/vpc/route-table/operation/get

Name

nebius vpc route-table operation get

Get operation by ID.

Synopsis

``` nebius vpc route-table operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc route-table operation Source: https://docs.nebius.com/cli/reference/vpc/route-table/operation/index

Name

nebius vpc route-table operation

Manage operations for RouteTable service.

Commands

nebius vpc route-table operation get

Get operation by ID.

nebius vpc route-table operation list

List operations by resource ID.

nebius vpc route-table operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc route-table operation list Source: https://docs.nebius.com/cli/reference/vpc/route-table/operation/list

Name

nebius vpc route-table operation list

List operations by resource ID.

Synopsis

``` nebius vpc route-table operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc route-table operation wait Source: https://docs.nebius.com/cli/reference/vpc/route-table/operation/wait

Name

nebius vpc route-table operation wait

Wait for operation to complete.

Synopsis

``` nebius vpc route-table operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc route-table update Source: https://docs.nebius.com/cli/reference/vpc/route-table/update

Name

nebius vpc route-table update

Synopsis

``` nebius vpc route-table update [id] --id --labels --labels-add --labels-remove --name --parent-id --resource-version --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { } } ``` ```json theme={null} nebius vpc route-table update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { } } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc route create Source: https://docs.nebius.com/cli/reference/vpc/route/create

Name

nebius vpc route create

Synopsis

``` nebius vpc route create --description --destination-cidr [required] --labels --name --next-hop-allocation-id --next-hop-default-egress-gateway --parent-id [required] --resource-version --async -i, --interactive ```

Options

`--description` (string)

Optional description of the route.

`--destination-cidr` (string) \[required]

Destination CIDR block in IPv4 format (e.g., "0.0.0.0/0" for default route, "192.168.100.0/24" for specific subnet).
The CIDR notation specifies the range of IP addresses that this route will match.
Must be unique within a route table.

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--next-hop-allocation-id` (string)

ID of the IP allocation to use as the next hop.

Mutually exclusive with: `--next-hop-default-egress-gateway`.

`--next-hop-default-egress-gateway` (bool)

Use the default egress gateway for outbound traffic.
Note: For VMs with public addresses (Floating IPs/FIPs), the FIP-specific route
takes precedence over this default egress gateway route.

Mutually exclusive with: `--next-hop-allocation-id`.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // [required] "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // [required] "description": string, // Optional description of the route. "destination": { // [required] [immutable] // Destination for the route. // Each destination CIDR must be unique within a route table. // When multiple routes match a destination IP, the route with the longest // matching prefix (most specific match) is selected. "cidr": string // [required] [immutable] // Destination CIDR block in IPv4 format (e.g., "0.0.0.0/0" for default route, "192.168.100.0/24" for specific subnet). // The CIDR notation specifies the range of IP addresses that this route will match. // Must be unique within a route table. }, "next_hop": { // [required] [immutable] // Next hop configuration specifying where to send matching traffic. "allocation": { // Cannot be set together with: default_egress_gateway // Forward traffic to a specific IP allocation (/32 address only). // The allocation must be from the same network as the route table. // The allocation must be assigned to either a Compute instance or a Load Balancer. // Warning: If the allocation exists but is not assigned to any resource, // traffic will be forwarded to a "black hole" and dropped. "id": string // [required] // ID of the IP allocation to use as the next hop. }, "default_egress_gateway": bool // Cannot be set together with: allocation // Use the default egress gateway for outbound traffic. // Note: For VMs with public addresses (Floating IPs/FIPs), the FIP-specific route // takes precedence over this default egress gateway route. } } } ``` ```json theme={null} nebius vpc route create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "description": "", "destination": { "cidr": "" }, "next_hop": { "allocation": { "id": "" } } } } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc route delete Source: https://docs.nebius.com/cli/reference/vpc/route/delete

Name

nebius vpc route delete

Synopsis

``` nebius vpc route delete [id] --id [required] --async ```

Positional Arguments

id

ID of the resource to delete.

Options

`--id` (string) \[required]

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius vpc route delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc route edit Source: https://docs.nebius.com/cli/reference/vpc/route/edit

Name

nebius vpc route edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius vpc route edit [id] --async --editor --id ```

Positional Arguments

id

ID of the resource to edit.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc route edit-by-name Source: https://docs.nebius.com/cli/reference/vpc/route/edit-by-name

Name

nebius vpc route edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

Synopsis

``` nebius vpc route edit-by-name --async --editor --name --parent-id ```

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--name` (string)

`--parent-id` (string)

ID of the RouteTable.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc route get Source: https://docs.nebius.com/cli/reference/vpc/route/get

Name

nebius vpc route get

Synopsis

``` nebius vpc route get [id] --id [required] ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius vpc route get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc route get-by-name Source: https://docs.nebius.com/cli/reference/vpc/route/get-by-name

Name

nebius vpc route get-by-name

Synopsis

``` nebius vpc route get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

`--parent-id` (string) \[required]

ID of the RouteTable.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // [required] // ID of the RouteTable. } ``` ```json theme={null} nebius vpc route get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc route Source: https://docs.nebius.com/cli/reference/vpc/route/index

Name

nebius vpc route

Commands

nebius vpc route create

nebius vpc route delete

nebius vpc route edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius vpc route edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

nebius vpc route get

nebius vpc route get-by-name

nebius vpc route list

nebius vpc route operation

Manage operations for Route service.

nebius vpc route update

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc route list Source: https://docs.nebius.com/cli/reference/vpc/route/list

Name

nebius vpc route list

Synopsis

``` nebius vpc route list --page-size --page-token --parent-id [required] --all -i, --interactive ```

Options

`--page-size` (int64)

`--page-token` (string)

`--parent-id` (string) \[required]

ID of the RouteTable.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, "page_token": string, "parent_id": string // [required] // ID of the RouteTable. } ``` ```json theme={null} nebius vpc route list ' { "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc route operation get Source: https://docs.nebius.com/cli/reference/vpc/route/operation/get

Name

nebius vpc route operation get

Get operation by ID.

Synopsis

``` nebius vpc route operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc route operation Source: https://docs.nebius.com/cli/reference/vpc/route/operation/index

Name

nebius vpc route operation

Manage operations for Route service.

Commands

nebius vpc route operation get

Get operation by ID.

nebius vpc route operation list

List operations by resource ID.

nebius vpc route operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc route operation list Source: https://docs.nebius.com/cli/reference/vpc/route/operation/list

Name

nebius vpc route operation list

List operations by resource ID.

Synopsis

``` nebius vpc route operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc route operation wait Source: https://docs.nebius.com/cli/reference/vpc/route/operation/wait

Name

nebius vpc route operation wait

Wait for operation to complete.

Synopsis

``` nebius vpc route operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc route update Source: https://docs.nebius.com/cli/reference/vpc/route/update

Name

nebius vpc route update

Synopsis

``` nebius vpc route update [id] --description --id --labels --labels-add --labels-remove --name --parent-id --resource-version --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--description` (string)

Optional description of the route.

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "description": string // Optional description of the route. } } ``` ```json theme={null} nebius vpc route update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "description": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc security-group create Source: https://docs.nebius.com/cli/reference/vpc/security-group/create

Name

nebius vpc security-group create

Synopsis

``` nebius vpc security-group create --labels --name --network-id [required] --parent-id [required] --resource-version --async -i, --interactive ```

Options

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--network-id` (string) \[required]

ID of the VPC network this security group belongs to.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // [required] "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // [required] "network_id": string // [required] [immutable] // ID of the VPC network this security group belongs to. } } ``` ```json theme={null} nebius vpc security-group create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "network_id": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc security-group delete Source: https://docs.nebius.com/cli/reference/vpc/security-group/delete

Name

nebius vpc security-group delete

Synopsis

``` nebius vpc security-group delete [id] --id [required] --async ```

Positional Arguments

id

ID of the resource to delete.

Options

`--id` (string) \[required]

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius vpc security-group delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc security-group edit Source: https://docs.nebius.com/cli/reference/vpc/security-group/edit

Name

nebius vpc security-group edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius vpc security-group edit [id] --async --editor --id ```

Positional Arguments

id

ID of the resource to edit.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc security-group edit-by-name Source: https://docs.nebius.com/cli/reference/vpc/security-group/edit-by-name

Name

nebius vpc security-group edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

Synopsis

``` nebius vpc security-group edit-by-name --async --editor --name --parent-id ```

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--name` (string)

`--parent-id` (string)

ID of the Project.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc security-group get Source: https://docs.nebius.com/cli/reference/vpc/security-group/get

Name

nebius vpc security-group get

Synopsis

``` nebius vpc security-group get [id] --id [required] ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius vpc security-group get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc security-group get-by-name Source: https://docs.nebius.com/cli/reference/vpc/security-group/get-by-name

Name

nebius vpc security-group get-by-name

Synopsis

``` nebius vpc security-group get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

`--parent-id` (string) \[required]

ID of the Project.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // [required] // ID of the Project. } ``` ```json theme={null} nebius vpc security-group get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc security-group Source: https://docs.nebius.com/cli/reference/vpc/security-group/index

Name

nebius vpc security-group

SecurityGroupService provides operations for managing security groups.

Commands

nebius vpc security-group create

nebius vpc security-group delete

nebius vpc security-group edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius vpc security-group edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

nebius vpc security-group get

nebius vpc security-group get-by-name

nebius vpc security-group list

nebius vpc security-group list-by-network

Lists security groups in a specific network.

nebius vpc security-group operation

Manage operations for SecurityGroup service.

nebius vpc security-group update

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc security-group list Source: https://docs.nebius.com/cli/reference/vpc/security-group/list

Name

nebius vpc security-group list

Synopsis

``` nebius vpc security-group list --page-size --page-token --parent-id [required] --all -i, --interactive ```

Options

`--page-size` (int64)

`--page-token` (string)

`--parent-id` (string) \[required]

ID of the Project.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, "page_token": string, "parent_id": string // [required] // ID of the Project. } ``` ```json theme={null} nebius vpc security-group list ' { "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc security-group list-by-network Source: https://docs.nebius.com/cli/reference/vpc/security-group/list-by-network

Name

nebius vpc security-group list-by-network

Lists security groups in a specific network.

Synopsis

``` nebius vpc security-group list-by-network --network-id [required] --page-size --page-token ```

Options

`--network-id` (string) \[required]

ID of the Network.

`--page-size` (int64)

`--page-token` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "network_id": string, // [required] // ID of the Network. "page_size": int64, "page_token": string } ``` ```json theme={null} nebius vpc security-group list-by-network ' { "network_id": "", "page_size": 0, "page_token": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc security-group operation get Source: https://docs.nebius.com/cli/reference/vpc/security-group/operation/get

Name

nebius vpc security-group operation get

Get operation by ID.

Synopsis

``` nebius vpc security-group operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc security-group operation Source: https://docs.nebius.com/cli/reference/vpc/security-group/operation/index

Name

nebius vpc security-group operation

Manage operations for SecurityGroup service.

Commands

nebius vpc security-group operation get

Get operation by ID.

nebius vpc security-group operation list

List operations by resource ID.

nebius vpc security-group operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc security-group operation list Source: https://docs.nebius.com/cli/reference/vpc/security-group/operation/list

Name

nebius vpc security-group operation list

List operations by resource ID.

Synopsis

``` nebius vpc security-group operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc security-group operation wait Source: https://docs.nebius.com/cli/reference/vpc/security-group/operation/wait

Name

nebius vpc security-group operation wait

Wait for operation to complete.

Synopsis

``` nebius vpc security-group operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc security-group update Source: https://docs.nebius.com/cli/reference/vpc/security-group/update

Name

nebius vpc security-group update

Synopsis

``` nebius vpc security-group update [id] --id --labels --labels-add --labels-remove --name --parent-id --resource-version --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { } } ``` ```json theme={null} nebius vpc security-group update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { } } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc security-rule create Source: https://docs.nebius.com/cli/reference/vpc/security-rule/create

Name

nebius vpc security-rule create

Synopsis

``` nebius vpc security-rule create --access [required] --egress-destination-cidrs --egress-destination-ports --egress-destination-security-group-id --ingress-destination-ports --ingress-source-cidrs --ingress-source-security-group-id --labels --name --parent-id [required] --priority --protocol [required] --resource-version --type --async -i, --interactive ```

Options

`--access` (string) \[required]

Access action for the rule.
Required. Determines whether matching traffic is allowed or denied.

A value must be one of:

  • allow
  • deny

`--egress-destination-cidrs` (string array)

CIDR blocks as the destination.
Optional. Empty list means any address.
Must be a valid IPv4.
Maximum of 8 CIDRs can be specified.

Mutually exclusive with: `--ingress-destination-ports`, `--ingress-source-cidrs`, `--ingress-source-security-group-id`.

`--egress-destination-ports` (int32 array)

List of ports to which the rule applies.
Optional. Empty list means any port.
Valid range: 1–65535.
Maximum of 8 ports can be specified.

Mutually exclusive with: `--ingress-destination-ports`, `--ingress-source-cidrs`, `--ingress-source-security-group-id`.

`--egress-destination-security-group-id` (string)

ID of the referenced Security Group as the destination.

Mutually exclusive with: `--ingress-destination-ports`, `--ingress-source-cidrs`, `--ingress-source-security-group-id`.

`--ingress-destination-ports` (int32 array)

List of destination ports to which the rule applies.
Optional. Empty list means any port.
Valid range: 1–65535.
Maximum of 8 ports can be specified.

Mutually exclusive with: `--egress-destination-cidrs`, `--egress-destination-ports`, `--egress-destination-security-group-id`.

`--ingress-source-cidrs` (string array)

CIDR blocks as the source.
Optional. Empty list means any address.
Must be a valid IPv4
Maximum of 8 CIDRs can be specified.

Mutually exclusive with: `--egress-destination-cidrs`, `--egress-destination-ports`, `--egress-destination-security-group-id`.

`--ingress-source-security-group-id` (string)

ID of the referenced Security Group as the source.

Mutually exclusive with: `--egress-destination-cidrs`, `--egress-destination-ports`, `--egress-destination-security-group-id`.

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--priority` (int32)

Priority of the rule. Valid range: 0-1000.
Optional. If not specified or set to 0, defaults to 500.
Rules are evaluated in priority order (lower numbers first) using a first-match algorithm:
only the first matching rule takes effect (ALLOW or DENY), and subsequent rules are skipped.

When multiple rules share the same priority, DENY rules are evaluated before ALLOW rules.
The final evaluation order is reflected in 'effective\_priority' (see SecurityRuleStatus).

`--protocol` (string) \[required]

Protocol used in the rule.
Supported values: ANY, TCP, UDP, ICMP.

A value must be one of:

  • any
  • tcp
  • udp
  • icmp

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--type` (string)

Type of the rule (STATEFUL or STATELESS)
Default value is STATEFUL.

A value must be one of:

  • rule\_type\_unspecified
  • stateful
  • stateless

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // [required] "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // [required] "access": enum( // [required] [immutable] // Access action for the rule. // Required. Determines whether matching traffic is allowed or denied. "ACCESS_UNSPECIFIED", "ALLOW", "DENY" ), "egress": { // [immutable] // Cannot be set together with: ingress "destination_cidrs": [string], // CIDR blocks as the destination. // Optional. Empty list means any address. // Must be a valid IPv4. // Maximum of 8 CIDRs can be specified. "destination_ports": [int32], // List of ports to which the rule applies. // Optional. Empty list means any port. // Valid range: 1–65535. // Maximum of 8 ports can be specified. "destination_security_group_id": string // ID of the referenced Security Group as the destination. }, "ingress": { // [immutable] // Cannot be set together with: egress "destination_ports": [int32], // List of destination ports to which the rule applies. // Optional. Empty list means any port. // Valid range: 1–65535. // Maximum of 8 ports can be specified. "source_cidrs": [string], // CIDR blocks as the source. // Optional. Empty list means any address. // Must be a valid IPv4 // Maximum of 8 CIDRs can be specified. "source_security_group_id": string // ID of the referenced Security Group as the source. }, "priority": int32, // [immutable] [non_empty_default] // Priority of the rule. Valid range: 0-1000. // Optional. If not specified or set to 0, defaults to 500. // Rules are evaluated in priority order (lower numbers first) using a first-match algorithm: // only the first matching rule takes effect (ALLOW or DENY), and subsequent rules are skipped. // // When multiple rules share the same priority, DENY rules are evaluated before ALLOW rules. // The final evaluation order is reflected in 'effective_priority' (see SecurityRuleStatus). "protocol": enum( // [required] [immutable] // Protocol used in the rule. // Supported values: ANY, TCP, UDP, ICMP. "PROTOCOL_UNSPECIFIED", "ANY", "TCP", "UDP", "ICMP" ), "type": enum( // [immutable] [non_empty_default] // Type of the rule (STATEFUL or STATELESS) // Default value is STATEFUL. "RULE_TYPE_UNSPECIFIED", "STATEFUL", "STATELESS" ) } } ``` ```json theme={null} nebius vpc security-rule create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "access": "access_unspecified"|"allow"|"deny" , "egress": { "destination_cidrs": [""], "destination_ports": [0], "destination_security_group_id": "" }, "priority": 0, "protocol": "protocol_unspecified"|"any"|"tcp"|"udp"|"icmp", "type": "rule_type_unspecified"|"stateful"|"stateless" } } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc security-rule delete Source: https://docs.nebius.com/cli/reference/vpc/security-rule/delete

Name

nebius vpc security-rule delete

Synopsis

``` nebius vpc security-rule delete [id] --id [required] --async ```

Positional Arguments

id

ID of the resource to delete.

Options

`--id` (string) \[required]

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius vpc security-rule delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc security-rule edit Source: https://docs.nebius.com/cli/reference/vpc/security-rule/edit

Name

nebius vpc security-rule edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius vpc security-rule edit [id] --async --editor --id ```

Positional Arguments

id

ID of the resource to edit.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc security-rule edit-by-name Source: https://docs.nebius.com/cli/reference/vpc/security-rule/edit-by-name

Name

nebius vpc security-rule edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

Synopsis

``` nebius vpc security-rule edit-by-name --async --editor --name --parent-id ```

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--name` (string)

`--parent-id` (string)

ID of the Security Group.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc security-rule get Source: https://docs.nebius.com/cli/reference/vpc/security-rule/get

Name

nebius vpc security-rule get

Synopsis

``` nebius vpc security-rule get [id] --id [required] ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius vpc security-rule get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc security-rule get-by-name Source: https://docs.nebius.com/cli/reference/vpc/security-rule/get-by-name

Name

nebius vpc security-rule get-by-name

Synopsis

``` nebius vpc security-rule get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

`--parent-id` (string) \[required]

ID of the Security Group.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // [required] // ID of the Security Group. } ``` ```json theme={null} nebius vpc security-rule get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc security-rule Source: https://docs.nebius.com/cli/reference/vpc/security-rule/index

Name

nebius vpc security-rule

SecurityRuleService provides operations for managing security rules.

Commands

nebius vpc security-rule create

nebius vpc security-rule delete

nebius vpc security-rule edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius vpc security-rule edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

nebius vpc security-rule get

nebius vpc security-rule get-by-name

nebius vpc security-rule list

nebius vpc security-rule operation

Manage operations for SecurityRule service.

nebius vpc security-rule update

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc security-rule list Source: https://docs.nebius.com/cli/reference/vpc/security-rule/list

Name

nebius vpc security-rule list

Synopsis

``` nebius vpc security-rule list --page-size --page-token --parent-id [required] --all -i, --interactive ```

Options

`--page-size` (int64)

`--page-token` (string)

`--parent-id` (string) \[required]

ID of the Security Group.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, "page_token": string, "parent_id": string // [required] // ID of the Security Group. } ``` ```json theme={null} nebius vpc security-rule list ' { "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc security-rule operation get Source: https://docs.nebius.com/cli/reference/vpc/security-rule/operation/get

Name

nebius vpc security-rule operation get

Get operation by ID.

Synopsis

``` nebius vpc security-rule operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc security-rule operation Source: https://docs.nebius.com/cli/reference/vpc/security-rule/operation/index

Name

nebius vpc security-rule operation

Manage operations for SecurityRule service.

Commands

nebius vpc security-rule operation get

Get operation by ID.

nebius vpc security-rule operation list

List operations by resource ID.

nebius vpc security-rule operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc security-rule operation list Source: https://docs.nebius.com/cli/reference/vpc/security-rule/operation/list

Name

nebius vpc security-rule operation list

List operations by resource ID.

Synopsis

``` nebius vpc security-rule operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc security-rule operation wait Source: https://docs.nebius.com/cli/reference/vpc/security-rule/operation/wait

Name

nebius vpc security-rule operation wait

Wait for operation to complete.

Synopsis

``` nebius vpc security-rule operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc security-rule update Source: https://docs.nebius.com/cli/reference/vpc/security-rule/update

Name

nebius vpc security-rule update

Synopsis

``` nebius vpc security-rule update [id] --id --labels --labels-add --labels-remove --name --parent-id --resource-version --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { } } ``` ```json theme={null} nebius vpc security-rule update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { } } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc subnet create Source: https://docs.nebius.com/cli/reference/vpc/subnet/create

Name

nebius vpc subnet create

Synopsis

``` nebius vpc subnet create --ipv4-private-pools-pools --ipv4-private-pools-use-network-pools --ipv4-public-pools-pools --ipv4-public-pools-use-network-pools --labels --name --network-id [required] --parent-id [required] --resource-version --route-table-id --async -i, --interactive ```

Options

`--ipv4-private-pools-pools` (json)

List of private IPv4 CIDR blocks for this subnet.
Must not overlap with other resources in the network
Must be empty if `use_network_pools` is true.

(structure)

cidrs -> (structure)

cidr -> (string)\[required]

A CIDR block (e.g., "10.1.2.0/24") or a prefix length (e.g., "/24").
If prefix length is specified, the CIDR block will be auto-allocated
from the network's available space.

max\_mask\_length -> (int64)\[non\_empty\_default]

Maximum mask length for an allocation from this block. Defaults to /32 for IPv4.

state -> (string)\[non\_empty\_default]

Controls provisioning of IP addresses from the CIDR block. Defaults to AVAILABLE.

A value must be one of:

  • "state\_unspecified"
  • "available"
  • "disabled"

JSON Schema:

```json theme={null} [{ "cidrs": [{ "cidr": "", "max_mask_length": 0, "state": "state_unspecified"|"available"|"disabled" }] }] ```

`--ipv4-private-pools-use-network-pools` (bool)

If true, inherit private IPv4 pools from the network. Defaults to true.
Must be false if `pools` is specified.

`--ipv4-public-pools-pools` (json)

List of public IPv4 CIDR blocks for this subnet.
Must not overlap with other resources in the network.
Must be empty if `use_network_pools` is true.

(structure)

cidrs -> (structure)

cidr -> (string)\[required]

A CIDR block (e.g., "10.1.2.0/24") or a prefix length (e.g., "/24").
If prefix length is specified, the CIDR block will be auto-allocated
from the network's available space.

max\_mask\_length -> (int64)\[non\_empty\_default]

Maximum mask length for an allocation from this block. Defaults to /32 for IPv4.

state -> (string)\[non\_empty\_default]

Controls provisioning of IP addresses from the CIDR block. Defaults to AVAILABLE.

A value must be one of:

  • "state\_unspecified"
  • "available"
  • "disabled"

JSON Schema:

```json theme={null} [{ "cidrs": [{ "cidr": "", "max_mask_length": 0, "state": "state_unspecified"|"available"|"disabled" }] }] ```

`--ipv4-public-pools-use-network-pools` (bool)

If true, inherit public IPv4 pools from the network.
Must be false if `pools` is specified.

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--network-id` (string) \[required]

ID of the network this subnet belongs to.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--route-table-id` (string)

ID of the route table to associate with the subnet.
If unspecified, the network's default route table is used.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // [required] "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // [required] "ipv4_private_pools": { // [non_empty_default] // Private IPv4 address pools for this subnet. // If unspecified, pools from the associated network are used. "pools": [{ // List of private IPv4 CIDR blocks for this subnet. // Must not overlap with other resources in the network // Must be empty if `use_network_pools` is true. "cidrs": [{ "cidr": string, // [required] // A CIDR block (e.g., "10.1.2.0/24") or a prefix length (e.g., "/24"). // If prefix length is specified, the CIDR block will be auto-allocated // from the network's available space. "max_mask_length": int64, // [non_empty_default] // Maximum mask length for an allocation from this block. Defaults to /32 for IPv4. "state": enum( // [non_empty_default] // Controls provisioning of IP addresses from the CIDR block. Defaults to AVAILABLE. "STATE_UNSPECIFIED", // Not used, mandated by the protocol. "AVAILABLE", // Default state. Provision of the IP addresses from this CIDR block is allowed. "DISABLED" // Provision of the IP addresses from this CIDR block is denied. ) }] }], "use_network_pools": bool // If true, inherit private IPv4 pools from the network. Defaults to true. // Must be false if `pools` is specified. }, "ipv4_public_pools": { // [non_empty_default] // Public IPv4 address pools for this subnet. // If unspecified, pools from the associated network are used. "pools": [{ // List of public IPv4 CIDR blocks for this subnet. // Must not overlap with other resources in the network. // Must be empty if `use_network_pools` is true. "cidrs": [{ "cidr": string, // [required] // A CIDR block (e.g., "10.1.2.0/24") or a prefix length (e.g., "/24"). // If prefix length is specified, the CIDR block will be auto-allocated // from the network's available space. "max_mask_length": int64, // [non_empty_default] // Maximum mask length for an allocation from this block. Defaults to /32 for IPv4. "state": enum( // [non_empty_default] // Controls provisioning of IP addresses from the CIDR block. Defaults to AVAILABLE. "STATE_UNSPECIFIED", // Not used, mandated by the protocol. "AVAILABLE", // Default state. Provision of the IP addresses from this CIDR block is allowed. "DISABLED" // Provision of the IP addresses from this CIDR block is denied. ) }] }], "use_network_pools": bool // If true, inherit public IPv4 pools from the network. // Must be false if `pools` is specified. }, "network_id": string, // [required] // ID of the network this subnet belongs to. "route_table_id": string // ID of the route table to associate with the subnet. // If unspecified, the network's default route table is used. } } ``` ```json theme={null} nebius vpc subnet create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "ipv4_private_pools": { "pools": [{ "cidrs": [{ "cidr": "", "max_mask_length": 0, "state": "state_unspecified"|"available"|"disabled" }] }], "use_network_pools": false }, "ipv4_public_pools": { "pools": [{ "cidrs": [{ "cidr": "", "max_mask_length": 0, "state": "state_unspecified"|"available"|"disabled" }] }], "use_network_pools": false }, "network_id": "", "route_table_id": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc subnet delete Source: https://docs.nebius.com/cli/reference/vpc/subnet/delete

Name

nebius vpc subnet delete

Synopsis

``` nebius vpc subnet delete [id] --id --async ```

Positional Arguments

id

ID of the resource to delete.

Options

`--id` (string)

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string } ``` ```json theme={null} nebius vpc subnet delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc subnet edit Source: https://docs.nebius.com/cli/reference/vpc/subnet/edit

Name

nebius vpc subnet edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius vpc subnet edit [id] --async --editor --id ```

Positional Arguments

id

ID of the resource to edit.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc subnet edit-by-name Source: https://docs.nebius.com/cli/reference/vpc/subnet/edit-by-name

Name

nebius vpc subnet edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

Synopsis

``` nebius vpc subnet edit-by-name --async --editor --name --parent-id ```

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--name` (string)

`--parent-id` (string)

ID of the project.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc subnet get Source: https://docs.nebius.com/cli/reference/vpc/subnet/get

Name

nebius vpc subnet get

Synopsis

``` nebius vpc subnet get [id] --id [required] ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius vpc subnet get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc subnet get-by-name Source: https://docs.nebius.com/cli/reference/vpc/subnet/get-by-name

Name

nebius vpc subnet get-by-name

Synopsis

``` nebius vpc subnet get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

`--parent-id` (string) \[required]

ID of the project.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // [required] // ID of the project. } ``` ```json theme={null} nebius vpc subnet get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc subnet Source: https://docs.nebius.com/cli/reference/vpc/subnet/index

Name

nebius vpc subnet

Commands

nebius vpc subnet create

nebius vpc subnet delete

nebius vpc subnet edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius vpc subnet edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

nebius vpc subnet get

nebius vpc subnet get-by-name

nebius vpc subnet list

nebius vpc subnet list-by-network

nebius vpc subnet operation

Manage operations for Subnet service.

nebius vpc subnet update

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc subnet list Source: https://docs.nebius.com/cli/reference/vpc/subnet/list

Name

nebius vpc subnet list

Synopsis

``` nebius vpc subnet list --page-size --page-token --parent-id [required] --all -i, --interactive ```

Options

`--page-size` (int64)

`--page-token` (string)

`--parent-id` (string) \[required]

ID of the parent project.

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "page_size": int64, "page_token": string, "parent_id": string // [required] // ID of the parent project. } ``` ```json theme={null} nebius vpc subnet list ' { "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc subnet list-by-network Source: https://docs.nebius.com/cli/reference/vpc/subnet/list-by-network

Name

nebius vpc subnet list-by-network

Synopsis

``` nebius vpc subnet list-by-network --network-id [required] --page-size --page-token ```

Options

`--network-id` (string) \[required]

`--page-size` (int64)

`--page-token` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "network_id": string, // [required] "page_size": int64, "page_token": string } ``` ```json theme={null} nebius vpc subnet list-by-network ' { "network_id": "", "page_size": 0, "page_token": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc subnet operation get Source: https://docs.nebius.com/cli/reference/vpc/subnet/operation/get

Name

nebius vpc subnet operation get

Get operation by ID.

Synopsis

``` nebius vpc subnet operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc subnet operation Source: https://docs.nebius.com/cli/reference/vpc/subnet/operation/index

Name

nebius vpc subnet operation

Manage operations for Subnet service.

Commands

nebius vpc subnet operation get

Get operation by ID.

nebius vpc subnet operation list

List operations by resource ID.

nebius vpc subnet operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc subnet operation list Source: https://docs.nebius.com/cli/reference/vpc/subnet/operation/list

Name

nebius vpc subnet operation list

List operations by resource ID.

Synopsis

``` nebius vpc subnet operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc subnet operation wait Source: https://docs.nebius.com/cli/reference/vpc/subnet/operation/wait

Name

nebius vpc subnet operation wait

Wait for operation to complete.

Synopsis

``` nebius vpc subnet operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc subnet update Source: https://docs.nebius.com/cli/reference/vpc/subnet/update

Name

nebius vpc subnet update

Synopsis

``` nebius vpc subnet update [id] --id --ipv4-private-pools-pools --ipv4-private-pools-use-network-pools --ipv4-public-pools-pools --ipv4-public-pools-use-network-pools --labels --labels-add --labels-remove --name --network-id --parent-id --resource-version --route-table-id --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--id` (string)

Identifier for the resource, unique for its resource type.

`--ipv4-private-pools-pools` (json)

List of private IPv4 CIDR blocks for this subnet.
Must not overlap with other resources in the network
Must be empty if `use_network_pools` is true.

(structure)

cidrs -> (structure)

cidr -> (string)\[required]

A CIDR block (e.g., "10.1.2.0/24") or a prefix length (e.g., "/24").
If prefix length is specified, the CIDR block will be auto-allocated
from the network's available space.

max\_mask\_length -> (int64)\[non\_empty\_default]

Maximum mask length for an allocation from this block. Defaults to /32 for IPv4.

state -> (string)\[non\_empty\_default]

Controls provisioning of IP addresses from the CIDR block. Defaults to AVAILABLE.

A value must be one of:

  • "state\_unspecified"
  • "available"
  • "disabled"

JSON Schema:

```json theme={null} [{ "cidrs": [{ "cidr": "", "max_mask_length": 0, "state": "state_unspecified"|"available"|"disabled" }] }] ```

`--ipv4-private-pools-use-network-pools` (bool)

If true, inherit private IPv4 pools from the network. Defaults to true.
Must be false if `pools` is specified.

`--ipv4-public-pools-pools` (json)

List of public IPv4 CIDR blocks for this subnet.
Must not overlap with other resources in the network.
Must be empty if `use_network_pools` is true.

(structure)

cidrs -> (structure)

cidr -> (string)\[required]

A CIDR block (e.g., "10.1.2.0/24") or a prefix length (e.g., "/24").
If prefix length is specified, the CIDR block will be auto-allocated
from the network's available space.

max\_mask\_length -> (int64)\[non\_empty\_default]

Maximum mask length for an allocation from this block. Defaults to /32 for IPv4.

state -> (string)\[non\_empty\_default]

Controls provisioning of IP addresses from the CIDR block. Defaults to AVAILABLE.

A value must be one of:

  • "state\_unspecified"
  • "available"
  • "disabled"

JSON Schema:

```json theme={null} [{ "cidrs": [{ "cidr": "", "max_mask_length": 0, "state": "state_unspecified"|"available"|"disabled" }] }] ```

`--ipv4-public-pools-use-network-pools` (bool)

If true, inherit public IPv4 pools from the network.
Must be false if `pools` is specified.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--network-id` (string)

ID of the network this subnet belongs to.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--route-table-id` (string)

ID of the route table to associate with the subnet.
If unspecified, the network's default route table is used.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "ipv4_private_pools": { // [non_empty_default] // Private IPv4 address pools for this subnet. // If unspecified, pools from the associated network are used. "pools": [{ // List of private IPv4 CIDR blocks for this subnet. // Must not overlap with other resources in the network // Must be empty if `use_network_pools` is true. "cidrs": [{ "cidr": string, // [required] // A CIDR block (e.g., "10.1.2.0/24") or a prefix length (e.g., "/24"). // If prefix length is specified, the CIDR block will be auto-allocated // from the network's available space. "max_mask_length": int64, // [non_empty_default] // Maximum mask length for an allocation from this block. Defaults to /32 for IPv4. "state": enum( // [non_empty_default] // Controls provisioning of IP addresses from the CIDR block. Defaults to AVAILABLE. "STATE_UNSPECIFIED", // Not used, mandated by the protocol. "AVAILABLE", // Default state. Provision of the IP addresses from this CIDR block is allowed. "DISABLED" // Provision of the IP addresses from this CIDR block is denied. ) }] }], "use_network_pools": bool // If true, inherit private IPv4 pools from the network. Defaults to true. // Must be false if `pools` is specified. }, "ipv4_public_pools": { // [non_empty_default] // Public IPv4 address pools for this subnet. // If unspecified, pools from the associated network are used. "pools": [{ // List of public IPv4 CIDR blocks for this subnet. // Must not overlap with other resources in the network. // Must be empty if `use_network_pools` is true. "cidrs": [{ "cidr": string, // [required] // A CIDR block (e.g., "10.1.2.0/24") or a prefix length (e.g., "/24"). // If prefix length is specified, the CIDR block will be auto-allocated // from the network's available space. "max_mask_length": int64, // [non_empty_default] // Maximum mask length for an allocation from this block. Defaults to /32 for IPv4. "state": enum( // [non_empty_default] // Controls provisioning of IP addresses from the CIDR block. Defaults to AVAILABLE. "STATE_UNSPECIFIED", // Not used, mandated by the protocol. "AVAILABLE", // Default state. Provision of the IP addresses from this CIDR block is allowed. "DISABLED" // Provision of the IP addresses from this CIDR block is denied. ) }] }], "use_network_pools": bool // If true, inherit public IPv4 pools from the network. // Must be false if `pools` is specified. }, "network_id": string, // [required] // ID of the network this subnet belongs to. "route_table_id": string // ID of the route table to associate with the subnet. // If unspecified, the network's default route table is used. } } ``` ```json theme={null} nebius vpc subnet update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "ipv4_private_pools": { "pools": [{ "cidrs": [{ "cidr": "", "max_mask_length": 0, "state": "state_unspecified"|"available"|"disabled" }] }], "use_network_pools": false }, "ipv4_public_pools": { "pools": [{ "cidrs": [{ "cidr": "", "max_mask_length": 0, "state": "state_unspecified"|"available"|"disabled" }] }], "use_network_pools": false }, "network_id": "", "route_table_id": "" } } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc target-group edit Source: https://docs.nebius.com/cli/reference/vpc/target-group/edit

Name

nebius vpc target-group edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius vpc target-group edit [id] --async --editor --id ```

Positional Arguments

id

ID of the resource to edit.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc target-group get Source: https://docs.nebius.com/cli/reference/vpc/target-group/get

Name

nebius vpc target-group get

Synopsis

``` nebius vpc target-group get [id] --id [required] ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius vpc target-group get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc target-group Source: https://docs.nebius.com/cli/reference/vpc/target-group/index

Name

nebius vpc target-group

Commands

nebius vpc target-group edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius vpc target-group get

nebius vpc target-group operation

Manage operations for TargetGroup service.

nebius vpc target-group update

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc target-group operation get Source: https://docs.nebius.com/cli/reference/vpc/target-group/operation/get

Name

nebius vpc target-group operation get

Get operation by ID.

Synopsis

``` nebius vpc target-group operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc target-group operation Source: https://docs.nebius.com/cli/reference/vpc/target-group/operation/index

Name

nebius vpc target-group operation

Manage operations for TargetGroup service.

Commands

nebius vpc target-group operation get

Get operation by ID.

nebius vpc target-group operation list

List operations by resource ID.

nebius vpc target-group operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc target-group operation list Source: https://docs.nebius.com/cli/reference/vpc/target-group/operation/list

Name

nebius vpc target-group operation list

List operations by resource ID.

Synopsis

``` nebius vpc target-group operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc target-group operation wait Source: https://docs.nebius.com/cli/reference/vpc/target-group/operation/wait

Name

nebius vpc target-group operation wait

Wait for operation to complete.

Synopsis

``` nebius vpc target-group operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc target-group update Source: https://docs.nebius.com/cli/reference/vpc/target-group/update

Name

nebius vpc target-group update

Synopsis

``` nebius vpc target-group update [id] --id --labels --labels-add --labels-remove --name --parent-id --resource-version --targets --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--id` (string)

Identifier for the resource, unique for its resource type.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--targets` (json)

Targets of the TargetGroup.

(structure)

compute\_instance -> (structure)

Compute instance used as a target.

id -> (string)\[required]

Compute instance id to send traffic to.

network\_interface\_name -> (string)\[non\_empty\_default]

Name of the compute instance's NetworkInterface to send traffic to. If not specified the first one will be used.

JSON Schema:

```json theme={null} [{ "compute_instance": { "id": "", "network_interface_name": "" } }] ```

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "targets": [{ // Targets of the TargetGroup. "compute_instance": { // Compute instance used as a target. "id": string, // [required] // Compute instance id to send traffic to. "network_interface_name": string // [non_empty_default] // Name of the compute instance's NetworkInterface to send traffic to. If not specified the first one will be used. } }] } } ``` ```json theme={null} nebius vpc target-group update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "targets": [{ "compute_instance": { "id": "", "network_interface_name": "" } }] } } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc v1alpha1 allocation create Source: https://docs.nebius.com/cli/reference/vpc/v1alpha1/allocation/create

Name

nebius vpc v1alpha1 allocation create

Synopsis

``` nebius vpc v1alpha1 allocation create --ipv4-private --ipv4-private-cidr --ipv4-private-pool-id --ipv4-private-subnet-id --ipv4-public --ipv4-public-cidr --ipv4-public-pool-id --labels --name --parent-id [required] --resource-version --async -i, --interactive ```

Options

`--ipv4-private` (bool)

Mutually exclusive with: `--ipv4-public`, `--ipv4-public-cidr`, `--ipv4-public-pool-id`.

`--ipv4-private-cidr` (string)

CIDR block for IPv4 Allocation.
May be a single IP address (such as 10.2.3.4),
a prefix length (such as /24) or a CIDR-formatted string (such as 10.1.2.0/24).
Random address (/32) from pool would be allocated if field is omitted.

Mutually exclusive with: `--ipv4-public`, `--ipv4-public-cidr`, `--ipv4-public-pool-id`.

`--ipv4-private-pool-id` (string)

Pool for the IPv4 private allocation.

Mutually exclusive with: `--ipv4-private-subnet-id`, `--ipv4-public`, `--ipv4-public-cidr`, `--ipv4-public-pool-id`.

`--ipv4-private-subnet-id` (string)

Subnet ID.
Required same subnet to use allocation in subnet-resources (e.g. Network Interface).

Mutually exclusive with: `--ipv4-private-pool-id`, `--ipv4-public`, `--ipv4-public-cidr`, `--ipv4-public-pool-id`.

`--ipv4-public` (bool)

Mutually exclusive with: `--ipv4-private`, `--ipv4-private-cidr`, `--ipv4-private-pool-id`, `--ipv4-private-subnet-id`.

`--ipv4-public-cidr` (string)

CIDR block for IPv4 Allocation.
May be a single IP address (such as 10.2.3.4),
a prefix length (such as /32) or a CIDR-formatted string (such as 10.1.2.0/32).
Random address (/32) from pool would be allocated if field is omitted.

Mutually exclusive with: `--ipv4-private`, `--ipv4-private-cidr`, `--ipv4-private-pool-id`, `--ipv4-private-subnet-id`.

`--ipv4-public-pool-id` (string)

Pool for the IPv4 public allocation.

Mutually exclusive with: `--ipv4-private`, `--ipv4-private-cidr`, `--ipv4-private-pool-id`, `--ipv4-private-subnet-id`.

`--labels` (string->string)

Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string) \[required]

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`-i, --interactive` (bool)

If set, suggests to insert field values in interactive mode.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { // [required] "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { // [required] "ipv4_private": { // [meaningful_empty_value] // Cannot be set together with: ipv4_public "cidr": string, // [immutable] // CIDR block for IPv4 Allocation. // May be a single IP address (such as 10.2.3.4), // a prefix length (such as /24) or a CIDR-formatted string (such as 10.1.2.0/24). // Random address (/32) from pool would be allocated if field is omitted. "pool_id": string, // [immutable] // Cannot be set together with: subnet_id // Pool for the IPv4 private allocation. "subnet_id": string // [immutable] // Cannot be set together with: pool_id // Subnet ID. // Required same subnet to use allocation in subnet-resources (e.g. Network Interface). }, "ipv4_public": { // [meaningful_empty_value] // Cannot be set together with: ipv4_private "cidr": string, // [immutable] // CIDR block for IPv4 Allocation. // May be a single IP address (such as 10.2.3.4), // a prefix length (such as /32) or a CIDR-formatted string (such as 10.1.2.0/32). // Random address (/32) from pool would be allocated if field is omitted. "pool_id": string // [immutable] // Pool for the IPv4 public allocation. } } } ``` ```json theme={null} nebius vpc v1alpha1 allocation create ' { "metadata": { "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "ipv4_private": { "cidr": "", "pool_id": "" } } } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc v1alpha1 allocation delete Source: https://docs.nebius.com/cli/reference/vpc/v1alpha1/allocation/delete

Name

nebius vpc v1alpha1 allocation delete

Synopsis

``` nebius vpc v1alpha1 allocation delete [id] --id [required] --async ```

Positional Arguments

id

ID of the resource to delete.

Options

`--id` (string) \[required]

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius vpc v1alpha1 allocation delete ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc v1alpha1 allocation edit Source: https://docs.nebius.com/cli/reference/vpc/v1alpha1/allocation/edit

Name

nebius vpc v1alpha1 allocation edit

Edit resource via external text editor. Uses get command to receive the current state.

Synopsis

``` nebius vpc v1alpha1 allocation edit [id] --async --editor --id ```

Positional Arguments

id

ID of the resource to edit.

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc v1alpha1 allocation edit-by-name Source: https://docs.nebius.com/cli/reference/vpc/v1alpha1/allocation/edit-by-name

Name

nebius vpc v1alpha1 allocation edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

Synopsis

``` nebius vpc v1alpha1 allocation edit-by-name --async --editor --name --parent-id ```

Options

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--editor` (string)

Editor to run for action. Default: vi.

`--name` (string)

`--parent-id` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc v1alpha1 allocation get Source: https://docs.nebius.com/cli/reference/vpc/v1alpha1/allocation/get

Name

nebius vpc v1alpha1 allocation get

Synopsis

``` nebius vpc v1alpha1 allocation get [id] --id [required] ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius vpc v1alpha1 allocation get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc v1alpha1 allocation get-by-name Source: https://docs.nebius.com/cli/reference/vpc/v1alpha1/allocation/get-by-name

Name

nebius vpc v1alpha1 allocation get-by-name

Synopsis

``` nebius vpc v1alpha1 allocation get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

`--parent-id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // [required] } ``` ```json theme={null} nebius vpc v1alpha1 allocation get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc v1alpha1 allocation Source: https://docs.nebius.com/cli/reference/vpc/v1alpha1/allocation/index

Name

nebius vpc v1alpha1 allocation

Commands

nebius vpc v1alpha1 allocation create

nebius vpc v1alpha1 allocation delete

nebius vpc v1alpha1 allocation edit

Edit resource via external text editor. Uses get command to receive the current state.

nebius vpc v1alpha1 allocation edit-by-name

Edit resource via external text editor. Uses get-by-name command to receive the current state.

nebius vpc v1alpha1 allocation get

nebius vpc v1alpha1 allocation get-by-name

nebius vpc v1alpha1 allocation list

nebius vpc v1alpha1 allocation operation

Manage operations for Allocation service.

nebius vpc v1alpha1 allocation update

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc v1alpha1 allocation list Source: https://docs.nebius.com/cli/reference/vpc/v1alpha1/allocation/list

Name

nebius vpc v1alpha1 allocation list

Synopsis

``` nebius vpc v1alpha1 allocation list --filter --page-size --page-token --parent-id [required] --all -i, --interactive ```

Options

`--filter` (string)

`--page-size` (int64)

`--page-token` (string)

`--parent-id` (string) \[required]

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "filter": string, "page_size": int64, "page_token": string, "parent_id": string // [required] } ``` ```json theme={null} nebius vpc v1alpha1 allocation list ' { "filter": "", "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc v1alpha1 allocation operation get Source: https://docs.nebius.com/cli/reference/vpc/v1alpha1/allocation/operation/get

Name

nebius vpc v1alpha1 allocation operation get

Get operation by ID.

Synopsis

``` nebius vpc v1alpha1 allocation operation get [id] --id ```

Positional Arguments

id

ID of the operation to receive.

Options

`--id` (string)

ID of the operation to receive.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc v1alpha1 allocation operation Source: https://docs.nebius.com/cli/reference/vpc/v1alpha1/allocation/operation/index

Name

nebius vpc v1alpha1 allocation operation

Manage operations for Allocation service.

Commands

nebius vpc v1alpha1 allocation operation get

Get operation by ID.

nebius vpc v1alpha1 allocation operation list

List operations by resource ID.

nebius vpc v1alpha1 allocation operation wait

Wait for operation to complete.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc v1alpha1 allocation operation list Source: https://docs.nebius.com/cli/reference/vpc/v1alpha1/allocation/operation/list

Name

nebius vpc v1alpha1 allocation operation list

List operations by resource ID.

Synopsis

``` nebius vpc v1alpha1 allocation operation list --all --ids-only -i, --interactive --page-size --page-token --resource-id [required] ```

Options

`--all` (bool)

List all the operations. Resets --page-size.

`--ids-only` (bool)

If set, returns only operations IDs.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

`--page-size` (int64)

Page size. \[1...1000]. Optional, if not specified, a reasonable default will be chosen by the service.

`--page-token` (string)

Listing continuation token. Empty to start listing from the first page.

`--resource-id` (string) \[required]

ID of the Resource to list operations for.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc v1alpha1 allocation operation wait Source: https://docs.nebius.com/cli/reference/vpc/v1alpha1/allocation/operation/wait

Name

nebius vpc v1alpha1 allocation operation wait

Wait for operation to complete.

Synopsis

``` nebius vpc v1alpha1 allocation operation wait [id] --id ```

Positional Arguments

id

ID of the operation to wait.

Options

`--id` (string)

ID of the operation to wait.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc v1alpha1 allocation update Source: https://docs.nebius.com/cli/reference/vpc/v1alpha1/allocation/update

Name

nebius vpc v1alpha1 allocation update

Synopsis

``` nebius vpc v1alpha1 allocation update [id] --id --ipv4-private --ipv4-public --labels --labels-add --labels-remove --name --parent-id --resource-version --async --clear-mask --diff --full --patch ```

Positional Arguments

id

Identifier for the resource, unique for its resource type.

Options

`--id` (string)

Identifier for the resource, unique for its resource type.

`--ipv4-private` (bool)

Mutually exclusive with: `--ipv4-public`.

`--ipv4-public` (bool)

Mutually exclusive with: `--ipv4-private`.

`--labels` (string->string)

Labels associated with the resource.

`--labels-add` (string->string)

Add values to Labels associated with the resource.

`--labels-remove` (string array)

Remove values from Labels associated with the resource.

`--name` (string)

Human readable name for the resource.

`--parent-id` (string)

Identifier of the parent resource to which the resource belongs.

`--resource-version` (int64)

Version of the resource for safe concurrent modifications and consistent reads.
Positive and monotonically increases on each resource spec change (but *not* on each change of the
resource's container(s) or status).
Service allows zero value or current.

`--async` (bool)

If set, returns operation id. Otherwise, waits for the operation to complete and returns its resource.

`--clear-mask` (string array)

Reset-mask field paths to clear in patch mode. Can be repeated.

`--diff` (bool)

Show diff of resource before commiting update.

`--full` (bool)

Update full resource state. Automatically set to true if the --file or argument provided.

`--patch` (bool)

Update only specified fields.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "metadata": { "id": string, // [identifier] // Identifier for the resource, unique for its resource type. "labels": { // [map] // Labels associated with the resource. string: string }, "name": string, // Human readable name for the resource. "parent_id": string, // [required] // Identifier of the parent resource to which the resource belongs. "resource_version": int64 // Version of the resource for safe concurrent modifications and consistent reads. // Positive and monotonically increases on each resource spec change (but *not* on each change of the // resource's container(s) or status). // Service allows zero value or current. }, "spec": { "ipv4_private": { // [meaningful_empty_value] // Cannot be set together with: ipv4_public }, "ipv4_public": { // [meaningful_empty_value] // Cannot be set together with: ipv4_private } } } ``` ```json theme={null} nebius vpc v1alpha1 allocation update ' { "metadata": { "id": "", "labels": { "": "" }, "name": "", "parent_id": "", "resource_version": 0 }, "spec": { "ipv4_private": { } } } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc v1alpha1 Source: https://docs.nebius.com/cli/reference/vpc/v1alpha1/index

Name

nebius vpc v1alpha1

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc v1alpha1 network get Source: https://docs.nebius.com/cli/reference/vpc/v1alpha1/network/get

Name

nebius vpc v1alpha1 network get

Synopsis

``` nebius vpc v1alpha1 network get [id] --id [required] ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius vpc v1alpha1 network get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc v1alpha1 network get-by-name Source: https://docs.nebius.com/cli/reference/vpc/v1alpha1/network/get-by-name

Name

nebius vpc v1alpha1 network get-by-name

Synopsis

``` nebius vpc v1alpha1 network get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

`--parent-id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // [required] } ``` ```json theme={null} nebius vpc v1alpha1 network get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc v1alpha1 network Source: https://docs.nebius.com/cli/reference/vpc/v1alpha1/network/index

Name

nebius vpc v1alpha1 network

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc v1alpha1 network list Source: https://docs.nebius.com/cli/reference/vpc/v1alpha1/network/list

Name

nebius vpc v1alpha1 network list

Synopsis

``` nebius vpc v1alpha1 network list --filter --page-size --page-token --parent-id [required] --all -i, --interactive ```

Options

`--filter` (string)

`--page-size` (int64)

`--page-token` (string)

`--parent-id` (string) \[required]

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "filter": string, "page_size": int64, "page_token": string, "parent_id": string // [required] } ``` ```json theme={null} nebius vpc v1alpha1 network list ' { "filter": "", "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc v1alpha1 pool get Source: https://docs.nebius.com/cli/reference/vpc/v1alpha1/pool/get

Name

nebius vpc v1alpha1 pool get

Synopsis

``` nebius vpc v1alpha1 pool get [id] --id [required] ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius vpc v1alpha1 pool get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc v1alpha1 pool get-by-name Source: https://docs.nebius.com/cli/reference/vpc/v1alpha1/pool/get-by-name

Name

nebius vpc v1alpha1 pool get-by-name

Synopsis

``` nebius vpc v1alpha1 pool get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

`--parent-id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // [required] } ``` ```json theme={null} nebius vpc v1alpha1 pool get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc v1alpha1 pool Source: https://docs.nebius.com/cli/reference/vpc/v1alpha1/pool/index

Name

nebius vpc v1alpha1 pool

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc v1alpha1 pool list Source: https://docs.nebius.com/cli/reference/vpc/v1alpha1/pool/list

Name

nebius vpc v1alpha1 pool list

Synopsis

``` nebius vpc v1alpha1 pool list --filter --page-size --page-token --parent-id [required] --all -i, --interactive ```

Options

`--filter` (string)

`--page-size` (int64)

`--page-token` (string)

`--parent-id` (string) \[required]

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "filter": string, "page_size": int64, "page_token": string, "parent_id": string // [required] } ``` ```json theme={null} nebius vpc v1alpha1 pool list ' { "filter": "", "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc v1alpha1 scope get Source: https://docs.nebius.com/cli/reference/vpc/v1alpha1/scope/get

Name

nebius vpc v1alpha1 scope get

Synopsis

``` nebius vpc v1alpha1 scope get [id] --id [required] ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius vpc v1alpha1 scope get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc v1alpha1 scope get-by-name Source: https://docs.nebius.com/cli/reference/vpc/v1alpha1/scope/get-by-name

Name

nebius vpc v1alpha1 scope get-by-name

Synopsis

``` nebius vpc v1alpha1 scope get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

`--parent-id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // [required] } ``` ```json theme={null} nebius vpc v1alpha1 scope get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc v1alpha1 scope Source: https://docs.nebius.com/cli/reference/vpc/v1alpha1/scope/index

Name

nebius vpc v1alpha1 scope

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc v1alpha1 scope list Source: https://docs.nebius.com/cli/reference/vpc/v1alpha1/scope/list

Name

nebius vpc v1alpha1 scope list

Synopsis

``` nebius vpc v1alpha1 scope list --filter --page-size --page-token --parent-id [required] --all -i, --interactive ```

Options

`--filter` (string)

`--page-size` (int64)

`--page-token` (string)

`--parent-id` (string) \[required]

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "filter": string, "page_size": int64, "page_token": string, "parent_id": string // [required] } ``` ```json theme={null} nebius vpc v1alpha1 scope list ' { "filter": "", "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc v1alpha1 subnet get Source: https://docs.nebius.com/cli/reference/vpc/v1alpha1/subnet/get

Name

nebius vpc v1alpha1 subnet get

Synopsis

``` nebius vpc v1alpha1 subnet get [id] --id [required] ```

Positional Arguments

id

ID of the resource to get.

Options

`--id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "id": string // [required] } ``` ```json theme={null} nebius vpc v1alpha1 subnet get ' { "id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc v1alpha1 subnet get-by-name Source: https://docs.nebius.com/cli/reference/vpc/v1alpha1/subnet/get-by-name

Name

nebius vpc v1alpha1 subnet get-by-name

Synopsis

``` nebius vpc v1alpha1 subnet get-by-name --name [required] --parent-id [required] ```

Options

`--name` (string) \[required]

`--parent-id` (string) \[required]

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "name": string, // [required] "parent_id": string // [required] } ``` ```json theme={null} nebius vpc v1alpha1 subnet get-by-name ' { "name": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc v1alpha1 subnet Source: https://docs.nebius.com/cli/reference/vpc/v1alpha1/subnet/index

Name

nebius vpc v1alpha1 subnet

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

*Auto generated on 15-Jul-2026* # nebius vpc v1alpha1 subnet list Source: https://docs.nebius.com/cli/reference/vpc/v1alpha1/subnet/list

Name

nebius vpc v1alpha1 subnet list

Synopsis

``` nebius vpc v1alpha1 subnet list --filter --page-size --page-token --parent-id [required] --all -i, --interactive ```

Options

`--filter` (string)

`--page-size` (int64)

`--page-token` (string)

`--parent-id` (string) \[required]

`--all` (bool)

List all the elements. Resets --page-size.

`-i, --interactive` (bool)

If set, runs a pagination on an alternate screen.

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "filter": string, "page_size": int64, "page_token": string, "parent_id": string // [required] } ``` ```json theme={null} nebius vpc v1alpha1 subnet list ' { "filter": "", "page_size": 0, "page_token": "", "parent_id": "" } ' ``` *Auto generated on 15-Jul-2026* # nebius vpc v1alpha1 subnet list-by-network Source: https://docs.nebius.com/cli/reference/vpc/v1alpha1/subnet/list-by-network

Name

nebius vpc v1alpha1 subnet list-by-network

Synopsis

``` nebius vpc v1alpha1 subnet list-by-network --filter --network-id [required] --page-size --page-token ```

Options

`--filter` (string)

`--network-id` (string) \[required]

`--page-size` (int64)

`--page-token` (string)

Global Options

`-h, --help` (bool)

Show this message.

`-p, --profile` (string)

Set a profile for interacting with the cloud.

`--format` (string)

Output format. Supported values: yaml|json|jsonpath|table|text.

`-f, --file` (string)

Input file. For 'update' commands automatically set --full=true.

`-c, --config` (string)

Provide path to config file.

`--debug` (bool)

Enable debug logs.

`-I, --impersonate-service-account-id` (string)

Impersonate into the service account and use its token for a command.

`--color` (bool)

Enable colored output.

`--no-browser` (bool)

Do not open browser automatically on auth.

`--insecure` (bool)

Disable transport security.

`--auth-timeout` (duration: 2h30m10s)

Set the timeout for the request including authentication process, default is 15m0s.

`--per-retry-timeout` (duration: 2h30m10s)

Set the timeout for each retry attempt, default is 20s.

`--retries` (uint)

Set the number of retry attempts, 1 is disable retries, default is 3.

`--timeout` (duration: 2h30m10s)

Set the timeout for the main request, default is 1m0s.

`--no-check-update` (bool)

Suppress check for updates.

`--no-progress` (bool)

Suppress progress indicators and spinners.

```json theme={null} { "filter": string, "network_id": string, // [required] "page_size": int64, "page_token": string } ``` ```json theme={null} nebius vpc v1alpha1 subnet list-by-network ' { "filter": "", "network_id": "", "page_size": 0, "page_token": "" } ' ``` *Auto generated on 15-Jul-2026* # Nebius AI Cloud CLI release notes Source: https://docs.nebius.com/cli/release-notes Latest updates in the command-line interface. Generated automatically. [//]: # "Add new version after this line" Internal improvements. * In command [nebius](./reference/index): * Added subcommands: [feedback](./reference/feedback) * In command [nebius billing v1alpha1 calculator estimate](./reference/billing/v1alpha1/calculator/estimate): * Added flags: `--resource-spec-compute-disk-spec-source-snapshot-id`, `--resource-spec-compute-disk-update-spec-source-snapshot-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-snapshot-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-snapshot-id` * In command [nebius compute disk create](./reference/compute/disk/create): * Added flags: `--source-snapshot-id` * In command [nebius compute instance create](./reference/compute/instance/create): * Added flags: `--boot-disk-managed-disk-source-snapshot-id` * In command [nebius docs](./reference/docs): * Added subcommands: [rest-api](./reference/docs/rest-api) * In command [nebius compute image create](./reference/compute/image/create): * Added flags: `--source-disk-snapshot-id` Internal improvements. * In command [nebius compute](./reference/compute): * Added subcommands: [disk-snapshot](./reference/compute/disk-snapshot) Internal improvements. Internal improvements. * In command [nebius ai endpoint create](./reference/ai/endpoint/create): * Added flags: `--async` * In command [nebius ai job create](./reference/ai/job/create): * Added flags: `--async` * In command [nebius mk8s node-group create](./reference/mk8s/node-group/create): * Added flags: `--template-nvlink-nvl-instance-group-id` * In command [nebius](./reference/index): * Added subcommands: [tunnel](./reference/tunnel) * In command [nebius storage transfer create](./reference/storage/transfer/create): * Added flags: `--enable-deletes-in-destination` * In command [nebius compute nvl-instance-group create](./reference/compute/nvl-instance-group/create): * Added flags: `--size` * In command [nebius](./reference/index): * Added flags (including subcommands): `--impersonate-service-account-id` * In command [nebius ai create](./reference/ai/create): * Added flags: `--inject-file` * In command [nebius ai endpoint create](./reference/ai/endpoint/create): * Added flags: `--inject-file` * In command [nebius ai job create](./reference/ai/job/create): * Added flags: `--inject-file` Internal improvements. * In command [nebius mk8s cluster create](./reference/mk8s/cluster/create): * Added flags: `--control-plane-endpoints-public-endpoint-allowed-cidrs` * In command [nebius mk8s cluster update](./reference/mk8s/cluster/update): * Added flags: `--control-plane-endpoints-public-endpoint-allowed-cidrs` * In command [nebius](./reference/index): * Added subcommands: [kms](./reference/kms) Internal improvements. Internal improvements. Internal improvements. Internal improvements. * In command [nebius](./reference/index): * Added subcommands: [echo](./reference/echo) * In command [nebius audit v2 audit-event list](./reference/audit/v2/audit-event/list): * Added flags: `--region` * In command [nebius audit v2 audit-event-export list](./reference/audit/v2/audit-event-export/list): * Added flags: `--region` * In command [nebius audit v2 audit-event-export start](./reference/audit/v2/audit-event-export/start): * Added flags: `--region` * In command [nebius mk8s node-group create](./reference/mk8s/node-group/create): * Added flags: `--template-max-pods` * In command [nebius mk8s node-group update](./reference/mk8s/node-group/update): * Added flags: `--template-max-pods` Internal improvements. * In command [nebius ai](./reference/ai): * Added subcommands: [create](./reference/ai/create) Internal improvements. * In command [nebius compute](./reference/compute): * Removed subcommands: `v1alpha1` * In command [nebius compute nvl-instance-group](./reference/compute/nvl-instance-group): * Added subcommands: [edit](./reference/compute/nvl-instance-group/edit), [edit-by-name](./reference/compute/nvl-instance-group/edit-by-name), [update](./reference/compute/nvl-instance-group/update) Internal improvements. Internal improvements. * In command [nebius iam invitation create](/cli/reference/iam/invitation/create): * Added flags: `--expires-in` * In command [nebius billing v1alpha1 calculator estimate](/cli/reference/billing/v1alpha1/calculator/estimate): * Added flags: `--resource-spec-compute-instance-spec-nvl-instance-group-id`, `--resource-spec-compute-instance-update-spec-nvl-instance-group-id` * Flags deprecated: * `--resource-spec-compute-instance-spec-preemptible-priority`. Supported until 2026-05-11. It is deprecated and doesn't affect preemption behavior anymore. * `--resource-spec-compute-instance-update-spec-preemptible-priority`. Supported until 2026-05-11. It is deprecated and doesn't affect preemption behavior anymore. * In command [nebius compute](/cli/reference/compute): * Added subcommands: [nvl-instance-group](/cli/reference/compute/nvl-instance-group) * In command [nebius compute instance create](/cli/reference/compute/instance/create): * Added flags: `--nvl-instance-group-id` * Flags deprecated: * `--preemptible-priority`. Supported until 2026-05-11. It is deprecated and doesn't affect preemption behavior anymore. * In command [nebius compute instance update](/cli/reference/compute/instance/update): * Added flags: `--nvl-instance-group-id` * In command [nebius dns record](/cli/reference/dns/record): * Added subcommands: [create](/cli/reference/dns/record/create), [delete](/cli/reference/dns/record/delete), [edit](/cli/reference/dns/record/edit), [edit-by-name](/cli/reference/dns/record/edit-by-name), [operation](/cli/reference/dns/record/operation), [update](/cli/reference/dns/record/update) * In command [nebius dns zone](/cli/reference/dns/zone): * Added subcommands: [create](/cli/reference/dns/zone/create), [delete](/cli/reference/dns/zone/delete), [edit](/cli/reference/dns/zone/edit), [edit-by-name](/cli/reference/dns/zone/edit-by-name), [operation](/cli/reference/dns/zone/operation), [update](/cli/reference/dns/zone/update) * In command [nebius iam v2 project delete](/cli/reference/iam/v2/project/delete): * Added flags: `--dry-run` Internal improvements. * In command [nebius storage v1alpha1](/cli/reference/storage/v1alpha1): * Subcommands deprecated: * [transfer](/cli/reference/storage/v1alpha1/transfer). Supported until 2026-06-01. Data transfer v1alpha1 api is deprecated. please use the v1 api instead. all existing transfers remain accessible through the v1 api. * In command [nebius storage v1alpha1 transfer](/cli/reference/storage/v1alpha1/transfer): * Subcommands deprecated: * [create](/cli/reference/storage/v1alpha1/transfer/create) * [delete](/cli/reference/storage/v1alpha1/transfer/delete) * [edit](/cli/reference/storage/v1alpha1/transfer/edit) * [edit-by-name](/cli/reference/storage/v1alpha1/transfer/edit-by-name) * [get](/cli/reference/storage/v1alpha1/transfer/get) * [get-by-name](/cli/reference/storage/v1alpha1/transfer/get-by-name) * [get-iteration-history](/cli/reference/storage/v1alpha1/transfer/get-iteration-history) * [list](/cli/reference/storage/v1alpha1/transfer/list) * [operation](/cli/reference/storage/v1alpha1/transfer/operation) * [resume](/cli/reference/storage/v1alpha1/transfer/resume) * [stop](/cli/reference/storage/v1alpha1/transfer/stop) * [update](/cli/reference/storage/v1alpha1/transfer/update) * In command [nebius storage v1alpha1 transfer operation](/cli/reference/storage/v1alpha1/transfer/operation): * Subcommands deprecated: * [get](/cli/reference/storage/v1alpha1/transfer/operation/get) * [list](/cli/reference/storage/v1alpha1/transfer/operation/list) * [wait](/cli/reference/storage/v1alpha1/transfer/operation/wait) Internal improvements. * In command [nebius](/cli/reference/index): * Added flags (including subcommands): `--no-progress` Internal improvements. * In command [nebius storage](/cli/reference/storage): * Added subcommands: [transfer](/cli/reference/storage/transfer) Internal improvements. * In command [nebius billing v1alpha1 calculator estimate](/cli/reference/billing/v1alpha1/calculator/estimate): * Added flags: `--resource-spec-compute-instance-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-spec-boot-disk-managed-disk-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-block-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-disk-encryption-type`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-forbid-deletion`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-labels`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-name`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-bytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-gibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-kibibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-size-mebibytes`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-image-family`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-family-parent-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-source-image-id`, `--resource-spec-compute-instance-update-spec-boot-disk-managed-disk-type` * In command [nebius compute instance create](/cli/reference/compute/instance/create): * Added flags: `--boot-disk-managed-disk-block-size-bytes`, `--boot-disk-managed-disk-disk-encryption-type`, `--boot-disk-managed-disk-forbid-deletion`, `--boot-disk-managed-disk-labels`, `--boot-disk-managed-disk-name`, `--boot-disk-managed-disk-size-bytes`, `--boot-disk-managed-disk-size-gibibytes`, `--boot-disk-managed-disk-size-kibibytes`, `--boot-disk-managed-disk-size-mebibytes`, `--boot-disk-managed-disk-source-image-family-image-family`, `--boot-disk-managed-disk-source-image-family-parent-id`, `--boot-disk-managed-disk-source-image-id`, `--boot-disk-managed-disk-type` * In command [nebius compute instance update](/cli/reference/compute/instance/update): * Added flags: `--boot-disk-managed-disk-forbid-deletion`, `--boot-disk-managed-disk-labels`, `--boot-disk-managed-disk-name`, `--boot-disk-managed-disk-size-bytes`, `--boot-disk-managed-disk-size-gibibytes`, `--boot-disk-managed-disk-size-kibibytes`, `--boot-disk-managed-disk-size-mebibytes` * In command [nebius iam federation-certificate update-bulk](/cli/reference/iam/federation-certificate/update-bulk): * Added flags: `--clear-mask`, `--full`, `--patch` * In command [nebius logging](/cli/reference/logging): * Added subcommands: [export](/cli/reference/logging/export) Internal improvements. Internal improvements. * In command [nebius compute image create](/cli/reference/compute/image/create): * Added flags: `--source-storage-bucket-name`, `--source-storage-object-name` * In command [nebius mk8s node-group create](/cli/reference/mk8s/node-group/create): * Added flags: `--template-local-disks-config-kubelet-ephemeral` * In command [nebius mk8s node-group update](/cli/reference/mk8s/node-group/update): * Added flags: `--template-local-disks-config-kubelet-ephemeral` * In command [nebius compute instance](/cli/reference/compute/instance): * Added subcommands: [logs](/cli/reference/compute/instance/logs) Internal improvements. * In command [nebius ai endpoint create](/cli/reference/ai/endpoint/create): * Added flags: `--env-secret`, `--registry-secret`, `--token-secret` * In command [nebius ai job create](/cli/reference/ai/job/create): * Added flags: `--env-secret`, `--registry-secret` * In command [nebius](/cli/reference/index): * Added subcommands: [logging](/cli/reference/logging) Internal improvements. Internal improvements. * In command [nebius compute image update](/cli/reference/compute/image/update): * Added flags: `--recommended-platforms`, `--unsupported-platforms` * In command [nebius mk8s node-group create](/cli/reference/mk8s/node-group/create): * Added flags: `--template-local-disks-config-none`, `--template-local-disks-passthrough-group-requested` * In command [nebius mk8s node-group update](/cli/reference/mk8s/node-group/update): * Added flags: `--template-local-disks-config-none`, `--template-local-disks-passthrough-group-requested` Internal improvements. Internal improvements. * In command [nebius compute instance](/cli/reference/compute/instance): * Added subcommands: [batch-get](/cli/reference/compute/instance/batch-get) * In command [nebius billing v1alpha1 calculator estimate](/cli/reference/billing/v1alpha1/calculator/estimate): * Added flags: `--resource-spec-compute-instance-spec-local-disks-passthrough-group-requested`, `--resource-spec-compute-instance-update-spec-local-disks-passthrough-group-requested` * In command [nebius compute instance create](/cli/reference/compute/instance/create): * Added flags: `--local-disks-passthrough-group-requested` * In command [nebius compute instance update](/cli/reference/compute/instance/update): * Added flags: `--boot-disk-attach-mode`, `--boot-disk-device-id`, `--boot-disk-existing-disk-id`, `--local-disks-passthrough-group-requested` * In command [nebius storage bucket create](/cli/reference/storage/bucket/create): * Removed flags: `--override-storage-class` * In command [nebius storage bucket update](/cli/reference/storage/bucket/update): * Removed flags: `--override-storage-class` * In command [nebius mk8s cluster create](/cli/reference/mk8s/cluster/create): * Added flags: `--control-plane-karpenter` * In command [nebius mk8s cluster update](/cli/reference/mk8s/cluster/update): * Added flags: `--control-plane-karpenter` * In command [nebius msp](/cli/reference/msp): * Removed subcommands: `serverless` * In command [nebius billing v1alpha1 calculator estimate](/cli/reference/billing/v1alpha1/calculator/estimate): * Added flags: `--resource-spec-compute-disk-spec-forbid-deletion`, `--resource-spec-compute-disk-update-spec-forbid-deletion`, `--resource-spec-compute-filesystem-spec-forbid-deletion`, `--resource-spec-compute-filesystem-update-spec-forbid-deletion` * In command [nebius capacity](/cli/reference/capacity): * Added subcommands: [resource-advice](/cli/reference/capacity/resource-advice) * In command [nebius compute disk create](/cli/reference/compute/disk/create): * Added flags: `--forbid-deletion` * In command [nebius compute disk update](/cli/reference/compute/disk/update): * Added flags: `--forbid-deletion` * In command [nebius compute filesystem create](/cli/reference/compute/filesystem/create): * Added flags: `--forbid-deletion` * In command [nebius compute filesystem update](/cli/reference/compute/filesystem/update): * Added flags: `--forbid-deletion` * In command [nebius billing v1alpha1](/cli/reference/billing/v1alpha1): * Added subcommands: [one-time-export](/cli/reference/billing/v1alpha1/one-time-export) * In command [nebius storage v1alpha1 transfer create](/cli/reference/storage/v1alpha1/transfer/create): * Added flags: `--destination-endpoint`, `--destination-region` Internal improvements. * In command [nebius ai endpoint create](/cli/reference/ai/endpoint/create): * Added flags: `--preemptible` * In command [nebius ai job create](/cli/reference/ai/job/create): * Added flags: `--preemptible` * In command [nebius iam auth-public-key generate](/cli/reference/iam/auth-public-key/generate): * Added flags: `--expires-at` Internal improvements. * In command [nebius ai](/cli/reference/ai): * Added subcommands: [get](/cli/reference/ai/get) Internal improvements. Internal improvements. Internal improvements. * In command [nebius ai](/cli/reference/ai): * Added subcommands: [list](/cli/reference/ai/list) * In command [nebius ai endpoint](/cli/reference/ai/endpoint): * Removed subcommands: `edit`, `edit-by-name`, `update` * In command [nebius ai endpoint list](/cli/reference/ai/endpoint/list): * Removed flags: `--all`, `--interactive`, `--page-size`, `--page-token` * In command [nebius ai job list](/cli/reference/ai/job/list): * Removed flags: `--all`, `--interactive`, `--page-size`, `--page-token` * In command [nebius compute image create](/cli/reference/compute/image/create): * Flags no longer deprecated: `--description` * In command [nebius compute image update](/cli/reference/compute/image/update): * Added flags: `--description` Internal improvements. Internal improvements. * In command [nebius vpc](/cli/reference/vpc): * Added subcommands: [security-group](/cli/reference/vpc/security-group), [security-rule](/cli/reference/vpc/security-rule) Internal improvements. * In command [nebius ai endpoint update](/cli/reference/ai/endpoint/update): * Added flags: `--clear-mask` * In command [nebius applications v1alpha1 k8s-release update](/cli/reference/applications/v1alpha1/k8s-release/update): * Added flags: `--clear-mask` * In command [nebius compute disk update](/cli/reference/compute/disk/update): * Added flags: `--clear-mask` * In command [nebius compute filesystem update](/cli/reference/compute/filesystem/update): * Added flags: `--clear-mask` * In command [nebius compute gpu-cluster update](/cli/reference/compute/gpu-cluster/update): * Added flags: `--clear-mask` * In command [nebius compute image update](/cli/reference/compute/image/update): * Added flags: `--clear-mask` * In command [nebius compute instance update](/cli/reference/compute/instance/update): * Added flags: `--clear-mask` * In command [nebius compute v1alpha1 disk update](/cli/reference/compute/v1alpha1/disk/update): * Added flags: `--clear-mask` * In command [nebius compute v1alpha1 filesystem update](/cli/reference/compute/v1alpha1/filesystem/update): * Added flags: `--clear-mask` * In command [nebius compute v1alpha1 gpu-cluster update](/cli/reference/compute/v1alpha1/gpu-cluster/update): * Added flags: `--clear-mask` * In command [nebius compute v1alpha1 instance update](/cli/reference/compute/v1alpha1/instance/update): * Added flags: `--clear-mask` * In command [nebius iam access-key update](/cli/reference/iam/access-key/update): * Added flags: `--clear-mask` * In command [nebius iam auth-public-key update](/cli/reference/iam/auth-public-key/update): * Added flags: `--clear-mask` * In command [nebius iam federated-credentials update](/cli/reference/iam/federated-credentials/update): * Added flags: `--clear-mask` * In command [nebius iam federation update](/cli/reference/iam/federation/update): * Added flags: `--clear-mask` * In command [nebius iam federation-certificate update](/cli/reference/iam/federation-certificate/update): * Added flags: `--clear-mask` * In command [nebius iam group update](/cli/reference/iam/group/update): * Added flags: `--clear-mask` * In command [nebius iam invitation update](/cli/reference/iam/invitation/update): * Added flags: `--clear-mask` * In command [nebius iam project update](/cli/reference/iam/project/update): * Added flags: `--clear-mask` * In command [nebius iam service-account update](/cli/reference/iam/service-account/update): * Added flags: `--clear-mask` * In command [nebius iam v2 access-key update](/cli/reference/iam/v2/access-key/update): * Added flags: `--clear-mask` * In command [nebius iam v2 project update](/cli/reference/iam/v2/project/update): * Added flags: `--clear-mask` * In command [nebius iam v2 tenant update](/cli/reference/iam/v2/tenant/update): * Added flags: `--clear-mask` * In command [nebius maintenance v1alpha1 maintenance update](/cli/reference/maintenance/v1alpha1/maintenance/update): * Added flags: `--clear-mask` * In command [nebius mk8s cluster update](/cli/reference/mk8s/cluster/update): * Added flags: `--clear-mask` * In command [nebius mk8s node-group update](/cli/reference/mk8s/node-group/update): * Added flags: `--clear-mask` * In command [nebius mk8s v1alpha1 cluster update](/cli/reference/mk8s/v1alpha1/cluster/update): * Added flags: `--clear-mask` * In command [nebius mk8s v1alpha1 node-group update](/cli/reference/mk8s/v1alpha1/node-group/update): * Added flags: `--clear-mask` * In command [nebius msp postgresql v1alpha1 cluster update](/cli/reference/msp/postgresql/v1alpha1/cluster/update): * Added flags: `--clear-mask` * In command [nebius mysterybox secret update](/cli/reference/mysterybox/secret/update): * Added flags: `--clear-mask` * In command [nebius quotas quota-allowance update](/cli/reference/quotas/quota-allowance/update): * Added flags: `--clear-mask` * In command [nebius registry update](/cli/reference/registry/update): * Added flags: `--clear-mask` * In command [nebius storage bucket update](/cli/reference/storage/bucket/update): * Added flags: `--clear-mask` * In command [nebius storage v1alpha1 transfer update](/cli/reference/storage/v1alpha1/transfer/update): * Added flags: `--clear-mask` * In command [nebius vpc allocation update](/cli/reference/vpc/allocation/update): * Added flags: `--clear-mask` * In command [nebius vpc network update](/cli/reference/vpc/network/update): * Added flags: `--clear-mask` * In command [nebius vpc pool update](/cli/reference/vpc/pool/update): * Added flags: `--clear-mask` * In command [nebius vpc route update](/cli/reference/vpc/route/update): * Added flags: `--clear-mask` * In command [nebius vpc route-table update](/cli/reference/vpc/route-table/update): * Added flags: `--clear-mask` * In command [nebius vpc subnet update](/cli/reference/vpc/subnet/update): * Added flags: `--clear-mask` * In command [nebius vpc target-group update](/cli/reference/vpc/target-group/update): * Added flags: `--clear-mask` * In command [nebius vpc v1alpha1 allocation update](/cli/reference/vpc/v1alpha1/allocation/update): * Added flags: `--clear-mask` Internal improvements. * In command [nebius](/cli/reference/index): * Removed subcommands: `fullhelp` * Added flags (including subcommands): `--no-check-update` * In command [nebius compute image](/cli/reference/compute/image): * Added subcommands: [edit](/cli/reference/compute/image/edit), [edit-by-name](/cli/reference/compute/image/edit-by-name), [update](/cli/reference/compute/image/update) * In command [nebius profile](/cli/reference/profile): * Added subcommands: [active](/cli/reference/profile/active) Internal improvements. * In command [nebius compute image](/cli/reference/compute/image): * Added subcommands: [delete](/cli/reference/compute/image/delete) * In command [nebius capacity capacity-block-group](/cli/reference/capacity/capacity-block-group): * Added subcommands: [list-resources](/cli/reference/capacity/capacity-block-group/list-resources) * In command [nebius storage bucket create](/cli/reference/storage/bucket/create): * Added flags: `--cors-rules` * In command [nebius storage bucket update](/cli/reference/storage/bucket/update): * Added flags: `--cors-rules` * In command [nebius](/cli/reference/index): * Added subcommands: [ai](/cli/reference/ai) * In command [nebius storage bucket create](/cli/reference/storage/bucket/create): * Added flags: `--bucket-policy-rules` * In command [nebius storage bucket update](/cli/reference/storage/bucket/update): * Added flags: `--bucket-policy-rules` * In command [nebius](/cli/reference/index): * Added subcommands: [capacity](/cli/reference/capacity) * In command [nebius profile create](/cli/reference/profile/create): * Added flags: `--token-endpoint` * In command [nebius profile update](/cli/reference/profile/update): * Added flags: `--token-endpoint` Internal improvements. * In command [nebius mk8s cluster create](/cli/reference/mk8s/cluster/create): * Added flags: `--control-plane-audit-logs` * In command [nebius mk8s cluster update](/cli/reference/mk8s/cluster/update): * Added flags: `--control-plane-audit-logs` * In command [nebius mk8s node-group create](/cli/reference/mk8s/node-group/create): * Added flags: `--template-reservation-policy-policy`, `--template-reservation-policy-reservation-ids` * In command [nebius mk8s node-group update](/cli/reference/mk8s/node-group/update): * Added flags: `--template-reservation-policy-policy`, `--template-reservation-policy-reservation-ids` * In command [nebius audit v2](/cli/reference/audit/v2): * Added subcommands: [audit-event-export](/cli/reference/audit/v2/audit-event-export) Internal improvements. Internal improvements. * In command [nebius vpc allocation create](/cli/reference/vpc/allocation/create): * Added flags: `--ipv4-private-cidr`, `--ipv4-private-pool-id`, `--ipv4-private-subnet-id`, `--ipv4-public-cidr`, `--ipv4-public-pool-id`, `--ipv4-public-subnet-id` * Removed flags: `--ipv-4-private-cidr`, `--ipv-4-private-pool-id`, `--ipv-4-private-subnet-id`, `--ipv-4-public-cidr`, `--ipv-4-public-pool-id`, `--ipv-4-public-subnet-id` * Added aliases: `--ipv-4-private-cidr`, `--ipv-4-private-pool-id`, `--ipv-4-private-subnet-id`, `--ipv-4-public-cidr`, `--ipv-4-public-pool-id`, `--ipv-4-public-subnet-id` * Removed aliases: `--ipv4-private-cidr`, `--ipv4-private-pool-id`, `--ipv4-private-subnet-id`, `--ipv4-public-cidr`, `--ipv4-public-pool-id`, `--ipv4-public-subnet-id` * In command [nebius vpc network create](/cli/reference/vpc/network/create): * Added flags: `--ipv4-private-pools-pools`, `--ipv4-public-pools-pools` * Removed flags: `--ipv-4-private-pools-pools`, `--ipv-4-public-pools-pools` * Added aliases: `--ipv-4-private-pools-pools`, `--ipv-4-public-pools-pools` * Removed aliases: `--ipv4-private-pools-pools`, `--ipv4-public-pools-pools` * In command [nebius vpc network update](/cli/reference/vpc/network/update): * Added flags: `--ipv4-private-pools-pools`, `--ipv4-public-pools-pools` * Removed flags: `--ipv-4-private-pools-pools`, `--ipv-4-public-pools-pools` * Added aliases: `--ipv-4-private-pools-pools`, `--ipv-4-public-pools-pools` * Removed aliases: `--ipv4-private-pools-pools`, `--ipv4-public-pools-pools` * In command [nebius vpc subnet create](/cli/reference/vpc/subnet/create): * Added flags: `--ipv4-private-pools-pools`, `--ipv4-private-pools-use-network-pools`, `--ipv4-public-pools-pools`, `--ipv4-public-pools-use-network-pools` * Removed flags: `--ipv-4-private-pools-pools`, `--ipv-4-private-pools-use-network-pools`, `--ipv-4-public-pools-pools`, `--ipv-4-public-pools-use-network-pools` * Added aliases: `--ipv-4-private-pools-pools`, `--ipv-4-private-pools-use-network-pools`, `--ipv-4-public-pools-pools`, `--ipv-4-public-pools-use-network-pools` * Removed aliases: `--ipv4-private-pools-pools`, `--ipv4-private-pools-use-network-pools`, `--ipv4-public-pools-pools`, `--ipv4-public-pools-use-network-pools` * In command [nebius vpc subnet update](/cli/reference/vpc/subnet/update): * Added flags: `--ipv4-private-pools-pools`, `--ipv4-private-pools-use-network-pools`, `--ipv4-public-pools-pools`, `--ipv4-public-pools-use-network-pools` * Removed flags: `--ipv-4-private-pools-pools`, `--ipv-4-private-pools-use-network-pools`, `--ipv-4-public-pools-pools`, `--ipv-4-public-pools-use-network-pools` * Added aliases: `--ipv-4-private-pools-pools`, `--ipv-4-private-pools-use-network-pools`, `--ipv-4-public-pools-pools`, `--ipv-4-public-pools-use-network-pools` * Removed aliases: `--ipv4-private-pools-pools`, `--ipv4-private-pools-use-network-pools`, `--ipv4-public-pools-pools`, `--ipv4-public-pools-use-network-pools` * In command [nebius vpc v1alpha1 allocation create](/cli/reference/vpc/v1alpha1/allocation/create): * Added flags: `--ipv4-private`, `--ipv4-private-cidr`, `--ipv4-private-pool-id`, `--ipv4-private-subnet-id`, `--ipv4-public`, `--ipv4-public-cidr`, `--ipv4-public-pool-id` * Removed flags: `--ipv-4-private`, `--ipv-4-private-cidr`, `--ipv-4-private-pool-id`, `--ipv-4-private-subnet-id`, `--ipv-4-public`, `--ipv-4-public-cidr`, `--ipv-4-public-pool-id` * Added aliases: `--ipv-4-private`, `--ipv-4-private-cidr`, `--ipv-4-private-pool-id`, `--ipv-4-private-subnet-id`, `--ipv-4-public`, `--ipv-4-public-cidr`, `--ipv-4-public-pool-id` * Removed aliases: `--ipv4-private`, `--ipv4-private-cidr`, `--ipv4-private-pool-id`, `--ipv4-private-subnet-id`, `--ipv4-public`, `--ipv4-public-cidr`, `--ipv4-public-pool-id` * In command [nebius vpc v1alpha1 allocation update](/cli/reference/vpc/v1alpha1/allocation/update): * Added flags: `--ipv4-private`, `--ipv4-public` * Removed flags: `--ipv-4-private`, `--ipv-4-public` * Added aliases: `--ipv-4-private`, `--ipv-4-public` * Removed aliases: `--ipv4-private`, `--ipv4-public` * In command [nebius compute image](/cli/reference/compute/image): * Added subcommands: [create](/cli/reference/compute/image/create), [operation](/cli/reference/compute/image/operation) * In command [nebius applications v1alpha1](/cli/reference/applications/v1alpha1): * Added subcommands: [k8s-release](/cli/reference/applications/v1alpha1/k8s-release) * Removed subcommands: `k-8-s-release` * In command [nebius profile create](/cli/reference/profile/create): * Added flags: `--tenant-id` * In command [nebius profile update](/cli/reference/profile/update): * Added flags: `--tenant-id` * In command [nebius storage v1alpha1 transfer create](/cli/reference/storage/v1alpha1/transfer/create): * Added flags: `--destination-prefix`, `--source-prefix` * In command [nebius vpc allocation create](/cli/reference/vpc/allocation/create): * Added aliases: `--ipv4-private-cidr`, `--ipv4-private-pool-id`, `--ipv4-private-subnet-id`, `--ipv4-public-cidr`, `--ipv4-public-pool-id`, `--ipv4-public-subnet-id` * In command [nebius vpc network create](/cli/reference/vpc/network/create): * Added aliases: `--ipv4-private-pools-pools`, `--ipv4-public-pools-pools` * In command [nebius vpc network update](/cli/reference/vpc/network/update): * Added aliases: `--ipv4-private-pools-pools`, `--ipv4-public-pools-pools` * In command [nebius vpc subnet create](/cli/reference/vpc/subnet/create): * Added aliases: `--ipv4-private-pools-pools`, `--ipv4-private-pools-use-network-pools`, `--ipv4-public-pools-pools`, `--ipv4-public-pools-use-network-pools` * In command [nebius vpc subnet update](/cli/reference/vpc/subnet/update): * Added aliases: `--ipv4-private-pools-pools`, `--ipv4-private-pools-use-network-pools`, `--ipv4-public-pools-pools`, `--ipv4-public-pools-use-network-pools` * In command [nebius vpc v1alpha1 allocation create](/cli/reference/vpc/v1alpha1/allocation/create): * Added aliases: `--ipv4-private`, `--ipv4-private-cidr`, `--ipv4-private-pool-id`, `--ipv4-private-subnet-id`, `--ipv4-public`, `--ipv4-public-cidr`, `--ipv4-public-pool-id` * In command [nebius vpc v1alpha1 allocation update](/cli/reference/vpc/v1alpha1/allocation/update): * Added aliases: `--ipv4-private`, `--ipv4-public` * In command [nebius msp serverless](/cli/reference/msp/serverless): * Removed subcommands: `create`, `delete`, `get`, `list`, `logs`, `run`, `start`, `stop` Internal improvements. * In command [nebius iam federation](/cli/reference/iam/federation): * Added subcommands: [activate](/cli/reference/iam/federation/activate), [deactivate](/cli/reference/iam/federation/deactivate) * In command [nebius iam federation create](/cli/reference/iam/federation/create): * Flags deprecated: * `--active`. 'active' field ignored. use 'activate/deactivate' methods to manage federation state. a newly created federation is always active by default. * In command [nebius iam federation update](/cli/reference/iam/federation/update): * Added flags: `--status-state` * Flags deprecated: * `--active`. 'active' field ignored. use 'activate/deactivate' methods to manage federation state. a newly created federation is always active by default. * `--status-certificates-count`. 'status' is ignored for update requests. * `--status-users-count`. 'status' is ignored for update requests. * In command [nebius audit v2 audit-event list](/cli/reference/audit/v2/audit-event/list): * Added flags: `--event-type` * In command [nebius storage bucket create](/cli/reference/storage/bucket/create): * Added flags: `--object-audit-logging` * In command [nebius storage bucket update](/cli/reference/storage/bucket/update): * Added flags: `--object-audit-logging` * In command [nebius billing v1alpha1 calculator estimate](/cli/reference/billing/v1alpha1/calculator/estimate): * Added flags: `--resource-spec-compute-instance-spec-reservation-policy-policy`, `--resource-spec-compute-instance-spec-reservation-policy-reservation-ids`, `--resource-spec-compute-instance-update-spec-reservation-policy-policy`, `--resource-spec-compute-instance-update-spec-reservation-policy-reservation-ids` * In command [nebius compute instance create](/cli/reference/compute/instance/create): * Added flags: `--reservation-policy-policy`, `--reservation-policy-reservation-ids` * In command [nebius compute instance update](/cli/reference/compute/instance/update): * Added flags: `--reservation-policy-policy`, `--reservation-policy-reservation-ids` * In command [nebius iam federation update](/cli/reference/iam/federation/update): * Added flags: `--status-certificates-count` * In command [nebius quotas quota-allowance](/cli/reference/quotas/quota-allowance): * Added subcommands: [create](/cli/reference/quotas/quota-allowance/create), [delete](/cli/reference/quotas/quota-allowance/delete), [edit](/cli/reference/quotas/quota-allowance/edit), [edit-by-name](/cli/reference/quotas/quota-allowance/edit-by-name), [operation](/cli/reference/quotas/quota-allowance/operation), [update](/cli/reference/quotas/quota-allowance/update) Internal improvements. Internal improvements. * In command [nebius storage bucket create](/cli/reference/storage/bucket/create): * Added flags: `--lifecycle-configuration-last-access-filter-conditions` * In command [nebius storage bucket update](/cli/reference/storage/bucket/update): * Added flags: `--lifecycle-configuration-last-access-filter-conditions` Internal improvements. Internal improvements. * In command [nebius iam federation update](/cli/reference/iam/federation/update): * Added flags: `--status-users-count` * In command [nebius iam federation-certificate](/cli/reference/iam/federation-certificate): * Added subcommands: [update-bulk](/cli/reference/iam/federation-certificate/update-bulk) Internal improvements. Internal improvements. Internal improvements. * In command [nebius mk8s v1alpha1](/cli/reference/mk8s/v1alpha1): * Subcommands deprecated: * [cluster](/cli/reference/mk8s/v1alpha1/cluster). Cluster v1alpha1 api is deprecated, please migrate to v1. * [node-group](/cli/reference/mk8s/v1alpha1/node-group). Nodegroup v1alpha1 api is deprecated, please migrate to v1. * In command [nebius mk8s v1alpha1 cluster](/cli/reference/mk8s/v1alpha1/cluster): * Subcommands deprecated: * [create](/cli/reference/mk8s/v1alpha1/cluster/create) * [delete](/cli/reference/mk8s/v1alpha1/cluster/delete) * [edit](/cli/reference/mk8s/v1alpha1/cluster/edit) * [edit-by-name](/cli/reference/mk8s/v1alpha1/cluster/edit-by-name) * [get](/cli/reference/mk8s/v1alpha1/cluster/get) * [get-by-name](/cli/reference/mk8s/v1alpha1/cluster/get-by-name) * [get-credentials](/cli/reference/mk8s/v1alpha1/cluster/get-credentials) * [get-token](/cli/reference/mk8s/v1alpha1/cluster/get-token) * [list](/cli/reference/mk8s/v1alpha1/cluster/list) * [list-control-plane-versions](/cli/reference/mk8s/v1alpha1/cluster/list-control-plane-versions) * [operation](/cli/reference/mk8s/v1alpha1/cluster/operation) * [update](/cli/reference/mk8s/v1alpha1/cluster/update) * In command [nebius mk8s v1alpha1 cluster operation](/cli/reference/mk8s/v1alpha1/cluster/operation): * Subcommands deprecated: * [get](/cli/reference/mk8s/v1alpha1/cluster/operation/get) * [list](/cli/reference/mk8s/v1alpha1/cluster/operation/list) * [wait](/cli/reference/mk8s/v1alpha1/cluster/operation/wait) * In command [nebius mk8s v1alpha1 node-group](/cli/reference/mk8s/v1alpha1/node-group): * Subcommands deprecated: * [create](/cli/reference/mk8s/v1alpha1/node-group/create) * [delete](/cli/reference/mk8s/v1alpha1/node-group/delete) * [edit](/cli/reference/mk8s/v1alpha1/node-group/edit) * [edit-by-name](/cli/reference/mk8s/v1alpha1/node-group/edit-by-name) * [get](/cli/reference/mk8s/v1alpha1/node-group/get) * [get-by-name](/cli/reference/mk8s/v1alpha1/node-group/get-by-name) * [list](/cli/reference/mk8s/v1alpha1/node-group/list) * [operation](/cli/reference/mk8s/v1alpha1/node-group/operation) * [update](/cli/reference/mk8s/v1alpha1/node-group/update) * [upgrade](/cli/reference/mk8s/v1alpha1/node-group/upgrade) * In command [nebius mk8s v1alpha1 node-group operation](/cli/reference/mk8s/v1alpha1/node-group/operation): * Subcommands deprecated: * [get](/cli/reference/mk8s/v1alpha1/node-group/operation/get) * [list](/cli/reference/mk8s/v1alpha1/node-group/operation/list) * [wait](/cli/reference/mk8s/v1alpha1/node-group/operation/wait) * In command [nebius vpc allocation](/cli/reference/vpc/allocation): * Added subcommands: [list-by-subnet](/cli/reference/vpc/allocation/list-by-subnet) * In command [nebius](/cli/reference/index): * Added subcommands: [dns](/cli/reference/dns) * In command [nebius applications v1alpha1 k-8-s-release list](/cli/reference/applications/v1alpha1/k-8-s-release/list): * Added flags: `--all`, `--interactive` * In command [nebius applications v1alpha1 k-8-s-release operation list](/cli/reference/applications/v1alpha1/k-8-s-release/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius audit v2 audit-event list](/cli/reference/audit/v2/audit-event/list): * Added flags: `--all`, `--interactive` * In command [nebius compute disk list](/cli/reference/compute/disk/list): * Added flags: `--all`, `--interactive` * In command [nebius compute disk operation list](/cli/reference/compute/disk/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius compute filesystem list](/cli/reference/compute/filesystem/list): * Added flags: `--all`, `--interactive` * In command [nebius compute filesystem operation list](/cli/reference/compute/filesystem/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius compute gpu-cluster list](/cli/reference/compute/gpu-cluster/list): * Added flags: `--all`, `--interactive` * In command [nebius compute gpu-cluster operation list](/cli/reference/compute/gpu-cluster/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius compute image list](/cli/reference/compute/image/list): * Added flags: `--all`, `--interactive` * In command [nebius compute instance list](/cli/reference/compute/instance/list): * Added flags: `--all`, `--interactive` * In command [nebius compute instance operation list](/cli/reference/compute/instance/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius compute platform list](/cli/reference/compute/platform/list): * Added flags: `--all`, `--interactive` * In command [nebius compute v1alpha1 disk list](/cli/reference/compute/v1alpha1/disk/list): * Added flags: `--all`, `--interactive` * In command [nebius compute v1alpha1 disk operation list](/cli/reference/compute/v1alpha1/disk/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius compute v1alpha1 filesystem list](/cli/reference/compute/v1alpha1/filesystem/list): * Added flags: `--all`, `--interactive` * In command [nebius compute v1alpha1 filesystem operation list](/cli/reference/compute/v1alpha1/filesystem/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius compute v1alpha1 gpu-cluster list](/cli/reference/compute/v1alpha1/gpu-cluster/list): * Added flags: `--all`, `--interactive` * In command [nebius compute v1alpha1 gpu-cluster operation list](/cli/reference/compute/v1alpha1/gpu-cluster/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius compute v1alpha1 image list](/cli/reference/compute/v1alpha1/image/list): * Added flags: `--all`, `--interactive` * In command [nebius compute v1alpha1 instance list](/cli/reference/compute/v1alpha1/instance/list): * Added flags: `--all`, `--interactive` * In command [nebius compute v1alpha1 instance operation list](/cli/reference/compute/v1alpha1/instance/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius iam access-key list](/cli/reference/iam/access-key/list): * Added flags: `--all`, `--interactive` * In command [nebius iam access-key operation list](/cli/reference/iam/access-key/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius iam access-permit list](/cli/reference/iam/access-permit/list): * Added flags: `--all`, `--interactive` * In command [nebius iam access-permit operation list](/cli/reference/iam/access-permit/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius iam auth-public-key list](/cli/reference/iam/auth-public-key/list): * Added flags: `--all`, `--interactive` * In command [nebius iam auth-public-key operation list](/cli/reference/iam/auth-public-key/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius iam federated-credentials list](/cli/reference/iam/federated-credentials/list): * Added flags: `--all`, `--interactive` * In command [nebius iam federated-credentials operation list](/cli/reference/iam/federated-credentials/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius iam federation list](/cli/reference/iam/federation/list): * Added flags: `--all`, `--interactive` * In command [nebius iam federation operation list](/cli/reference/iam/federation/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius iam federation-certificate operation list](/cli/reference/iam/federation-certificate/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius iam group list](/cli/reference/iam/group/list): * Added flags: `--all`, `--interactive` * In command [nebius iam group operation list](/cli/reference/iam/group/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius iam group-membership operation list](/cli/reference/iam/group-membership/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius iam invitation list](/cli/reference/iam/invitation/list): * Added flags: `--all`, `--interactive` * In command [nebius iam invitation operation list](/cli/reference/iam/invitation/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius iam project list](/cli/reference/iam/project/list): * Added flags: `--all`, `--interactive` * In command [nebius iam project operation list](/cli/reference/iam/project/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius iam service-account list](/cli/reference/iam/service-account/list): * Added flags: `--all`, `--interactive` * In command [nebius iam service-account operation list](/cli/reference/iam/service-account/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius iam static-key list](/cli/reference/iam/static-key/list): * Added flags: `--all`, `--interactive` * In command [nebius iam static-key operation list](/cli/reference/iam/static-key/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius iam tenant list](/cli/reference/iam/tenant/list): * Added flags: `--all`, `--interactive` * In command [nebius iam tenant-user-account list](/cli/reference/iam/tenant-user-account/list): * Added flags: `--all`, `--interactive` * In command [nebius iam tenant-user-account operation list](/cli/reference/iam/tenant-user-account/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius iam tenant-user-account-with-attributes list](/cli/reference/iam/tenant-user-account-with-attributes/list): * Added flags: `--all`, `--interactive` * In command [nebius iam v2 access-key list](/cli/reference/iam/v2/access-key/list): * Added flags: `--all`, `--interactive` * In command [nebius iam v2 access-key operation list](/cli/reference/iam/v2/access-key/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius iam v2 tenant list](/cli/reference/iam/v2/tenant/list): * Added flags: `--all`, `--interactive` * In command [nebius iam v2 tenant operation list](/cli/reference/iam/v2/tenant/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius mk8s cluster list](/cli/reference/mk8s/cluster/list): * Added flags: `--all`, `--interactive` * In command [nebius mk8s cluster operation list](/cli/reference/mk8s/cluster/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius mk8s node-group list](/cli/reference/mk8s/node-group/list): * Added flags: `--all`, `--interactive` * In command [nebius mk8s node-group operation list](/cli/reference/mk8s/node-group/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius mk8s v1alpha1 cluster list](/cli/reference/mk8s/v1alpha1/cluster/list): * Added flags: `--all`, `--interactive` * In command [nebius mk8s v1alpha1 cluster operation list](/cli/reference/mk8s/v1alpha1/cluster/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius mk8s v1alpha1 node-group list](/cli/reference/mk8s/v1alpha1/node-group/list): * Added flags: `--all`, `--interactive` * In command [nebius mk8s v1alpha1 node-group operation list](/cli/reference/mk8s/v1alpha1/node-group/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius msp mlflow v1alpha1 cluster list](/cli/reference/msp/mlflow/v1alpha1/cluster/list): * Added flags: `--all`, `--interactive` * In command [nebius msp mlflow v1alpha1 cluster operation list](/cli/reference/msp/mlflow/v1alpha1/cluster/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius msp postgresql v1alpha1 backup operation list](/cli/reference/msp/postgresql/v1alpha1/backup/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius msp postgresql v1alpha1 cluster list](/cli/reference/msp/postgresql/v1alpha1/cluster/list): * Added flags: `--all`, `--interactive` * In command [nebius msp postgresql v1alpha1 cluster operation list](/cli/reference/msp/postgresql/v1alpha1/cluster/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius msp serverless v1alpha1 endpoint list](/cli/reference/msp/serverless/v1alpha1/endpoint/list): * Added flags: `--all`, `--interactive` * In command [nebius msp serverless v1alpha1 endpoint operation list](/cli/reference/msp/serverless/v1alpha1/endpoint/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius msp serverless v1alpha1 job list](/cli/reference/msp/serverless/v1alpha1/job/list): * Added flags: `--all`, `--interactive` * In command [nebius msp serverless v1alpha1 job operation list](/cli/reference/msp/serverless/v1alpha1/job/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius mysterybox secret list](/cli/reference/mysterybox/secret/list): * Added flags: `--all`, `--interactive` * In command [nebius mysterybox secret operation list](/cli/reference/mysterybox/secret/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius mysterybox secret-version list](/cli/reference/mysterybox/secret-version/list): * Added flags: `--all`, `--interactive` * In command [nebius mysterybox secret-version operation list](/cli/reference/mysterybox/secret-version/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius quotas quota-allowance list](/cli/reference/quotas/quota-allowance/list): * Added flags: `--all`, `--interactive` * In command [nebius registry image list](/cli/reference/registry/image/list): * Added flags: `--all`, `--interactive` * In command [nebius registry image operation list](/cli/reference/registry/image/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius registry list](/cli/reference/registry/list): * Added flags: `--all`, `--interactive` * In command [nebius registry operation list](/cli/reference/registry/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius storage bucket list](/cli/reference/storage/bucket/list): * Added flags: `--all`, `--interactive` * In command [nebius storage bucket operation list](/cli/reference/storage/bucket/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius storage v1alpha1 transfer list](/cli/reference/storage/v1alpha1/transfer/list): * Added flags: `--all`, `--interactive` * In command [nebius storage v1alpha1 transfer operation list](/cli/reference/storage/v1alpha1/transfer/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius vpc allocation list](/cli/reference/vpc/allocation/list): * Added flags: `--all`, `--interactive` * In command [nebius vpc allocation operation list](/cli/reference/vpc/allocation/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius vpc network list](/cli/reference/vpc/network/list): * Added flags: `--all`, `--interactive` * In command [nebius vpc network operation list](/cli/reference/vpc/network/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius vpc pool list](/cli/reference/vpc/pool/list): * Added flags: `--all`, `--interactive` * In command [nebius vpc pool operation list](/cli/reference/vpc/pool/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius vpc route list](/cli/reference/vpc/route/list): * Added flags: `--all`, `--interactive` * In command [nebius vpc route operation list](/cli/reference/vpc/route/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius vpc route-table list](/cli/reference/vpc/route-table/list): * Added flags: `--all`, `--interactive` * In command [nebius vpc route-table operation list](/cli/reference/vpc/route-table/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius vpc subnet list](/cli/reference/vpc/subnet/list): * Added flags: `--all`, `--interactive` * In command [nebius vpc subnet operation list](/cli/reference/vpc/subnet/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius vpc target-group operation list](/cli/reference/vpc/target-group/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius vpc v1alpha1 allocation list](/cli/reference/vpc/v1alpha1/allocation/list): * Added flags: `--all`, `--interactive` * In command [nebius vpc v1alpha1 allocation operation list](/cli/reference/vpc/v1alpha1/allocation/operation/list): * Added flags: `--all`, `--interactive` * In command [nebius vpc v1alpha1 network list](/cli/reference/vpc/v1alpha1/network/list): * Added flags: `--all`, `--interactive` * In command [nebius vpc v1alpha1 pool list](/cli/reference/vpc/v1alpha1/pool/list): * Added flags: `--all`, `--interactive` * In command [nebius vpc v1alpha1 scope list](/cli/reference/vpc/v1alpha1/scope/list): * Added flags: `--all`, `--interactive` * In command [nebius vpc v1alpha1 subnet list](/cli/reference/vpc/v1alpha1/subnet/list): * Added flags: `--all`, `--interactive` Internal improvements. Internal improvements. Internal improvements. Internal improvements. Internal improvements. Internal improvements. Internal improvements. Internal improvements. * In command [nebius](/cli/reference/index): * Added flags (including subcommands): `--auth-timeout`, `--per-retry-timeout`, `--retries`, `--timeout` * In command [nebius iam access-key operation](/cli/reference/iam/access-key/operation): * Added subcommands: [wait](/cli/reference/iam/access-key/operation/wait) * In command [nebius msp postgresql v1alpha1 backup operation](/cli/reference/msp/postgresql/v1alpha1/backup/operation): * Added subcommands: [wait](/cli/reference/msp/postgresql/v1alpha1/backup/operation/wait) * In command [nebius applications v1alpha1 k-8-s-release create](/cli/reference/applications/v1alpha1/k-8-s-release/create): * Added flags: `--interactive` * In command [nebius compute disk create](/cli/reference/compute/disk/create): * Added flags: `--interactive` * In command [nebius compute filesystem create](/cli/reference/compute/filesystem/create): * Added flags: `--interactive` * In command [nebius compute gpu-cluster create](/cli/reference/compute/gpu-cluster/create): * Added flags: `--interactive` * In command [nebius compute instance create](/cli/reference/compute/instance/create): * Added flags: `--interactive` * In command [nebius compute v1alpha1 disk create](/cli/reference/compute/v1alpha1/disk/create): * Added flags: `--interactive` * In command [nebius compute v1alpha1 filesystem create](/cli/reference/compute/v1alpha1/filesystem/create): * Added flags: `--interactive` * In command [nebius compute v1alpha1 gpu-cluster create](/cli/reference/compute/v1alpha1/gpu-cluster/create): * Added flags: `--interactive` * In command [nebius compute v1alpha1 instance create](/cli/reference/compute/v1alpha1/instance/create): * Added flags: `--interactive` * In command [nebius iam access-key create](/cli/reference/iam/access-key/create): * Added flags: `--interactive` * In command [nebius iam access-permit create](/cli/reference/iam/access-permit/create): * Added flags: `--interactive` * In command [nebius iam auth-public-key create](/cli/reference/iam/auth-public-key/create): * Added flags: `--interactive` * In command [nebius iam federated-credentials create](/cli/reference/iam/federated-credentials/create): * Added flags: `--interactive` * In command [nebius iam federation create](/cli/reference/iam/federation/create): * Added flags: `--interactive` * In command [nebius iam federation-certificate create](/cli/reference/iam/federation-certificate/create): * Added flags: `--interactive` * In command [nebius iam group create](/cli/reference/iam/group/create): * Added flags: `--interactive` * In command [nebius iam group-membership create](/cli/reference/iam/group-membership/create): * Added flags: `--interactive` * In command [nebius iam invitation create](/cli/reference/iam/invitation/create): * Added flags: `--interactive` * In command [nebius iam project create](/cli/reference/iam/project/create): * Added flags: `--interactive` * In command [nebius iam service-account create](/cli/reference/iam/service-account/create): * Added flags: `--interactive` * In command [nebius iam v2 access-key create](/cli/reference/iam/v2/access-key/create): * Added flags: `--interactive` * In command [nebius mk8s cluster create](/cli/reference/mk8s/cluster/create): * Added flags: `--interactive` * In command [nebius mk8s node-group create](/cli/reference/mk8s/node-group/create): * Added flags: `--interactive` * In command [nebius mk8s v1alpha1 cluster create](/cli/reference/mk8s/v1alpha1/cluster/create): * Added flags: `--interactive` * In command [nebius mk8s v1alpha1 node-group create](/cli/reference/mk8s/v1alpha1/node-group/create): * Added flags: `--interactive` * In command [nebius msp mlflow v1alpha1 cluster create](/cli/reference/msp/mlflow/v1alpha1/cluster/create): * Added flags: `--interactive` * In command [nebius msp postgresql v1alpha1 backup create](/cli/reference/msp/postgresql/v1alpha1/backup/create): * Added flags: `--interactive` * In command [nebius msp postgresql v1alpha1 cluster create](/cli/reference/msp/postgresql/v1alpha1/cluster/create): * Added flags: `--interactive` * In command [nebius msp serverless v1alpha1 endpoint create](/cli/reference/msp/serverless/v1alpha1/endpoint/create): * Added flags: `--interactive` * In command [nebius msp serverless v1alpha1 job create](/cli/reference/msp/serverless/v1alpha1/job/create): * Added flags: `--interactive` * In command [nebius mysterybox secret create](/cli/reference/mysterybox/secret/create): * Added flags: `--interactive` * In command [nebius mysterybox secret-version create](/cli/reference/mysterybox/secret-version/create): * Added flags: `--interactive` * In command [nebius registry create](/cli/reference/registry/create): * Added flags: `--interactive` * In command [nebius storage bucket create](/cli/reference/storage/bucket/create): * Added flags: `--interactive` * In command [nebius storage v1alpha1 transfer create](/cli/reference/storage/v1alpha1/transfer/create): * Added flags: `--interactive` * In command [nebius vpc allocation create](/cli/reference/vpc/allocation/create): * Added flags: `--interactive` * Removed flags: `--ipv-4-private`, `--ipv-4-public` * In command [nebius vpc allocation update](/cli/reference/vpc/allocation/update): * Removed flags: `--ipv-4-private`, `--ipv-4-public` * In command [nebius vpc network create](/cli/reference/vpc/network/create): * Added flags: `--interactive` * In command [nebius vpc pool create](/cli/reference/vpc/pool/create): * Added flags: `--interactive` * In command [nebius vpc route create](/cli/reference/vpc/route/create): * Added flags: `--interactive` * In command [nebius vpc route-table create](/cli/reference/vpc/route-table/create): * Added flags: `--interactive` * In command [nebius vpc subnet create](/cli/reference/vpc/subnet/create): * Added flags: `--interactive` * Removed flags: `--ipv-4-private-pools`, `--ipv-4-public-pools` * In command [nebius vpc subnet update](/cli/reference/vpc/subnet/update): * Removed flags: `--ipv-4-private-pools`, `--ipv-4-public-pools` * In command [nebius vpc v1alpha1 allocation create](/cli/reference/vpc/v1alpha1/allocation/create): * Added flags: `--interactive` * In command [nebius storage v1alpha1 transfer create](/cli/reference/storage/v1alpha1/transfer/create): * Added flags: `--destination-credentials-azure-access-key-access-key`, `--destination-credentials-azure-access-key-account-name`, `--source-credentials-azure-access-key-access-key`, `--source-credentials-azure-access-key-account-name` * In command [nebius storage v1alpha1 transfer update](/cli/reference/storage/v1alpha1/transfer/update): * Added flags: `--destination-credentials-azure-access-key-access-key`, `--destination-credentials-azure-access-key-account-name`, `--source-credentials-azure-access-key-access-key`, `--source-credentials-azure-access-key-account-name` Internal improvements. * In command [nebius iam v2 access-key](/cli/reference/iam/v2/access-key): * Added subcommands: [get-secret](/cli/reference/iam/v2/access-key/get-secret) * In command [nebius iam v2 access-key create](/cli/reference/iam/v2/access-key/create): * Added flags: `--secret-delivery-mode` Internal improvements. Internal improvements. Internal improvements. Internal improvements. * In command [nebius](/cli/reference/index): * Added subcommands: [mysterybox](/cli/reference/mysterybox) * In command [nebius msp](/cli/reference/msp): * Removed subcommands: `spark` * In command [nebius storage bucket create](/cli/reference/storage/bucket/create): * Added flags: `--force-storage-class` * Flags deprecated: * `--override-storage-class`. Supported until 2025-12-01. Use `default_storage_class` with `force_storage_class` instead * In command [nebius storage bucket update](/cli/reference/storage/bucket/update): * Added flags: `--force-storage-class` * Flags deprecated: * `--override-storage-class`. Supported until 2025-12-01. Use `default_storage_class` with `force_storage_class` instead * In command [nebius vpc](/cli/reference/vpc): * Added subcommands: [route](/cli/reference/vpc/route), [route-table](/cli/reference/vpc/route-table) * In command [nebius vpc subnet create](/cli/reference/vpc/subnet/create): * Added flags: `--route-table-id` * In command [nebius vpc subnet update](/cli/reference/vpc/subnet/update): * Added flags: `--route-table-id` * In command [nebius maintenance v1alpha1 maintenance](/cli/reference/maintenance/v1alpha1/maintenance): * Added subcommands: [edit](/cli/reference/maintenance/v1alpha1/maintenance/edit), [update](/cli/reference/maintenance/v1alpha1/maintenance/update) * In command [nebius mk8s cluster](/cli/reference/mk8s/cluster): * Added subcommands: [list-control-plane-versions](/cli/reference/mk8s/cluster/list-control-plane-versions) * In command [nebius mk8s node-group create](/cli/reference/mk8s/node-group/create): * Added flags: `--template-os` * In command [nebius mk8s node-group update](/cli/reference/mk8s/node-group/update): * Added flags: `--template-os` * In command [nebius mk8s v1alpha1 cluster](/cli/reference/mk8s/v1alpha1/cluster): * Added subcommands: [list-control-plane-versions](/cli/reference/mk8s/v1alpha1/cluster/list-control-plane-versions) * In command [nebius mk8s v1alpha1 node-group create](/cli/reference/mk8s/v1alpha1/node-group/create): * Added flags: `--template-os` * In command [nebius mk8s v1alpha1 node-group update](/cli/reference/mk8s/v1alpha1/node-group/update): * Added flags: `--template-os` * In command [nebius profile create](/cli/reference/profile/create): * Added flags: `--federated-subject-credentials-file-path`, `--private-key-file-path`, `--service-account-file-path` * In command [nebius profile update](/cli/reference/profile/update): * Added flags: `--federated-subject-credentials-file-path`, `--private-key-file-path`, `--service-account-file-path` Internal improvements. Internal improvements. * In command [nebius msp spark v1alpha1](/cli/reference/msp/spark/v1alpha1): * Subcommands deprecated: * [cluster](/cli/reference/msp/spark/v1alpha1/cluster). Supported until 2025-08-12. Nebius ai cloud no longer supports the service. instead, use application for apache spark™ connect in standalone applications. * [job](/cli/reference/msp/spark/v1alpha1/job). Supported until 2025-08-12. Nebius ai cloud no longer supports the service. instead, use application for apache spark™ connect in standalone applications. * [session](/cli/reference/msp/spark/v1alpha1/session). Supported until 2025-08-12. Nebius ai cloud no longer supports the service. instead, use application for apache spark™ connect in standalone applications. * In command [nebius msp spark v1alpha1 cluster](/cli/reference/msp/spark/v1alpha1/cluster): * Subcommands deprecated: * [create](/cli/reference/msp/spark/v1alpha1/cluster/create) * [delete](/cli/reference/msp/spark/v1alpha1/cluster/delete) * [edit](/cli/reference/msp/spark/v1alpha1/cluster/edit) * [edit-by-name](/cli/reference/msp/spark/v1alpha1/cluster/edit-by-name) * [get](/cli/reference/msp/spark/v1alpha1/cluster/get) * [get-by-name](/cli/reference/msp/spark/v1alpha1/cluster/get-by-name) * [list](/cli/reference/msp/spark/v1alpha1/cluster/list) * [operation](/cli/reference/msp/spark/v1alpha1/cluster/operation) * [update](/cli/reference/msp/spark/v1alpha1/cluster/update) * In command [nebius msp spark v1alpha1 cluster operation](/cli/reference/msp/spark/v1alpha1/cluster/operation): * Subcommands deprecated: * [get](/cli/reference/msp/spark/v1alpha1/cluster/operation/get) * [list](/cli/reference/msp/spark/v1alpha1/cluster/operation/list) * [wait](/cli/reference/msp/spark/v1alpha1/cluster/operation/wait) * In command [nebius msp spark v1alpha1 job](/cli/reference/msp/spark/v1alpha1/job): * Subcommands deprecated: * [cancel](/cli/reference/msp/spark/v1alpha1/job/cancel) * [create](/cli/reference/msp/spark/v1alpha1/job/create) * [get](/cli/reference/msp/spark/v1alpha1/job/get) * [list](/cli/reference/msp/spark/v1alpha1/job/list) * [operation](/cli/reference/msp/spark/v1alpha1/job/operation) * In command [nebius msp spark v1alpha1 job operation](/cli/reference/msp/spark/v1alpha1/job/operation): * Subcommands deprecated: * [get](/cli/reference/msp/spark/v1alpha1/job/operation/get) * [list](/cli/reference/msp/spark/v1alpha1/job/operation/list) * [wait](/cli/reference/msp/spark/v1alpha1/job/operation/wait) * In command [nebius msp spark v1alpha1 session](/cli/reference/msp/spark/v1alpha1/session): * Subcommands deprecated: * [create](/cli/reference/msp/spark/v1alpha1/session/create) * [delete](/cli/reference/msp/spark/v1alpha1/session/delete) * [get](/cli/reference/msp/spark/v1alpha1/session/get) * [get-by-name](/cli/reference/msp/spark/v1alpha1/session/get-by-name) * [list](/cli/reference/msp/spark/v1alpha1/session/list) * [operation](/cli/reference/msp/spark/v1alpha1/session/operation) * In command [nebius msp spark v1alpha1 session operation](/cli/reference/msp/spark/v1alpha1/session/operation): * Subcommands deprecated: * [get](/cli/reference/msp/spark/v1alpha1/session/operation/get) * [list](/cli/reference/msp/spark/v1alpha1/session/operation/list) * [wait](/cli/reference/msp/spark/v1alpha1/session/operation/wait) * In command [nebius compute node set-unhealthy](/cli/reference/compute/node/set-unhealthy): * Added flags: `--dry-run` Internal improvements. Internal improvements. Internal improvements. Internal improvements. * In command [nebius msp](/cli/reference/msp): * Removed subcommands: `v1alpha1` * In command [nebius billing v1alpha1 calculator estimate](/cli/reference/billing/v1alpha1/calculator/estimate): * Added flags: `--offer-types` * In command [nebius billing v1alpha1 calculator estimate-batch](/cli/reference/billing/v1alpha1/calculator/estimate-batch): * Added flags: `--offer-types` Internal improvements. Internal improvements. Internal improvements. Internal improvements. Internal improvements. * In command [nebius storage v1alpha1 transfer create](/cli/reference/storage/v1alpha1/transfer/create): * Added flags: `--source-limiters-bandwidth-bytes-per-second`, `--source-limiters-requests-per-second` * In command [nebius storage v1alpha1 transfer update](/cli/reference/storage/v1alpha1/transfer/update): * Added flags: `--source-limiters-bandwidth-bytes-per-second`, `--source-limiters-requests-per-second` * In command [nebius](/cli/reference/index): * Added subcommands: [fullhelp](/cli/reference/fullhelp) * In command [nebius billing v1alpha1 calculator estimate](/cli/reference/billing/v1alpha1/calculator/estimate): * Removed flags: `--resource-spec-compute-instance-spec-nvl-partition-id`, `--resource-spec-compute-instance-update-spec-nvl-partition-id` * In command [nebius compute instance create](/cli/reference/compute/instance/create): * Removed flags: `--nvl-partition-id` * In command [nebius compute instance update](/cli/reference/compute/instance/update): * Removed flags: `--nvl-partition-id` Internal improvements. Internal improvements. * In command [nebius billing v1alpha1 calculator estimate](/cli/reference/billing/v1alpha1/calculator/estimate): * Added flags: `--resource-spec-compute-disk-spec-disk-encryption-type`, `--resource-spec-compute-disk-update-spec-disk-encryption-type`, `--resource-spec-compute-instance-spec-nvl-partition-id`, `--resource-spec-compute-instance-update-spec-nvl-partition-id` * In command [nebius compute disk create](/cli/reference/compute/disk/create): * Added flags: `--disk-encryption-type` * In command [nebius compute instance create](/cli/reference/compute/instance/create): * Added flags: `--nvl-partition-id` * In command [nebius compute instance update](/cli/reference/compute/instance/update): * Added flags: `--nvl-partition-id` * In command [nebius msp serverless create](/cli/reference/msp/serverless/create): * Added flags: `--network-id`, `--platform` * In command [nebius msp serverless run](/cli/reference/msp/serverless/run): * Added flags: `--network-id`, `--platform` * In command [nebius iam](/cli/reference/iam): * Added subcommands: [profile](/cli/reference/iam/profile) Internal improvements. Internal improvements. * In command [nebius applications v1alpha1 k-8-s-release](/cli/reference/applications/v1alpha1/k-8-s-release): * Added subcommands: [edit](/cli/reference/applications/v1alpha1/k-8-s-release/edit), [update](/cli/reference/applications/v1alpha1/k-8-s-release/update) * In command [nebius billing v1alpha1 calculator estimate](/cli/reference/billing/v1alpha1/calculator/estimate): * Added flags: `--resource-spec-compute-instance-spec-hostname`, `--resource-spec-compute-instance-update-spec-hostname` * In command [nebius compute instance create](/cli/reference/compute/instance/create): * Added flags: `--hostname` * In command [nebius compute instance update](/cli/reference/compute/instance/update): * Added flags: `--hostname` * In command [nebius mk8s node-group create](/cli/reference/mk8s/node-group/create): * Added flags: `--template-preemptible` * In command [nebius mk8s node-group update](/cli/reference/mk8s/node-group/update): * Added flags: `--template-preemptible` * In command [nebius mk8s v1alpha1 node-group create](/cli/reference/mk8s/v1alpha1/node-group/create): * Added flags: `--template-preemptible` * In command [nebius mk8s v1alpha1 node-group update](/cli/reference/mk8s/v1alpha1/node-group/update): * Added flags: `--template-preemptible` * In command [nebius billing v1alpha1 calculator estimate](/cli/reference/billing/v1alpha1/calculator/estimate): * Added flags: `--resource-spec-compute-instance-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-spec-preemptible-priority`, `--resource-spec-compute-instance-update-spec-preemptible-on-preemption`, `--resource-spec-compute-instance-update-spec-preemptible-priority` * In command [nebius compute instance create](/cli/reference/compute/instance/create): * Added flags: `--preemptible-on-preemption`, `--preemptible-priority` * In command [nebius vpc](/cli/reference/vpc): * Added subcommands: [target-group](/cli/reference/vpc/target-group) Internal improvements. Internal improvements. * In command [nebius iam](/cli/reference/iam): * Subcommands deprecated: * [access-key](/cli/reference/iam/access-key). Supported until 2025-09-01. Access keys api v1 is deprecated, use the v2 version instead. keys produced by api v1 are available using v2. * In command [nebius iam access-key](/cli/reference/iam/access-key): * Subcommands deprecated: * [activate](/cli/reference/iam/access-key/activate) * [create](/cli/reference/iam/access-key/create) * [deactivate](/cli/reference/iam/access-key/deactivate) * [delete](/cli/reference/iam/access-key/delete) * [get-by-aws-id](/cli/reference/iam/access-key/get-by-aws-id) * [get-by-id](/cli/reference/iam/access-key/get-by-id) * [get-secret-once](/cli/reference/iam/access-key/get-secret-once) * [list](/cli/reference/iam/access-key/list) * [list-by-account](/cli/reference/iam/access-key/list-by-account) * [operation](/cli/reference/iam/access-key/operation) * [update](/cli/reference/iam/access-key/update) * In command [nebius iam access-key operation](/cli/reference/iam/access-key/operation): * Subcommands deprecated: * [get](/cli/reference/iam/access-key/operation/get) * [list](/cli/reference/iam/access-key/operation/list) * In command [nebius](/cli/reference/index): * Added subcommands: [maintenance](/cli/reference/maintenance) * In command [nebius iam access-key activate](/cli/reference/iam/access-key/activate): * Added flags: `--async` * In command [nebius iam access-key create](/cli/reference/iam/access-key/create): * Added flags: `--async` * In command [nebius iam access-key deactivate](/cli/reference/iam/access-key/deactivate): * Added flags: `--async` * In command [nebius iam access-key delete](/cli/reference/iam/access-key/delete): * Added flags: `--async` * In command [nebius iam access-key update](/cli/reference/iam/access-key/update): * Added flags: `--async` * In command [nebius msp postgresql v1alpha1 backup create](/cli/reference/msp/postgresql/v1alpha1/backup/create): * Added flags: `--async` * In command [nebius msp postgresql v1alpha1 backup delete](/cli/reference/msp/postgresql/v1alpha1/backup/delete): * Added flags: `--async` * In command [nebius storage bucket create](/cli/reference/storage/bucket/create): * Added flags: `--default-storage-class`, `--override-storage-class` * In command [nebius storage bucket update](/cli/reference/storage/bucket/update): * Added flags: `--default-storage-class`, `--override-storage-class` * In command [nebius](/cli/reference/index): * Added subcommands: [billing](/cli/reference/billing) Internal improvements. Internal improvements. * In command [nebius docs generate](/cli/reference/docs/generate): * Added flags: `--disable-autogenerated-tag` Internal improvements. Internal improvements. * In command [nebius iam v2](/cli/reference/iam/v2): * Added subcommands: [tenant](/cli/reference/iam/v2/tenant) * In command [nebius msp postgresql v1alpha1 backup](/cli/reference/msp/postgresql/v1alpha1/backup): * Added subcommands: [create](/cli/reference/msp/postgresql/v1alpha1/backup/create), [delete](/cli/reference/msp/postgresql/v1alpha1/backup/delete), [operation](/cli/reference/msp/postgresql/v1alpha1/backup/operation) * In command [nebius compute](/cli/reference/compute): * Added subcommands: [maintenance](/cli/reference/compute/maintenance) * Fixed an issue with federation authentication that could cause a browser window to open for each request. * In command [nebius compute disk create](/cli/reference/compute/disk/create): * Removed flags: `--placement-policy-placement-group-id`, `--placement-policy-placement-group-partition` * In command [nebius compute disk list](/cli/reference/compute/disk/list): * Flags deprecated: * `--filter`. Supported until 2025-06-16. It is not implemented, filtering could be done on client side * In command [nebius compute filesystem list](/cli/reference/compute/filesystem/list): * Flags deprecated: * `--filter`. Supported until 2025-06-16. It is not implemented, filtering could be done on client side * In command [nebius compute gpu-cluster list](/cli/reference/compute/gpu-cluster/list): * Flags deprecated: * `--filter`. Supported until 2025-06-16. It is not implemented, filtering could be done on client side * In command [nebius compute image list](/cli/reference/compute/image/list): * Flags deprecated: * `--filter`. Supported until 2025-06-16. It is not implemented, filtering could be done on client side * In command [nebius compute v1alpha1 disk create](/cli/reference/compute/v1alpha1/disk/create): * Removed flags: `--placement-policy-placement-group-id`, `--placement-policy-placement-group-partition` * In command [nebius compute v1alpha1 disk list](/cli/reference/compute/v1alpha1/disk/list): * Flags deprecated: * `--filter`. Supported until 2025-06-16. It is not implemented, filtering could be done on client side * In command [nebius compute v1alpha1 filesystem list](/cli/reference/compute/v1alpha1/filesystem/list): * Flags deprecated: * `--filter`. Supported until 2025-06-16. It is not implemented, filtering could be done on client side * In command [nebius compute v1alpha1 gpu-cluster list](/cli/reference/compute/v1alpha1/gpu-cluster/list): * Flags deprecated: * `--filter`. Supported until 2025-06-16. It is not implemented, filtering could be done on client side * In command [nebius compute v1alpha1 image list](/cli/reference/compute/v1alpha1/image/list): * Flags deprecated: * `--filter`. Supported until 2025-06-16. It is not implemented, filtering could be done on client side * In command [nebius compute](/cli/reference/compute): * Added subcommands: [node](/cli/reference/compute/node) Internal improvements. Internal improvements. Internal improvements. * In command [nebius msp mlflow v1alpha1 cluster create](/cli/reference/msp/mlflow/v1alpha1/cluster/create): * Added flags: `--size` Internal improvements. * In command [nebius msp postgresql v1alpha1 backup](/cli/reference/msp/postgresql/v1alpha1/backup): * Removed subcommands: `create`, `operation` Internal improvements. Internal improvements. Internal improvements. * In command [nebius compute v1alpha1 disk](/cli/reference/compute/v1alpha1/disk): * Subcommands deprecated: * [edit](/cli/reference/compute/v1alpha1/disk/edit) * [edit-by-name](/cli/reference/compute/v1alpha1/disk/edit-by-name) * [operation](/cli/reference/compute/v1alpha1/disk/operation) * In command [nebius compute v1alpha1 disk operation](/cli/reference/compute/v1alpha1/disk/operation): * Subcommands deprecated: * [get](/cli/reference/compute/v1alpha1/disk/operation/get) * [list](/cli/reference/compute/v1alpha1/disk/operation/list) * [wait](/cli/reference/compute/v1alpha1/disk/operation/wait) * In command [nebius compute v1alpha1 filesystem](/cli/reference/compute/v1alpha1/filesystem): * Subcommands deprecated: * [edit](/cli/reference/compute/v1alpha1/filesystem/edit) * [edit-by-name](/cli/reference/compute/v1alpha1/filesystem/edit-by-name) * [operation](/cli/reference/compute/v1alpha1/filesystem/operation) * In command [nebius compute v1alpha1 filesystem operation](/cli/reference/compute/v1alpha1/filesystem/operation): * Subcommands deprecated: * [get](/cli/reference/compute/v1alpha1/filesystem/operation/get) * [list](/cli/reference/compute/v1alpha1/filesystem/operation/list) * [wait](/cli/reference/compute/v1alpha1/filesystem/operation/wait) * In command [nebius compute v1alpha1 gpu-cluster](/cli/reference/compute/v1alpha1/gpu-cluster): * Subcommands deprecated: * [edit](/cli/reference/compute/v1alpha1/gpu-cluster/edit) * [edit-by-name](/cli/reference/compute/v1alpha1/gpu-cluster/edit-by-name) * [operation](/cli/reference/compute/v1alpha1/gpu-cluster/operation) * In command [nebius compute v1alpha1 gpu-cluster operation](/cli/reference/compute/v1alpha1/gpu-cluster/operation): * Subcommands deprecated: * [get](/cli/reference/compute/v1alpha1/gpu-cluster/operation/get) * [list](/cli/reference/compute/v1alpha1/gpu-cluster/operation/list) * [wait](/cli/reference/compute/v1alpha1/gpu-cluster/operation/wait) * In command [nebius compute v1alpha1 instance](/cli/reference/compute/v1alpha1/instance): * Subcommands deprecated: * [edit](/cli/reference/compute/v1alpha1/instance/edit) * [edit-by-name](/cli/reference/compute/v1alpha1/instance/edit-by-name) * [operation](/cli/reference/compute/v1alpha1/instance/operation) * In command [nebius compute v1alpha1 instance operation](/cli/reference/compute/v1alpha1/instance/operation): * Subcommands deprecated: * [get](/cli/reference/compute/v1alpha1/instance/operation/get) * [list](/cli/reference/compute/v1alpha1/instance/operation/list) * [wait](/cli/reference/compute/v1alpha1/instance/operation/wait) * In command [nebius iam project](/cli/reference/iam/project): * Removed subcommands: `delete`, `undelete` * In command [nebius iam tenant](/cli/reference/iam/tenant): * Removed subcommands: `edit`, `operation`, `update` * In command [nebius msp postgresql v1alpha1 backup](/cli/reference/msp/postgresql/v1alpha1/backup): * Added subcommands: [create](/cli/reference/msp/postgresql/v1alpha1/backup/create), [operation](/cli/reference/msp/postgresql/v1alpha1/backup/operation) * In command [nebius msp serverless create](/cli/reference/msp/serverless/create): * Added flags: `--liveness-delay`, `--liveness-failure-threshold`, `--liveness-path`, `--liveness-period`, `--max-retries`, `--timeout` * In command [nebius msp serverless delete](/cli/reference/msp/serverless/delete): * Added flags: `--await` * In command [nebius msp serverless run](/cli/reference/msp/serverless/run): * Added flags: `--liveness-delay`, `--liveness-failure-threshold`, `--liveness-path`, `--liveness-period`, `--max-retries`, `--timeout` * In command [nebius msp serverless v1alpha1 endpoint create](/cli/reference/msp/serverless/v1alpha1/endpoint/create): * Added flags: `--container-liveness-delay-seconds`, `--container-liveness-failure-threshold`, `--container-liveness-period-seconds` * Removed flags: `--container-liveness-delay`, `--container-liveness-period`, `--container-liveness-port` * In command [nebius msp serverless v1alpha1 job create](/cli/reference/msp/serverless/v1alpha1/job/create): * Added flags: `--container-max-retries`, `--container-timeout-seconds` * In command [nebius compute disk update](/cli/reference/compute/disk/update): * Added flags: `--labels-add`, `--labels-remove` * In command [nebius compute filesystem update](/cli/reference/compute/filesystem/update): * Added flags: `--labels-add`, `--labels-remove` * In command [nebius compute gpu-cluster update](/cli/reference/compute/gpu-cluster/update): * Added flags: `--labels-add`, `--labels-remove` * In command [nebius compute instance update](/cli/reference/compute/instance/update): * Added flags: `--labels-add`, `--labels-remove` * In command [nebius compute v1alpha1 disk update](/cli/reference/compute/v1alpha1/disk/update): * Added flags: `--labels-add`, `--labels-remove` * In command [nebius compute v1alpha1 filesystem update](/cli/reference/compute/v1alpha1/filesystem/update): * Added flags: `--labels-add`, `--labels-remove` * In command [nebius compute v1alpha1 gpu-cluster update](/cli/reference/compute/v1alpha1/gpu-cluster/update): * Added flags: `--labels-add`, `--labels-remove` * In command [nebius compute v1alpha1 instance update](/cli/reference/compute/v1alpha1/instance/update): * Added flags: `--labels-add`, `--labels-remove` * In command [nebius iam auth-public-key update](/cli/reference/iam/auth-public-key/update): * Added flags: `--labels-add`, `--labels-remove` * In command [nebius iam federated-credentials update](/cli/reference/iam/federated-credentials/update): * Added flags: `--labels-add`, `--labels-remove` * In command [nebius iam federation update](/cli/reference/iam/federation/update): * Added flags: `--labels-add`, `--labels-remove` * In command [nebius iam federation-certificate update](/cli/reference/iam/federation-certificate/update): * Added flags: `--labels-add`, `--labels-remove` * In command [nebius iam group update](/cli/reference/iam/group/update): * Added flags: `--labels-add`, `--labels-remove` * In command [nebius iam invitation update](/cli/reference/iam/invitation/update): * Added flags: `--labels-add`, `--labels-remove` * In command [nebius iam project update](/cli/reference/iam/project/update): * Added flags: `--labels-add`, `--labels-remove` * In command [nebius iam service-account update](/cli/reference/iam/service-account/update): * Added flags: `--labels-add`, `--labels-remove` * In command [nebius iam tenant update](/cli/reference/iam/tenant/update): * Added flags: `--labels-add`, `--labels-remove` * In command [nebius iam v2 access-key update](/cli/reference/iam/v2/access-key/update): * Added flags: `--labels-add`, `--labels-remove` * In command [nebius mk8s cluster update](/cli/reference/mk8s/cluster/update): * Added flags: `--labels-add`, `--labels-remove` * In command [nebius mk8s node-group update](/cli/reference/mk8s/node-group/update): * Added flags: `--labels-add`, `--labels-remove` * In command [nebius mk8s v1alpha1 cluster update](/cli/reference/mk8s/v1alpha1/cluster/update): * Added flags: `--labels-add`, `--labels-remove` * In command [nebius mk8s v1alpha1 node-group update](/cli/reference/mk8s/v1alpha1/node-group/update): * Added flags: `--labels-add`, `--labels-remove` * In command [nebius msp](/cli/reference/msp): * Added subcommands: [serverless](/cli/reference/msp/serverless) * In command [nebius msp postgresql v1alpha1 cluster update](/cli/reference/msp/postgresql/v1alpha1/cluster/update): * Added flags: `--labels-add`, `--labels-remove` * In command [nebius msp spark v1alpha1 cluster update](/cli/reference/msp/spark/v1alpha1/cluster/update): * Added flags: `--labels-add`, `--labels-remove` * In command [nebius registry update](/cli/reference/registry/update): * Added flags: `--labels-add`, `--labels-remove` * In command [nebius storage bucket update](/cli/reference/storage/bucket/update): * Added flags: `--labels-add`, `--labels-remove`ation/update): * Added flags: `--labels-add`, `--labels-remove` * In command [nebius vpc network update](/cli/reference/vpc/network/update): * Added flags: `--labels-add`, `--labels-remove` * In command [nebius vpc pool update](/cli/reference/vpc/pool/update): * Added flags: `--labels-add`, `--labels-remove` * In command [nebius vpc subnet update](/cli/reference/vpc/subnet/update): * Added flags: `--labels-add`, `--labels-remove` * In command [nebius vpc v1alpha1 allocation update](/cli/reference/vpc/v1alpha1/allocation/update): * Added flags: `--labels-add`, `--labels-remove` Internal improvements. Internal improvements. Internal improvements. * In command [nebius iam project](/cli/reference/iam/project): * Added subcommands: [delete](/cli/reference/iam/project/delete), [undelete](/cli/reference/iam/project/undelete) * In command [nebius iam tenant](/cli/reference/iam/tenant): * Added subcommands: [edit](/cli/reference/iam/tenant/edit), [operation](/cli/reference/iam/tenant/operation), [update](/cli/reference/iam/tenant/update) * In command [nebius iam project](/cli/reference/iam/project): * Added subcommands: [create](/cli/reference/iam/project/create), [edit](/cli/reference/iam/project/edit), [edit-by-name](/cli/reference/iam/project/edit-by-name), [operation](/cli/reference/iam/project/operation), [update](/cli/reference/iam/project/update) Internal improvements. * In command [nebius msp postgresql v1alpha1 cluster](/cli/reference/msp/postgresql/v1alpha1/cluster): * Added subcommands: [get-for-backup](/cli/reference/msp/postgresql/v1alpha1/cluster/get-for-backup) * In command [nebius vpc network](/cli/reference/vpc/network): * Added subcommands: [create](/cli/reference/vpc/network/create), [create-default](/cli/reference/vpc/network/create-default), [delete](/cli/reference/vpc/network/delete), [edit](/cli/reference/vpc/network/edit), [edit-by-name](/cli/reference/vpc/network/edit-by-name), [operation](/cli/reference/vpc/network/operation), [update](/cli/reference/vpc/network/update) * In command [nebius vpc pool](/cli/reference/vpc/pool): * Added subcommands: [create](/cli/reference/vpc/pool/create), [delete](/cli/reference/vpc/pool/delete) * In command [nebius vpc subnet](/cli/reference/vpc/subnet): * Added subcommands: [create](/cli/reference/vpc/subnet/create), [delete](/cli/reference/vpc/subnet/delete), [edit](/cli/reference/vpc/subnet/edit), [edit-by-name](/cli/reference/vpc/subnet/edit-by-name), [operation](/cli/reference/vpc/subnet/operation), [update](/cli/reference/vpc/subnet/update) * In command [nebius](/cli/reference/index): * Added subcommands: [audit](/cli/reference/audit) * In command [nebius msp postgresql v1alpha1 cluster restore](/cli/reference/msp/postgresql/v1alpha1/cluster/restore): * Added flags: `--recovery-time` * In command [nebius msp v1alpha1 resource preset list](/cli/reference/msp/v1alpha1/resource/preset/list): * Added flags: `--parent-id` * In command [nebius msp v1alpha1 resource template list](/cli/reference/msp/v1alpha1/resource/template/list): * Added flags: `--parent-id` * For all `operation get` and `operation wait` subcommands the flag `--id` was added * For all commands that have the `--id` flag, it is now possible to specify the `id` using a **positional argument** * In command [nebius](/cli/reference/index): * Added subcommands: [quotas](/cli/reference/quotas) * In command [nebius iam](/cli/reference/iam): * Added subcommands: [federated-credentials](/cli/reference/iam/federated-credentials) * In command [nebius iam](/cli/reference/iam): * Added subcommands: [access-permit](/cli/reference/iam/access-permit), [v2](/cli/reference/iam/v2) * In command [nebius iam group](/cli/reference/iam/group): * Added subcommands: [create](/cli/reference/iam/group/create), [delete](/cli/reference/iam/group/delete), [edit](/cli/reference/iam/group/edit), [edit-by-name](/cli/reference/iam/group/edit-by-name), [operation](/cli/reference/iam/group/operation), [update](/cli/reference/iam/group/update) * In command [nebius iam v1 group](/cli/reference/iam/v1/group): * Added subcommands: [create](/cli/reference/iam/v1/group/create), [delete](/cli/reference/iam/v1/group/delete), [edit](/cli/reference/iam/v1/group/edit), [edit-by-name](/cli/reference/iam/v1/group/edit-by-name), [operation](/cli/reference/iam/v1/group/operation), [update](/cli/reference/iam/v1/group/update) * In command [nebius msp postgresql v1alpha1 cluster](/cli/reference/msp/postgresql/v1alpha1/cluster): * Added subcommands: [start](/cli/reference/msp/postgresql/v1alpha1/cluster/start), [stop](/cli/reference/msp/postgresql/v1alpha1/cluster/stop) # Running AI workloads on VMs Source: https://docs.nebius.com/compute/clusters/ai-workloads You can run AI workloads on Compute VMs by using third-party tools. Information about how to do it is now located in separate documentation. See [Third-party integrations with Nebius AI Cloud](/3p-integrations/index). # InfiniBand™ networking for Compute virtual machines with GPUs Source: https://docs.nebius.com/compute/clusters/gpu/index You can group your virtual machines with GPUs into a *GPU cluster*. The cluster accelerates high-performance computing (HPC) tasks such as training and inference. These tasks require a lot of processing power that a single VM cannot provide. The GPU clusters are built with InfiniBand secure high-speed networking. Each GPU in a VM is connected through a network interface card (NIC) that provides 400 Gbps. As a compute VM for GPU clusters consists of 8 GPUs, the total bandwidth for a node is 3.2 Tbps. Nebius AI Cloud uses GPUDirect RDMA, an NVIDIA technology of remote direct memory access (RDMA) that allows data to flow directly between each GPU and its NIC, avoiding CPU, thus boosting the data exchange speed. ## InfiniBand fabrics Each GPU cluster is created in one of physical *InfiniBand fabrics*. This is where GPUs interconnected over InfiniBand are located. Each fabric has limited GPU capacity. When creating a GPU cluster, select an InfiniBand fabric for it. Take into account the type of GPUs you are going to use. For example, if you select `fabric-7`, you can only add NVIDIA® H200 NVLink with Intel Sapphire Rapids GPUs to this cluster. Available fabrics and corresponding regions ([private regions](/overview/regions) are marked with \*): | Fabric | GPU platform | [Region](/overview/regions) | | -------------------------- | --------------------------------------------------------------------------- | --------------------------------------------------------------------- | | `fabric-2` | NVIDIA® H100 NVLink with Intel Sapphire Rapids (gpu-h100-sxm) | eu-north1 | | `fabric-3` | NVIDIA® H100 NVLink with Intel Sapphire Rapids (gpu-h100-sxm) | eu-north1 | | `fabric-4` | NVIDIA® H100 NVLink with Intel Sapphire Rapids (gpu-h100-sxm) | eu-north1 | | `fabric-5` | NVIDIA® H200 NVLink with Intel Sapphire Rapids (gpu-h200-sxm) | eu-west1 | | `fabric-6` | NVIDIA® H100 NVLink with Intel Sapphire Rapids (gpu-h100-sxm) | eu-north1 | | `fabric-7` | NVIDIA® H200 NVLink with Intel Sapphire Rapids (gpu-h200-sxm) | eu-north1 | | eu-north2-a | NVIDIA® H200 NVLink with Intel Sapphire Rapids (gpu-h200-sxm) | eu-north2 \* | | me-west1-a | NVIDIA® B200 NVLink with Intel Emerald Rapids (gpu-b200-sxm-a) | me-west1 | | uk-south1-a | NVIDIA® B300 NVLink with Intel Granite Rapids (gpu-b300-sxm) | uk-south1 | | us-central1-a | NVIDIA® H200 NVLink with Intel Sapphire Rapids (gpu-h200-sxm) | us-central1 | | us-central1-b | NVIDIA® B200 NVLink with Intel Emerald Rapids (gpu-b200-sxm) | us-central1 | In most cases, you do not need to change the preselected fabric. We recommend that you create a GPU cluster in another fabric only if it is better suited for a different platform or if you experience capacity issues with an existing GPU cluster. ## Isolation and security of InfiniBand traffic Nebius AI Cloud isolates InfiniBand traffic between GPU clusters by using InfiniBand *partition keys* (P-Keys). Each GPU cluster is assigned a unique P-Key to create isolation inside shared [physical InfiniBand fabrics](/compute/clusters/gpu/topology). This way, nodes in different GPU clusters cannot communicate over InfiniBand even if they use the same fabric infrastructure. This creates isolation between [tenants](/iam/overview#tenants) without requiring a dedicated physical fabric for each cluster. ## How to enable InfiniBand for VMs with GPUs 1. Create a GPU cluster: 1. In the sidebar, go to  **Compute** → **GPU clusters**. 2. Click  **Create GPU cluster**. 3. On the page that opens, specify the cluster name. It should contain from 3 to 63 characters: lowercase letters, numbers and hyphens. 4. Select the InfiniBand fabric. 5. Click **Create GPU cluster**. 2. Add VMs to the cluster. You can do it only when creating the VMs: All virtual machines added to the GPU cluster, including Managed Service for Kubernetes® nodes, must be in the same [project](/iam/overview#projects). 1. In the sidebar, go to  **Compute** → **Virtual machines**. 2. Click  **Create virtual machine**. 3. On the page that opens, specify the VM's details and select the GPU cluster name in the **GPU cluster** list. You can also create a GPU cluster while [creating the first VM in it](/compute/virtual-machines/manage): 1. In the **Computing resources** section of the VM creation form: 1. Select **With GPU**. 2. Select a platform and a preset compatible with GPU clusters. For more information, see [Types of virtual machines and GPUs in Nebius AI Cloud](/compute/virtual-machines/types). 2. In the **Boot disk** section of the VM creation form, select the boot disk for NVIDIA GPUs. For details, see [Boot disk images for Compute virtual machines](/compute/storage/boot-disk-images). 1. Check that your project ID is saved in the Nebius AI Cloud CLI profile configuration: ```bash theme={null} cat ~/.nebius/config.yaml ``` 2. If you have not set your project ID as `parent-id`, or you want to create resources in a different project, [get the project ID](/iam/manage-projects#how-to-get-a-project-id) and update your [CLI profile](/cli/configure): ```bash theme={null} nebius profile update --parent-id ``` 3. Depending on your project's [region](/overview/regions), select an [InfiniBand fabric](#infiniband-fabrics) for VM interconnection and save it to an environment variable: ```bash theme={null} export INFINIBAND_FABRIC= ``` 4. Create a GPU cluster and save its ID: ```bash theme={null} export GPU_CLUSTER_ID=$(nebius compute gpu-cluster create \ --name \ --infiniband-fabric $INFINIBAND_FABRIC \ --format json \ | jq -r ".metadata.id") ``` Where: * `name`: A cluster name that you can use to quickly find the cluster. 5. Create a boot disk optimized for VMs with NVIDIA GPUs: ```bash theme={null} export BOOT_DISK_ID=$(nebius compute disk create \ --name \ --size-gibibytes 200 \ --type network_ssd \ --source-image-family-image-family ubuntu24.04-cuda13.0 \ --block-size-bytes 4096 \ --format json \ | jq -r ".metadata.id") ``` For compatible boot disk images (`--source-image-family-image-family`), see [Boot disk images](/compute/storage/boot-disk-images). 6. [Create a virtual machine](/compute/virtual-machines/manage#create-a-vm) with GPUs and specify the GPU cluster ID in its parameters. All virtual machines added to the GPU cluster, including Managed Service for Kubernetes nodes, must be in the same project. For example: ```bash theme={null} nebius compute instance create \ --resources-platform gpu-h100-sxm \ --resources-preset 8gpu-128vcpu-1600gb \ --gpu-cluster-id $GPU_CLUSTER_ID \ --boot-disk-existing-disk-id $BOOT_DISK_ID \ ... ``` Specify a VM platform with GPUs in `--resources-platform`, and a preset compatible with GPU clusters in `--resources-preset`. For more information, see [Types of virtual machines and GPUs in Nebius AI Cloud](/compute/virtual-machines/types). ## How to test the connection with the NCCL tests To test InfiniBand performance in a Compute cluster, you can run the NVIDIA NCCL test in it. For instructions, see our tutorial on running distributed jobs with [MPIrun](/3p-integrations/mpirun): it uses the NCCL test as an example. ## How to delete a GPU cluster Before deleting a GPU cluster, make sure all virtual machines in the cluster are deleted or moved to another cluster. 1. In the sidebar, go to **Compute** → **GPU clusters**. 2. In the row of the GPU cluster you want to delete, click → **Delete**. 3. In the window that opens, confirm the deletion. 1. Get the ID of the GPU cluster you want to delete: ```bash theme={null} nebius compute gpu-cluster list ``` 2. Delete the GPU cluster: ```bash theme={null} nebius compute gpu-cluster delete ``` ## See also * [How to test a GPU cluster physical state in Compute](/compute/clusters/gpu/test) * [InfiniBand networking for Compute virtual machines with GPUs](/kubernetes/gpu/clusters) * [How to create a virtual machine in Nebius AI Cloud](/compute/virtual-machines/manage) * [Running the all-reduce NCCL performance test in Soperator clusters](/slurm-soperator/jobs/examples/nccl-all-reduce) *** *InfiniBand and InfiniBand Trade Association are registered trademarks of the InfiniBand Trade Association.* # How to test a GPU cluster physical state in Compute Source: https://docs.nebius.com/compute/clusters/gpu/test In this article, you will learn how to test the physical state of the InfiniBand™ connection. The guides below will help you to check that InfiniBand connections are established between GPUs in a GPU cluster. ## Testing the port state 1. [Connect to the VM using SSH](/compute/virtual-machines/connect). 2. In the VM's shell, run `ibstatus` command that displays operational information about InfiniBand network devices. Result: ```bash theme={null} Infiniband device 'mlx5_0' port 1 status: default gid: fe80:0000:0000:0000:****:****:****:03c5 base lid: 0x*** sm lid: 0x* state: 4: ACTIVE phys state: 5: LinkUp rate: 400 Gb/sec (4X NDR) link_layer: InfiniBand Infiniband device 'mlx5_1' port 1 status: default gid: fe80:0000:0000:0000:****:****:****:03c6 base lid: 0x*** sm lid: 0x* state: 4: ACTIVE phys state: 5: LinkUp rate: 400 Gb/sec (4X NDR) link_layer: InfiniBand ... ``` 3. For each device in the result, check the physical state (`phys state`): it should be `LinkUp`. ## Testing network performance You can also emulate the network activity by sending some data from GPUs on one VM to GPUs on another: 1. Install the [perftest](https://github.com/linux-rdma/perftest) package on each one of the test VMs: ```bash theme={null} sudo apt install perftest ``` 2. [Connect to the first VM using SSH](/compute/virtual-machines/connect). 3. Run `ib_send_bw --report_gbits`. 4. Copy the first VM's [private IP address](/compute/virtual-machines/network). 5. [Connect to the second VM using SSH](/compute/virtual-machines/connect). 6. Run `ib_send_bw --report_gbits`. In the commands output, you should see non-zero values for the bytes sent, average bandwith speed, and average message rate. The bandwidth peak speed might not reach the theoretical maximum 400 Gbps. Example: ```text theme={null} +--------------------------------------------------------------------------------+ | #bytes #iterations #BW peak[Gb/sec] #BW average[Gb/sec] #MsgRate[Mpps] | +--------------------------------------------------------------------------------+ | 65536 1000 360.39 359.91 0.686466 | +--------------------------------------------------------------------------------+ ``` ## See also * [InfiniBand™ networking for Compute virtual machines with GPUs](/compute/clusters/gpu/index) * [How to create a virtual machine in Nebius AI Cloud](/compute/virtual-machines/manage) *** *InfiniBand and InfiniBand Trade Association are registered trademarks of the InfiniBand Trade Association.* # InfiniBand™ topology of a GPU cluster Source: https://docs.nebius.com/compute/clusters/gpu/topology/index ## Why InfiniBand topology is important Workload managers like [Slurm](https://slurm.schedmd.com) and [Volcano](https://volcano.sh/en/docs/) allow you to specify the network topology of your virtual machines within a GPU cluster for *topology-aware job scheduling*. Topology files describe how the VMs are located relative to each other. When you provide a topology file to a workload manager, it schedules distributed jobs on the worker nodes that are topologically closest to each other. This reduces network latency in such jobs and leads to better performance in both real workloads and synthetic tests. > For example, the [AllReduce](https://github.com/NVIDIA/nccl-tests/blob/master/doc/PERFORMANCE.md#allreduce) tests from the [NCCL Tests suite](https://github.com/NVIDIA/nccl-tests) that we ran in Nebius AI Cloud as topology-aware jobs have shown performance gains of up to 20%, depending on cluster size, compared to the same tests without the topology provided. ## Architecture of InfiniBand topology Every virtual machine with GPUs is connected to a set of three nodes related to a particular [InfiniBand fabric](/compute/clusters/gpu/index#infiniband-fabrics). Every node is located on a separate network layer. The hierarchy of an InfiniBand network includes the following layers with different types of switches: 1. InfiniBand fabric layer. Contains a root switch. 2. Point of delivery (POD). Represents a set of racks with servers. Core switches interconnect PODs. 3. Scalable unit (SU). Consists of a set of servers. Leaf switches interconnect scalable units. image ## Cost of network communication The cost of network communication increases as you go to a higher layer. For example, if you need to transfer data from one POD to another, the data goes through a root switch. This leads to a higher cost of resources. Mutual connections between PODs or SUs do not influence the cost. If a connection or data exchange takes place within one entity (POD or SU), the cost of network communication does not change. *** *InfiniBand and InfiniBand Trade Association are registered trademarks of the InfiniBand Trade Association.* # Working with InfiniBand™ topology of a GPU cluster Source: https://docs.nebius.com/compute/clusters/gpu/topology/manage [InfiniBand topology](/compute/clusters/gpu/topology) can help you increase performance of multi-VM jobs in GPU clusters. ## How to get InfiniBand topology of a GPU cluster After you [create a GPU cluster and add VMs to it](/compute/clusters/gpu/index#how-to-enable-infiniband-for-vms-with-gpus), you can view the InfiniBand topology of this cluster and its VMs. To get the topology for all VMs in a GPU cluster, run the following command: ```bash theme={null} nebius compute gpu-cluster get --id computegpucluster-*** ``` In the `--id` parameter, specify the GPU cluster ID. The output example is the following: ```text theme={null} ... status: infiniband_topology_path: instances: - instance_id: computeinstance-***rnqz path: - ***27bf - ***bb9b - ***b7ad - instance_id: computeinstance-***pepp path: - ***27bf - ***bb9b - ***e1ff - ... ``` To get the topology for an individual VM, run the following command: ```bash theme={null} nebius compute instance get --id computeinstance-*** ``` In the `--id` parameter, specify the ID of the VM attached to the GPU cluster. The output example is the following: ```text theme={null} ... status: infiniband_topology_path: path: - ***27bf - ***bb9b - ***e1ff ``` The `path` parameter shows components of the [InfiniBand network layers](/compute/clusters/gpu/topology#architecture-of-infiniband-topology): ```text theme={null} path: - ***27bf # 1st network layer (InfiniBand fabric) - ***bb9b # 2nd network layer (point of delivery, POD) - ***e1ff # 3rd network layer (scalable unit, SU) ``` ## How to create the Slurm topology configuration To set up topology in [Slurm](https://slurm.schedmd.com) and run jobs for ML workloads, you need the [topology.conf](https://slurm.schedmd.com/topology.conf.html) file. This file shows the network hierarchy: how nodes are interconnected, what layers they are located at and what switches are used. The `topology.conf` file represents InfiniBand topology. You can create this file based on the [information about a given GPU cluster](#how-to-get-infiniband-topology-of-a-gpu-cluster). To create the file, run one of the scripts from the [Nebius AI Cloud solution library](https://github.com/nebius/nebius-solution-library/tree/main/scripts/ib-topology) on GitHub. *** *InfiniBand and InfiniBand Trade Association are registered trademarks of the InfiniBand Trade Association.* # Compute Source: https://docs.nebius.com/compute/index Compute allows you to create and manage virtual machines. These virtual machines function similarly to your local machine but are hosted in the cloud. You can connect to them and use their GPUs and other computing resources in your ML/AI workloads. The service is available in all [Nebius AI Cloud regions](/overview/regions/). *InfiniBand and InfiniBand Trade Association are registered trademarks of the InfiniBand Trade Association.* Create your first set of virtual machines and connect to them Learn about virtual machines configurations Learn how to create different types of virtual machines Learn how to connect to virtual machines using SSH and allow other users to access VMs Create a GPU cluster and add VMs to it to interconnect them with InfiniBand Learn how to run tests to check the InfiniBand network state and performance Choose a storage option for your VMs that fits your goals best Manage and configure disks and shared filesystems Use volumes that you created on virtual machines Control GPU and vCPU states of your VMs Control disks and filesystems states # Viewing serial logs of virtual machines Source: https://docs.nebius.com/compute/monitoring/serial-logs Compute virtual machines write logs from a serial console. Serial logs may help you with troubleshooting VM startup and shutdown failures, operating system incidents or other similar issues. Serial logs are kept for 14 days. The logs for deleted instances are also kept for 14 days, but you cannot see them in the [web console](#view-serial-logs-in-web-console). Use [Grafana®](#view-serial-logs-in-grafana) or [LogCLI](#query-serial-logs-with-logcli) to view logs of deleted instances. Serial logs for Compute are free of charge. ## View serial logs in web console To view the serial logs of a given virtual machine: 1. In the sidebar, go to  **Compute** → **Virtual machines**. 2. Select the virtual machine you need and switch to the **Serial logs** tab. To view all serial logs in one place: 1. In the sidebar, go to **Observability** → [Logs](https://console.nebius.com/observability/logs). 2. Select the serial logs bucket. 3. Optionally, filter the logs by virtual machine ID. ## View serial logs in Grafana® You can visualize the serial logs of services in Grafana. After you [connect Grafana](/observability/logs/grafana#how-to-connect-grafana), set the `__bucket__` label value to `sp_serial`. ## Query serial logs with LogCLI After you [set up LogCLI](/observability/logs/logcli), set the `__bucket__` label value to `sp_serial` in your queries, for example: ```bash theme={null} logcli query '{__bucket__="sp_serial"}' --since 15m ``` *** *The Grafana Labs Marks are trademarks of Grafana Labs, and are used with Grafana Labs’ permission. We are not affiliated with, endorsed or sponsored by Grafana Labs or its affiliates.* # Monitoring virtual machines in Nebius AI Cloud Source: https://docs.nebius.com/compute/monitoring/virtual-machines You can monitor GPUs, vCPUs and network statuses on the dashboards in the Nebius AI Cloud [web console](https://console.nebius.com). There are two ways to find the required dashboard: * Go to **Observability** → [Metrics](https://console.nebius.com/observability/metrics) and select the resource you would like to review. * Go to the page of the VM you would like to review and switch to the **Metrics** tab. Use the dashboard to monitor current resource utilization, get information to schedule [quota](/compute/resources/quotas-limits) increases and quickly identify anomalies. In case of VM issues, dashboards help the Nebius support team investigate the issue. Data for the dashboard is collected automatically. For more information about metrics collection, see [Monitoring agent on Compute virtual machines](/observability/agents/monitoring-agent). ## Explore the dashboard The VM usage data becomes available 5–10 minutes after the VM is created. Use time filters to view a specific period of usage. By default, the data is refreshed every 15 seconds. You can configure this interval to the right of the time filters. ## GPU monitoring metrics The corresponding [NVIDIA metrics](https://docs.nvidia.com/datacenter/dcgm/latest/dcgm-api/dcgm-api-field-ids.html) are shown next to the Nebius AI Cloud metric. * **GPU utilization** (`DCGM_FI_DEV_GPU_UTIL`) Percentage of time a GPU spends executing tasks. * **Memory utilization** (`DCGM_FI_DEV_MEM_COPY_UTIL`) Percentage of time GPU memory was in use (performing read or write tasks) in a dedicated period. * **Free frame buffer in MB** (`DCGM_FI_DEV_FB_FREE`) Amount of free frame buffer memory. * **Used frame buffer in MB** (`DCGM_FI_DEV_FB_USED`) Amount of used frame buffer memory. * **Total frame buffer of the GPU in MB** (`DCGM_FI_DEV_FB_TOTAL`) A constant. The total amount of frame buffer memory. * **Reserved frame buffer in MB** (`DCGM_FI_DEV_FB_RESERVED`) A constant. Amount of frame buffer memory reserved for the internal use of the hardware: drivers, firmware, etc. * **The number of bytes of active PCIe rx/tx** (`DCGM_FI_PROF_PCIE_RX_BYTES`, `DCGM_FI_PROF_PCIE_TX_BYTES`) Number of bytes a GPU received from (rx) or transmitted to (tx) its host VM and other devices over PCIe. Both header and payload of each PCIe packet are included. * **SM clock for the device** (`DCGM_FI_DEV_SM_CLOCK`) Frequency of the main GPU clock. * **Memory clock for the device** (`DCGM_FI_DEV_MEM_CLOCK`) Frequency and total amount of operations in time spans. * **Current clock throttle reasons** (`DCGM_FI_DEV_CLOCK_THROTTLE_REASONS`) A bitmask of [possible reasons for GPU throttling](https://docs.nvidia.com/datacenter/dcgm/2.2/dcgm-api/group__dcgmFieldConstants.html). For example, if the GPU is throttling because it has overheated and slowed down, the chart will show 72: code 0x40 for overheating (`DCGM_CLOCKS_THROTTLE_REASON_HW_THERMAL`) + code 0x8 for slowdown (`DCGM_CLOCKS_THROTTLE_REASON_HW_SLOWDOWN`) = 72 in decimal. * **Power usage for the device** (`DCGM_FI_DEV_POWER_USAGE`) Current energy consumption by a GPU in watts. * **Total energy consumption for the GPU since the driver was last reloaded** (`DCGM_FI_DEV_TOTAL_ENERGY_CONSUMPTION`) Cumulative energy consumption by a GPU since the recent driver reload in millijoules. * **Memory temperature for the device** (`DCGM_FI_DEV_MEMORY_TEMP`) Memory temperature in degrees Celsius. * **Current temperature readings for the device** (`DCGM_FI_DEV_GPU_TEMP`) GPU core temperature in degrees Celsius. * **Current power limit for the device** (`DCGM_FI_DEV_POWER_MGMT_LIMIT`) A constant. Power consumption limit after which the GPU will be throttled. * **Slowdown temperature for the device** (`DCGM_FI_DEV_SLOWDOWN_TEMP`) A constant. Temperature threshold after which the GPU will be throttled until it cools down. * **The number of bytes of active NVLink (RX/TX)**(`PROF_NVLINK_TX_BYTES`, `PROF_NVLINK_RX_BYTES`) Number of bytes a GPU received from (rx) or transmitted to (tx) its host VM and other devices over NVLink, not including protocol headers, in bytes per second. If you have a [GPU cluster](/compute/clusters/gpu/index), the following metrics become available and help monitor InfiniBand™ connection: * **Link Downed Total** Number of times the port failed to recover the link and downed it. * **Link Error Recovery Total** Number of times the port recovered the link after error. * **Port Data Total (RX/TX)** Number of bytes all GPUs received (rx) or transmitted (tx) via the port, including packets with errors. * **Port Discards TX Total** Number of transmitted packets discarded by the port when the port was down or not responding. * **Port Errors RX Total** Number of received packets with errors, including physical, mailformed data and link packet errors and overrun buffer. * **Port Packets Total (RX/TX)** Speed of receiving (rx) or transmitting (tx) packets on all GPUs, including packets with errors and excluding link packets. Calculated in packets per second. * **Transfer Rate** Data transferring speed, calculated in bytes per second. ## vCPU monitoring metrics * **CPU utilization** Percentage of time vCPUs spend executing tasks. * **RAM** Amount of total and used memory. * **Disk bytes** Average data transfer throughput of the VM's disks. Measured in bytes per second. * **Disk operations** Average IOPS of the VM's disks. Measured in operations per second. * **Network bytes** Average data transfer speed of the VM's network. Measured in bytes per second. * **Network packets** Average packets transfer speed of the VM's network. Measured in packets per second. *** *InfiniBand and InfiniBand Trade Association are registered trademarks of the InfiniBand Trade Association.* # Monitoring volumes in Nebius AI Cloud Source: https://docs.nebius.com/compute/monitoring/volumes You can monitor disk and filesystem statuses on the dashboards in the Nebius AI Cloud [web console](https://console.nebius.com). There are two ways to find the required dashboard: * Go to **Observability** → [Metrics](https://console.nebius.com/observability/metrics) and select the resource you would like to review. * Go to the page of the resource you would like to review and switch to the **Metrics** tab. Use the dashboard to monitor current resource utilization, get information to schedule [quota](/compute/resources/quotas-limits) increases and quickly identify anomalies. In case of volume issues, dashboards help the Nebius support team investigate the issue. Data for the dashboard is collected automatically. ## Explore the dashboard The volume usage data becomes available 5–10 minutes after the volume is mounted. Use time filters to view a specific period of usage. By default, the data is refreshed every 15 seconds. You can configure this interval to the right of the time filters. ## Disk monitoring metrics * **Disk read latency by quantiles** Percentiles of the disk read requests latency. Measured in milliseconds. * **Disk write latency by quantiles** Percentiles of the disk write requests latency. Measured in milliseconds. * **Disk read throttler latency by quantiles** Percentiles of the disk write operations latency due to disk quota excess. Measured in milliseconds. * **Disk write throttler latency by quantiles** Percentiles of the disk write operations latency due to disk quota excess. Measured in milliseconds. * **Disk read operations** Average read IOPS. Measured in operations per second. * **Disk write operations** Average write IOPS. Measured in operations per second. * **Disk read bytes** Average read throughput. Measured in bytes per second. * **Disk write bytes** Average write throughput. Measured in bytes per second. * **Disk used quota** Percentage of disk quota on read and write operations per second utilization. ## Filesystem monitoring metrics * **Read latency by quantiles** Percentiles of the filesystem write requests latency. Measured in milliseconds. * **Write latency by quantiles** Percentiles of the filesystem read requests latency. Measured in milliseconds. * **Read operations** Average read IOPS. Measured in operations per second. * **Write operations** Average write IOPS. Measured in operations per second. * **Read bytes** Average read throughput. Measured in bytes per second. * **Write bytes** Average write throughput. Measured in bytes per second. * **Read errors** Number of times a filesystem fails to read data. * **Write errors** Number of times a filesystem fails to write data. * **Index operations** Number of indexing actions (reads, writes, updates and deletions) performed in a time period. * **Index errors** Number of failed indexing operations in a time period. # Getting started with Compute: Create your first Nebius AI Cloud virtual machine Source: https://docs.nebius.com/compute/quickstart To set up the infrastructure for ML workloads, create a virtual machine (VM) with 8 GPUs and a shared filesystem for training and a VM with one GPU for inference. In this guide, we will use the Nebius AI Cloud CLI to create VMs in a project in the eu-north1 region. ## Before you start ### Install the Nebius AI Cloud CLI The **Nebius AI Cloud CLI** manages all Nebius AI Cloud resources. For more details, see the [Nebius AI Cloud CLI documentation](/cli/index). To install and initialize the Nebius AI Cloud CLI, run the following commands one by one: ```bash theme={null} curl -sSL https://storage.eu-north1.nebius.cloud/cli/install.sh | bash ``` ```bash theme={null} nebius profile create ``` The last command, `nebius profile create`, will guide you through several prompts. After you complete the prompts, your browser will open the Nebius AI Cloud web console sign-in screen. Sign in to the web console to complete the initialization. If you have access to multiple tenants, the CLI will prompt you to choose a tenant ID. After that, save your project ID in the CLI configuration: If the project ID has not been configured during the `nebius profile create` flow, [get the project ID](/iam/manage-projects#how-to-get-a-project-id) and save it in the CLI configuration: ```bash theme={null} nebius config set parent-id ``` ### Install jq In this guide, we will use [jq](https://jqlang.github.io/jq/) to extract IDs and tokens from JSON data returned by the Nebius AI Cloud CLI. For more details, see the [jq documentation](https://jqlang.github.io/jq/download/). ```bash Ubuntu theme={null} sudo apt-get install jq ``` ```bash macOS theme={null} brew install jq ``` ### Generate keys for SSH access to the VM Generate an [SSH key pair](/compute/virtual-machines/ssh-keys). ## Create a VM with eight GPUs with InfiniBand™ and a shared filesystem for training 1. Create a boot disk and save its ID to an environment variable: ```bash theme={null} export TR_VM_BOOT_DISK_ID=$(nebius compute disk create \ --name training-vm-disk-1 \ --size-gibibytes 200 \ --type network_ssd \ --source-image-family-image-family ubuntu24.04-cuda13.0 \ --block-size-bytes 4096 \ --format json | jq -r ".metadata.id") ``` The command creates a 200 GiB SSD disk with a 4 KiB block size and an Ubuntu boot image with pre-installed NVIDIA GPU drivers. For details about boot disk images (`--source-image-family-image-family`), see [Boot disk images for Compute virtual machines](/compute/storage/boot-disk-images). 2. Create a shared filesystem and save its ID to an environment variable: ```bash theme={null} export TR_VM_FILESYSTEM_ID=$(nebius compute filesystem create \ --name training-vm-filesystem-1 \ --size-gibibytes 1024 \ --type network_ssd \ --block-size-bytes 4096 \ --format json | jq -r ".metadata.id") ``` The command creates a 1 TiB SSD shared filesystem with 4 KiB blocks. 3. Get the subnet ID and save it to an environment variable: ```bash theme={null} export SUBNET_ID=$(nebius vpc subnet list \ --format json \ | jq -r ".items[0].metadata.id") ``` Possible subnet ID: `vpcsubnet-e0dcbaa76x2024xyz8`. 4. For high-speed networking and efficient training, consider interconnecting multiple VM GPUs in a GPU cluster using InfiniBand. To do this, before creating the VM, create a GPU cluster to connect the VM and get its ID: ```bash theme={null} export GPU_CLUSTER_ID=$(nebius compute gpu-cluster create \ --name gpu-cluster-name \ --infiniband-fabric fabric-3 \ --format json \ | jq -r ".metadata.id") ``` 5. Create a VM with 8 GPUs for training: ```bash theme={null} export NETWORK_INTERFACE_NAME=multi-gpu-node-compute-api-network-interface export USER_DATA=$(jq -Rrs '.' < Generate an [SSH key pair](/compute/virtual-machines/ssh-keys). 1. [Install](/cli/install) and [configure](/cli/configure) the Nebius AI Cloud CLI. 2. To extract JSON data from the CLI output, install [jq](https://jqlang.github.io/jq/): ```bash Ubuntu theme={null} sudo apt-get install jq ``` ```bash macOS theme={null} brew install jq ``` 3. Generate an [SSH key pair](/compute/virtual-machines/ssh-keys). ## Create the VM 1. Go to the [web console](https://console.nebius.com), click **Create resource** and then select **Virtual machine**. 2. On the VM creation page that opens, set the following parameters: * **Platform**: NVIDIA® H100 NVLink with Intel Sapphire Rapids. * **Preset**: 1 GPU - 16 CPUs - 200 GiB RAM. * **Boot disk image**: Ubuntu 22.04 LTS for NVIDIA® GPUs (CUDA® 12). For details about boot disk images, see [Boot disk images for Compute virtual machines](/compute/storage/boot-disk-images). * **Boot disk size**: 300 GiB SSD. * **Network**: Select the **Public IP address: Auto assign static IP** option. * **Username and SSH key**: Select the public key that you created earlier. In this field, do not use the `root` or `admin` usernames. They are reserved for internal needs and are not allowed to connect to a VM by SSH. 3. Click **Create VM**. The given example assumes that you work with a VM that has a public address, so you can later [connect to this VM by SSH](#connect-to-the-vm). However, if you need an isolated VM, do not assign a public address. To access the VM, you can [set up a WireGuard jump server](/compute/virtual-machines/wireguard) later. This approach enhances security and still provides access to the VM within the same subnet. For more information about creating VMs and managing their network parameters, see [How to create a virtual machine in Nebius AI Cloud](/compute/virtual-machines/manage). 1. Create a boot disk and save its ID to an environment variable: ```bash theme={null} export BOOT_DISK_ID=$(nebius compute disk create \ --name openwebui-disk-1 \ --size-gibibytes 300 \ --type network_ssd \ --source-image-family-image-family ubuntu24.04-cuda13.0 \ --block-size-bytes 4096 \ --format json | jq -r ".metadata.id") ``` The command creates a 300 GiB SSD disk with a 4 KiB block size, and an Ubuntu boot image with pre-installed NVIDIA® GPU drivers. For details about boot disk images, see [Boot disk images for Compute virtual machines](/compute/storage/boot-disk-images). 2. Get the default subnet ID and save it to an environment variable: ```bash theme={null} export SUBNET_ID=$(nebius vpc subnet list \ --format json \ | jq -r ".items[0].metadata.id") ``` 3. Create the VM with one GPU: ```bash theme={null} export USER_DATA=$(jq -Rrs '.' < sudo: ALL=(ALL) NOPASSWD:ALL shell: /bin/bash ssh_authorized_keys: - $(cat ~/.ssh/id_ed25519.pub) EOF ) export VM_ID=$(nebius compute instance create \ --name openwebui \ --resources-platform gpu-h100-sxm \ --resources-preset 1gpu-16vcpu-200gb \ --boot-disk-existing-disk-id "$BOOT_DISK_ID" \ --boot-disk-attach-mode READ_WRITE \ --cloud-init-user-data "$USER_DATA" \ --network-interfaces "[{\"name\": \"default-subnet\", \"subnet_id\": \"$SUBNET_ID\", \"ip_address\": {}, \"public_ip_address\": {}}]" \ --format json | jq -r ".metadata.id") ``` The given example assumes that you work with a VM that has a public address, so you can later [connect to this VM by SSH](#connect-to-the-vm). However, if you need an isolated VM without a public address, remove `"public_ip_address": {}` from the `--network-interfaces` parameter. To access the VM, you can [set up a WireGuard jump server](/compute/virtual-machines/wireguard) later. This approach enhances security and still provides access to the VM within the same subnet. For more information about creating VMs and managing their network parameters, see [How to create a virtual machine in Nebius AI Cloud](/compute/virtual-machines/manage). ## Connect to the VM 1. Get the public IP address of the VM: 1. Open the VM page. 2. In the **Network** block, copy the **Public IPv4** value. Run the following command: ```bash theme={null} export PUBLIC_IP_ADDRESS=$(nebius compute instance get-by-name \ --name openwebui \ --format json \ | jq -r '.status.network_interfaces[0].public_ip_address.address | split("/")[0]') ``` 2. Connect to the VM: ```bash theme={null} ssh @ ``` Specify the received public IP address and the username that you set during the VM creation. ## Create a virtual environment and install the necessary packages To work with Open WebUI, you need a dedicated [virtual environment](https://docs.python.org/3/tutorial/venv.html). It enables you to set up and run the OpenWebUI server in isolation from other software on the VM. To create a virtual environment, use [Miniconda](https://docs.anaconda.com/miniconda/). To configure the environment: 1. Download and install the latest Miniconda version: ```bash theme={null} mkdir -p ~/miniconda3 wget https://repo.anaconda.com/miniconda/Miniconda3-latest-Linux-x86_64.sh -O ~/miniconda3/miniconda.sh bash ~/miniconda3/miniconda.sh -b -u -p ~/miniconda3 rm ~/miniconda3/miniconda.sh ``` 2. Initialize Miniconda: ```bash theme={null} source ~/miniconda3/bin/activate ``` On initialization, Miniconda activates its `base` environment. 3. Create an `OpenWebUI` environment with Python 3.11: ```bash theme={null} conda create -n OpenWebUI python=3.11 conda init bash echo "conda activate OpenWebUI " >> ~/.bashrc source ~/.bashrc ``` This command creates and activates a new environment. 4. Install [Ollama](https://ollama.com/), which provides access to the model: ```bash theme={null} curl -fsSL https://ollama.com/install.sh | sh ``` 5. Install Open WebUI: ```bash theme={null} pip install open-webui ``` ## Start the Open WebUI server 1. Start the server: ```bash theme={null} open-webui serve ``` 2. Open the Open WebUI interface in the browser. To do this, enter the `http://:8080` address in the search bar. 3. In the Open WebUI interface, create an account to work with LLMs locally within the VM. For details on working with Open WebUI, see [their documentation](https://docs.openwebui.com/). If you need to restart the server, use the same command: `open-webui serve`. ## Download the Qwen/Qwen2.5-72B-Instruct model 1. In Open WebUI, click **Select a model**. 2. Paste `qwen2.5:72b` into the search bar. 3. Click **Pull "qwen2.5:72b" from Ollama** and wait for the download to finish. 4. Click **Select a model** again and then choose Qwen/Qwen2.5-72B-Instruct. Now you can chat with the model in the browser. ## Make Open WebUI start automatically With the current configuration, you need to manually start the Open WebUI server every time you connect to your VM. Alternatively, you can configure the server to start up whenever the VM starts. To do this: 1. Create a `systemd` service file for Open WebUI and open the file in an editor: ```bash theme={null} sudo nano /etc/systemd/system/openwebui.service ``` 2. Paste the following contents into the file and save it. Specify the username that you set during the VM creation: ```ini theme={null} [Unit] Description=OpenWebUI Server After=network.target [Service] User= WorkingDirectory=/home// ExecStart=/home//miniconda3/envs/OpenWebUI/bin/open-webui serve Restart=always [Install] WantedBy=multi-user.target ``` 3. To make the new service file recognizable, reload `systemd`: ```bash theme={null} sudo systemctl daemon-reload ``` 4. To start automatically and immediately, enable the `systemd` service: ```bash theme={null} sudo systemctl enable openwebui.service sudo systemctl start openwebui.service ``` 5. Verify that the service is running: ```bash theme={null} sudo systemctl status openwebui.service ``` Whenever you start up your VM in the web console, Open WebUI now automatically launches in the background. You can directly access it in the browser at `http://ip_address:8080` and work with the Qwen/Qwen2.5-72B-Instruct model. # Compute pricing in Nebius AI Cloud Source: https://docs.nebius.com/compute/resources/pricing This article provides detailed pricing for the Compute service in Nebius AI Cloud. ## How charges and prices work Each group of chargeable items in this article has two time units associated with it: * **Billing unit**: The minimum unit of usage for which you can be charged. * **Pricing unit**: The unit of usage for which the prices are shown. Charges for units smaller than the pricing unit are calculated proportionally. > For example, for GPUs on running VMs, the **billing unit** is 1 second, and the **pricing unit** is 1 hour (3600 seconds). For 30 minutes of usage, you will be charged half the hourly price. Prices in US dollars (USD, \$) apply to all customers except for companies from Israel, where prices in Israeli shekels (ILS, ₪) apply instead. All prices are shown without any applicable taxes, including VAT. Due to rounding errors, usage costs shown in the web console and final charges may slightly differ from calculations based on the prices in this article. ## GPU prices from June 1, 2026 Starting June 1, 2026, prices for virtual machines with NVIDIA B300, B200, H200 and H100 GPUs are updated. The article lists prices before and from this date. ## Prices ### Virtual machines (GPUs, vCPUs, RAM) You are charged for computing resources (GPUs, vCPUs, RAM) of running virtual machines (VMs). Computing resources of stopped VMs are not charged (this does not apply to storage volumes; see [Volumes (disks and shared filesystems)](#volumes)). * **Billing unit**: 1 second * **Pricing unit**: 1 hour (3600 seconds) #### NVIDIA® B300 NVLink, gpu-b300-sxm The platform is only available in the `uk-south1` [region](/overview/regions). | **Item — from June 1, 2026** | **Price** | **Per** | | ------------------------------- | --------- | ---------- | | NVIDIA® B300 NVLink | \$7.85 | 1 GPU hour | | Preemptible NVIDIA® B300 NVLink | \$4.30 | 1 GPU hour | | **Item — before June 1, 2026** | **Price** | **Per** | | NVIDIA® B300 NVLink | \$6.10 | 1 GPU hour | | Preemptible NVIDIA® B300 NVLink | \$3.40 | 1 GPU hour | | **Item — from June 1, 2026** | **Price** | **Per** | | ------------------------------- | --------- | ---------- | | NVIDIA® B300 NVLink | ₪24.335 | 1 GPU hour | | Preemptible NVIDIA® B300 NVLink | ₪13.33 | 1 GPU hour | #### NVIDIA® B200 NVLink, gpu-b200-sxm The platform is only available in the `us-central1` [region](/overview/regions). | **Item — from June 1, 2026** | **Price** | **Per** | | ------------------------------- | --------- | ---------- | | NVIDIA® B200 NVLink | \$7.15 | 1 GPU hour | | Preemptible NVIDIA® B200 NVLink | \$3.95 | 1 GPU hour | | **Item — before June 1, 2026** | **Price** | **Per** | | NVIDIA® B200 NVLink | \$5.50 | 1 GPU hour | | Preemptible NVIDIA® B200 NVLink | \$2.90 | 1 GPU hour | | **Item — from June 1, 2026** | **Price** | **Per** | | ------------------------------- | --------- | ---------- | | NVIDIA® B200 NVLink | ₪22.165 | 1 GPU hour | | Preemptible NVIDIA® B200 NVLink | ₪12.245 | 1 GPU hour | | **Item — before June 1, 2026** | **Price** | **Per** | | NVIDIA® B200 NVLink | ₪17.05 | 1 GPU hour | | Preemptible NVIDIA® B200 NVLink | ₪8.99 | 1 GPU hour | #### NVIDIA® B200 NVLink, gpu-b200-sxm-a The platform is only available in the `me-west1` [region](/overview/regions). | **Item — from June 1, 2026** | **Price** | **Per** | | ------------------------------- | --------- | ---------- | | NVIDIA® B200 NVLink | \$7.15 | 1 GPU hour | | Preemptible NVIDIA® B200 NVLink | \$3.95 | 1 GPU hour | | **Item — before June 1, 2026** | **Price** | **Per** | | NVIDIA® B200 NVLink | \$5.50 | 1 GPU hour | | Preemptible NVIDIA® B200 NVLink | \$2.90 | 1 GPU hour | | **Item — from June 1, 2026** | **Price** | **Per** | | ------------------------------- | --------- | ---------- | | NVIDIA® B200 NVLink | ₪22.165 | 1 GPU hour | | Preemptible NVIDIA® B200 NVLink | ₪12.245 | 1 GPU hour | | **Item — before June 1, 2026** | **Price** | **Per** | | NVIDIA® B200 NVLink | ₪17.05 | 1 GPU hour | | Preemptible NVIDIA® B200 NVLink | ₪8.99 | 1 GPU hour | #### NVIDIA® H200 NVLink The platform is available in the `eu-north1`, `eu-north2`\*, `eu-west1` and `us-central1` [regions](/overview/regions). | **Item — from June 1, 2026** | **Price** | **Per** | | ------------------------------- | --------- | ---------- | | NVIDIA® H200 NVLink | \$4.50 | 1 GPU hour | | Preemptible NVIDIA® H200 NVLink | \$2.45 | 1 GPU hour | | **Item — before June 1, 2026** | **Price** | **Per** | | NVIDIA® H200 NVLink | \$3.50 | 1 GPU hour | | Preemptible NVIDIA® H200 NVLink | \$1.45 | 1 GPU hour | | **Item — from June 1, 2026** | **Price** | **Per** | | ------------------------------- | --------- | ---------- | | NVIDIA® H200 NVLink | ₪13.95 | 1 GPU hour | | Preemptible NVIDIA® H200 NVLink | ₪7.595 | 1 GPU hour | | **Item — before June 1, 2026** | **Price** | **Per** | | NVIDIA® H200 NVLink | ₪10.85 | 1 GPU hour | | Preemptible NVIDIA® H200 NVLink | ₪4.495 | 1 GPU hour | #### NVIDIA® H100 NVLink The platform is only available in the `eu-north1` [region](/overview/regions). | **Item — from June 1, 2026** | **Price** | **Per** | | ------------------------------- | --------- | ---------- | | NVIDIA® H100 NVLink | \$3.85 | 1 GPU hour | | Preemptible NVIDIA® H100 NVLink | \$2.15 | 1 GPU hour | | **Item — before June 1, 2026** | **Price** | **Per** | | NVIDIA® H100 NVLink | \$2.95 | 1 GPU hour | | Preemptible NVIDIA® H100 NVLink | \$1.25 | 1 GPU hour | | **Item — from June 1, 2026** | **Price** | **Per** | | ------------------------------- | --------- | ---------- | | NVIDIA® H100 NVLink | ₪11.935 | 1 GPU hour | | Preemptible NVIDIA® H100 NVLink | ₪6.665 | 1 GPU hour | | **Item — before June 1, 2026** | **Price** | **Per** | | NVIDIA® H100 NVLink | ₪9.145 | 1 GPU hour | | Preemptible NVIDIA® H100 NVLink | ₪3.875 | 1 GPU hour | #### NVIDIA® RTX PRO™ 6000 The platform is only available in the `us-central1` [region](/overview/regions). | **Item** | **Price** | **Per** | | --------------------------------- | --------- | ---------- | | NVIDIA® RTX PRO™ 6000 | \$1.80 | 1 GPU hour | | Preemptible NVIDIA® RTX PRO™ 6000 | \$0.95 | 1 GPU hour | | **Item** | **Price** | **Per** | | --------------------------------- | --------- | ---------- | | NVIDIA® RTX PRO™ 6000 | ₪5.58 | 1 GPU hour | | Preemptible NVIDIA® RTX PRO™ 6000 | ₪2.945 | 1 GPU hour | #### NVIDIA® L40S Intel The platform is only available in the `eu-north1` [region](/overview/regions). | **Item** | **Price** | **Per** | | ----------------------------------- | --------- | ---------- | | NVIDIA® L40S Intel. GPU | \$1.35 | 1 GPU hour | | NVIDIA® L40S Intel. CPU | \$0.012 | 1 CPU hour | | NVIDIA® L40S Intel. RAM | \$0.0032 | 1 GiB hour | | Preemptible NVIDIA® L40S Intel. GPU | \$0.65 | 1 GPU hour | | Preemptible NVIDIA® L40S Intel. CPU | \$0.006 | 1 CPU hour | | Preemptible NVIDIA® L40S Intel. RAM | \$0.0016 | 1 GiB hour | | **Item** | **Price** | **Per** | | ----------------------------------- | --------- | ---------- | | NVIDIA® L40S Intel. GPU | ₪4.185 | 1 GPU hour | | NVIDIA® L40S Intel. CPU | ₪0.0372 | 1 CPU hour | | NVIDIA® L40S Intel. RAM | ₪0.00992 | 1 GiB hour | | Preemptible NVIDIA® L40S Intel. GPU | ₪2.015 | 1 GPU hour | | Preemptible NVIDIA® L40S Intel. CPU | ₪0.0186 | 1 CPU hour | | Preemptible NVIDIA® L40S Intel. RAM | ₪0.00496 | 1 GiB hour | #### NVIDIA® L40S AMD The platform is only available for projects in the `eu-north1` [region](/overview/regions). | **Item** | **Price** | **Per** | | --------------------------------- | --------- | ---------- | | NVIDIA® L40S AMD. GPU | \$1.35 | 1 GPU hour | | NVIDIA® L40S AMD. CPU | \$0.01 | 1 CPU hour | | NVIDIA® L40S AMD. RAM | \$0.0032 | 1 GiB hour | | Preemptible NVIDIA® L40S AMD. GPU | \$0.65 | 1 GPU hour | | Preemptible NVIDIA® L40S AMD. CPU | \$0.005 | 1 CPU hour | | Preemptible NVIDIA® L40S AMD. RAM | \$0.0016 | 1 GiB hour | | **Item** | **Price** | **Per** | | --------------------------------- | --------- | ---------- | | NVIDIA® L40S AMD. GPU | ₪4.185 | 1 GPU hour | | NVIDIA® L40S AMD. CPU | ₪0.031 | 1 CPU hour | | NVIDIA® L40S AMD. RAM | ₪0.00992 | 1 GiB hour | | Preemptible NVIDIA® L40S AMD. GPU | ₪2.015 | 1 GPU hour | | Preemptible NVIDIA® L40S AMD. CPU | ₪0.0155 | 1 CPU hour | | Preemptible NVIDIA® L40S AMD. RAM | ₪0.00496 | 1 GiB hour | #### Non-GPU AMD Epyc Genoa The platform is available in all [regions](/overview/regions). | **Item** | **Price** | **Per** | | --------------------------- | --------- | ---------- | | Non-GPU AMD Epyc Genoa. CPU | \$0.012 | 1 CPU hour | | Non-GPU AMD Epyc Genoa. RAM | \$0.0032 | 1 GiB hour | | **Item** | **Price** | **Per** | | --------------------------- | --------- | ---------- | | Non-GPU AMD Epyc Genoa. CPU | ₪0.0372 | 1 CPU hour | | Non-GPU AMD Epyc Genoa. RAM | ₪0.00992 | 1 GiB hour | #### Non-GPU Intel Ice Lake The platform is only available in the `eu-north1` [region](/overview/regions). | **Item** | **Price** | **Per** | | --------------------------- | --------- | ---------- | | Non-GPU Intel Ice Lake. CPU | \$0.012 | 1 CPU hour | | Non-GPU Intel Ice Lake. RAM | \$0.0032 | 1 GiB hour | | **Item** | **Price** | **Per** | | --------------------------- | --------- | ---------- | | Non-GPU Intel Ice Lake. CPU | ₪0.0372 | 1 CPU hour | | Non-GPU Intel Ice Lake. RAM | ₪0.00992 | 1 GiB hour | ### Volumes You are charged for existing volumes (disks, disk snapshots and shared filesystems), regardless of whether they are added to VMs. Charges are based on volume sizes, regardless of how much space is taken up on a volume. * **Billing unit**: 1 byte per 1 second * **Pricing unit**: 1 GiB per 730 hours (230 bytes per 2,628,000 seconds \~ 1 month) #### Disks | **Item** | **Price per 1 GiB per 730 hours** | | ------------------------------- | --------------------------------- | | Network SSD disk | \$0.071 | | Network SSD Non-replicated disk | \$0.053 | | Network SSD IO M3 disk | \$0.118 | | **Item** | **Price per 1 GiB per 730 hours** | | ------------------------------- | --------------------------------- | | Network SSD disk | ₪0.221 | | Network SSD Non-replicated disk | ₪0.164 | | Network SSD IO M3 disk | ₪0.366 | #### Disk snapshots | **Item** | **Price per 1 GiB per 730 hours** | | ------------- | --------------------------------- | | Disk snapshot | \$0.071 | | **Item** | **Price per 1 GiB per 730 hours** | | ------------- | --------------------------------- | | Disk snapshot | ₪0.22 | #### Shared filesystems | **Item** | **Price per 1 GiB per 730 hours** | | --------------------- | --------------------------------- | | Shared Filesystem SSD | \$0.08 | | **Item** | **Price per 1 GiB per 730 hours** | | --------------------- | --------------------------------- | | Shared Filesystem SSD | ₪0.248 | #### Local SSD disks | **Item** | **Price per 1 GiB per 730 hours** | | -------------- | --------------------------------- | | Local SSD disk | \$0.065 | | **Item** | **Price per 1 GiB per 730 hours** | | -------------- | --------------------------------- | | Local SSD disk | ₪0.2015 | Local SSD disks have finite write endurance defined by the manufacturer's Terabytes Written (TBW) rating. Workloads should not write more than the disk's total capacity per day. If a workload writes more data to a local SSD disk in a single day than the disk's total capacity, it exceeds the recommended write-endurance threshold. If you expect your workload to exceed this threshold, [contact support](https://console.nebius.com/support/create-ticket) in advance to discuss capacity planning. # Quotas in Compute Source: https://docs.nebius.com/compute/resources/quotas-limits Compute has quotas on virtual machines (VMs), storage and InfiniBand™ usage. For details on what quotas are and how to manage them, see [Quotas in Nebius AI Cloud](/overview/quotas). ## Virtual machines A VM and its resources count towards the quotas throughout the VM's lifecycle, from its creation to deletion, regardless of whether it is running or stopped. These quotas apply to Compute VMs and also to Managed Service for Soperator and Managed Service for Kubernetes® nodes, which are based on Compute VMs. Compute has different quotas for GPU and non-GPU virtual machines. ### GPU virtual machines The default quota values depend on the [region](/overview/regions) in which you create GPU VMs. Private regions are marked with \*. | Quota name | Default value,
`eu-north1` | Default value,
`eu-west1` | Default value,
`me-west1` | Default value,
`us-central1` | Default value,
`uk-south1` | Default value,
`eu-north2`\* | | ---------------------------------------------------------------------- | ------------------------------- | ------------------------------ | ------------------------------ | --------------------------------- | ------------------------------- | ----------------------------------------------------------------------------- | | [Regular VMs](/compute/virtual-machines/manage) | 12 | 12 | 12 | 12 | 12 | 0 | | [Preemptible VMs](/compute/virtual-machines/preemptible) | 8 | 8 | 8 | 8 | 8 | 0 | | Total number of NVIDIA® B300 GPUs for regular VMs without reservations | *N/A* | *N/A* | *N/A* | *N/A* | 32 | *N/A* | | Total NVIDIA® B200 GPUs for regular VMs without reservations | *N/A* | *N/A* | 0 | 0 | *N/A* | *N/A* | | Total NVIDIA® H200 GPUs for regular VMs without reservations | 32 | 8 | *N/A* | 0 | *N/A* | 0 | | Total NVIDIA® H100 GPUs for regular VMs without reservations | 32 | *N/A* | *N/A* | *N/A* | *N/A* | *N/A* | | Total NVIDIA® RTX PRO™ 6000 GPUs for regular VMs without reservations | *N/A* | *N/A* | *N/A* | 0 | *N/A* | *N/A* | | Total NVIDIA® L40S GPUs for regular VMs without reservations | 2 | *N/A* | *N/A* | *N/A* | *N/A* | *N/A* | ### Non-GPU virtual machines | Quota name | Default value,
`eu-north1`,
`eu-west1`,
`me-west1`,
`uk-south1`,
`us-central1` | Default value,
`eu-north2`\* | | ------------------------------ | ------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------- | | Virtual machines | 12 | 0 | | Total vCPUs across non-GPU VMs | 200 | 0 | ## Storage | Quota name | Default value,
`eu-north1` | Default value,
`eu-west1` | Default value,
`us-central1`,
`me-west1`,
`uk-south1` | Default value,
`eu-north2`\* | | ---------------------------------------------- | ------------------------------- | ------------------------------ | -------------------------------------------------------------------- | ----------------------------------------------------------------------------- | | Total disks across VMs | 32 | 32 | 32 | 0 | | Total SSD storage capacity | 4 TiB | 2 TiB | 5 TiB | 0 | | Total non-replicated SSD storage capacity | 4 TiB | 2 TiB | 5 TiB | 0 | | Total high-performance SSD IO storage capacity | 4 TiB | 2 TiB | 5 TiB | 0 | | Total shared filesystems across VMs | 32 | 32 | 32 | 0 | | Total SSD shared filesystem capacity | 4 TiB | 2 TiB | 5 TiB | 0 | | Total number of images | 0 | 0 | 0 | 0 | | Total storage capacity of all images | 0 | 0 | 0 | 0 | | Total number of disk snapshots | 0 | 0 | 0 | 0 | | Total storage capacity of all disk snapshots | 0 | 0 | 0 | 0 | ## InfiniBand GPU cluster quotas apply to Compute GPU clusters and GPU clusters used by Managed Soperator or Managed Kubernetes. | Quota name | Default value,
`eu-north1`,
`eu-west1`,
`me-west1`,
`us-central1`,
`uk-south1` | Default value,
`eu-north2`\* | | ---------------------- | ------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------- | | Number of GPU clusters | 5 | 0 | ## Network See [Quotas in Virtual Networks](/vpc/resources/quotas-limits). ## Quota usage recommendations Best practices for using VM quotas: * When you create new VMs, calculate your available quotas, even if you plan to keep the VMs mostly in a stopped state. * From time to time, review and delete unused VMs to free up quotas. * If you need to temporarily free up VM resources, delete VMs instead of just stopping them. *** *InfiniBand and InfiniBand Trade Association are registered trademarks of the InfiniBand Trade Association.* # How to enable automatic security updates Source: https://docs.nebius.com/compute/storage/automatic-updates The Ubuntu [images](/compute/storage/boot-disk-images) used on boot disks of VMs include the `unattended-upgrades` package that can install security updates automatically. However, unexpected updates might break running GPU workloads. For this reason, unattended upgrades are disabled by default. We recommend that you check the compatibility of new library versions on a test VM, and then apply the updates manually to all running GPU nodes. If you do need constant security updates, you can enable `unattended-upgrades`. ## For an existing VM 1. [Connect](/compute/virtual-machines/connect) to the VM. 2. Check that the updates are enabled in the configuration: ```bash theme={null} sudo nano /etc/apt/apt.conf.d/20auto-upgrades ``` The following values should be equal to 1. If they are set to 0, change them to 1: ```bash theme={null} APT::Periodic::Update-Package-Lists "1"; APT::Periodic::Unattended-Upgrade "1"; ``` 3. Start the upgrade services: ```bash theme={null} sudo systemctl unmask apt-daily.service apt-daily-upgrade.service sudo systemctl enable apt-daily.timer apt-daily-upgrade.timer sudo systemctl start apt-daily.timer apt-daily-upgrade.timer ``` 4. Check the service status: ```bash theme={null} systemctl status apt-daily.timer apt-daily-upgrade.timer ``` Output for active updates should look like the following: ```bash theme={null} ● apt-daily.timer - Daily apt download activities Loaded: loaded (/usr/lib/systemd/system/apt-daily.timer; enabled; preset: enabled) Active: active (waiting) since Wed 2025-10-01 14:59:29 UTC; 7s ago Trigger: Thu 2025-10-02 04:54:23 UTC; 13h left Triggers: ● apt-daily.service ● apt-daily-upgrade.timer - Daily apt upgrade and clean activities Loaded: loaded (/usr/lib/systemd/system/apt-daily-upgrade.timer; enabled; preset: enabled) Active: active (waiting) since Wed 2025-10-01 14:59:29 UTC; 7s ago Trigger: Thu 2025-10-02 06:10:29 UTC; 15h left Triggers: ● apt-daily-upgrade.service ``` ## During VM creation When you create a new VM, you can enable unattended upgrades for the VM in the [user data configuration](/compute/virtual-machines/manage#optional-create-a-user-data-configuration). On the VM creation page in to the **User data** section, enable the custom cloud-init configuration. The window below contains the code that specifies users who can connect to the VM. Add the following code to enable updates: ```yaml theme={null} users: - name: $USER sudo: ALL=(ALL) NOPASSWD:ALL shell: /bin/bash ssh_authorized_keys: - $(cat ~/.ssh/id_ed25519.pub) package_update: true packages: - unattended-upgrades write_files: - path: /etc/apt/apt.conf.d/20auto-upgrades permissions: '0644' content: | APT::Periodic::Update-Package-Lists "1"; APT::Periodic::Unattended-Upgrade "1"; runcmd: - systemctl unmask apt-daily.service apt-daily-upgrade.service - systemctl enable --now apt-daily.timer apt-daily-upgrade.timer - systemctl restart unattended-upgrades ``` Create a configuration in the [cloud-init](https://cloudinit.readthedocs.io/en/latest/explanation/about-cloud-config.html) format. Add the following code to enable updates for users who can connect to the VM: ```bash theme={null} export USER_DATA=$(jq -Rrs '.' < Create a configuration in the [cloud-init](https://cloudinit.readthedocs.io/en/latest/explanation/about-cloud-config.html) format. Add the following code to enable updates for users who can connect to the VM: ```bash theme={null} export USER_DATA=$(jq -Rrs '.' < # Boot disk images for Compute virtual machines Source: https://docs.nebius.com/compute/storage/boot-disk-images When you [create a boot disk](/compute/storage/manage#how-to-create-a-disk) for a virtual machine, you need to choose an image for the disk. Compute supports two types of boot disk images: * *Public images* are provided and supported by the platform by default. * *Custom images* are images that you [create](/compute/storage/custom-disk-images) yourself with customized software and architecture. Nebius AI Cloud provides public boot disk images for GPU and non-GPU VMs. ## Compatibility types The image that you choose for a VM must be compatible with the VM's [platform](/compute/virtual-machines/types). There are different types of compatibility: * *Recommended images* ensure stable VM performance. * *Alternative images* are compatible with the platform but do not guarantee stable performance. ## Image family Each image has a family. When you use the [Nebius AI Cloud CLI](/cli/reference/compute/disk/create) or the [provider for Terraform](/terraform-provider/reference/resources/compute_v1_disk) to create a boot disk, you need to specify its family. For example, the image Ubuntu 24.04 LTS for NVIDIA® GPUs (CUDA® 13) has the family `ubuntu24.04-cuda13.0`. ## How to get a list of available public images To get a list of public boot disk images available in a [region](/overview/regions), run: ```bash theme={null} nebius compute image list-public --region ``` The command returns the public images available in the specified region, including image families and other metadata. To determine which VM platforms are compatible with a public image, check the following parameters in the output: * `recommended_platforms`: Platforms for which the image is recommended. * `unsupported_platforms`: Platforms for which the image is not supported (with reasons, if available). Availability of images and their compatibility with platforms differ by region. ## Images for GPU VMs For VMs with GPUs, create boot disks from the following images: * Ubuntu 24.04 LTS for NVIDIA® GPUs (CUDA® 12), `ubuntu24.04-cuda12` * Ubuntu 24.04 LTS for NVIDIA® GPUs (CUDA® 13), `ubuntu24.04-cuda13.0` The `ubuntu22.04-cuda12` image family is deprecated. Existing disks created from images in this family remain available, but creating new disks from this image family isn't supported. Migrate to newer images. The following boot disk images are compatible with GPU VMs: | VM platform | [Recommended images](#compatibility-types) | [Alternative images](#compatibility-types) | | -------------------------------------------------------------- | ------------------------------------------------------------------- | ----------------------------------------------------------------- | | NVIDIA® B300 NVLink with Intel Granite Rapids `gpu-b300-sxm` | Ubuntu 24.04 LTS for NVIDIA® GPUs (CUDA® 13) `ubuntu24.04-cuda13.0` | *None* | | NVIDIA® B200 NVLink with Intel Emerald Rapids `gpu-b200-sxm` | Ubuntu 24.04 LTS for NVIDIA® GPUs (CUDA® 13) `ubuntu24.04-cuda13.0` | *None* | | NVIDIA® B200 NVLink with Intel Emerald Rapids `gpu-b200-sxm-a` | Ubuntu 24.04 LTS for NVIDIA® GPUs (CUDA® 13) `ubuntu24.04-cuda13.0` | *None* | | NVIDIA® H200 NVLink with Intel Sapphire Rapids `gpu-h200-sxm` | Ubuntu 24.04 LTS for NVIDIA® GPUs (CUDA® 13) `ubuntu24.04-cuda13.0` | Ubuntu 24.04 LTS for NVIDIA® GPUs (CUDA® 12) `ubuntu24.04-cuda12` | | NVIDIA® H100 NVLink with Intel Sapphire Rapids `gpu-h100-sxm` | Ubuntu 24.04 LTS for NVIDIA® GPUs (CUDA® 13) `ubuntu24.04-cuda13.0` | Ubuntu 24.04 LTS for NVIDIA® GPUs (CUDA® 12) `ubuntu24.04-cuda12` | | NVIDIA® RTX PRO™ 6000 with Intel Granite Rapids `gpu-rtx6000` | Ubuntu 24.04 LTS for NVIDIA® GPUs (CUDA® 13) `ubuntu24.04-cuda13.0` | *None* | | NVIDIA® L40S PCIe with Intel Ice Lake `gpu-l40s-a` | Ubuntu 24.04 LTS for NVIDIA® GPUs (CUDA® 13) `ubuntu24.04-cuda13.0` | Ubuntu 24.04 LTS for NVIDIA® GPUs (CUDA® 12) `ubuntu24.04-cuda12` | | NVIDIA® L40S PCIe with AMD Epyc Genoa `gpu-l40s-d` | Ubuntu 24.04 LTS for NVIDIA® GPUs (CUDA® 13) `ubuntu24.04-cuda13.0` | Ubuntu 24.04 LTS for NVIDIA® GPUs (CUDA® 12) `ubuntu24.04-cuda12` | The `1gpu-20vcpu-224gb` preset for NVIDIA® B200 platforms (`gpu-b200-sxm` and `gpu-b200-sxm-a`) requires [driver](#gpu-drivers-and-other-components) version 580.x or newer. Earlier driver versions are not supported. ### GPU drivers and other components The boot disk images for VMs with GPUs include the following components:
Component `ubuntu24.04-cuda12` `ubuntu24.04-cuda13.0`
Drivers preset `cuda12.8` `cuda13.0`
CUDA Toolkit 12.8 ([release notes](https://docs.nvidia.com/cuda/archive/12.8.0/)) 13.0 ([release notes](https://docs.nvidia.com/cuda/archive/13.0.0/))
NVIDIA Data Center GPU Driver 570.x 580.x
Linux kernel 6.11, NVIDIA HWE 6.11, NVIDIA HWE
Networking package [NVIDIA DOCA](https://developer.nvidia.com/networking/doca) 2.9.2 ([release notes](https://docs.nvidia.com/doca/archive/2-9-2-lts-ovs-update/doca+release+notes/index.html)) NVIDIA DOCA 3.1.0 ([release notes](https://docs.nvidia.com/doca/archive/3-1-0/doca+release+notes/index.html))
Other components
  • [NVIDIA Collective Communications Library](https://developer.nvidia.com/nccl) (NCCL)
  • [NVIDIA Container Toolkit](https://docs.nvidia.com/datacenter/cloud-native/container-toolkit/latest/index.html)
  • [NVIDIA Data Center GPU Manager](https://developer.nvidia.com/dcgm) (DCGM)
  • [Nebius AI Cloud monitoring agent](/observability/agents/monitoring-agent)
## Images for non-GPU VMs For VMs without GPUs, create boot disks from the Ubuntu 24.04 LTS, `ubuntu24.04-driverless` image without GPU drivers and components. The images without drivers are also compatible with GPU VMs, but you need to install the drivers and components manually. We recommend using the [dedicated images for GPU VMs](#images-for-gpu-vms). The following boot disk images are compatible with non-GPU VMs: | VM platform | [Recommended images](#compatibility-types) | [Alternative images](#compatibility-types) | | ------------------------------- | ------------------------------------------ | ------------------------------------------ | | Non-GPU AMD EPYC Genoa `cpu-d3` | Ubuntu 24.04 LTS `ubuntu24.04-driverless` | None | | Non-GPU Intel Ice Lake `cpu-e2` | Ubuntu 24.04 LTS `ubuntu24.04-driverless` | None | The `ubuntu22.04-driverless` image family is deprecated. Existing disks created from images in this family remain available, but creating new disks from this image family isn't supported. Migrate to newer images. ## Security updates Automatic security updates are disabled by default. We recommend that you check the compatibility of new library versions on a test VM, and then apply the updates manually to all running GPU nodes. If you do need automatic updates, you can [enable](/compute/storage/automatic-updates) them. *** *InfiniBand and InfiniBand Trade Association are registered trademarks of the InfiniBand Trade Association.* # Creating custom boot disk images Source: https://docs.nebius.com/compute/storage/custom-disk-images *Custom images* allow you to quickly [create virtual machines (VMs)](#how-to-create-a-vm-from-a-custom-image) or boot disks with all the necessary software, OS and configuration, which can greatly reduce infrastructure deployment time and ensure consistency across environments. You can [create](#how-to-create-a-custom-boot-disk-image) and [edit or delete](#how-to-edit-or-delete-a-custom-boot-disk-image) custom [boot disk images](/compute/storage/boot-disk-images) in the web console or by using the CLI. Alternatively, you can create custom boot disk images by using [Packer with the Nebius plug-in](/compute/storage/packer). ## Before you start 1. Make sure that you have enough quotas for images (**Number of images** and **Total storage capacity of all images**). You can view quotas and request changes on the [Administration → Limits → Quotas](https://console.nebius.com/limits/quotas) page of the web console. 2. Prepare the source from which the image inherits configuration and architecture. Choose one of the following types of sources: * Boot disk. [Create a VM](/compute/virtual-machines/manage#create-a-vm), [connect to it](/compute/virtual-machines/connect) and install the software that the image should inherit. The image will be based on the boot disk of this VM and will include the installed software. * Disk snapshot. [Create a snapshot](/compute/storage/disk-snapshots#how-to-create-a-snapshot) from a boot disk and reuse this snapshot for the image. * File with the ready image. [Upload an image file to a bucket](/object-storage/objects/upload-download#upload-a-single-file) in Object Storage and use this file to create the image. ## How to create a custom boot disk image 1. In the [web console](https://console.nebius.com), go to **Storage** → **Disks**. 2. Click **Create resource** and then select **Image**. 3. In the window that opens, specify the name of your image. 4. Select the image source: * **Disk**: Create an image from a disk. Specify the following parameters: * **Project of source disk**: Project that the source disk of your image belongs to. * **Source disk**: Disk used as the source for your image. The image will retain the basic architecture, size and installed software of the source disk. You cannot create images from disks that are attached to a VM that is currently running. Stop the VM before attempting to create an image. * **Snapshot**: Create an image from a disk snapshot. Select the snapshot in the **Source snapshot** field. * **Object Storage file**: Import an image from a bucket. Specify the path to the file that you uploaded to the bucket. For example, `s3://nebius-bucket-test/my-image-file.qcow2`. You can copy and paste this value. To copy it, go to the bucket page. In the line of the uploaded image file, click  → **Copy key**. For information about requirements to the image file, see [Importing your own image into Compute](/compute/storage/import-image#prerequisites). 5. (Optional) Specify the image family. It represents a new or existing label used to group your custom images into a family. If you create a VM or a boot disk from this image family, you will use the latest image in the family. 6. (Optional) Specify the image description. 7. (Optional) Under **Advanced settings**, specify: * **Image family description**: Description of the family that your new image belongs to (if you specified one). * **Recommended platforms**: Comma-separated list of compatible [platforms](/compute/virtual-machines/types) that your image will use by default. * **Unsupported platforms**: Comma-separated list of platforms that your image architecture is *not* compatible with. Must be in the `=` format. For example, `gpu-l40s-d=not supported`. 8. Click **Create image**. The new image will appear on the **Images** tab in **Storage** → **Disks**. 1. If the source disk for your image is attached to a VM that is currently running, stop it: ```bash theme={null} nebius compute instance stop --id ``` To get the VM ID, run nebius compute instance list. 2. Create an image: ```bash theme={null} nebius compute image create \ --name \ --source-disk-id \ --parent-id \ --source-disk-snapshot-id \ --source-storage-bucket-name \ --source-storage-object-name \ --image-family \ --description \ --image-family-human-readable \ --recommended-platforms ",,..." \ --unsupported-platforms "=" ``` The command includes the following parameters: * `--name`: Name of your image. * Image sources. Use one of the following: * `--source-disk-id`: ID of the source disk that you want to create an image from. Use together with `--parent-id`: ID of the project that the source disk belongs to. To get both `--parent-id` and `--source-disk-id`, run `nebius compute disk list`. * `--source-disk-snapshot-id`: ID of the [disk snapshot](/compute/storage/disk-snapshots) that you want to create an image from. To get the snapshot ID, run `nebius compute disk-snapshot list`. * `--source-storage-bucket-name` and `--source-storage-object-name`: Bucket and object that contain the source image. You can import an image from a file that meets certain [requirements](/compute/storage/import-image#prerequisites). To do so, upload this file to a bucket. Then, specify the name of this bucket in the `--source-storage-bucket-name` parameter and the name of the file in the `--source-storage-object-name` parameter. ```bash theme={null} nebius compute image create \ --name \ --source-storage-bucket-name \ --source-storage-object-name ``` * `--image-family` (optional): New or existing label used to group your custom images into a family. If you create a VM or a boot disk from this image family, you will use the latest image in the family. * `--description` (optional): Description of your image. * `--image-family-human-readable` (optional): Description of the family that your new image belongs to (if you specified one). * `--recommended-platforms` (optional): Comma-separated list of compatible [platforms](/compute/virtual-machines/types) that your image will use by default. * `--unsupported-platforms` (optional): Comma-separated list of platforms that your image architecture is *not* compatible with. Must be in the `=` format. For example, `gpu-l40s-d=not supported`. ## How to edit or delete a custom boot disk image 1. In the [web console](https://console.nebius.com), go to **Storage** → **Disks**. 2. Switch to the **Images** tab and open the image you want to access. The **Image overview** tab shows detailed information about the image and the source disk that it's based on. 3. On the image page, switch to the **Settings** tab. 4. Update the image name or click **Delete image** to delete it. * To check the status of your image, run: ```bash theme={null} nebius compute image get computeimage-e*** ``` To get the image ID, run nebius compute image list. * To edit your image (for example, rename it), run: ```bash theme={null} nebius compute image update computeimage-e*** ``` For more information about the command parameters, see the [command reference](/cli/reference/compute/image/update). * To delete your image, run: ```bash theme={null} nebius compute image delete computeimage-e*** ``` ## How to create a VM from a custom image After your custom boot disk image is ready, you can deploy a VM from it or create a boot disk based on this image. To create a VM from a custom image: 1. In the [web console](https://console.nebius.com), go to **Storage** → **Disks** → **Images**. 2. Next to the image, click  → **Create virtual machine**. 3. [Configure and create the VM](/compute/virtual-machines/manage#create-a-vm). You can also select a custom image on the VM creation page. To do that, click in the **Boot disk** section and select your custom image or image family in **Image configuration**. 1. Create a boot disk based on a custom image: ```bash theme={null} nebius compute disk create \ --name \ --type network_ \ --size-gibibytes \ --block-size-bytes \ --source-image-id computeimage-*** ``` To get the image ID, run nebius compute image list. 2. [Create a VM](/compute/virtual-machines/manage#create-a-vm) with the new disk. Use the ID of the boot disk created earlier with the `--boot-disk-existing-disk-id` parameter. # How to detach additional volumes from virtual machines Source: https://docs.nebius.com/compute/storage/detach-volume You can detach a [secondary disk](/compute/storage/types#disks) or a [shared filesystem](/compute/storage/types#shared-filesystems) from a VM. You cannot detach a boot disk. ## Steps ### Get the disk's device ID or the filesystem's mount tag 1. In the sidebar, go to  **Storage** → **Disks** or  **Storage** → **Shared filesystems**. 2. Copy the device ID from the list of disks or the mount tag from the list of filesystems. Get the VM's specification: ```bash theme={null} nebius compute instance get ``` Alternatively, list all VMs: ```bash theme={null} nebius compute instance list ``` In the output, you can find device IDs of disks and mount tags of filesystems in `.spec.secondary_disks[].device_id` and `.spec.filesystems[].mount_tag`, respectively: ```yaml theme={null} spec: secondary_disks: - attach_mode: READ_WRITE existing_disk: id: computedisk-*** device_id: newdisk filesystems: - attach_mode: READ_WRITE existing_filesystem: id: computefilesystem-*** mount_tag: shared-fs ``` ### Make sure that the VM does not mount the volume when the VM restarts 1. [Connect to the VM over SSH](/compute/virtual-machines/connect#connect-to-the-vm-by-using-ssh). 2. Switch to the `root` user: ```bash theme={null} sudo su - ``` 3. If you want to detach a secondary disk, get its UUID: ```bash theme={null} blkid /dev/disk/by-id/virtio-disk-0-part1 -o export | grep "^UUID" ``` In this example, we assume that you have named the device `disk-0`; for disks, all device IDs are prefixed with `virtio-`. 4. Open `/etc/fstab` with your preferred text editor, for example, `nano /etc/fstab`, and delete the lines that refer to the volumes: * The line for a disk should start with its UUID: ```text theme={null} UUID= /mnt/disk-0 ext4 defaults,nofail 0 2 ``` * The line for a filesystem should start with the filesystem's mount tag from the VM specification: ```text theme={null} filesystem-0 /mnt/fs virtiofs rw,nofail 0 0 ``` In this example, the filesystem has the mount tag `filesystem-0` and is mounted at `/mnt/fs`. 5. Disconnect from the VM. ### Remove the volume from the VM's specification 1. In the sidebar, go to  **Compute** → **Virtual machines**. 2. Open the page of the required VM. 3. Click  **Stop VM** and then confirm it. You can detach a disk from a running VM, but this can cause data loss or corruption. 4. After the VM's status becomes `Stopped`, switch to the **Disks** or **Filesystems** tab. 5. Next to the disk or filesystem, click  → **Detach**. 6. After the volume is detached, click  **Start VM** and then confirm it. 1. Stop the VM: ```bash theme={null} nebius compute instance stop --id ``` You can detach a disk from a running VM, but this can cause data loss or corruption. 2. Start editing the VM specification: ```bash theme={null} nebius compute instance edit ``` 3. In the text editor that opens, remove the disk or filesystem from the `.spec.secondary_disks` or `.spec.filesystems` list, respectively. If, after that, a list becomes empty, remove it entirely. For example: ```diff theme={null} spec: boot_disk: attach_mode: READ_WRITE device_id: "" existing_disk: id: computedisk-*** - secondary_disks: - - attach_mode: READ_WRITE - existing_disk: - id: computedisk-*** - device_id: newdisk gpu_cluster: ... ``` 4. After making the changes, save the file. The CLI updates the VM automatically. 5. Start the VM: ```bash theme={null} nebius compute instance start --id ``` You can [attach and mount](/compute/storage/use) different additional volumes to the VM later. # Managing disk snapshots in Compute Source: https://docs.nebius.com/compute/storage/disk-snapshots A *disk snapshot* captures a point-in-time copy of a disk. This is an instant disk backup that allows you to: * Clone and recover a certain state of the disk. * Eliminate data loss risks. * Prevent accidental deletion, corruption and security incidents. * Make a copy of a disk before risky operations, such as software upgrades, patches or configuration changes, so you can roll back in case of issues. * Fulfill compliance requirements for immutable system versions, if applicable. To clone a disk state, [create a snapshot](#how-to-create-a-snapshot). To restore a disk state, [create a new disk from a snapshot](#how-to-create-a-disk-from-a-snapshot). Snapshots support both boot and additional disks. They also support all [disk types](/compute/storage/types#disk-types): SSD, SSD Non-replicated and SSD IO M3. Every snapshot is only available in the project where it was created. Therefore, you can only work with snapshots and disks within the project. Nebius AI Cloud charges for a complete copy of a disk and applies separate pricing for snapshots. For more information, see [Compute pricing](/compute/resources/pricing#disk-snapshots). ## Prerequisites Make sure you are in a [group](/iam/authorization/groups/index) that has at least the `editor` role within your tenant or project; for example, the default `editors` group. You can check this in the [Administration → IAM](https://console.nebius.com/iam) section of the web console. ## How to create a snapshot To create a snapshot, you don't need to stop a virtual machine. 1. In the sidebar, go to  **Storage** → **Disks**. 2. In the list of disks, find the disk that you want to create a snapshot for. 3. In the line of the required disk, click  → **Create snapshot**. 4. In the window that opens, specify the name and optionally the description of the snapshot. The ID of the selected disk is prefilled in the **Source disk** field. 5. Click **Create snapshot**. Once you create a snapshot, it appears on the disk page. There, you can find all snapshots created for a given disk. Run the following command: ```bash theme={null} nebius compute disk-snapshot create \ --name \ --description \ --source-disk-id ``` The command contains the following parameters: * `--name`: Snapshot name. * `--description` (optional): Snapshot description. * `--source-disk-id`: ID of the disk that you want to create a snapshot for. To get the disk ID, run `nebius compute disk list`. ## How to create a disk from a snapshot After you [prepare a snapshot](#how-to-create-a-snapshot), you can create a disk based on this snapshot. Thus, you restore the needed disk state with data integrity verified. To create a disk from a snapshot: 1. In the sidebar, go to  **Storage** → **Disks** → **Snapshots**. 2. In the line of the required snapshot, click  → **Create disk**. 3. On the disk creation page that opens, check the **Disk source type** and **Snapshot** fields. They are prefilled: * **Disk source type**: Snapshot. * **Snapshot**: ID of the selected snapshot. 4. Set other needed [fields for the disk](/compute/storage/manage#how-to-create-a-disk) and click **Create disk**. Run the following command: ```bash theme={null} nebius compute disk create \ --name \ --type network_ \ --size-gibibytes \ --block-size-bytes \ --source-snapshot-id ``` To get the snapshot ID, run `nebius compute disk-snapshot list`. After you create the disk, you can [create a virtual machine](/compute/virtual-machines/manage#create-a-vm) with it. ## How to update a snapshot In the web console, you can only change the snapshot name. In the CLI, you can change the snapshot name and description. 1. In the sidebar, go to  **Storage** → **Disks** → **Snapshots**. 2. In the line of the required snapshot, click  → **Settings**. 3. On the page of the snapshot settings that opens, update the snapshot name and click **Save changes**. Run the following command: ```bash theme={null} nebius compute disk-snapshot update \ --name \ --description \ --source-disk-id ``` In the command, specify the ID of the disk that you want to create a snapshot for. To get the disk ID, run `nebius compute disk list`. ## How to delete a snapshot 1. In the sidebar, go to  **Storage** → **Disks** → **Snapshots**. 2. In the line of the required snapshot, click  → **Delete**. 3. In the window that opens, confirm the deletion. Run the following command: ```bash theme={null} nebius compute disk-snapshot delete ``` To get the snapshot ID, run `nebius compute disk-snapshot list`. # Exporting data from Compute disks and shared filesystems Source: https://docs.nebius.com/compute/storage/export You can export data that you store on [Compute volumes](/compute/storage/types) (boot disks, additional disks and shared filesystems) to local or virtual machines: 1. Check whether the disk or filesystem is used on any VMs: 1. In the [web console](https://console.nebius.com), go to **Storage** → **Disks** or **Storage** → **Shared filesystems**. 2. Click on the volume. 3. Under **General**, check the **Virtual machine** value. It lists the VMs that use the volume. * For a disk, run nebius compute disk list or nebius compute disk get \. If the disk is used on a VM, the output contains the VM's ID in the `.status.read_write_attachment` field: ```yaml theme={null} status: read_write_attachment: computeinstance-e00*** ``` For more details about the commands, see the references for [nebius compute disk list](/cli/reference/compute/disk/list) and [nebius compute disk get](/cli/reference/compute/disk/get). * For a filesystem, run nebius compute filesystem list or nebius compute filesystem get \. If the filesystem is used on any VMs, the output lists their IDs in the `.status.read_write_attachments` field: ```yaml theme={null} status: read_write_attachments: - computeinstance-e00*** - computeinstance-e00*** ``` For more details about the commands, see the references for [nebius compute filesystem list](/cli/reference/compute/filesystem/list) and [nebius compute filesystem get](/cli/reference/compute/filesystem/get). 2. If the disk or filesystem is not used on any VM, [attach and mount it to a VM](/compute/storage/use). 3. Check that you can [connect to the VM over SSH](/compute/virtual-machines/connect). * If the VM does not have a public IP address, you have the following options: * Connect to the VM's private address from another VM in the same [network](/vpc/overview#network). * Run nebius compute instance update with the `--network-interfaces` parameter to add a public address to the VM. For the command reference, see [nebius compute instance update](/cli/reference/compute/instance/update). * Create another VM with a public address and add the volume to it. For details and examples, see [How to create a virtual machine in Nebius AI Cloud](/compute/virtual-machines/manage). A disk can be attached to only one running VM at a time; shared filesystems can be used by several VMs at once. To add a disk to a new VM, [detach the disk](/compute/storage/detach-volume) from the original VM if it's a secondary disk, or [attach it to another VM for troubleshooting](/compute/virtual-machines/inspect-boot-disk) if it's the boot disk. * If you have not created this VM, ask its owner to perform the following steps themselves or add you to the VM as a user. * For other connection issues, [contact support](https://console.nebius.com/support/create-ticket). 4. On your local machine, run a tool for copying files, for example, `rsync` or `scp`: ```bash theme={null} rsync @: ``` > For example, if a VM has the public IP address `195.242.11.11` and you work with it as `alice`, run the following command to recursively copy the contents of your home directory: > > ```bash theme={null} > rsync -r alice@195.242.11.11:/home/alice ~/vm-home > ``` For more `rsync` details and parameters, run `man rsync`. ```bash theme={null} scp @: ``` > For example, if a VM has the public IP address `195.242.11.11` and you work with it as `alice`, run the following command to recursively copy the contents of your home directory: > > ```bash theme={null} > scp -r alice@195.242.11.11:/home/alice ~/vm-home > ``` For more `scp` details and parameters, see its [manpage](https://man.openbsd.org/scp.1) or run `man scp`. # Recommendations for configuring custom images in Compute Source: https://docs.nebius.com/compute/storage/image-recommendations If you work with [custom images](/compute/storage/custom-disk-images), we recommend optimizing them so your boot disks and virtual machines (VMs) work with higher productivity and speed. When you create a VM based on a custom image, this VM doesn't include some of the settings that a regular VM based on a public image includes. You can add these settings to your custom-image VM and optimize it. The additional settings aren't required for every custom image, but we recommend them for at least production-oriented images unless you have workload-specific reasons for not using these settings. ## Install the monitoring agent by Nebius AI Cloud The [monitoring agent](/observability/agents/monitoring-agent) is installed by default on VMs with public images. If you use a custom image, install the agent to collect and view [metrics for the VM](/compute/monitoring/virtual-machines). To install the monitoring agent, [connect to the VM](/compute/virtual-machines/connect#connect-to-the-vm-by-using-ssh) and then run the following commands: ```bash theme={null} sudo curl https://dr.nebius.cloud/public.gpg -o /etc/apt/keyrings/nebius-public.gpg.pub echo deb [signed-by=/etc/apt/keyrings/nebius-public.gpg.pub] https://dr.nebius.cloud/ stable main | sudo tee /etc/apt/sources.list.d/nebius-public.list sudo apt-get update sudo apt-get install -y nebius-observability-agent nebius-observability-agent-updater ``` ## Collect serial logs To collect and view [serial logs](/compute/monitoring/serial-logs) of a VM on a custom image, configure the VM's [GRUB](https://en.wikipedia.org/wiki/GNU_GRUB) to initialize and use a serial port. GRUB is a boot loader package that boots an operating system and kernel configuration. To configure GRUB for Ubuntu-based disk images: 1. [Connect to the VM](/compute/virtual-machines/connect#connect-to-the-vm-by-using-ssh). 2. In the `/etc/default/grub` file, add the following line: ```text theme={null} GRUB_CMDLINE_LINUX="console=tty1 console=ttyS0" ``` 3. Update GRUB: ```bash theme={null} update-grub ``` 4. Reboot the VM: disconnect from it, and [stop and start it](/compute/virtual-machines/stop-start#how-to-stop-and-start-vms-manually). ## Change sysctl settings Apply the recommended `sysctl` settings to improve the networking and kernel characteristics of the VM. To do so, connect to the VM and update the following settings in two files: * File `/etc/sysctl.d/30-network.conf` ```text theme={null} # Decrease default tcp keepalive time net.ipv4.tcp_keepalive_time = 120 net.ipv4.tcp_keepalive_intvl = 60 net.ipv4.tcp_keepalive_probes = 4 # Make conntrack more liberal to tcp out of window packets to prevent # spurious connection resets when masquerading is in use net.netfilter.nf_conntrack_tcp_be_liberal = 1 ``` * File `/etc/sysctl.d/90-kernel.conf` ```text theme={null} kernel.panic = 10 kernel.printk = 7 4 1 7 ``` ## Adjust the virtiofs settings To speed up reading from volumes and writing to them, adjust the `virtiofs` settings. Connect to the VM and run the Bash script below. The script increases the `read_ahead_kb` value to improve the performance of the VM volumes. ```bash theme={null} #!/usr/bin/env bash set -euo pipefail install -d /usr/local/bin install -d /etc/udev/rules.d cat > /usr/local/bin/tune_virtiofs_bdi.sh <<'EOF' #!/usr/bin/env bash kernel="${1:-}" while read -r dev on mp type fs opts; do dev=$(/bin/mountpoint -d "$mp") if [[ "$fs" == "virtiofs" ]]; then if [[ "$kernel" == "$dev" ]]; then exit 0 fi fi done < <(mount | grep virtiofs) exit 1 EOF chmod +x /usr/local/bin/tune_virtiofs_bdi.sh cat > /etc/udev/rules.d/99-virtiofs.rules <<'EOF' SUBSYSTEM=="bdi", ACTION=="add", PROGRAM="/usr/local/bin/tune_virtiofs_bdi.sh $kernel", ATTR{read_ahead_kb}="8192" EOF ``` ## Enable failure reporting by using pvpanic The `pvpanic` tool allows the guest OS kernel to report panic and crash events to the hypervisor. This helps with failure detection and troubleshooting. To start using `pvpanic` on Ubuntu, connect to the VM and install the package: ```bash theme={null} sudo apt-get install -y linux-image-generic ``` # Importing your own image into Compute Source: https://docs.nebius.com/compute/storage/import-image You can import an image file into Nebius AI Cloud, and create boot disks and virtual machines (VMs) based on your custom image. To make an import, upload an image file to a bucket in Object Storage and create an image in Compute. ## Prerequisites 1. Make sure you are in a [group](/iam/authorization/groups/index) that has at least the `editor` role within your tenant or project; for example, the default `editors` group. You can check this in the [Administration → IAM](https://console.nebius.com/iam) section of the web console. 2. Prepare an image that meets the following requirements: * BIOS mode * AMD64 or ARM64 architecture * `.vmdk`, `.vhd`, `.raw` or `.qcow2` format for the image file Only these requirements are supported. ## How to import an image and create a boot disk and a VM 1. [Create an Object Storage bucket](/object-storage/buckets/manage#how-to-create-buckets). The bucket, image and VM should be in the same region. 2. [Upload](/object-storage/objects/upload-download#upload-a-single-file) your image file to this bucket. 3. Create an image based on the uploaded file: 1. Copy the key of the file object: 1. In the [web console](https://console.nebius.com), go to  **Storage** → **Object Storage**. 2. Open the bucket page. 3. In the line of the uploaded object, click  → **Copy key**. 2. Create the image in Nebius AI Cloud: 1. In the web console, go to  **Storage** → **Disks**. 2. Click **Create resource** → **Image**. 3. In the window that opens, specify the name of your image. 4. In the **Source** field, select **Object Storage file**. 5. In the **Object Storage file** field, specify the copied object key. The value must meet the `s3:///` format. For example, `s3://nebius-bucket-test/my-image-file.qcow2`. 6. Click **Create image**. The new image appears on the **Images** tab in  **Storage** → **Disks**. ```bash theme={null} nebius compute image create \ --name \ --source-storage-bucket-name \ --source-storage-object-name ``` For example, if the object of the image file has the `s3://nebius-bucket-test/my-image-file.qcow2` key: * `--source-storage-bucket-name` should be `nebius-bucket-test` * `--source-storage-object-name` should be `my-image-file.qcow2` By default, the AMD64 architecture is used for the image. If you want to use ARM64, add the `--cpu-architecture arm64` parameter to the command above. 4. When the image is ready, [create a boot disk](/compute/storage/manage#how-to-create-a-disk) with it. 5. [Create a VM](/compute/virtual-machines/manage#create-a-vm) with the new boot disk. 6. (Optional) If you don't need the image file in the bucket, delete it. The image in Compute won't use it anymore. # Using local SSD disks on Compute virtual machines Source: https://docs.nebius.com/compute/storage/local-disks Local SSD disks are Non-Volatile Memory Express (NVMe) drives physically attached to the compute host that runs a virtual machine (VM). Local SSD disks offer low-latency storage, but they are *ephemeral*. When the VM is stopped or deleted, the data is lost. ## Availability Local SSD disks are available only in the `uk-south1` [region](/overview/regions), on the NVIDIA® B300 NVLink with Intel Granite Rapids platform (`gpu-b300-sxm`) with the eight-GPU preset `8gpu-192vcpu-2768gb`. Their capacity is fixed by the selected platform and preset. This configuration adds `6 × 3.84 TB` of local storage. ## How to add local SSD disks Local SSD disks can be enabled when [creating a VM](/compute/virtual-machines/manage#create-a-vm). They are not created as a separate storage resource, and you cannot add them to an existing VM or change this setting later. You can create [RAID](https://en.wikipedia.org/wiki/RAID) on top of your local SSD disks, for example, to combine multiple disks into a single logical storage for higher performance or easier management. ## Lifecycle and data persistence Local SSD data persistence depends on whether the event affects the Compute VM or only the VM operating system: * If you reboot the VM operating system from inside the VM, for example by using `sudo reboot`, data is expected to persist because the Compute VM is not stopped or deleted. * If you stop or delete the VM in Compute, data on local SSD disks is lost. * If the host or a local disk fails, the Compute VM enters maintenance mode and data is lost. When a Compute VM is stopped or deleted, the local SSD disks are released and sanitized with additional cleanup checks to clear the disks of all data before reuse. ## When to use durable storage instead Use durable storage instead of local SSD disks if you need any of the following: * Data that must survive VM stop, deletion or rescheduling events. Use [Network disks](/compute/storage/types#disks), [shared filesystems](/compute/storage/types#shared-filesystems) or [Object Storage](/object-storage). * Data sharing across several VMs. Use [shared filesystems](/compute/storage/types#shared-filesystems) or [Object Storage](/object-storage). * Snapshots, backup workflows or long-term retention. Use [Network disks](/compute/storage/types#disks), [shared filesystems](/compute/storage/types#shared-filesystems) or [Object Storage](/object-storage). * User-defined capacity that is independent of the selected VM preset. Use [Network disks](/compute/storage/types#disks) or [shared filesystems](/compute/storage/types#shared-filesystems). ## See also * [Types of storage volumes in Compute](/compute/storage/types) * [How to create a virtual machine in Nebius AI Cloud](/compute/virtual-machines/manage#create-a-vm) * [Compute pricing](/compute/resources/pricing#local-ssd-disks) # Managing Compute volumes Source: https://docs.nebius.com/compute/storage/manage In this article, you will learn how to manage [Compute volumes](/compute/storage/types): Network SSD disks and shared filesystems. Boot disks are added to virtual machines (VMs) immediately. To use secondary (additional) disks and shared filesystems on VMs after you create the volumes, you need to [attach and mount them to the VMs](/compute/storage/use). You can [detach these volumes](/compute/storage/detach-volume) later, if necessary. A VM and its volumes must be located in the same project. For more details about projects and resource hierarchy in Nebius AI Cloud, see [How resources, identities and access are managed in Nebius AI Cloud](/iam/overview). ## How to create a disk 1. In the sidebar, go to  **Storage** → **Disks**. 2. Click **Create disk**. 3. On the creation page, specify a disk name. 4. In **Disk source type**, select one of the supported sources for the disk: * **Blank disk**: Create a regular, blank disk. Suitable for any boot or additional disk. * **Public image**: Create a boot disk from one of [public images](/compute/storage/boot-disk-images) that Nebius AI Cloud provides. An image represents an operating system for the disk. * **Custom image**: Create a boot disk based on your [custom image](/compute/storage/custom-disk-images) that includes custom software. * **Custom image family**: Create a boot disk based on your custom image family. When you create custom images, you can add them to an arbitrary custom family. If an image family contains several images, the latest one is used. * **Snapshot**: Create a boot or additional disk based on a [disk snapshot](/compute/storage/disk-snapshots). 5. In **Storage configuration**, select the disk type. 6. (Optional) Enable [data encryption](/security/encryption) if you're creating a Network SSD Non-replicated or Network SSD IO M3 disk. Encryption is enabled by default for Network SSD disks. 7. Set the disk size and block size. 8. (Optional) Enable **Deletion protection** to prevent this disk from being accidentally deleted. 9. Click **Create disk**. Run the following command: ```bash theme={null} nebius compute disk create \ --name \ --source-image-family-image-family \ --source-image-family-parent-id \ --source-image-id \ --source-snapshot-id \ --type network_ \ --disk-encryption-type disk_encryption_managed \ --size-gibibytes \ --block-size-bytes \ --forbid-deletion ``` For more information, see [Volume parameters](#volume-parameters). 1. [Install and configure](/terraform-provider/quickstart) the Nebius AI Cloud provider for Terraform. 2. Create the following configuration: ```hcl theme={null} resource "nebius_compute_v1_disk" "" { name = "" parent_id = "" type = "NETWORK_" size_gibibytes = block_size_bytes = # Only for boot disks. Use one of the supported disk sources. source_image_family = { image_family = "" parent_id = "" # Optional: for custom image families only } source_image_id = "" source_snapshot_id = "" # Optional: only for NETWORK_SSD_NON_REPLICATED and NETWORK_SSD_IO_M3 disk_encryption = { type = "DISK_ENCRYPTION_MANAGED" } # Optional: protect disk from deletion forbid_deletion = true } ``` For `parent_id`, use the [project ID](/iam/manage-projects#terraform-3). For more information about other parameters, see [Volume parameters](#volume-parameters). For the full reference on the disk resource, see [nebius\_compute\_v1\_disk](/terraform-provider/reference/resources/compute_v1_disk). 3. Check that the configuration is correct: ```bash theme={null} terraform validate ``` 4. Apply the changes: ```bash theme={null} terraform apply ``` For more information about how to start using secondary disks, see [Attaching and mounting Compute volumes to VMs](/compute/storage/use). ## How to create a shared filesystem 1. In the sidebar, go to  **Storage** → **Shared filesystems**. 2. Click **Create filesystem**. 3. On the creation page, specify a filesystem name. 4. Set the filesystem size and block size. 5. (Optional) Enable **Deletion protection** to prevent this filesystem from being accidentally deleted. 6. Click **Create filesystem**. Run the following command: ```bash theme={null} nebius compute filesystem create \ --name \ --type network_ssd \ --size-gibibytes \ --block-size-bytes \ --forbid-deletion ``` For more details about volume parameters, see [Volume parameters](#volume-parameters). 1. [Install and configure](/terraform-provider/quickstart) the Nebius AI Cloud provider for Terraform. 2. Create the following configuration: ```hcl theme={null} resource "nebius_compute_v1_filesystem" "" { name = "" parent_id = "" type = "NETWORK_SSD" size_gibibytes = block_size_bytes = # Optional: protect filesystem from deletion forbid_deletion = true } ``` For `parent_id`, use [project ID](/iam/manage-projects#terraform-3). For more information about other parameters, see [Volume parameters](#volume-parameters). For the full reference on the filesystem resource, see [nebius\_compute\_v1\_filesystem](/terraform-provider/reference/resources/compute_v1_filesystem). 3. Check that the configuration is correct: ```bash theme={null} terraform validate ``` 4. Apply the changes: ```bash theme={null} terraform apply ``` For more information about how to start using the created shared filesystem, see [Attaching and mounting Compute volumes to VMs](/compute/storage/use). ## Volume parameters Disks and shared filesystems share almost all of their parameters, except for boot disk image which can only be set for disks. ### Metadata **Name** (`name`): A Nebius AI Cloud resource name. It must be unique inside your tenant. Required at creation, cannot be changed after it. ### Type, encryption and size * **Type** (`type`): The volume type. See available types of [disks](/compute/storage/types#disk-types) and [shared filesystems](/compute/storage/types#filesystem-specifications). Required at creation, and cannot be changed later. * **Enable data encryption** (`disk-encryption-type`): Whether a volume should support [data encryption](/security/encryption). Encryption allows you to store personal and other sensitive data securely on volumes, and reduce the risk of unauthorized access. Use this parameter only for disks of the Network SSD Non-replicated and Network SSD IO M3 types. Filesystems and Network SSD disks support encryption by default, and you cannot disable it. For more information, see [Encryption of disks](/compute/storage/types#encryption-of-disks). In the CLI, use `--disk-encryption-type disk_encryption_managed` to enable encryption. * **Size** (`size-gibibytes`, `size-mebibytes`, `size-kibibytes` or `size-bytes`): The volume size. See requirements for sizes of [disks](/compute/storage/types#disk-types-comparison) and [shared filesystems](/compute/storage/types#filesystem-specifications) in their comparison tables. Required at creation. After creation, size can only be [increased](#how-to-resize-a-volume). When using the CLI, you can set the volume size in GiB, MiB, KiB or B using a respective parameter. * **Block size** (`block-size-bytes`): The data block size for the volume. The data stored on the volume is divided into blocks of this size on the underlying physical drives. Cannot be changed after the volume is created. The block size must be a power of two between 4096 bytes (4 KiB) and 131,072 bytes (128 KiB). The default value is 4096 bytes (4 KiB). For maximum IOPS, reads and writes to a volume should be close to its block size. ### Disk sources Use one of the supported disk sources: * **Public image** (`source-image-family-image-family`): Create a boot disk from one of the [public images](/compute/storage/boot-disk-images) that Nebius AI Cloud provides. An image represents an operating system for the disk. * **Custom image** (`source-image-id`): Create a boot disk based on your [custom image](/compute/storage/custom-disk-images) that includes custom software. * **Custom image family** (both `source-image-family-image-family` and `source-image-family-parent-id`): Create a boot disk based on your custom image family. When you create custom images, you can add them to an arbitrary custom family. If an image family contains several images, the latest one is used. * **Snapshot** (`source-snapshot-id`): Create a boot or additional disk based on a [disk snapshot](/compute/storage/disk-snapshots). To create a blank additional disk, don't specify any disk source. ### Deletion protection * **Deletion protection** (`forbid-deletion`): Prevents the volume from being deleted. Use this parameter to protect disks and shared filesystems from accidental deletion, especially in automated environments such as CI/CD pipelines or Terraform configurations. Deletion protection can be enabled at creation time or changed at any time after creation. When enabled, any attempt to delete the volume fails with an error. To delete a protected volume, disable deletion protection first. ## How to resize a volume You can increase the size of an existing disk or shared filesystem. Reducing volume size is not possible. Compute supports hot resize: you can resize a disk while it is attached to a running virtual machine. For boot disks, the partition table is refreshed automatically on the next reboot. For secondary disks, you need to manually refresh the partition table and grow the filesystem after resizing. To resize a disk or a shared filesystem: 1. Change the volume size: 1. In the sidebar, go to  **Storage** → **Disks** or  **Storage** → **Shared filesystems**. Alternatively, go to the virtual machine where the volume is attached and find it on the **Disks** or **Shared filesystems** tab. 2. Click the volume you want to resize and go to the **Settings** tab. 3. In the **Parameters** section, enter the new **Size** value or use the slider to set the new size. 4. Click **Save changes**. 1. If you haven't saved the disk or filesystem's ID when creating it, get its ID: ```bash theme={null} export DISK_ID=$(nebius compute disk get-by-name \ --parent-id \ --name \ --format json | jq -r ".metadata.id") ``` For a filesystem, use [nebius compute filesystem get-by-name](/cli/reference/compute/filesystem/get-by-name) with the same parameters. 2. Run [nebius compute disk update](/cli/reference/compute/disk/update) for a disk, or [nebius compute filesystem update](/cli/reference/compute/filesystem/update) for a shared filesystem, and set the new size by using one of the `--size-gibibytes`, `--size-mebibytes`, `--size-kibibytes` or `--size-bytes` parameters. Here is an example for a disk: ```bash theme={null} nebius compute disk update \ --id $DISK_ID \ --size-gibibytes ``` 1. In your Terraform configuration, update the `size_gibibytes` value (or `size_mebibytes`, `size_kibibytes`, `size_bytes`) in the disk or filesystem resource. For example, for a disk: ```hcl highlight={4} theme={null} resource "nebius_compute_v1_disk" "" { name = "" ... size_gibibytes = } ``` 2. Check that the configuration is correct: ```bash theme={null} terraform validate ``` 3. Apply the changes: ```bash theme={null} terraform apply ``` 2. If you resized a secondary disk and it is currently attached to a running virtual machine, do the following: 1. [Restart](/compute/virtual-machines/stop-start#how-to-stop-and-start-vms-manually) this VM. 2. [Connect](/compute/virtual-machines/connect) to this VM. 3. Install the `cloud-guest-utils` package that manages the disk partitions: ```bash theme={null} sudo apt-get update && sudo apt-get install -y cloud-guest-utils ``` 4. List disks and partitions: ```bash theme={null} lsblk --paths ``` Output example: ```bash theme={null} NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINTS /dev/vda 253:0 0 10G 0 disk ├─/dev/vda1 253:1 0 9G 0 part / ├─/dev/vda14 253:14 0 4M 0 part ├─/dev/vda15 253:15 0 106M 0 part /boot/efi └─/dev/vda16 259:0 0 913M 0 part /boot /dev/vdb 253:16 0 1M 0 disk /dev/vdc 253:32 0 20G 0 disk └─/dev/vdc1 253:33 0 10G 0 part /mnt/disk-0 ``` Find the device name of the resized disk and get the name of its last partition. The secondary disk is most likely the last one in the list. Also, check the `SIZE` column: it shows that the disk size is increased, but the partition size stays the same. In this example, the required device name is `/dev/vdc`, and the partition is `/dev/vdc1`. 5. Grow the partition to fill the disk: ```bash theme={null} sudo growpart /dev/vdc 1 ``` If you work with a disk that has a device name other than `/dev/vdc`, change the device name and the partition index `1` in the current command and commands below. You can get the index of the partition from its name. Only the last partition may be grown. In the commands, you can use the device ID of the disk (`/dev/disk/by-id/virtio-disk-0`) instead of the device name (`/dev/vdc`). Run the `ls /dev/disk/by-id` command to get device IDs for all disks. 6. Refresh the kernel partition table for the disk and wait for the device information to be updated: ```bash theme={null} sudo partprobe /dev/vdc && sudo udevadm settle ``` 7. Show information about partitions and check that the size of the partition has increased: ```bash theme={null} lsblk -o NAME,SIZE,TYPE,FSTYPE,MOUNTPOINT /dev/vdc ``` Output example: ```bash theme={null} NAME SIZE TYPE FSTYPE MOUNTPOINT vdc 25G disk └─vdc1 25G part ext4 /mnt/disk-0 ``` 8. Grow the `ext4` filesystem on the increased partition: ```bash theme={null} sudo resize2fs /dev/vdc1 ``` 9. Check that the filesystem size has increased: ```bash theme={null} df -hT ``` Output example: ```bash theme={null} Filesystem Type Size Used Avail Use% Mounted on tmpfs tmpfs 795M 1.1M 794M 1% /run /dev/vda1 ext4 38G 3.3G 35G 9% / tmpfs tmpfs 3.9G 0 3.9G 0% /dev/shm tmpfs tmpfs 5.0M 0 5.0M 0% /run/lock cloud-metadata virtiofs 252G 16K 252G 1% /mnt/cloud-metadata /dev/vdc1 ext4 25G 24K 24G 1% /mnt/disk-0 /dev/vda16 ext4 881M 174M 645M 22% /boot /dev/vda15 vfat 105M 6.2M 99M 6% /boot/efi tmpfs tmpfs 795M 12K 795M 1% /run/user/1001 ``` ## How to enable or disable deletion protection You can only change deletion protection of a [standalone disk](/compute/storage/types#vm-managed-and-standalone-disks). If you need to update a VM-managed disk, [convert it first to standalone](#how-to-make-a-disk-vm-managed-or-standalone). To enable or disable deletion protection: 1. In the sidebar, go to **Storage** → **Disks** or **Storage** → **Shared filesystems**. 2. Click the volume you want to update and go to the **Settings** tab. 3. In the **Parameters** section, enable or disable **Deletion protection**. 4. Click **Save changes**. 1. If you haven't saved the disk or filesystem's ID when creating it, get its ID: ```bash theme={null} export DISK_ID=$(nebius compute disk get-by-name \ --parent-id \ --name \ --format json | jq -r ".metadata.id") ``` For a filesystem, use [nebius compute filesystem get-by-name](/cli/reference/compute/filesystem/get-by-name) with the same parameters. 2. Run [nebius compute disk update](/cli/reference/compute/disk/update) for a disk, or [nebius compute filesystem update](/cli/reference/compute/filesystem/update) for a filesystem: ```bash theme={null} nebius compute disk update \ --id $DISK_ID \ --forbid-deletion= ``` 1. In your Terraform configuration, set `forbid_deletion` to `true` or `false` in the disk or filesystem resource. For example, for a disk: ```hcl highlight={4} theme={null} resource "nebius_compute_v1_disk" "" { name = "" ... forbid_deletion = true } ``` 2. Check that the configuration is correct: ```bash theme={null} terraform validate ``` 3. Apply the changes: ```bash theme={null} terraform apply ``` If you try to delete a volume with deletion protection enabled, the operation will fail, and you'll see the following message: `Error: rpc error: code = FailedPrecondition desc = disk cannot be deleted because forbid_deletion is set`. Disable deletion protection first, then delete the volume. ## How to make a disk VM-managed or standalone Each disk is either [VM-managed or standalone](/compute/storage/types#vm-managed-and-standalone-disks). You can convert a disk from one state to another. To do so: 1. In the sidebar, go to  **Compute** → **Virtual machines**. 2. Open the page of the required VM and then go to the **Disks** tab. 3. In the line of the required disk, click  → **Convert to VM-managed** or  → **Convert to standalone**. ## How to delete a volume Deleting a volume permanently removes all data stored on it. Before deleting, make sure the volume is [detached](/compute/storage/detach-volume) from any virtual machine. 1. In the sidebar, go to **Storage** → **Disks** or **Storage** → **Shared filesystems**. 2. Open the page of the volume that you want to delete. 3. Go to the **Settings** tab. 4. Click **Delete disk** or **Delete filesystem**. 5. In the window that opens, confirm the deletion. 1. Get the ID of the volume you want to delete: ```bash theme={null} nebius compute list ``` 2. Delete the disk: ```bash theme={null} nebius compute disk delete ``` 3. Delete the filesystem: ```bash theme={null} nebius compute filesystem delete ``` 1. In your Terraform configuration, remove the `nebius_compute_v1_disk` or `nebius_compute_v1_filesystem` resource block. If the resource has `forbid_deletion = true`, set it to `false` before removing the resource, then apply the configuration. Once done, remove the resource. 2. Check that the configuration is correct: ```bash theme={null} terraform validate ``` 3. Apply the changes: ```bash theme={null} terraform apply ``` ## See also * [Types of storage volumes in Compute](/compute/storage/types) * [Attaching and mounting Compute volumes to VMs](/compute/storage/use) # Creating boot disk images with Packer Source: https://docs.nebius.com/compute/storage/packer You can create custom boot disk images based on existing images by using [Packer](https://developer.hashicorp.com/packer) and the [Nebius Packer plug-in](https://github.com/nebius/packer-plugin-nebius/blob/main/README.md). The Nebius Packer plug-in creates a temporary virtual machine (VM) from a base image, connects to it over SSH, runs provisioners and then creates a new boot disk image. Use this workflow to: * Pre-install packages and system dependencies * Prepare versioned images for repeated VM creation * Standardize environments across teams or workloads ## Before you start 1. Install [Packer](https://developer.hashicorp.com/packer/downloads). 2. Make sure your project has sufficient [quotas](/overview/quotas) for image creation: * Number of images * Total storage capacity of all images 3. Set up authentication by using one of the following methods. * **Service account** 1. [Create a service account](/iam/service-accounts/manage) and [generate a key pair](/iam/service-accounts/authorized-keys#create-a-key-pair). The key pair is saved to a JSON file, for example, `~/.nebius/_credentials.json`. 2. Open the file and copy the value of the `private_key` field. 3. Save the key to the `private.pem` file: ```text theme={null} -----BEGIN PRIVATE KEY----- ... -----END PRIVATE KEY----- ``` 4. Use the values from the JSON file in your Packer configuration. * **Access token** Generate an access token: ```bash theme={null} nebius iam get-access-token ``` An access token is valid for 12 hours. After it expires, create a new one. ## Steps ### Install the Nebius Packer plug-in 1. Create the `config.pkr.hcl` file and add the Nebius plug-in configuration: ```hcl theme={null} packer { required_plugins { nebius = { source = "github.com/nebius/nebius" version = ">= 0.0.4" } } } ``` 2. Initialize the plug-in in the directory that contains your Packer configuration files: ```bash theme={null} packer init . ``` ### Build the disk image The Nebius image builder creates a VM from a base image, provisions it over SSH and publishes a new image. 1. Create the `build.pkr.hcl` file and add the `nebius-image` source to it: ```hcl theme={null} source "nebius-image" "ubuntu2404" { communicator = "ssh" ssh_username = "ubuntu" # Service account credentials used for image creation service_account { private_key_file = "./private.pem" public_key_id = "" account_id = "" } # Alternatively, use an access token # token = # Boot disk configuration for the temporary VM disk { size_gibibytes = 60 } # Source image used to create the temporary VM base_image { family = "ubuntu24.04-driverless" } # Network configuration for the temporary VM network { subnet_id = "" associate_public_ip_address = true } # Compute resources for the temporary VM instance { platform = "cpu-d3" preset = "16vcpu-64gb" } # Parameters of the resulting image image { name = "ubuntu24.04-131-0.0.1" version = "0.0.1" image_family = "ubuntu24.04-131" cpu_architecture = "amd64" image_family_human_readable = "Ubuntu 24.04 CUDA 13.1 Hackathon" } # Project where the image will be created parent_id = "" } ``` The `nebius-image` source has the following parameters: **General parameters** * `communicator` (optional): Specifies how Packer connects to the VM. Supported value: `ssh` (default). * `parent_id`: ID of the project where the resulting image will be created. * `ssh_username`: Username used to connect to the VM. **Authentication** * `service_account.private_key_file`: Path to the private key file. * `service_account.public_key_id`: ID of the public key. * `service_account.account_id`: Service account ID. * `token`: Access token used for authentication. Use this as an alternative to `service_account`. **Disk configuration** * `disk.size_gibibytes`: Size of the disk in GiB. **Base image** * `base_image.family`: Image family name. * `base_image.id`: Specific image ID. **Network** * `network.subnet_id` (optional): ID of an existing subnet that will be used to create a VM. If not provided, the plug-in attempts to find the project's default network. * `network.associate_public_ip_address` (optional): Assigns a public IP address. Use a public IP if your build environment connects directly via SSH. **VM configuration** * `instance.platform`: VM [platform](/compute/virtual-machines/types). * `instance.preset`: VM platform preset (number of GPUs and vCPUs, RAM size). **Output image configuration** * `image.name`: Image name. * `image.version` (optional): Image version. * `image.image_family` (optional): Image family identifier. * `image.image_family_human_readable` (optional): Display name for the image family. * `image.cpu_architecture` (optional): CPU architecture. 2. Add the build block to the `build.pkr.hcl` file: ```hcl theme={null} build { sources = ["source.nebius-image.ubuntu2404"] provisioner "file" { # Path to a local script in your project source = "some-local-file.txt" destination = "/tmp/helloworld.txt" } provisioner "shell" { inline = [ "cd /tmp", "echo Installing hello world text", "sudo mv /tmp/helloworld.txt /root", "echo Resetting cloud-init and caches", "sudo apt clean", "sudo uv cache clean", "sudo cloud-init clean --logs", "sudo sync", ] } } ``` 3. From the directory with the configuration files, run: ```bash theme={null} packer init . packer build build.pkr.hcl ``` ### Check the image 1. In the [web console](https://console.nebius.com), go to  **Storage** → **Disks**. 2. Go to the **Images** tab and locate your image. ### Example: CUDA® 13.1 image The following example builds an image with CUDA 13.1 from a driverless image. It uses a single configuration file that includes both the plug-in and build configuration. ```hcl theme={null} packer { required_plugins { nebius = { version = ">= 0.0.4" source = "github.com/nebius/nebius" } } } source "nebius-image" "ubuntu2404-cu131" { communicator = "ssh" ssh_username = "ubuntu" service_account { private_key_file = "./private.pem" public_key_id = "" account_id = "" } disk { size_gibibytes = 60 } base_image { family = "ubuntu24.04-driverless" } network { associate_public_ip_address = true } instance { platform = "cpu-d3" preset = "16vcpu-64gb" } image { name = "ubuntu24.04-131-0.0.1" version = "0.0.1" image_family = "ubuntu24.04-131" cpu_architecture = "amd64" image_family_human_readable = "Ubuntu 24.04 CUDA 13.1 Hackathon" } parent_id = "project-..." } build { sources = ["source.nebius-image.ubuntu2404-cu131"] provisioner "file" { source = "guest.config" destination = "/tmp/guest.config" } provisioner "file" { source = "install-gpu-cuda13.1-ubuntu24.04.sh" destination = "/tmp/install-gpu-cuda13.1-ubuntu24.04.sh" } provisioner "shell" { inline = [ "cd /tmp", "echo Installing cuda 13.1 et al", "sudo bash /tmp/install-gpu-cuda13.1-ubuntu24.04.sh", "echo Resetting cloud-init and caches", "sudo apt clean", "sudo uv cache clean", "sudo cloud-init clean --logs", "sudo sync", ] } } ``` The `file` and `shell` provisioners are used to copy files to the VM and execute commands during the build. Create your own scripts depending on the software and configuration you want to include in the image. # Types of storage volumes in Compute Source: https://docs.nebius.com/compute/storage/types In Compute, storage resources that can be added to virtual machines (VMs) as separate managed resources are called *volumes*. Compute offers two types of managed volumes and one host-local storage option: * [Disks](#disks): * **Network SSD disks**: managed *block storage* volumes. * **Local SSD disks**: *ephemeral* host-local block storage. * [Shared filesystems](#shared-filesystems) are *file storage* volumes. A filesystem can be shared by multiple VMs. Nebius AI Cloud also provides *object storage* through a separate service, [Object Storage](/object-storage/index). Together, these block, file and object storage options cover all [use cases](#use-cases-and-suggestions) for data preparation, training and inference workloads, as well as associated infrastructure (boot disks, database hosts etc.) ## Disks *Disks* provide block storage for Compute VMs. Data that you put on disks is divided into blocks that are stored efficiently and reliably on underlying physical drives. You can create boot disks and additional disks. A *boot disk* is a core disk in a VM, and an *additional disk* is mainly for data storage. Compute provides different disk sources: * [Public disk images](/compute/storage/boot-disk-images) supported by the platform. * [Custom disk images](/compute/storage/custom-disk-images) that you create and tailor to your needs. * Custom image families that contain a series of custom images and provide the latest image for the disk. * [Disk snapshots](/compute/storage/disk-snapshots), which are point-in-time copies of a disk state. Alternatively, you can [create](/compute/storage/manage#how-to-create-a-disk) a blank disk. Images and image families are only supported for boot disks. ### Network and local SSD disks Compute offers two kinds of disks: * [Network SSD disks](#network-ssd-disks) can be created as a boot disk for a VM, from one of the boot disk images provided by Nebius AI Cloud, or as an empty additional disk. One Compute network SSD disk can only be added to one running VM at a time. * [Local SSD disks](#local-ssd-disks) are Non-Volatile Memory Express (NVMe) drives physically attached to the Compute host that runs a virtual machine (VM). They are not created or managed as separate storage resources, and you can only add them when [creating a VM](/compute/virtual-machines/manage#create-a-vm). #### Network SSD disks * **Network SSD** (`network_ssd`) Reliable disks backed by solid state drives (SSDs). Best used for infrastructure purposes: as VM boot disks, disks on Slurm controller VMs, etc. Reliability of Network SSD disks is ensured by means of [erasure coding](https://en.wikipedia.org/wiki/Erasure_code). A disk will tolerate up to two concurrent hardware failures in the Nebius AI Cloud [region](/overview/regions). * **Network SSD Non-replicated** (Network SSD NRD, `network_ssd_non_replicated`) High-performance disks backed by SSDs. Best used as temporary storage without strict reliability requirements, e.g., a boot disk for nodes in Managed Service for Kubernetes® clusters where redundancy is less important. Data blocks of Network SSD Non-replicated disks are stored in [NVMe namespaces](https://nvmexpress.org/resource/nvme-namespaces/) on underlying SSDs. The size of each namespace is 93 GiB, so the disk size must be a multiple of 93 GiB. Network SSD Non-replicated disks have no redundancy. It's not recommended to store any persistent data on these disks. If a disk fails, its data will be lost. * **Network SSD IO M3** (`network_ssd_io_m3`) High-performance and reliable disks backed by SSDs. Best used in performance-critical storage solutions, e.g., as storage disks in GlusterFS clusters. In addition to performance levels similar to Network SSD Non-replicated disks, Network SSD IO M3 disks are reliable through replication, with each disk's data mirrored to three physical drives. In the disk type name, "IO" stands for "input/output (optimized)" and "M3" stands for "mirrors 3". #### Local SSD disks Consider local SSD disks if your workload needs high-performance, low-latency storage for data that can be recreated. Local SSD disks are ephemeral, meaning temporary: their data is erased when the VM is stopped or deleted. Local SSD disks are available only on some platforms, presets and regions. For details, see [Availability](/compute/storage/local-disks#availability). Local SSD disks are useful for: * Scratch space for files and intermediate outputs that can be recreated. * Training or inference workloads that require low latency. * Read or write caches for data that can be recreated. ### Disk types comparison Network SSD disk types are differentiated by several characteristics: * **Performance** (bandwidth and IOPS): Local SSD > SSD IO M3 = SSD Non-replicated > SSD * **Reliability**: SSD IO M3 > SSD > SSD Non-replicated = Local SSD * **Price per 1 GiB per month**: SSD Non-replicated \< Local SSD \< SSD \< SSD IO M3 You can choose the size of a network disk, but local SSD disks are attached to the VM host as part of a predefined configuration for the selected platform and preset. For more details, see the following comparison table. The values for local SSD disks are the performance numbers per one local SSD disk. The bandwidth and IOPS values below are upper bounds; actual performance depends on workload. | **Disk type** | **Network SSD** | **Network SSD NRD** | **Network SSD IO M3** | **Local SSD disk**¹ | | -------------------------------------------------------- | ----------------------------------------------------------- | ------------------------------------------------ | ------------------------------------------------ | ----------------------------------- | | Capacity | 1–8192 GiB (= 8 TiB) | 93–262,074 GiB (\~ 256 TiB), multiples of 93 GiB | 93–262,074 GiB (\~ 256 TiB), multiples of 93 GiB | 3.5 TiB | | Read/write bandwidth | 450 MiB/s | 2 GiB/s | 2 GiB/s | Read: 6.8 GB/s
Write: 2.6 GB/s | | Read IOPS | 20,000 | 75,000 | 75,000 | 510,000 | | Write IOPS | 20,000 | 75,000 | 75,000 | 350,000 | | Reliability features | Erasure coding – tolerates two concurrent hardware failures | None | Replication – data mirrored to three drives | None | | [Price per 1 GiB per month](/compute/resources/pricing)² | \$0.071 | \$0.053 | \$0.118 | \$0.065 | ¹ For local SSD disks, the listed values are achieved under synthetic workload. ² The listed prices are valid as of March 9, 2026. For up-to-date prices, see [Price per 1 GiB per month](/compute/resources/pricing). ### VM-managed and standalone disks When you [create a VM](/compute/virtual-machines/manage), you can use either VM-managed or standalone disks: * *VM-managed disks* are the disks that you create along with the VM. Their lifecycle is tied to the VM. When you delete the VM, all of its VM-managed disks are deleted with the VM in a single operation. This makes VM-managed disks a good fit for ephemeral workloads, for example, training jobs or inference clusters where the VM and its storage should be cleaned up together. * *Standalone disks* are the disks that you create separately from the VM and attach them later to the VM by using the disk ID. Use standalone disks when you need them to persist independently after the VM is deleted, for example, to reattach them to another VM or to enable deletion protection. Renaming a VM-managed disk deletes the existing disk and creates a new one with a new name. All data on the disk is permanently lost. To rename a VM-managed disk without data loss, [convert it to a standalone disk](/compute/storage/manage#how-to-make-a-disk-vm-managed-or-standalone) and then rename it. ### Encryption of disks To store personal and other sensitive data securely, and to reduce the risk of unauthorized access, you can enable data encryption. To do so, [create a disk](/compute/storage/manage#how-to-create-a-disk) with data encryption enabled. For Network SSD disks, encryption is enabled by default and cannot be disabled. For Network SSD NRD and Network SSD IO M3 disks, encryption is optional and you can enable it. Encryption is available for both boot disks and secondary disks. Local SSD disks are not encrypted and no other data protection method is applied to them. Ensuring the protection of data stored on these devices is your responsibility. We don't recommend using local SSD disks for data that can't be recreated. For more information, see [Encryption in Nebius AI Cloud](/security/encryption). ### Disk performance Disk performance depends on both the disk type and its size — it increases as you add more allocation units. Every allocation unit contributes equally to the overall bandwidth and IOPS until you reach the [upper bounds](#disk-types-comparison) for the disk. While you have fewer allocation units than needed to reach the upper bounds, the disk performance equals the sum of each unit's performance. Once the sum reaches the upper bound for bandwidth or IOPS, adding more capacity does not increase performance any further. Disk performance metrics per allocation unit are shown in the following table. The bandwidth and IOPS values below are upper bounds; actual performance depends on workload. | **Disk type** | **Network SSD** | **Network SSD NRD** | **Network SSD IO M3** | **Local SSD disk**¹ | | ------------------------ | --------------- | ------------------- | --------------------- | ------------------- | | Allocation unit size | 32 GiB | 93 GiB | 93 GiB | 3.5 TiB | | Read bandwidth per unit | 15 MiB/s | 110 MiB/s | 110 MiB/s | 6.8 GB/s | | Write bandwidth per unit | 15 MiB/s | 82 MiB/s | 82 MiB/s | 2.6 GB/s | | Read IOPS per unit | 1,000 | 28,000 | 28,000 | 510,000 | | Write IOPS per unit | 1,000 | 5,600 | 5,600 | 350,000 | ¹ For local SSD disks, the listed values are peak numbers achieved per disk under synthetic workload. Disk encryption also affects the disk performance. Encryption requires additional processing of write operations; therefore, it can reduce performance by up to 15%. Local SSD disks can only be enabled during VM creation, cannot be scaled later, and are available only in fixed configurations. For supported configurations, see [Using local SSD disks on Compute virtual machines](/compute/storage/local-disks#availability). For other disks, you can choose your disk size in multiples of its allocation units to achieve the desired performance. Examples: How to reach the maximum for each disk performance metric: * Read/write bandwidth: * Maximum overall bandwidth is 450 MiB/s. * Number of allocation units needed to achieve it = Maximum overall read/write bandwidth ÷ Maximum read/write bandwidth per unit = 450 MiB/s ÷ 15 MiB/s = 30 units. * Minimum disk size = 30 × 32 GiB = 960 GiB. * Read IOPS: * Maximum overall read IOPS is 20,000. * Number of allocation units needed to achieve it = Maximum overall read IOPS ÷ Maximum overall read IOPS per unit = 20,000 ÷ 1,000 = 20 units. * Minimum disk size = 20 × 32 GiB = 640 GiB. * Write IOPS: * Maximum overall write IOPS is 20,000. * Number of allocation units needed to achieve it = Maximum overall write IOPS ÷ Maximum write IOPS per unit = 20,000 ÷ 1,000 = 20 units. * Minimum disk size = 20 × 32 GiB = 640 GiB. To achieve the maximum disk performance for all metrics, you need a disk of 960 GiB or more. How to reach the maximum for each disk performance metric: * Read bandwidth: * Maximum overall read bandwidth is 2 GiB/s. * Number of allocation units needed to achieve it = Maximum overall read bandwidth ÷ Maximum read bandwidth per unit = 2048 MiB/s ÷ 110 MiB/s ≈ 18.62, rounding up to 19 units. * Minimum disk size = 19 × 93 GiB = 1767 GiB. * Write bandwidth: * Maximum overall write bandwidth is 2 GiB/s. * Number of allocation units needed to achieve it = Maximum overall write bandwidth ÷ Maximum write bandwidth per unit = 2048 MiB/s ÷ 82 MiB/s ≈ 24.98, rounding up to 25 units. * Minimum disk size = 25 × 93 GiB = 2325 GiB. * Read IOPS: * Maximum overall read IOPS is 75,000. * Number of allocation units needed to achieve it = Maximum overall read IOPS ÷ Maximum read IOPS per unit = 75,000 ÷ 28,000 ≈ 2.68, rounding up to 3 units. * Minimum disk size = 3 × 93 GiB = 279 GiB. * Write IOPS: * Maximum overall write IOPS is 75,000. * Number of allocation units needed to achieve it = Maximum overall write IOPS ÷ Maximum write IOPS per unit = 75,000 ÷ 5,600 ≈ 13.39, rounding up to 14 units. * Minimum disk size = 14 × 93 GiB = 1302 GiB. To achieve the maximum disk performance for all metrics, you need a disk of 2325 GiB or more. ## Shared filesystems Shared filesystems provide file storage for Compute VMs. When VMs work with file storage, they work with a hierarchy of folders and files, as opposed to blocks when disks are involved. One shared filesystem can be attached to multiple VMs at once. All VMs that the filesystem is attached to must belong to the same [project](/iam/overview#projects). Sharing a filesystem across projects is not supported, even if the projects are in the same [region](/overview/regions). To use a shared filesystem on a VM that it is attached to, you must mount it as a virtiofs device. Filesystems support [data encryption](/security/encryption) by default; you cannot disable it. Encryption allows you to store personal and other sensitive data on filesystems securely, and reduce the risk of unauthorized access. ### Filesystem specifications Nebius provides shared filesystems that are generally based on solid state drives (`network_ssd` in developer tools such as Nebius AI Cloud CLI or provider for Terraform) to back them up. Shared filesystems have the following specifications: * Capacity: 1–5,242,880 GiB (= 5120 TiB = 5 PiB) * Read bandwidth per client: up to 12 GiB/s * Write bandwidth per client: up to 8 GiB/s * Aggregate read bandwidth: up to 940 GiB/s * Aggregate write bandwidth: up to 475 GiB/s * Maximum file size: 512 GiB × filesystem's [block size](/compute/storage/manage#type-encryption-and-size) in KiB (for example, for the default block size it will be 512 GiB × 4 = 2TiB) * Maximum number of [inodes](https://www.kernel.org/doc/html/v6.3/filesystems/vfs.html#the-inode-object): * For filesystems up to 256 GiB: 4,194,304 (4 × 220) * For filesystems larger than 256 GiB: filesystem's size ÷ 64 KiB For example, if the filesystem's size is 512 GiB, its maximum number of inodes is (512 × 230) ÷ (64 × 210) = 8 × 220 = 8,388,608. * Reliability features: Erasure coding – tolerates two concurrent hardware failures * [Price per 1 GiB per month](/compute/resources/pricing)¹: \$0.08 ¹ The price is shown as of July 2, 2025. For up-to-date prices, see [Price per 1 GiB per month](/compute/resources/pricing). ### Filesystem performance Filesystem performance depends on its size — performance increases with each 4 TiB of the filesystem size. Every 4 TiB contributes equally to the overall bandwidth until you reach the [upper bounds](#filesystem-specifications) for the filesystem. Each 4 TiB of SSD filesystem improves the performance metrics by the following values: * Read bandwidth: by up to 3.70 GiB/s. * Write bandwidth: by up to 1.89 GiB/s. ## Storage types comparison | Characteristic | [Local SSD disks](/compute/storage/types#local-ssd-disks) | [Network disks](/compute/storage/types#disks) | [Shared filesystems](/compute/storage/types#shared-filesystems) | | ---------------- | --------------------------------------------------------- | ------------------------------------------------------- | --------------------------------------------------------------- | | Durability | Ephemeral | Durable | Durable | | Attachment model | Tied to the VM run and physical host | Independent volume attached to one running VM at a time | Independent volume that can be shared by multiple VMs | | Capacity model | Preconfigured, all or none | User-defined | User-defined | ## Use cases and suggestions Here is an overview of various stages of ML/AI workloads and storage options that Compute and other Nebius AI Cloud services provide for these stages, as well as general suggestions for using Compute storage. ### Infrastructure * **VM boot disks: Network SSD disks** For OS and system data on your VMs, the main storage requirement is reliability, so the suggested disk type is Network SSD. * **VM storage disks: Network SSD IO M3 disks** If you are building storage solutions on VMs, e.g., GlusterFS clusters, use Network SSD IO M3 disks for speed and reliability. * **Managed Kubernetes node storage: Network SSD Non-replicated disks** For Kubernetes worker nodes where data reliability isn't a top priority (as the data is often transient), Network SSD Non-replicated disks provide high performance and low latency. * **Database hosts: Network SSD IO M3 disks** Database workloads often demand consistent and high input/output operations per second (IOPS), and Network SSD IO M3 disks offer the best combination of reliability and speed. ### Data preparation * **Storing and preprocessing datasets: Object Storage buckets** Object Storage is ideal for handling large, unstructured datasets and provides a scalable solution for preprocessing tasks like data normalization or augmentation. ### Training * **Streaming datasets to workers: SSD shared filesystems or Object Storage buckets** In most cases, SSD shared filesystems ensure fast access to datasets during training, without bottlenecks. For exceptionally large datasets (1 PiB+) or distributed training across external workers, Object Storage buckets provide a scalable solution. * **Sharing code between workers: SSD shared filesystems** By using SSD shared filesystems, multiple workers can efficiently access and synchronize code during distributed training, ensuring consistency and minimizing latency. * **Checkpoints: SSD shared filesystems, then Object Storage buckets** During training, SSD shared filesystems allow for quickly saving and loading checkpoints, thus ensuring minimal disruption. Once training is completed, asynchronous transfer to Object Storage reduces costs while maintaining accessibility for future use. * **Scratch space: local SSD disks** On [supported platforms, presets and regions](/compute/storage/local-disks#availability), [local SSD disks](/compute/storage/local-disks) provide host-local NVMe for data that can be recreated and benefits from high performance and low latency. Treat them as ephemeral and keep important data on durable storage. ### Inference * **Autoscaling, sharing weights between GPUs: SSD shared filesystems** When inference workloads require scaling across multiple VMs with GPUs, SSD shared filesystems allow for fast sharing of model weights, thus ensuring consistent performance across nodes during autoscaling. * **Sharing results: Object Storage buckets** Once inference tasks are completed, Object Storage is ideal for sharing outputs such as logs, predictions or reports with other users or systems, due to its scalable and cost-efficient nature. ### General suggestions * For maximum IOPS, reads and writes to a volume should be close to its [block size](/compute/storage/manage#type-encryption-and-size). * For maximum bandwidth, reads and writes to a volume should be in 4 MiB chunks. ## See also * [How to create a virtual machine](/compute/virtual-machines/manage#create-a-vm) * [Managing Compute volumes](/compute/storage/manage) * [Attaching and mounting Compute volumes to VMs](/compute/storage/use) * [How to detach additional volumes from virtual machines](/compute/storage/detach-volume) * [Local SSD disks for Compute virtual machines](/compute/storage/local-disks) # Attaching and mounting Compute volumes to VMs Source: https://docs.nebius.com/compute/storage/use In this article, you will learn how to use [Compute disks and shared filesystems](/compute/storage/types) on virtual machines (VMs). This article only covers additional volumes: non-boot disks and shared filesystems. You add a boot disk when you create a VM. After [creating a disk](/compute/storage/manage#how-to-create-a-disk) or a [shared filesystem](/compute/storage/manage#how-to-create-a-shared-filesystem), you need to do the following to use it on a VM: 1. [Attach it to the VM](#how-to-attach-volumes-to-vms) by using Nebius AI Cloud interfaces. 2. [Mount it to the VM](#how-to-mount-volumes-to-vms) inside the VM's operating system. A VM and its volumes must be located in the same project. For more details about projects and resource hierarchy in Nebius AI Cloud, see [How resources, identities and access are managed in Nebius AI Cloud](/iam/overview). ## Prerequisites [Install](/cli/install) and [configure](/cli/configure) the Nebius AI Cloud CLI. [Install and initialize the Nebius SDK for Go](/grpc-api/sdk/go). [Install and initialize the Nebius SDK for Python](/grpc-api/sdk/python). [Install and initialize the Nebius SDK for JavaScript](/grpc-api/sdk/javascript). ## How to attach volumes to VMs To attach disks or shared filesystems to a VM: * **New VM** On the VM creation page ( **Compute** → **Virtual machines** → **Create virtual machine**), do the following: 1. Click **Attach disk** or **Attach shared filesystem**. 2. Set up the volume: 1. Select whether you want to add a new or existing volume. If an existing disk is already added to another VM, you cannot add it to the new VM. A filesystem can be shared by multiple VMs. 2. For a new volume, set its [parameters](/compute/storage/manage#volume-parameters). 3. Set a device ID if you are adding a disk, or a mount tag if you are attaching a filesystem. Device IDs and mount tags are used to [mount volumes to VMs](/compute/storage/use#how-to-mount-volumes-to-vms). 3. Click the attach-volume button at the end of the window. When you click **Create and add disk** or **Create and attach filesystem**, the disk or filesystem is created immediately and [charged](/compute/resources/pricing#volumes) separately even if you remove it from the VM later or do not proceed with creating the VM. 4. If you want to [manually mount the filesystem](#shared-filesystems) that you added to the VM, turn off the **Auto mount** option for the filesystem. By default, Compute automatically mounts filesystems that you add to VMs via the web console. If you add a disk, you always need to [mount it manually](#disks). * **Existing VM** **Disks** 1. In the sidebar, go to  **Compute** → **Virtual machines**. 2. Open the page of the required VM. 3. Switch to the **Disks** tab. 4. Click **Attach resource** → **Disk**. 5. Select whether you want to attach a new or existing disk. If an existing disk is already attached to another VM, you cannot attach it to a new VM until you [detach](/compute/storage/detach-volume) it from the current VM. 6. For a new disk, set its [parameters](/compute/storage/manage#volume-parameters). 7. Set a device ID for the disk. Device IDs are used to [mount disks to VMs](/compute/storage/use#how-to-mount-volumes-to-vms). 8. Click the attach-volume button at the end of the window. **Shared filesystems** 1. In the sidebar, go to  **Compute** → **Virtual machines**. 2. Open the page of the required VM. 3. If the VM is not in the `Stopped` status, click **Stop VM** and then confirm the action. 4. After the VM has the `Stopped` status, switch to the **Filesystems** tab. 5. Click **Attach resource** → **Filesystem**. 6. Select whether you want to attach a new or existing filesystem. A filesystem can be shared by multiple VMs. 7. For a new filesystem, set its [parameters](/compute/storage/manage#volume-parameters). 8. Set a mount tag for the filesystem. Mount tags are used to [mount filesystems to VMs](/compute/storage/use#how-to-mount-volumes-to-vms). 9. Click the attach-volume button at the end of the window. 1. [Create the volumes](/compute/storage/manage). 2. Create the following files locally: * `secondary_disk.json` to attach disks: ```json theme={null} [ { "attach_mode": "", "existing_disk": { "id": "" }, "device_id": "" } ] ``` Where: * Write permission, `READ_WRITE` (default) or `READ_ONLY`. * `existing_disk.id`: Disk ID to be added. To get the ID, run `nebius compute disk list`. * `device_id`: Disk device ID. This parameter is different from `existing_disk.id`, as `device_id` is used for [mounting a disk to a VM](/compute/storage/use#disks). Create your own device ID, such as `my-disk`. Make sure that it is unique within a VM. If you do not specify the device ID, it takes the `disk-N` default value where `N` is an integer. For example, `disk-0`. * `filesystem.json` to attach shared filesystems: ```json theme={null} [ { "attach_mode": "", "existing_filesystem": { "id": "" }, "mount_tag": "" } ] ``` Where: * Write permission, `READ_WRITE` (default) or `READ_ONLY`. * `existing_filesystem.id`: Filesystem ID to be attached. To get the ID, run nebius compute filesystem list. * `mount_tag`: Tag for [mounting a filesystem to a VM](#shared-filesystems). Create your own tag, such as `my-filesystem`. Make sure that it is unique within a VM. If you do not specify the tag, it takes the `filesystem-N` default value where `N` is an integer. For example, `filesystem-0`. 3. Create or update a VM with the volumes configured: * To **create a VM**, run the following command: ```bash theme={null} nebius compute instance create \ --secondary-disks "$(cat secondary_disk.json)" \ --filesystems "$(cat filesystem.json)" \ ``` * To **attach disks to an existing VM**, run the following command: ```bash theme={null} nebius compute instance update \ --patch \ --secondary-disks "$(cat secondary_disk.json)" ``` To get the ID of an existing VM, run nebius compute instance list. The `--patch` parameter allows you to only update the specified parameters. Without it, the command resets the VM settings to their default values. * To **attach shared filesystems to an existing VM**, stop the VM first: ```bash theme={null} nebius compute instance stop --id ``` Then update the VM: ```bash theme={null} nebius compute instance update \ --patch \ --filesystems "$(cat filesystem.json)" ``` After the update, start the VM: ```bash theme={null} nebius compute instance start --id ``` 1. [Create the volumes](/compute/storage/manage). 2. Set the attachment parameters in the code examples: In the code examples, set the attachment parameters: * For disks, set the attach mode, existing disk ID and device ID. * For shared filesystems, set the attach mode, existing filesystem ID and mount tag. Create your own mount tag, such as `my-filesystem`. Make sure that it is unique within a VM. If you do not specify the tag, it takes the `filesystem-N` default value where `N` is an integer. For example, `filesystem-0`. 3. Create or update a VM with the volumes configured: * To **create a VM**, use the following code: ```go theme={null} diskAttachMode := compute.AttachedDiskSpec_READ_WRITE filesystemAttachMode := compute.AttachedFilesystemSpec_READ_WRITE existingFS := &compute.ExistingFilesystem{ Id: filesystemID, } fsType := &compute.AttachedFilesystemSpec_ExistingFilesystem{ ExistingFilesystem: existingFS, } instanceOperation, err := sdk.Services().Compute().V1(). Instance().Create( ctx, &compute.CreateInstanceRequest{ Metadata: &common.ResourceMetadata{ Name: "vm-name", }, Spec: &compute.InstanceSpec{ Stopped: false, Resources: &compute.ResourcesSpec{ Platform: "cpu-e2", Size: &compute.ResourcesSpec_Preset{ Preset: "2vcpu-8gb", }, }, BootDisk: &compute.AttachedDiskSpec{ AttachMode: diskAttachMode, Type: &compute.AttachedDiskSpec_ExistingDisk{ ExistingDisk: &compute.ExistingDisk{ Id: bootDiskID1, }, }, }, SecondaryDisks: []*compute.AttachedDiskSpec{ { AttachMode: diskAttachMode, Type: &compute.AttachedDiskSpec_ExistingDisk{ ExistingDisk: &compute.ExistingDisk{ Id: additionalDiskID, }, }, DeviceId: "device-0", }, }, Filesystems: []*compute.AttachedFilesystemSpec{ { AttachMode: filesystemAttachMode, MountTag: "mount-tag-1", Type: fsType, }, }, NetworkInterfaces: []*compute.NetworkInterfaceSpec{ { Name: "ni", SubnetId: subnetID, IpAddress: &compute.IPAddress{}, PublicIpAddress: &compute.PublicIPAddress{}, }, }, }, }, ) if err != nil { return err } if _, err = instanceOperation.Wait(ctx); err != nil { return err } vmID := instanceOperation.ResourceID() ``` * To **attach disks to an existing VM**, use the following code: ```go theme={null} instance, err := sdk.Services().Compute().V1(). Instance().Get( ctx, &compute.GetInstanceRequest{ Id: "", }, ) if err != nil { return err } if instance.GetSpec() == nil { return errors.New("instance spec is missing") } instance.Spec.SecondaryDisks = []*compute.AttachedDiskSpec{ { AttachMode: compute.AttachedDiskSpec_READ_WRITE, Type: &compute.AttachedDiskSpec_ExistingDisk{ ExistingDisk: &compute.ExistingDisk{ Id: additionalDiskID, }, }, DeviceId: "device-0", }, } instanceOperation, err = sdk.Services().Compute().V1(). Instance().Update( ctx, &compute.UpdateInstanceRequest{ Metadata: instance.Metadata, Spec: instance.Spec, }, ) if err != nil { return err } if _, err = instanceOperation.Wait(ctx); err != nil { return err } ``` To get the ID of an existing VM: ```go theme={null} instances, err := sdk.Services().Compute().V1(). Instance().List(ctx, &compute.ListInstancesRequest{}) if err != nil { return err } fmt.Println(instances) ``` When updating an existing VM, preserve the disks or shared filesystems that must stay attached. The examples replace the corresponding attachment list in the VM specification. * To **attach shared filesystems to an existing VM**, stop the VM first: ```go theme={null} instanceOperation, err = sdk.Services().Compute().V1(). Instance().Stop( ctx, &compute.StopInstanceRequest{ Id: "", }, ) if err != nil { return err } if _, err = instanceOperation.Wait(ctx); err != nil { return err } ``` Then update the VM: ```go theme={null} instance, err = sdk.Services().Compute().V1(). Instance().Get( ctx, &compute.GetInstanceRequest{ Id: "", }, ) if err != nil { return err } if instance.GetSpec() == nil { return errors.New("instance spec is missing") } instance.Spec.Filesystems = []*compute.AttachedFilesystemSpec{ { AttachMode: compute.AttachedFilesystemSpec_READ_WRITE, MountTag: "mount-tag-1", Type: &compute.AttachedFilesystemSpec_ExistingFilesystem{ ExistingFilesystem: &compute.ExistingFilesystem{ Id: filesystemID, }, }, }, } instanceOperation, err = sdk.Services().Compute().V1(). Instance().Update( ctx, &compute.UpdateInstanceRequest{ Metadata: instance.Metadata, Spec: instance.Spec, }, ) if err != nil { return err } if _, err = instanceOperation.Wait(ctx); err != nil { return err } ``` When updating an existing VM, preserve the disks or shared filesystems that must stay attached. The examples replace the corresponding attachment list in the VM specification. After the update, start the VM: ```go theme={null} instanceOperation, err = sdk.Services().Compute().V1(). Instance().Start( ctx, &compute.StartInstanceRequest{ Id: "", }, ) if err != nil { return err } if _, err = instanceOperation.Wait(ctx); err != nil { return err } ``` 1. [Create the volumes](/compute/storage/manage). 2. Set the attachment parameters in the code examples: In the code examples, set the attachment parameters: * For disks, set the attach mode, existing disk ID and device ID. * For shared filesystems, set the attach mode, existing filesystem ID and mount tag. Create your own mount tag, such as `my-filesystem`. Make sure that it is unique within a VM. If you do not specify the tag, it takes the `filesystem-N` default value where `N` is an integer. For example, `filesystem-0`. 3. Create or update a VM with the volumes configured: * To **create a VM**, use the following code: ```python theme={null} instance_service = InstanceServiceClient(sdk) create_instance_operation = await instance_service.create( CreateInstanceRequest( metadata=ResourceMetadata( name="vm-name", ), spec=InstanceSpec( stopped=False, resources=ResourcesSpec( platform="cpu-e2", preset="2vcpu-8gb", ), boot_disk=AttachedDiskSpec( attach_mode=AttachedDiskSpec.AttachMode.READ_WRITE, existing_disk=ExistingDisk(id=boot_disk_id_1), ), secondary_disks=[ AttachedDiskSpec( attach_mode=AttachedDiskSpec.AttachMode.READ_WRITE, existing_disk=ExistingDisk(id=additional_disk_id), device_id="device-0", ), ], filesystems=[ AttachedFilesystemSpec( attach_mode=AttachedFilesystemSpec.AttachMode.READ_WRITE, existing_filesystem=ExistingFilesystem(id=filesystem_id), mount_tag="mount-tag-1", ), ], network_interfaces=[ NetworkInterfaceSpec( name="ni", subnet_id=subnet_id, ip_address=IPAddress(), public_ip_address=PublicIPAddress(), ), ], ), ), ) await create_instance_operation.wait() vm_id = create_instance_operation.resource_id ``` * To **attach disks to an existing VM**, use the following code: ```python theme={null} instance_service = InstanceServiceClient(sdk) instance = await instance_service.get( GetInstanceRequest(id=""), ) if instance.spec is None: raise ValueError("instance spec is missing") instance.spec.secondary_disks = [ AttachedDiskSpec( attach_mode=AttachedDiskSpec.AttachMode.READ_WRITE, existing_disk=ExistingDisk(id=additional_disk_id), device_id="device-0", ), ] attach_disk_operation = await instance_service.update( UpdateInstanceRequest( metadata=instance.metadata, spec=instance.spec, ), ) await attach_disk_operation.wait() ``` To get the ID of an existing VM: ```python theme={null} instance_service = InstanceServiceClient(sdk) instances = await instance_service.list( ListInstancesRequest(), ) print(instances) ``` When updating an existing VM, preserve the disks or shared filesystems that must stay attached. The examples replace the corresponding attachment list in the VM specification. * To **attach shared filesystems to an existing VM**, stop the VM first: ```python theme={null} instance_service = InstanceServiceClient(sdk) stop_instance_operation = await instance_service.stop( StopInstanceRequest(id=""), ) await stop_instance_operation.wait() ``` Then update the VM: ```python theme={null} instance_service = InstanceServiceClient(sdk) instance = await instance_service.get( GetInstanceRequest(id=""), ) if instance.spec is None: raise ValueError("instance spec is missing") instance.spec.filesystems = [ AttachedFilesystemSpec( attach_mode=AttachedFilesystemSpec.AttachMode.READ_WRITE, existing_filesystem=ExistingFilesystem(id=filesystem_id), mount_tag="mount-tag-1", ), ] attach_filesystem_operation = await instance_service.update( UpdateInstanceRequest( metadata=instance.metadata, spec=instance.spec, ), ) await attach_filesystem_operation.wait() ``` When updating an existing VM, preserve the disks or shared filesystems that must stay attached. The examples replace the corresponding attachment list in the VM specification. After the update, start the VM: ```python theme={null} instance_service = InstanceServiceClient(sdk) start_instance_operation = await instance_service.start( StartInstanceRequest(id=""), ) await start_instance_operation.wait() ``` 1. [Create the volumes](/compute/storage/manage). 2. Set the attachment parameters in the code examples: In the code examples, set the attachment parameters: * For disks, set the attach mode, existing disk ID and device ID. * For shared filesystems, set the attach mode, existing filesystem ID and mount tag. Create your own mount tag, such as `my-filesystem`. Make sure that it is unique within a VM. If you do not specify the tag, it takes the `filesystem-N` default value where `N` is an integer. For example, `filesystem-0`. 3. Create or update a VM with the volumes configured: * To **create a VM**, use the following code: ```ts theme={null} const createInstanceService = new InstanceService(sdk); const createInstanceOperation = await createInstanceService.create( CreateInstanceRequest.create({ metadata: ResourceMetadata.create({ name: "vm-name", }), spec: InstanceSpec.create({ stopped: false, resources: ResourcesSpec.create({ platform: "cpu-e2", size: { $case: "preset", preset: "2vcpu-8gb", }, }), bootDisk: AttachedDiskSpec.create({ attachMode: AttachedDiskSpec_AttachMode.READ_WRITE, type: { $case: "existingDisk", existingDisk: ExistingDisk.create({ id: bootDiskId1, }), }, }), secondaryDisks: [ AttachedDiskSpec.create({ attachMode: AttachedDiskSpec_AttachMode.READ_WRITE, deviceId: "device-0", type: { $case: "existingDisk", existingDisk: ExistingDisk.create({ id: additionalDiskId, }), }, }), ], filesystems: [ AttachedFilesystemSpec.create({ attachMode: AttachedFilesystemSpec_AttachMode.READ_WRITE, mountTag: "mount-tag-1", type: { $case: "existingFilesystem", existingFilesystem: ExistingFilesystem.create({ id: filesystemId, }), }, }), ], networkInterfaces: [ NetworkInterfaceSpec.create({ name: "ni", subnetId: subnetId, ipAddress: IPAddress.create({}), publicIpAddress: PublicIPAddress.create({}), }), ], }), }), ).result; await createInstanceOperation.wait(); const vmId = createInstanceOperation.resourceId(); ``` * To **attach disks to an existing VM**, use the following code: ```ts theme={null} const attachDiskService = new InstanceService(sdk); const instanceForDiskAttach = await attachDiskService.get( GetInstanceRequest.create({ id: "", }), ); if (!instanceForDiskAttach.spec) { throw new Error("instance spec is missing"); } instanceForDiskAttach.spec.secondaryDisks = [ AttachedDiskSpec.create({ attachMode: AttachedDiskSpec_AttachMode.READ_WRITE, deviceId: "device-0", type: { $case: "existingDisk", existingDisk: ExistingDisk.create({ id: additionalDiskId, }), }, }), ]; const attachDiskOperation = await attachDiskService.update( UpdateInstanceRequest.create({ metadata: instanceForDiskAttach.metadata, spec: instanceForDiskAttach.spec, }), ).result; await attachDiskOperation.wait(); ``` To get the ID of an existing VM: ```ts theme={null} const listInstanceService = new InstanceService(sdk); const instanceList = await listInstanceService.list( ListInstancesRequest.create({}), ); console.log(instanceList); ``` When updating an existing VM, preserve the disks or shared filesystems that must stay attached. The examples replace the corresponding attachment list in the VM specification. * To **attach shared filesystems to an existing VM**, stop the VM first: ```ts theme={null} const stopInstanceService = new InstanceService(sdk); const stopInstanceOperation = await stopInstanceService.stop( StopInstanceRequest.create({ id: "", }), ).result; await stopInstanceOperation.wait(); ``` Then update the VM: ```ts theme={null} const attachFilesystemService = new InstanceService(sdk); const instanceForFilesystemAttach = await attachFilesystemService.get( GetInstanceRequest.create({ id: "", }), ); if (!instanceForFilesystemAttach.spec) { throw new Error("instance spec is missing"); } instanceForFilesystemAttach.spec.filesystems = [ AttachedFilesystemSpec.create({ attachMode: AttachedFilesystemSpec_AttachMode.READ_WRITE, mountTag: "mount-tag-1", type: { $case: "existingFilesystem", existingFilesystem: ExistingFilesystem.create({ id: filesystemId, }), }, }), ]; const attachFilesystemOperation = await attachFilesystemService.update( UpdateInstanceRequest.create({ metadata: instanceForFilesystemAttach.metadata, spec: instanceForFilesystemAttach.spec, }), ).result; await attachFilesystemOperation.wait(); ``` When updating an existing VM, preserve the disks or shared filesystems that must stay attached. The examples replace the corresponding attachment list in the VM specification. After the update, start the VM: ```ts theme={null} const startInstanceService = new InstanceService(sdk); const startInstanceOperation = await startInstanceService.start( StartInstanceRequest.create({ id: "", }), ).result; await startInstanceOperation.wait(); ``` You can also attach a VM-tied boot disk to another VM, so you can investigate and troubleshoot this boot disk. For more information, see [How to inspect a VM and attach its boot disk to another VM](/compute/virtual-machines/inspect-boot-disk). ## How to mount volumes to VMs ### Disks 1. [Attach the disk to a VM](#how-to-attach-volumes-to-vms). 2. If you have not saved the disk's device ID, for example, when adding it to the VM, get it from the information about the VM: ```bash theme={null} nebius compute instance get --id --format json \ | jq -r --arg disk_id \ '.spec.secondary_disks[] | select(.existing_disk.id == $disk_id) | .device_id' ``` To get the VM ID, run nebius compute instance list. To get the disk ID, run nebius compute disk list. ```go theme={null} instance, err = sdk.Services().Compute().V1(). Instance().Get( ctx, &compute.GetInstanceRequest{ Id: "", }, ) if err != nil { return err } if instance.GetSpec() == nil { return errors.New("instance spec is missing") } deviceID := "" for _, secondaryDisk := range instance.GetSpec().GetSecondaryDisks() { existingDisk := secondaryDisk.GetExistingDisk() if existingDisk != nil && existingDisk.GetId() == "" { deviceID = secondaryDisk.GetDeviceId() break } } if deviceID == "" { return errors.New("device id is missing") } fmt.Println(deviceID) ``` To get the VM ID, run: ```go theme={null} instances, err := sdk.Services().Compute().V1(). Instance().List(ctx, &compute.ListInstancesRequest{}) if err != nil { return err } fmt.Println(instances) ``` For the disk ID, use the ID of the disk that you attached. ```python theme={null} instance_service = InstanceServiceClient(sdk) instance = await instance_service.get( GetInstanceRequest(id=""), ) if instance.spec is None: raise ValueError("instance spec is missing") device_id = next( secondary_disk.device_id for secondary_disk in instance.spec.secondary_disks if secondary_disk.existing_disk is not None and secondary_disk.existing_disk.id == "" ) print(device_id) ``` To get the VM ID, run: ```python theme={null} instance_service = InstanceServiceClient(sdk) instances = await instance_service.list( ListInstancesRequest(), ) print(instances) ``` For the disk ID, use the ID of the disk that you attached. ```ts theme={null} const getDeviceIdService = new InstanceService(sdk); const instanceForDeviceLookup = await getDeviceIdService.get( GetInstanceRequest.create({ id: "", }), ); const deviceId = instanceForDeviceLookup.spec?.secondaryDisks.find( (secondaryDisk) => secondaryDisk.type?.$case === "existingDisk" && secondaryDisk.type.existingDisk.id === "", )?.deviceId; if (!deviceId) { throw new Error("device id is missing"); } console.log(deviceId); ``` To get the VM ID, run: ```ts theme={null} const listInstanceService = new InstanceService(sdk); const instanceList = await listInstanceService.list( ListInstancesRequest.create({}), ); console.log(instanceList); ``` For the disk ID, use the ID of the disk that you attached. 3. [Connect to the VM over SSH](/compute/virtual-machines/connect#connect-to-the-vm-by-using-ssh). 4. Switch to the `root` user: ```bash theme={null} sudo su - ``` 5. Partition the device. For example, you can use `cfdisk`. In the example below, we assume that you have named the device `disk-0`; for disks, all device IDs are prefixed with `virtio-`: 1. Run `cfdisk`: ```bash theme={null} cfdisk /dev/disk/by-id/virtio-disk-0 ``` Referring to a device by its name, e.g., `/dev/vdb`, does not guarantee it will function properly. Use the device ID instead, e.g., `/dev/disk/by-id/virtio-disk-0`. 2. Under **Select label type**, select **gpt** and press **Enter**. 3. Select **New** (partition) and press **Enter**. 4. Enter the partition size and press **Enter**. This will create a `/dev/disk/by-id/virtio-disk-0-part1` partition. 5. Select **Write** (the partition table to the device) and press **Enter**, then type `yes` and press **Enter**. 6. Select **Quit** and press **Enter**. 6. Format the partition: ```bash theme={null} mkfs.ext4 /dev/disk/by-id/virtio-disk-0-part1 ``` 7. Mount the partition and configure permissions for it by using `chmod`. In the example below, the partition is mounted at `/mnt/disk-0`, and all VM users are granted write access to it: ```bash theme={null} mkdir /mnt/disk-0 mount /dev/disk/by-id/virtio-disk-0-part1 /mnt/disk-0 chmod a+w /mnt/disk-0 ``` 8. If you want the partition to be mounted automatically after every VM restart, add it to `/etc/fstab` by its UUID: ```bash theme={null} echo "UUID=$(blkid -s UUID -o value /dev/disk/by-id/virtio-disk-0-part1) /mnt/disk-0 ext4 defaults,nofail 0 2" >> /etc/fstab ``` Do not omit `nofail`. If it is not specified and the VM cannot find the partition on restart (for example, the disk has been repartitioned), the VM will not boot. 9. Exit the `root` user shell: ```bash theme={null} exit ``` ### Shared filesystems If you create a VM in the web console, you can automatically attach and mount a shared filesystem to the VM by using the **Auto mount** option. If you do not use it, mount the filesystem manually. To do this: 1. [Attach the shared filesystem to a VM](#how-to-attach-volumes-to-vms). 2. If you have not saved the filesystem's mount tag, for example, when adding it to the VM, get the mount tag from the information about the VM: ```bash theme={null} nebius compute instance get --id --format json \ | jq -r --arg fs_id \ '.spec.filesystems[] | select(.existing_filesystem.id == $fs_id) | .mount_tag' ``` To get the VM ID, run nebius compute instance list. To get the filesystem ID, run nebius compute filesystem list. ```go theme={null} instance, err = sdk.Services().Compute().V1(). Instance().Get( ctx, &compute.GetInstanceRequest{ Id: "", }, ) if err != nil { return err } if instance.GetSpec() == nil { return errors.New("instance spec is missing") } mountTag := "" for _, filesystem := range instance.GetSpec().GetFilesystems() { existingFilesystem := filesystem.GetExistingFilesystem() if existingFilesystem != nil && existingFilesystem.GetId() == "" { mountTag = filesystem.GetMountTag() break } } if mountTag == "" { return errors.New("mount tag is missing") } fmt.Println(mountTag) ``` To get the VM ID, run: ```go theme={null} instances, err := sdk.Services().Compute().V1(). Instance().List(ctx, &compute.ListInstancesRequest{}) if err != nil { return err } fmt.Println(instances) ``` For the filesystem ID, use the ID of the filesystem that you attached. ```python theme={null} instance_service = InstanceServiceClient(sdk) instance = await instance_service.get( GetInstanceRequest(id=""), ) if instance.spec is None: raise ValueError("instance spec is missing") mount_tag = next( filesystem.mount_tag for filesystem in instance.spec.filesystems if filesystem.existing_filesystem is not None and filesystem.existing_filesystem.id == "" ) print(mount_tag) ``` To get the VM ID, run: ```python theme={null} instance_service = InstanceServiceClient(sdk) instances = await instance_service.list( ListInstancesRequest(), ) print(instances) ``` For the filesystem ID, use the ID of the filesystem that you attached. ```ts theme={null} const getMountTagService = new InstanceService(sdk); const instanceForMountLookup = await getMountTagService.get( GetInstanceRequest.create({ id: "", }), ); const mountTag = instanceForMountLookup.spec?.filesystems.find( (filesystem) => filesystem.type?.$case === "existingFilesystem" && filesystem.type.existingFilesystem.id === "", )?.mountTag; if (!mountTag) { throw new Error("mount tag is missing"); } console.log(mountTag); ``` To get the VM ID, run: ```ts theme={null} const listInstanceService = new InstanceService(sdk); const instanceList = await listInstanceService.list( ListInstancesRequest.create({}), ); console.log(instanceList); ``` For the filesystem ID, use the ID of the filesystem that you attached. 3. [Connect to the VM over SSH](/compute/virtual-machines/connect#connect-to-the-vm-by-using-ssh). 4. Switch to the `root` user: ```bash theme={null} sudo su - ``` 5. Mount the filesystem as a `virtiofs` device and configure permissions for it by using `chmod`. In the example below, a filesystem has the mount tag `filesystem-0` and is mounted at `/mnt/fs`. All VM users are granted write access to it: ```bash theme={null} mkdir /mnt/fs mount -t virtiofs filesystem-0 /mnt/fs chmod a+w /mnt/fs ``` 6. If you want the filesystem to be mounted automatically after every VM restart, add it to `/etc/fstab`: ```bash theme={null} echo "filesystem-0 /mnt/fs virtiofs rw,nofail 0 0" >> /etc/fstab ``` Do not omit `nofail`. If it is not specified and the VM cannot find the filesystem on restart (for example, it has been deleted), the VM will not boot. 7. Exit the `root` user shell: ```bash theme={null} exit ``` ## See also * [How to detach additional volumes from virtual machines](/compute/storage/detach-volume) * [Types of storage volumes in Compute](/compute/storage/types) * [Managing Compute volumes](/compute/storage/manage) * [How to create a virtual machine in Nebius AI Cloud](/compute/virtual-machines/manage) # Managing applications with the Virtual machine deployment option Source: https://docs.nebius.com/compute/virtual-machines/applications Nebius AI Cloud provides several applications that you can deploy by using the **Virtual machine** deployment option on [Compute virtual machines](/compute/virtual-machines/manage). For example, you can deploy AI models, development environments or data processing tools. For information about deploying applications, see [Deploying applications in Nebius AI Cloud](/applications/deploy). ## Prerequisites For managing an application with the Virtual machine deployment option: Make sure you are in a [group](/iam/authorization/groups/index) that has at least the `editor` role within your tenant or project; for example, the default `editors` group. You can check this in the [Administration → IAM](https://console.nebius.com/iam) section of the web console. ## How to find and deploy an application To see the list of applications with the **Virtual machine** deployment option and deploy an application: 1. In the sidebar, go to **Applications**. 2. In the **Deployment** dropdown, select **Virtual machine** to see only applications that support the **Virtual machine** deployment option. 3. Choose an application, open its page and click **Deploy**. 4. Configure the application. You can specify the VM platform, preset, network settings and other parameters according to your needs. 5. Click **Deploy application**. 6. Wait until the application is deployed and running. ## How to delete an application 1. In the sidebar, go to **Applications**. 2. Go to the **Installed** tab to see your deployed applications. 3. Find the application you want to delete and open it. 4. On the application details page, go to the **Settings** tab. 5. Click **Delete application**. 6. To confirm that you want to delete the application, enter its name and click **Delete application**. When you delete an application deployed with the **Virtual machine** deployment option, the underlying virtual machine is also deleted. Applications deployed with this option are subject to Compute [charges](/compute/resources/pricing) and [quotas](/compute/resources/quotas-limits). # Running applications and custom containers on virtual machines Source: https://docs.nebius.com/compute/virtual-machines/applications-containers In Nebius AI Cloud, you can run applications in [containers over virtual machines (VMs)](/compute/virtual-machines/containers). A container over VM allows you to launch a VM with a pre-installed container image, such as Jupyter Notebook, or a custom Docker image from a public registry. Containers over VMs are useful when you want to quickly deploy an application environment without manually configuring the VM or installing dependencies. This tutorial demonstrates two alternative ways to run containers over VMs: * [Run a container over VM with a pre-installed application image](#run-a-container-over-vm-with-a-pre-installed-application-image) * [Run a container over VM with a custom Docker image from the public registry](#run-a-container-over-vm-with-a-custom-docker-image) ## Costs The tutorial includes the following chargeable resources: * [Compute virtual machines](/compute/resources/pricing#virtual-machines-gpus-vcpus-ram) * [Compute disks](/compute/resources/pricing#disks) ## Prerequisites Generate an [SSH key pair](/compute/virtual-machines/ssh-keys). ## Steps ### Run a container over VM with a pre-installed application image #### Create a single-GPU VM with Jupyter Notebook 1. In the [web console](https://console.nebius.com), go to  **Compute** → **Container VMs**. 2. Click  **Create container over VM**. 3. Specify the VM name. 4. Select the **Jupyter Notebook** container image. 5. Copy and save the token that appears. You will need this token later to access the JupyterLab web interface. 6. In **Computing resources**, configure the VM with one GPU. For example, select NVIDIA® L40S PCIe with Intel Ice Lake and keep the predefined preset with eight CPUs. 7. In **Local storage**, specify the disk size. 8. In **Access**, add new credentials or select existing ones. To add new credentials: 1. Specify the username. Do not use the `root` or `admin` usernames. They are reserved for internal needs and cannot be used for SSH access. 2. Copy the contents of the `.pub` file generated earlier and paste it into the **Public key** field. 3. Click **Add credentials**. 9. Click **Create container over VM**. #### Launch Jupyter Notebook When the container over VM is running, connect to the application: 1. In **Container VMs**, open the page of the created VM. 2. Click **Go to Web UI** at the top of the VM page. 3. When prompted, paste the token into the authentication field and click **Log in**. If you did not save the Jupyter token earlier, you can copy it from the **Container parameters** section on the container over VM page. 4. In JupyterLab, create a new notebook. 5. Run the following code. It shows information about available GPUs: ```python theme={null} import torch if torch.cuda.is_available(): print("CUDA is available. PyTorch can use your GPU.") print(f"Number of GPUs available: {torch.cuda.device_count()}") print(f"GPU Name: {torch.cuda.get_device_name()}") else: print("CUDA is not available. PyTorch will run on CPU.") ``` Example output: ```text theme={null} CUDA is available. PyTorch can use your GPU. Number of GPUs available: 1 GPU Name: NVIDIA L40S ``` #### Benchmark a VM with one GPU Run a simple benchmark to measure how long the GPU takes to multiply large matrices. This test multiplies two 30,000×30,000 tensors several times and measures the total execution time. Later in the tutorial, you will repeat the same benchmark on a VM with eight GPUs and compare the results. Run the following code: ```python theme={null} import torch import time device = torch.device("cuda" if torch.cuda.is_available() else "cpu") matrix_size = 30000 a = torch.randn(matrix_size, matrix_size, device=device) b = torch.randn(matrix_size, matrix_size, device=device) num_runs = 10 for _ in range(3): torch.matmul(a, b) torch.cuda.synchronize() start_time = time.time() for _ in range(num_runs): torch.matmul(a, b) torch.cuda.synchronize() end_time = time.time() average_time = (end_time - start_time) print(f"Time for {num_runs} matrix multiplications ({matrix_size}x{matrix_size}): {average_time:.4f} seconds") ``` Example output: ```text theme={null} Time for 10 matrix multiplications (30000x30000): 16.7096 seconds ``` In this benchmark test, CUDA synchronization ensures that each multiplication finishes before the next one starts, which makes the timing more accurate. #### Replace the VM with an 8-GPU VM while preserving data To scale from one GPU to eight GPUs and keep your notebooks: 1. Delete the current VM. When deleting the VM, select the option to keep the boot disk. 2. Create a new container over VM as described in the [Create a single-GPU VM with Jupyter Notebook](#create-a-single-gpu-vm-with-jupyter-notebook) section, but: * In **Computing resources**, choose a configuration with eight GPUs * Attach the existing disk that contains your data as an additional disk #### Benchmark a VM with eight GPUs Run the benchmark test again on the VM with eight GPUs to measure how the workload performs after scaling. 1. Go to Jupyter Notebook and open your existing notebook. 2. Replace the benchmark code with: ```python theme={null} import torch import time num_gpus = torch.cuda.device_count() matrix_size = 30000 num_runs = 10 chunk_size = matrix_size // num_gpus B_cpu = torch.randn(matrix_size, matrix_size) B_chunks = [B_cpu.to(f"cuda:{i}") for i in range(num_gpus)] A_chunks = [torch.randn(chunk_size, matrix_size, device=f"cuda:{i}") for i in range(num_gpus)] start_time = time.time() for _ in range(num_runs): C_chunks = [] for i in range(num_gpus): C = A_chunks[i] @ B_chunks[i] C_chunks.append(C) for i in range(num_gpus): torch.cuda.synchronize(i) end_time = time.time() print(f"Time for {num_runs} multi-GPU matrix multiplications ({matrix_size}x{matrix_size}): {(end_time - start_time):.4f} seconds") ``` Example output: ```text theme={null} Time for 10 multi-GPU matrix multiplications (30000x30000): 1.3283 seconds. ``` This demonstrates the performance improvement when scaling from one GPU to eight GPUs. ### Run a container over VM with a custom Docker image In the previous section, you deployed a container over VM by using a pre-installed application image with Jupyter Notebook. You can also deploy containers with custom Docker images from public registries. In this section, you will create a container over VM by using a Docker image from Docker Hub and access the application running inside the container. The [TensorFlow Jupyter image](https://hub.docker.com/r/tensorflow/tensorflow) is used as an example. This image includes both **TensorFlow** and **Jupyter Notebook**, so you can run TensorFlow workloads directly in a notebook environment. #### Create a container over VM with a custom Docker image 1. In the [web console](https://console.nebius.com), go to  **Compute** → **Container VMs**. 2. Click  **Create container over VM**. 3. Specify the VM name. 4. Select **Custom Image**. 5. In **Docker Image**, enter `tensorflow/tensorflow:nightly-gpu-jupyter`. 6. In **Docker run arguments**, specify `--restart=always --gpus all --shm-size=16GB -p 8888:8888`. These arguments enable GPU access, allocate shared memory and expose port 8888 for Jupyter Notebook. 7. In **Computing resources**, use at least one GPU. 8. In **Local storage**, specify the disk size. 9. In **Access**, select the previously created credentials. 10. Click **Create container over VM**. #### Connect to the VM When the container over VM is running, connect to the application: 1. In the **Container VMs** section, open the page of the VM with the custom Docker image installed. 2. In the **Network** section, copy the **Public IPv4** address. 3. Connect to the VM by using SSH: ```bash theme={null} ssh @ ``` 4. List the running containers and copy the name of the TensorFlow container: ```bash theme={null} sudo docker ps ``` 5. Get the Jupyter token: ```bash theme={null} sudo docker logs ``` 6. Open in browser `http://:8888/?token=`. 7. In JupyterLab, create a new notebook and run the following code to verify that TensorFlow works in the container: ```python theme={null} import tensorflow as tf import time matrix_size = 10000 a = tf.random.normal([matrix_size, matrix_size]) b = tf.random.normal([matrix_size, matrix_size]) start = time.time() c = tf.matmul(a, b) _ = c.numpy() end = time.time() print(f"Matrix multiplication ({matrix_size}x{matrix_size}) took {end - start:.4f} ``` Example output: ```text theme={null} Matrix multiplication (10000x10000) took 1.9316 seconds ``` This example performs large matrix multiplication by using TensorFlow and prints the execution time. ## How to delete the created resources The created Compute VMs and their boot disks are chargeable. If you do not need them, delete the resources created during this tutorial: 1. Go to  **Compute** → **Container VMs**. 2. Open the VM page. 3. Switch to **Settings**. 4. Click **Delete virtual machine**. 5. In the window that opens, select **Delete the boot disk**. 6. Confirm the deletion. 7. Repeat these steps for any other VMs created during this tutorial. # Capacity advisor for GPU availability in Nebius AI Cloud Source: https://docs.nebius.com/compute/virtual-machines/capacity-advisor Nebius AI Cloud's *capacity advisor* provides insights into GPU capacity availability for launching virtual machines (VMs) with specific hardware presets. It helps you understand where you can launch VMs based on your [quotas](/compute/resources/quotas-limits) and the current physical capacity in Nebius AI Cloud [regions](/overview/regions). ## Scope The capacity advisor provides data for the following virtual machines with GPUs: * **By service**: * VMs that you create directly in Compute * [Managed Soperator](/slurm-soperator/index) nodes * [Managed Kubernetes®](/kubernetes/index) nodes * VMs launched by [Serverless AI](/serverless/index) for running jobs and endpoints * **By type**: * [Regular VMs](/compute/virtual-machines/manage) * [Preemptible VMs](/compute/virtual-machines/preemptible) * [VMs with reservations](/compute/virtual-machines/reservations) * [Containers over VMs](/compute/virtual-machines/containers) Data about computing resource availability of [standalone applications](/applications/types) and VMs without GPUs isn't provided. Data provided by the capacity advisor is accurate as of a specific timestamp included in the data and doesn't guarantee availability of GPU resources at creation time. ## Prerequisites 1. [Install](/cli/install) and [configure](/cli/configure) the Nebius AI Cloud CLI. 2. Nebius AI Cloud provider for Terraform doesn't support the capacity advisor. ## How to get data from the capacity advisor In the sidebar, go to  **Administration** → **Capacity dashboard**. For each VM platform, preset, region, InfiniBand™ fabric and VM type (regular, preemptible or with reservations), the capacity advisor shows: * How many VMs you can launch, based on your quotas and the current physical capacity (for regular and [preemptible](/compute/virtual-machines/preemptible) VMs) or on your active [capacity reservations](/compute/virtual-machines/reservations) (for VMs with reservations). * How likely you are to be able to launch the displayed number of regular or preemptible VMs. > For example, if your quota for a certain kind of VMs is 10 VMs, you have a high chance of launching them all when the overall capacity is in the hundreds, but a low chance when the capacity is less than 10 VMs. As reservations guarantee you a certain number of GPUs that aren't subject to quotas, the chance of launch isn't displayed for VMs with reservations. 1. Get the tenant ID. To get the tenant ID, go to the [web console](https://console.nebius.com) and expand the top-left list of tenants. Next to the tenant’s name, click → **Copy tenant ID**. 2. Run `nebius capacity resource-advice list` to get the capacity advisor data: ```bash theme={null} nebius capacity resource-advice list --parent-id ``` In the output, each list item contains data for a single combination of VM platform, preset, region, InfiniBand fabric and VM type: ```yaml highlight={3-8,15-16,19-22,25-28} theme={null} items: - spec: region: eu-north1 fabric: fabric-2 compute_instance: platform: gpu-h100-sxm preset: name: 1gpu-16vcpu-200gb resources: vcpu_count: 16 memory_gibibytes: 200 gpu_count: 1 gpu_memory_gigabytes: 80 status: reserved: availability_level: AVAILABILITY_LEVEL_LIMIT_REACHED data_state: DATA_STATE_FRESH effective_at: "2026-03-27T11:25:55.695087Z" on_demand: available: 24 limit: 32 availability_level: AVAILABILITY_LEVEL_HIGH data_state: DATA_STATE_FRESH effective_at: "2026-03-27T11:08:07.360Z" preemptible: available: 22 limit: 128 availability_level: AVAILABILITY_LEVEL_MEDIUM data_state: DATA_STATE_FRESH effective_at: "2026-03-27T11:08:07.360Z" ... ``` In the `.items[*].status` fields, `on_demand`, `preemptible` and `reserved` contain data about regular VMs, preemptible VMs and VMs with reservations, respectively. Each of these fields contains the following data: * `available`: Maximum number of VMs that you can launch, based on your quotas and the current physical capacity. * `limit`: Your current quota. * `availability_level`: Level of resource availability. Possible values: * `AVAILABILITY_LEVEL_LOW`: **Low chance of launch** — Available capacity is significantly lower than your quota. Creating resources might not be possible. * `AVAILABILITY_LEVEL_MEDIUM`: **Medium chance of launch** — Available capacity is lower than your quota. Creating resources is possible, but may fail. * `AVAILABILITY_LEVEL_HIGH`: **High chance of launch** — Available capacity is enough to fully satisfy your quota. * `AVAILABILITY_LEVEL_LIMIT_REACHED`: **Launch impossible** — No available capacity. * `data_state`: State of the data. Possible values: * `DATA_STATE_FRESH`: Data is up to date (fetched recently). * `DATA_STATE_STALE`: Data is stale (fetched a long time ago). * `DATA_STATE_UNKNOWN`: Capacity advisor failed to fetch data. * `effective_at`: Timestamp of the last update. # How to connect to virtual machines in Nebius AI Cloud Source: https://docs.nebius.com/compute/virtual-machines/connect Safe connection to the VM over SSH uses a key pair: you place the public key on the VM and store the private key on your device. ## Set up the VM To be able to connect to the VM, define specific information during the [VM creation](/compute/virtual-machines/manage). ### Generate a key pair Generate an [SSH key pair](/compute/virtual-machines/ssh-keys). You will need the [contents of the public key](/compute/virtual-machines/ssh-keys#getting-the-public-key) and the path to your private key in later steps. ### Configure the user data User configuration helps to quickly create VMs with identical user data: it stores your username and the public key for the access to the VM. Create a configuration in the [cloud-init](https://cloudinit.readthedocs.io/en/latest/reference/modules.html#users-and-groups) format: ```bash theme={null} export USER_DATA=$(jq -Rrs '.' <"}` with an [allocation](/vpc/overview#allocation) ID. This way the public IP address is preserved as an allocation object and you can reuse it for another VM after deleting this one. 1. Get the default subnet's ID: ```bash theme={null} export SUBNET_ID=$(nebius vpc subnet list \ --format json \ | jq -r ".items[0].metadata.id") ``` 2. Create an [allocation](/vpc/overview#allocation) by using the default subnet's ID: ```bash theme={null} export ALLOCATION_ID=$(nebius vpc allocation create \ --ipv4-public-subnet-id $SUBNET_ID \ --name allocation-name \ --format json \ | jq -r ".metadata.id") ``` If an allocation with a public address has not been assigned to any resource for 30 days, Nebius AI Cloud can delete this allocation and release its address. If you want to preserve the address, assign its allocation to a Nebius AI Cloud resource. Example: ```bash theme={null} nebius compute instance create \ --name inference-vm \ --resources-platform \ --resources-preset \ --boot-disk-existing-disk-id \ --boot-disk-attach-mode READ_WRITE \ --cloud-init-user-data "$USER_DATA" \ --network-interfaces '[{"name": "eth0", "subnet_id": "", "ip_address": {}, "public_ip_address": {"allocation_id": ""}}]' ``` For the full set of parameters and more examples, see [How to create a virtual machine in Nebius AI Cloud](/compute/virtual-machines/manage#examples). ## Connect to the VM by using SSH **Requirements to connect to a private IP address or FQDN** To connect to a VM from another VM by using a [private IP address](/compute/virtual-machines/network#private-ip-addresses) or an [FQDN](/compute/virtual-machines/fqdn), both VMs must be in the same network. 1. Get your VM's IP address and save it to an environment variable: To connect to the VM from the internet (if you have enabled public access to it), get its public IP address: ```bash theme={null} export PUBLIC_IP_ADDRESS=$(nebius compute instance get-by-name \ --name \ --format json \ | jq -r '.status.network_interfaces[0].public_ip_address.address | split("/")[0]') ``` To connect to the VM from another Compute VM, get the private IP address or FQDN of the VM that you connect to: * Private IP address: ```bash theme={null} nebius compute instance get-by-name \ --name \ --format json \ | jq -r '.status.network_interfaces[0].ip_address.address | split("/")[0]' ``` * FQDN: ```bash theme={null} nebius compute instance get-by-name \ --name \ --format json \ | jq -r '.status.network_interfaces[0].fqdn | split("/")[0]' ``` 2. Connect to the VM: ```bash theme={null} ssh @ ``` If your private key is stored in a custom location, specify the path to it with the `-i` parameter: ```bash theme={null} ssh -i ~/.ssh/ @ ``` Use the received private address or FQDN: ```bash theme={null} ssh @ ``` If your private key is stored in a custom location, specify the path to it with the `-i` parameter: ```bash theme={null} ssh -i ~/.ssh/ @ ``` ## Shared access to the VM To let the other users connect to your VM: 1. Ask them to [generate an SSH key pair](/compute/virtual-machines/ssh-keys#generating-a-key-pair) and share the [contents of their public key](/compute/virtual-machines/ssh-keys#getting-the-public-key) with you. 2. Connect to the VM under the name used when creating the VM: ```bash theme={null} ssh @ ``` 3. Create a new user for VM access, named `newuser` in this example: ```bash theme={null} sudo useradd -m -d /home/newuser -s /bin/bash newuser ``` 4. Switch to the new user: ```bash theme={null} sudo su - newuser ``` 5. Create the `ssh` directory: ```bash theme={null} mkdir .ssh ``` 6. In the directory, create the `authorized_keys` file: ```bash theme={null} cd .ssh touch authorized_keys ``` 7. Add the new user's public key to the created file: ```bash theme={null} echo "" > /home/newuser/.ssh/authorized_keys ``` 8. Change the directory's access permissions: ```bash theme={null} chmod 700 ~/.ssh chmod 600 ~/.ssh/authorized_keys ``` 9. Exit the new user's shell: ```bash theme={null} exit ``` 10. Restart the VM: ```bash theme={null} sudo reboot ``` 11. Ask the other user to check the connection: ```bash theme={null} ssh newuser@ ``` ## Example Set of commands to connect to the VM named `training-instance` from the internet: ```bash theme={null} export PUBLIC_IP_ADDRESS=$(nebius compute instance get-by-name \ --name training-instance \ --format json \ | jq -r '.status.network_interfaces[0].public_ip_address.address | split("/")[0]') ssh $USER@$PUBLIC_IP_ADDRESS ``` # Containers over Compute virtual machines Source: https://docs.nebius.com/compute/virtual-machines/containers You can create a virtual machine (VM) with a container image deployed. You can use containers provided by Nebius AI Cloud or containers with custom Docker images from public registries. A VM with a container is based on the same settings as a regular VM. The key difference is that you select a container to deploy when you create a VM. By default, a VM with a dynamic public IPv4 address is created. This allows you to access the container after deployment. If you want to restrict access to the container and create a VM without a public address, you can change it in the advanced settings on the VM creation page. For more information, see [Private and public IP addresses of Compute virtual machines](/compute/virtual-machines/network). ## How to create a VM with a container 1. In the [web console](https://console.nebius.com), go to  **Compute** → **Container VMs**. 2. Click  **Create container over VM**. 3. On the page that opens, select the project for the VM location. 4. Specify the VM name. 5. Select a container image to deploy on this VM. Certain container images require additional settings configured and access credentials stored (for example, save a token from the web console). If you want to deploy a custom Docker image from a public registry, select the **Custom image** option and then set Docker parameters. 6. Set computing resources. For detailed information about VM settings, see [Parameters of a virtual machine configuration in Compute](/compute/virtual-machines/params). 7. In the **Local storage** section, specify the size of the VM disk. 8. (Optional) Add shared filesystems to the VM. You can create a new filesystem or select an existing one. 9. In the **Access** section, add a username and an SSH key for the VM's user so you can [connect to the VM](/compute/virtual-machines/connect) on its behalf. You can add new credentials or select existing ones. Do not use the `root` or `admin` usernames. They are reserved for internal needs and are not allowed to connect to a VM by SSH. 10. (Optional) Add advanced settings: * [GPU cluster](/compute/clusters/gpu/index): Allows accelerating tasks that require high-performance computing (HPC) power, such as training a model. A GPU cluster only helps if you add at least two VMs with 8 GPUs each to the cluster. * Local storage: Select an existing disk or create a new one. For a new disk, you can configure [parameters](/compute/storage/manage#volume-parameters) such as a disk type, encryption, size and the block size. If you enable the advanced settings, you configure storage in them. The storage settings that you set earlier become disabled, and they do not apply. * Additional disks: Select an existing disk or create a new one as well. * Network settings: * Select a network and subnet to locate the VM. * Specify whether the VM's private IP address should be assigned automatically or be selected from a list of [allocations](/vpc/overview#allocation). * Specify whether the VM should have a public IP address. If you do not assign a public address to your VM, the [access to the container](#how-to-access-a-deployed-container) is restricted. For more information about available options, see [Public IP addresses](/compute/virtual-machines/network#public-ip-addresses). * Service account: Specify a [service account](/iam/service-accounts/manage) that will perform actions on behalf of the VM, for example, run scripts. 11. Click **Create container over VM**. The container is available about five minutes after the VM startup. ## How to access a deployed container Access depends on two major characteristics: * Whether a public IP address is assigned to a VM. If a public address is assigned, you can open the web interface of a container by a provided link. If a VM only has a private IP address, [configure a WireGuard jump server](/compute/virtual-machines/wireguard) for the VM. After that, you can connect to your VM via a configured VPN and access your container by using an additional VM. * Whether a given container requires credentials, such as a token or API key. If credentials are needed, they are displayed on the container creation and overview pages. After you open the web interface, you can apply the provided credentials there and access the web interface. To open a web interface of a deployed container: 1. In the [web console](https://console.nebius.com), go to **Compute** → **Container VMs**. 2. Open the page of the VM with the required container. 3. If the VM is assigned a public IP address, click the go-to-web-UI button. 4. If the VM only has a private address, configure a WireGuard jump server. For more information, click **How to connect** on the VM page. ## How to check that a custom image is deployed If you want to make sure that a custom Docker image is deployed in your VM: 1. [Connect](/compute/virtual-machines/connect) to the VM via SSH. 2. Check the Docker logs: ```bash theme={null} sudo docker logs ``` If the container image is deployed, the logs display information about it. # CUDA initialization error on virtual machines in Nebius AI Cloud Source: https://docs.nebius.com/compute/virtual-machines/cuda-init-error On Compute virtual machines with GPUs, CUDA may fail to initialize in rare cases, which may lead to problems when running GPU workloads. This can happen due to various reasons, including issues with NVIDIA Fabric Manager initialization. You can resolve this issue by restarting the NVIDIA Fabric Manager service, the GPUs on the VM or the entire VM. ## Issue On virtual machines with GPUs, CUDA may fail to initialize in rare cases, leading to errors when you run your workloads and tests. This can occur on any VM with GPUs, regardless of the specific platform, number of GPUs or boot disk image. > For example, executing PyTorch code may result in the following error: > > ```text theme={null} > ERROR: The NVIDIA Driver is present, but CUDA failed to initialize. > GPU functionality will not be available. > [[ System not yet initialized (error 802) ]] > > /usr/local/lib/python3.12/dist-packages/torch/cuda/__init__.py:129: UserWarning: > CUDA initialization: Unexpected error from cudaGetDeviceCount(). Did you run some cuda functions > before calling NumCudaDevices() that might have already set an error? > Error 802: system not yet initialized (Triggered internally at > /opt/pytorch/pytorch/c10/cuda/CUDAFunctions.cpp:109.) > return torch._C._cuda_getDeviceCount() > 0 > ``` ## Possible cause One possible cause of CUDA initialization failures is an issue with the [NVIDIA Fabric Manager](https://docs.nvidia.com/datacenter/tesla/fabric-manager-user-guide/index.html), a component that provides NVLink and NVSwitch support for multi-GPU VMs. In rare cases, its service, `nvidia-fabricmanager`, does not initialize on VM startup because of a race condition or other timing issues. This can cause initialization issues for CUDA and GPUs on the VM. However, CUDA initialization failures can also occur due to other reasons. 1. [Connect to the VM](/compute/virtual-machines/connect). 2. Run the following command: ```bash theme={null} sudo systemctl status nvidia-fabricmanager ``` If the service is not running, the `Active` line in the output indicates that: ```text theme={null} ○ nvidia-fabricmanager.service - NVIDIA fabric manager service Loaded: loaded (/lib/systemd/system/nvidia-fabricmanager.service; enabled; ven> Active: inactive (dead) since Fri 2025-05-23 07:37:49 UTC; 27s ago Main PID: 3240 (code=exited, status=0/SUCCESS) CPU: 787ms ``` ## Solutions You can solve the issue on your existing VM without having to create a new VM. Try the following steps in order: 1. Start the NVIDIA Fabric Manager service: 1. [Connect to the VM](/compute/virtual-machines/connect). 2. Run the following command: ```bash theme={null} sudo systemctl start nvidia-fabricmanager ``` 3. Check whether starting the service worked. To do this, you can try running your workload or get diagnostic information about the GPUs on the VM. For example, use the [NVIDIA System Management Interface](https://docs.nvidia.com/deploy/nvidia-smi/index.html) (`nvidia-smi`) to get the fabric states and statuses of the GPUs: ```bash theme={null} nvidia-smi -q | grep -A 2 'Fabric' ``` In the output, all the GPUs should be in the `Completed` fabric state and the `Success` status: ```bash theme={null} Fabric State : Completed Status : Success -- Fabric State : Completed Status : Success ... ``` If this step has not worked, stay connected to the VM and proceed to the next step. 2. Restart the GPUs on the VM: If your VM is a [Managed Service for Kubernetes®](/kubernetes/index) node (that is, its name starts with `mk8snodegroup`), skip this step and proceed to the next step. 1. Stop the services and workloads that use the GPUs. For example, if you are not running any workloads on the VM, you only need to stop the monitoring services: ```bash theme={null} sudo systemctl stop nebius_observability_agent sudo systemctl stop nvidia-dcgm.service ``` 2. Run the `nvidia-smi` command that restarts GPUs: ```bash theme={null} sudo nvidia-smi -r ``` This may take several minutes. You should see the following output: ```text theme={null} GPU 00000000:8D:00.0 was successfully reset. GPU 00000000:91:00.0 was successfully reset. GPU 00000000:95:00.0 was successfully reset. GPU 00000000:99:00.0 was successfully reset. GPU 00000000:AB:00.0 was successfully reset. GPU 00000000:AF:00.0 was successfully reset. GPU 00000000:B3:00.0 was successfully reset. GPU 00000000:B7:00.0 was successfully reset. Note: The operation has successfully reset all GPUs and NVSwitches. If the services, such as nvidia-fabricmanager, which manage or monitor NVSwitches are running, they might have been affected by this operation. Please refer respective service status or logs for details. All done. ``` 3. Start the stopped workloads and services again. For example, to start the monitoring services, run the following command: ```bash theme={null} sudo systemctl start nvidia-dcgm.service sudo systemctl start nebius_observability_agent ``` 4. Check whether restarting the GPUs worked. For example, you can run your workload or use `nvidia-smi`: ```bash theme={null} nvidia-smi -q | grep -A 2 'Fabric' ``` If the step has not worked, e.g. there are GPUs that are not in the `Completed` fabric state and the `Success` status, proceed to the next step. 3. [Restart the VM](/compute/virtual-machines/stop-start). After that, [connect to it](/compute/virtual-machines/connect) and then check whether restarting the VM worked. For example, you can run your workload or use `nvidia-smi`: ```bash theme={null} nvidia-smi -q | grep -A 2 'Fabric' ``` If the step has not worked, e.g. there are GPUs that are not in the `Completed` fabric state and the `Success` status, [contact support](https://console.nebius.com/support/create-ticket). # Deleting a Compute virtual machine Source: https://docs.nebius.com/compute/virtual-machines/delete If [standalone disks](/compute/storage/types#vm-managed-and-standalone-disks) or filesystems are attached to your virtual machine (VM), Compute doesn't automatically delete them. To stop being charged for volumes you no longer need, [delete](/compute/storage/manage#how-to-delete-a-volume) these volumes separately. If VM-managed disks are attached to your VM, they are deleted along with the VM automatically. Charges for these disks stop immediately. To delete a VM: 1. In the sidebar, go to **Compute** → **Virtual machines**. 2. Click the virtual machine you want to delete. 3. On the VM page, go to the **Settings** tab. 4. Click **Delete virtual machine**. 5. In the window that opens, confirm the deletion. 1. Get the ID of the virtual machine you want to delete: ```bash theme={null} nebius compute instance list ``` 2. Delete the virtual machine: ```bash theme={null} nebius compute instance delete ``` # Virtual machine is unreachable due to a Docker subnet conflict Source: https://docs.nebius.com/compute/virtual-machines/docker-subnet-conflict Virtual machines (VMs) running Docker cannot reach remote private IPv4 addresses in the `172.17.0.0/16` CIDR block. If you assign a VM an address from this range, other VMs that run Docker cannot reach it. Because default boot disk images come with Docker preinstalled, this affects most VMs in your [network](/vpc/overview#network). This happens because Docker uses `172.17.0.0/16` for its default bridge network and adds a kernel route for that range on every host where it runs. When a VM running Docker sends traffic to an address in this range, the route directs the packets to the local Docker bridge instead of the network interface, so they never leave the VM or reach the network. To resolve the conflict, do one of the following: * [Assign the VM a subnet](/vpc/addressing/custom-private-addresses) outside `172.17.0.0/16`. * Reconfigure the default Docker bridge to use a non-overlapping range. To do this, on every VM that runs Docker and needs to reach an address in `172.17.0.0/16`, add the following parameters to the [cloud-init configuration](/compute/virtual-machines/manage#optional-create-a-user-data-configuration): ```yaml theme={null} write_files: - path: /etc/docker/daemon.json content: | { "bip": "192.168.200.1/24" } owner: root:root permissions: '0644' runcmd: - systemctl restart docker ``` The `bip` value sets the subnet of the default Docker bridge. Replace `192.168.200.1/24` with any range that does not overlap with the private IP addresses used in your network. For more information about configuring the default Docker bridge, see [Docker bridge network driver](https://docs.docker.com/engine/network/drivers/bridge/) documentation. #### See also * [Private and public IP addresses of Compute virtual machines](/compute/virtual-machines/network) * [Ranges of private IP addresses per region for a default private pool](/vpc/addressing/available-addresses) # FQDN and hostname of a virtual machine Source: https://docs.nebius.com/compute/virtual-machines/fqdn When you create a virtual machine (VM), the service assigns an [FQDN](https://en.wikipedia.org/wiki/Fully_qualified_domain_name) to this VM. By using this FQDN, other VMs can access your VM within a single [network](/vpc/overview#network). You can configure the FQDN on your own or you can use the default FQDN: * The format of the default FQDN is the following: ```text theme={null} ..compute.internal. ``` In this case, the FQDN (as well as the VM's ID) is only known after the VM is created. * The format of a custom FQDN is the following: ```text theme={null} ..compute.internal. ``` You can [set the hostname](#how-to-customize-an-fqdn) when you create or update a VM. You can configure an FQDN, but you cannot delete it. The guest OS hostname of the VM is set up during the VM creation; it matches the FQDN. If the FQDN is changed later, the guest OS hostname does not change; and it remains the same as the FQDN was when the VM was created. ## How to get an FQDN To get an FQDN of a VM, run the following command: ```bash theme={null} nebius compute instance get ``` The FQDN is specified in the `status.network_interfaces.fqdn` field of the output. ## How to customize an FQDN If you do not want to use the default FQDN, you can use your own hostname instead of the VM's ID. To customize an FQDN, use the `hostname` parameter: * [Create a VM](/compute/virtual-machines/manage#create-a-vm) with a customized FQDN: ```bash theme={null} nebius compute instance create \ ... \ --hostname ``` * Change an FQDN of an existing VM: ```bash theme={null} nebius compute instance update --id --hostname ``` Use the following VM configuration: ```hcl theme={null} resource "nebius_compute_v1_instance" "my_vm" { ... hostname = "" ... } ``` For more information, see [Create a VM](/compute/virtual-machines/manage#create-a-vm). The hostname must be unique, and it cannot contain a full stop (`.`). For example, if you pass over the `my-host` value for the `hostname` parameter, the FQDN is the following: ```text theme={null} my-host.vpcnetwork-e00***.compute.internal. ``` If you do not use the `--hostname` parameter, the VM's ID is used instead of the hostname (according to the default FQDN). # How to inspect a VM and attach its boot disk to another VM Source: https://docs.nebius.com/compute/virtual-machines/inspect-boot-disk If a virtual machine (VM) does not start or you cannot connect to it, you can attach its boot disk to another VM as a secondary disk and inspect the boot disk from there. To do this: 1. [Create a VM](/compute/virtual-machines/manage) for debugging in the same project as the boot disk you want to inspect. [Set up the SSH connection](/compute/virtual-machines/connect#set-up-the-vm) to your new VM. 2. [Stop the original VM](/compute/virtual-machines/stop-start#how-to-stop-and-start-vms-manually) that you want to inspect. Otherwise, you can't attach its boot disk to another VM. 3. Get the ID of the original VM's boot disk: ```bash theme={null} nebius compute instance get --id \ --format jsonpath='.spec.boot_disk.existing_disk.id' ``` 4. Attach the boot disk to the debug VM as a secondary disk: ```bash theme={null} nebius compute instance update \ --patch \ --secondary-disks '[{"existing_disk": {"id": ""}, "attach_mode": "READ_WRITE", "device_id": "original-boot-disk"}]' ``` 5. [Connect to the debug VM by using SSH](/compute/virtual-machines/connect#connect-to-the-vm-by-using-ssh). 6. List the partitions and filesystems on the boot disk: ```bash theme={null} lsblk -o NAME,SIZE,FSTYPE,MOUNTPOINTS /dev/disk/by-id/virtio-original-boot-disk ``` 7. Mount the filesystem you need to inspect. The root filesystem is on the largest ext4 (or xfs) partition — usually `-part1`. To mount it: ```bash theme={null} sudo mkdir -p /mnt/original-boot-disk sudo mount -o ro /dev/disk/by-id/virtio-original-boot-disk-part1 /mnt/original-boot-disk ``` For safety, use the `-o ro` parameter to mount the filesystem in read-only mode. This prevents any accidental changes to the boot disk you are inspecting. 8. (Optional) If you need to repair the filesystem by writing to it, remount it in read-write mode: ```bash theme={null} sudo mount -o remount,rw /mnt/original-boot-disk ``` 9. When done inspecting, unmount the filesystem: ```bash theme={null} sudo umount /mnt/original-boot-disk ``` 10. [Detach](/compute/storage/detach-volume#remove-the-volume-from-the-vm's-specification) the boot disk of the original VM from the debug VM. 11. After the disk is detached, [start the original VM](/compute/virtual-machines/stop-start#how-to-stop-and-start-vms-manually). You can't start the VM if its boot disk is attached to another running VM. ## See also * [How to collect diagnostic logs from Compute virtual machines](/compute/virtual-machines/logs) * [Viewing serial logs of virtual machines](/compute/monitoring/serial-logs) * [How to detach additional volumes from virtual machines](/compute/storage/detach-volume) * [Attaching and mounting Compute volumes to VMs](/compute/storage/use) # How to access VM metadata Source: https://docs.nebius.com/compute/virtual-machines/instance-metadata The *instance metadata service* (IMDS) provides information about a running virtual machine (VM), including metadata, labels, resources, user and network data. The legacy `/mnt/cloud-metadata` mount on older Nebius VM images is deprecated and will be removed on **September 30, 2026**. After that date, use only the HTTP-based IMDS described in this article. To migrate, replace any reads from `/mnt/cloud-metadata` with the equivalent HTTP requests to IMDS. ## How to access IMDS IMDS is available only from within a VM itself. Once you connect to a VM, use the following base URL to request metadata: ``` http://metadata.nebius.internal ``` All IMDS requests must use the `GET` method and include the `Metadata: true` header. Requests without this header return `400 Bad Request`. Requests that use any method other than `GET` return `405 Method Not Allowed`. ### Metadata updates IMDS provides metadata captured at VM start time. The following endpoints are not refreshed in real time: * `instance-data` * `parent-data` * `network-data` * `user-data` To get updated values from these endpoints after a change, stop and restart the VM. Unlike the other endpoints, `instance-events` provides live updates and does not require a VM restart. A maintenance event may take up to five minutes to appear in the response. ## Example requests The following examples show how to retrieve different types of metadata from IMDS. ### Getting all VM metadata To get all available VM metadata in JSON format, run: ```bash theme={null} curl http://metadata.nebius.internal/v1/instance-data \ -H "Metadata: true" ``` Example output: ```json theme={null} { "id": "computeinstance-***", "parent_id": "project-***", "name": "example-vm", "hostname": "example-hostname", "platform": "cpu-d3", "preset": "8vcpu-32gb", "labels": { "env": "example-env", "runners_count": "24" }, "resource_version": 12345, "created_at": "2025-11-11T08:03:31.754114Z", "service_account_id": "serviceaccount-***", "gpu_cluster_id": "computegpucluster-***", "infiniband_fabric": "fabric-1", "infiniband_topology_path": ["hash-1", "hash-2", "hash-3"], "region": "eu-north0", "nvl_instance_group_id": "computenvlinstancegroup-***" } ``` `labels` is always returned as a JSON object. If no labels were set, IMDS returns an empty object. The following fields are optional and are returned only when available for the VM: * `hostname` * `service_account_id` * `gpu_cluster_id` * `infiniband_fabric` * `infiniband_topology_path` * `nvl_instance_group_id` ### Getting a specific metadata field To get a specific metadata field as plain text, run: ```bash theme={null} curl http://metadata.nebius.internal/v1/instance-data/ \ -H "Metadata: true" ``` Example: ```bash theme={null} curl http://metadata.nebius.internal/v1/instance-data/id \ -H "Metadata: true" ``` Example output: ``` computeinstance-*** ``` ### Getting VM labels To get all labels for the VM, run: ```bash theme={null} curl http://metadata.nebius.internal/v1/instance-data/labels \ -H "Metadata: true" ``` Example output: ```json theme={null} { "env": "example-env", "runners_count": "24" } ``` To get a specific label, run: ```bash theme={null} curl http://metadata.nebius.internal/v1/instance-data/labels/ \ -H "Metadata: true" ``` Example: ```bash theme={null} curl http://metadata.nebius.internal/v1/instance-data/labels/env \ -H "Metadata: true" ``` Example output: ``` example-env ``` ### Getting parent resource metadata To get parent resource metadata in JSON format, run: ```bash theme={null} curl http://metadata.nebius.internal/v1/parent-data \ -H "Metadata: true" ``` Example output: ```json theme={null} { "id": "project-***", "parent_id": "tenant-***", "name": "example-project", "created_at": "2025-11-11T08:03:30.754114Z", "labels": { "teamcity_build_id": "13672974" } } ``` To access `parent-data`, the VM must have an attached service account with permissions to read the parent resource metadata. Otherwise, the request returns `403 Forbidden`. ### Getting user data To get the user data that was provided when the VM was created, run: ```bash theme={null} curl http://metadata.nebius.internal/v1/user-data \ -H "Metadata: true" ``` Example output: ```yaml theme={null} #cloud-config package_update: true packages: - nginx runcmd: - systemctl enable --now nginx ``` ### Getting network data To get the VM network data, run: ```bash theme={null} curl http://metadata.nebius.internal/v1/network-data \ -H "Metadata: true" ``` This request returns the network data that cloud-init used to initialize the VM during its first boot. Example output: ```yaml theme={null} version: 2 ethernets: interface0: match: macaddress: "XX:XX:XX:XX:XX:XX" set-name: "eth0" dhcp4: true mtu: 1450 ``` ### Getting service account information To get information about the service account attached to the VM and its IAM token, run: ```bash theme={null} curl http://metadata.nebius.internal/v1/iam/sa \ -H "Metadata: true" ``` Example output: ```json theme={null} { "service_account_id": "serviceaccount-***", "token": { "access_token": "", "expires_at": "2027-01-01T00:00:00Z" } } ``` To get only the IAM token object (the access token and its expiration time), run: ```bash theme={null} curl http://metadata.nebius.internal/v1/iam/sa/token \ -H "Metadata: true" ``` Example output: ```json theme={null} { "access_token": "", "expires_at": "2027-01-01T00:00:00Z" } ``` To get only the raw access token string, run: ```bash theme={null} curl http://metadata.nebius.internal/v1/iam/sa/token/access_token \ -H "Metadata: true" ``` Example output: ``` ``` ### Getting maintenance events To check if a maintenance event is scheduled for the VM, run: ```bash theme={null} curl http://metadata.nebius.internal/v1/instance-events \ -H "Metadata: true" ``` Example output: ```json theme={null} { "data": [ { "id": "computemaintenance-***", "type": "maintenance", "status": "scheduled", "created_at": "2026-02-28T15:10:00Z", "not_before": "2026-03-01T10:00:00Z", "extra": { "support_center_ticket_id": "123456", "is_planned": "false" } } ] } ``` If there are no active maintenance events, IMDS returns an empty array: ```json theme={null} { "data": [] } ``` ## Request throttling Nebius AI Cloud applies throttling to IMDS requests on a per-VM basis to reduce accidental overload and abuse: * 10 requests per second for regular requests * 20 requests per second for burst requests If you exceed the limit, IMDS returns `429 Too Many Requests`. ## Status codes | HTTP status code | Description | | --------------------------- | ------------------------------------------------------------------------------------------------------------- | | `200 OK` | The request succeeded. | | `400 Bad Request` | The `Metadata: true` header is missing or invalid. | | `403 Forbidden` | The VM does not have permission to access the requested resource. | | `404 Not Found` | The requested resource or field does not exist. | | `405 Method Not Allowed` | The request used a method other than `GET`. | | `429 Too Many Requests` | The request rate limit was exceeded. Retry the request. | | `500 Internal Server Error` | The server encountered an error. Retry the request. | | `501 Not Implemented` | The requested feature is not implemented. | | `503 Service Unavailable` | The service is temporarily unavailable, or the request could not be attributed to this VM. Retry the request. | # Lifecycle of a Compute virtual machine Source: https://docs.nebius.com/compute/virtual-machines/lifecycle Every virtual machine (VM) in Compute can have one of the following statuses: * `Stopped`: VM is stopped. * `Starting`: VM is launching. * `Running`: VM is running. * `Stopping`: VM is stopping. * `Deleting`: VM is being deleted. * `Error`: VM crashed and cannot be restored. When a VM assumes this status, delete this VM and create a new one. You cannot stop and start a VM with the `Error` status. ## Transitions between VM statuses ### VM is being created `Stopped` → `Starting` → `Running` If you [create a VM](/compute/virtual-machines/manage) by using the CLI or Terraform, you can specify `"stopped": true` in the VM configuration. In this case, the VM is created with the `Stopped` status. The status does not change until you [launch this VM](/compute/virtual-machines/stop-start). ### VM is being started `Stopped` → `Starting` → `Running` When a VM is `Starting`, its hypervisor launches the VM's operating system. Additionally, the service allocates computing resources to the VM, such as RAM, GPUs and CPUs. When a VM is `Running`, it functions fully. This influences [billing](#when-compute-charges-for-the-vm-usage) and [quotas](#when-compute-quotas-are-released). The service charges you for a running VM. Also, the number of resources occupied in the tenant or project increases. ### VM is being stopped `Running` → `Stopping` → `Stopped` When a VM is `Stopping`, its hypervisor shuts down the operating system of this VM. Before the OS is turned off completely, the hypervisor gracefully terminates all running processes within 60 seconds to prevent data loss. After that, the VM is `Stopped`. ### VM is being deleted `Running` → `Deleting` After the `Deleting` status, a VM is removed from the list of VMs and the occupied quotas are released. ### VM crashed and is being recovered If the VM recovery is successful, statuses of this VM change in the following order: `Running` → `Stopping` → `Stopped` → `Running` If Compute cannot start the VM properly during the recovery, for example, because of a lack of available resources, the VM goes through one of the following lifecycles: * `Running` → `Stopping` → `Stopped` → `Starting` → `Stopping` → `Stopped` or `Error` * `Running` → `Stopping` → `Stopped` or `Error` ## When Compute charges for the VM usage When you create a VM, Compute starts [charging](/compute/resources/pricing) for it once the VM assumes the `Running` status. When you delete a VM, Compute stops charging for it once you send the deletion command. For example, you click the  **Delete** button or run a [CLI command](/cli/reference/compute/instance/delete). When a VM has crashed, Compute stops charging for it when recovery begins. If the VM is recovered successfully, the service continues charging. If not, the charging does not start again. ## When Compute quotas are released [Compute quotas](/compute/resources/quotas-limits) are only released after the VM deletion. If a VM is `Stopped`, the quotas are still occupied. To avoid running out of the quotas, revise your list of VMs from time to time and delete unused VMs. Stopping them will not help. # How to find out platforms and presets available in a project Source: https://docs.nebius.com/compute/virtual-machines/list-platforms Different virtual machine platforms and presets are available for different regions and projects. All supported platforms and presets are listed in [Types of virtual machines and GPUs in Nebius AI Cloud](/compute/virtual-machines/types). If you want to find out what platforms and presets are available in a given project, run the following command: ```bash theme={null} nebius compute platform list --parent-id ``` In the `--parent-id` parameter, specify the ID of the project for which you want to see the list. # How to collect diagnostic logs from Compute virtual machines Source: https://docs.nebius.com/compute/virtual-machines/logs *Diagnostic logs* from Compute virtual machines (VMs) help you troubleshoot issues with VM operations, networking and workloads. We strongly recommend collecting logs while the issue is still occurring, because they capture more information about the broken state than logs collected after the issue has been resolved. ## Types of logs This guide describes how to collect the following types of logs for troubleshooting: * GPU logs: `nvidia-bug-report.sh`. * General system logs, including more context about system services and package versions: `sos report`. * [NVIDIA® Mellanox®](https://www.nvidia.com/en-us/networking/management-software/) adapter (InfiniBand™/NVSwitch/Ethernet) logs: `sysinfo-snapshot`. ## Prerequisites Make sure that you have configured [SSH access to the VM](/compute/virtual-machines/connect). ## How to collect logs 1. [Connect to the VM by using SSH](/compute/virtual-machines/connect#connect-to-the-vm-by-using-ssh). 2. Generate GPU logs: ```bash theme={null} sudo nvidia-bug-report.sh ``` This command usually runs for about five minutes and generates `nvidia-bug-report.log.gz` in the current working directory. If the command stops responding, run it in safe mode: ```bash theme={null} sudo nvidia-bug-report.sh --safe-mode ``` 3. If you need more system information, generate general system logs: ```bash theme={null} sudo sos report --batch ``` This command generates an archive in the following format: `/tmp/sosreport---.tar.gz`. 4. If you are troubleshooting Mellanox adapter issues, generate Mellanox adapter logs: ```bash theme={null} sudo /opt/nebius/sysinfo-snapshot ``` This command generates an archive in the following format: `/tmp/sysinfo-snapshot---.tgz`. ## How to get generated log files 1. Check that the files were generated on your VM by running the following commands: * To check for GPU logs: ```bash theme={null} ls nvidia-bug-report.log.gz ``` * To check for general system logs or Mellanox adapter logs: ```bash theme={null} ls /tmp ``` 2. From your local shell, run the following command to copy the files from the VM to the current directory: ```bash theme={null} scp -i ~/.ssh/id_ed25519 @: . ``` In the command, specify the path to the generated file on the VM, for example: `nvidia-bug-report.log.gz`, `/tmp/sosreport-*.tar.gz` or `/tmp/sysinfo-snapshot-*.tgz`. If copying files from the `/tmp` directory fails due to a permission error, this usually means the generated file is owned by root. To fix this issue, proceed to the next step. 3. [Reconnect to the VM](/compute/virtual-machines/connect#connect-to-the-vm-by-using-ssh) and set permissions to grant read access to non-root users. After that, you can rerun the `scp` command. If you successfully copied the generated log file, skip this step. ```bash theme={null} sudo chmod 644 ``` In the command, set the `remote_file_path` to `/tmp/sosreport-*.tar.gz` or `/tmp/sysinfo-snapshot-*.tgz`. 4. Find the copied log files in your local directory. ## See also * [How to inspect a VM and attach its boot disk to another VM](/compute/virtual-machines/inspect-boot-disk) * [Support tickets: sending questions, bug reports and feature requests](/overview/support) *InfiniBand and InfiniBand Trade Association are registered trademarks of the InfiniBand Trade Association.* # Maintenance of Compute virtual machines Source: https://docs.nebius.com/compute/virtual-machines/maintenance The Compute service performs maintenance for all virtual machines, including nodes of [Managed Service for Kubernetes®](/kubernetes/index) clusters and [Soperator](/slurm-soperator/overview/why-slurm-soperator) clusters. To ensure that maintenance is performed successfully, [stop and start VMs](/compute/virtual-machines/stop-start) until the specified date. You can open the list of VMs via the red banner on the top of the screen. For example: maintenance-banner If you do not stop VMs on time, the service will automatically stop them after the due date to perform maintenance. Delayed maintenance may cause VM instability. If you need to keep your VMs running, [contact the support team](https://console.nebius.com/support/create-ticket) to request rescheduling maintenance of the affected VMs. You can request to reschedule it up to two times, and you can postpone the maintenance by up to seven days each time. # Maintenance reasons in Nebius AI Cloud Source: https://docs.nebius.com/compute/virtual-machines/maintenance-reasons When Compute schedules maintenance for your virtual machine (VM), it assigns a *reason code* that describes why the maintenance was triggered. After you identify the reason, [stop and start your VM](/compute/virtual-machines/stop-start#how-to-stop-and-start-compute-virtual-machines) to prepare it for maintenance. The reason code helps you assess the severity of the error and decide whether additional action is needed. ## How to identify the reason code for a maintenance event You can view the reason code for maintenance events by: * Checking the maintenance notification banner in the [web console](https://console.nebius.com/); * Using the [Nebius AI Cloud CLI](/cli/index) to list all active maintenance events scheduled for resources in a project. Run the following command, and specify your [project ID](/iam/manage-projects#how-to-get-a-project-id). ```bash theme={null} nebius compute maintenance list-active --parent-id ``` The output contains a list of all maintenance events that are scheduled for resources in the project you specified. ## Reason codes Maintenance events can be triggered by GPU, InfiniBand™ or node-level errors. The tables below show the reason codes that map to different types of errors. If maintenance was triggered by a condition that is not mapped to one of these reason codes, Compute assigns `OTHER` as the reason code. ### GPU errors | Reason code | Description | | ------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `HW_GPU_PCI_FALLEN_OFF_BUS` | A GPU or NVSwitch has fallen off the PCI bus, typically due to critical thermal or power issues. The affected node is taken out of service for hardware inspection. | | `HW_GPU_PCI_CONFIG_ERROR` | Unexpected GPU PCI configuration detected, or critical PCI errors observed between the GPU, deltaboard and motherboard. Requires physical hardware maintenance. | | `HW_GPU_NVLINK_DOWN` | An NVLink connection is down on a Blackwell or newer GPU. Requires a GPU reset or VM restart to recover. | | `HW_GPU_XID_62` | The GPU internal micro-controller has halted (XID 62). Requires a GPU reset or VM restart. | | `HW_GPU_XID_109` | GPU context switch timeout (XID 109). Typically not fatal to running workloads, but may require a GPU reset or VM restart. | | `HW_GPU_XID_119` | GSP RPC timeout (XID 119). Requires a GPU reset or VM restart. | | `HW_GPU_FW_VERSION_UNAVAILABLE` | DCGM could not report the GPU firmware version. This is usually a symptom of other underlying hardware errors. | | `HW_GPU_DRIVER_INIT_FAILED` | The NVIDIA® driver failed to initialize one or more GPUs. Typically caused by other hardware errors. | ### InfiniBand™ errors | Reason code | Description | | -------------------------- | ----------------------------------------------------------------------------------------------------- | | `HW_IB_LINK_DOWN` | The InfiniBand link has been in a physically down state for more than 3 minutes. | | `HW_IB_PCI_FALLEN_OFF_BUS` | The InfiniBand adapter has fallen off the PCI bus, typically due to critical thermal or power issues. | | `HW_IB_PCI_CONFIG_ERROR` | Unexpected InfiniBand PCI configuration detected, typically due to critical PCI errors. | ### Node-level errors | Reason code | Description | | ----------------- | ----------------------------------------------------------------------------------------------------------------------------------- | | `HW_NODE_OFFLINE` | The node hosting the VM went offline. The cause may vary. Affected VMs are force-migrated and will experience an unexpected reboot. | *InfiniBand and InfiniBand Trade Association are registered trademarks of the InfiniBand Trade Association.* # How to create a virtual machine in Nebius AI Cloud Source: https://docs.nebius.com/compute/virtual-machines/manage You can create a Compute virtual machine (VM) in the [web console](https://console.nebius.com), or by using the [CLI](/cli/index) or [Terraform provider](/terraform-provider/index). You can tailor the VM configuration to your needs and, for example, attach secondary disks and filesystems, or allocate GPU resources to your VM. ## Steps ### (Optional) Create a user data configuration You do not need to create a user data configuration in advance if you create a VM in the web console. To add a user for connections to a VM, create a configuration by using the [cloud-init](https://cloudinit.readthedocs.io/en/latest/reference/modules.html#users-and-groups) format: ```bash theme={null} export USER_DATA=$(jq -Rrs '.' < 1. [Install and configure](/terraform-provider/quickstart) the Nebius AI Cloud provider for Terraform. 2. To add a user for connections to a VM, create a configuration by using the [cloud-init](https://cloudinit.readthedocs.io/en/latest/reference/modules.html#users-and-groups) format: ```bash theme={null} export USER_DATA=$(jq -Rrs '.' < sudo: ALL=(ALL) NOPASSWD:ALL shell: /bin/bash ssh_authorized_keys: - ``` 5. Create the `variables.tf` file with the following contents: ```hcl theme={null} variable "user_data" { description = "User data in the cloud-init format" type = string } ``` The file allows the Terraform provider to address the `TF_VAR_user_data` environment variable. 6. Initialize the working directory: ```bash theme={null} terraform init ``` ### Create a VM On the VM creation page ( **Compute** → **Virtual machines** → **Create virtual machine**), set the VM configuration: 1. Select the project for the VM location. 2. Specify the VM name. 3. Configure the **Computing resources** section: 1. Select whether the VM should have GPUs. 2. Specify the VM type: regular or [preemptible](/compute/virtual-machines/preemptible). VMs without GPUs only support the regular type. 3. (Optional) For a regular VM with GPUs, select **Reservation usage**. Specify whether Compute should allocate resources for the VM from [reservations](/compute/virtual-machines/reservations). The **Reservation usage** field is only displayed if you have [capacity block groups](/overview/limits/capacity-block-groups). * **With reservations**: The resources are allocated from reservations ([capacity block groups](/overview/limits/capacity-block-groups)). For example, if a Nebius manager has created a capacity block group for you, Compute allocates GPUs for the VM from this capacity block group. This ensures that resources are always available, even if the VM is stopped (for example, by you or a [maintenance event](/compute/virtual-machines/maintenance)). You can use one of the following reservation types: * **Any** (default): You do not need to select reservations. The service uses the reservations that are most suitable for the configuration of your VM. * **Specific**: Select specific reservations. Make sure to select reservations that have enough capacity and that do not expire in several days. If there are no reservations available during the VM lifecycle, you can run your VM without reservations. Resources for it will be taken from the common pool. To configure this behavior, enable the **Start without a reservation when reservation capacity is exhausted** option. * **Without reservations**: The resources are allocated from a common pool, and no reservations are used for the VM. 4. Select the [platform and preset](/compute/virtual-machines/types). 5. (Optional) If you create a VM with 8 GPUs (for example, for training models), use a GPU cluster for the VM. InfiniBand™ in the cluster allows you to accelerate tasks that require high-performance computing (HPC) power. A single VM without InfiniBand cannot perform these tasks as quickly. To use a GPU cluster, select an existing one or create a new cluster: 1. Click  **Create** in the **GPU cluster** field. 2. In the window that opens, specify the cluster name and InfiniBand fabric. To select the fabric, see [InfiniBand fabrics](/compute/clusters/gpu/index#infiniband-fabrics). 3. Click **Create**. 4. In the **Boot disk** section, set the boot disk settings: 1. Click . 2. In the window that opens, select an existing disk or create a new one. 3. If you create a new boot disk, configure its source, type, encryption, size and block size. For information about these settings, see [Volume parameters](/compute/storage/manage#volume-parameters). 5. (Optional) If you want to attach an additional disk to your VM, in the **Additional disks** section, specify the settings of this disk: 1. Click  **Attach disk**. 2. In the window that opens, select an existing secondary disk or create a new one. 3. If you create a new disk, specify its name and configure the type, encryption, size and block size. 4. Click **Attach disk** or **Create and attach disk**. After you create the VM, [mount the additional disks](/compute/storage/use#how-to-mount-volumes-to-vms) to it. Otherwise, the VM's operating system does not recognize these disks. 6. (Optional) If you want to attach a filesystem to your VM, in the **Shared filesystems** section, specify the settings of this filesystem: 1. Click  **Attach shared filesystem**. 2. In the window that opens, select an existing filesystem or create a new one. 3. If you create a new filesystem, specify its name, size and the block size. 4. Click **Attach filesystem** or **Create and attach filesystem**. 5. After the window is closed, specify a mount tag for mounting the filesystem to the VM. Create your own tag, such as `my-filesystem`. Make sure that it is unique within the VM. 6. To mount the filesystem to the VM automatically, keep the **Auto mount** option enabled. 7. (Optional) If the selected platform and preset support local SSD disks, enable **Local SSD disks** to add ephemeral local storage to your VM. Local SSD disks are available only for supported platforms and presets. For details, see [Availability](/compute/storage/local-disks#availability). 8. Configure the **Network** section: 1. Select the VM's [network and subnet](/vpc/overview). 2. In the **Primary private IP address** field, select whether to automatically assign a private IP address or select an already allocated one. For more information, see [Private IP addresses](/compute/virtual-machines/network#private-ip-addresses). 3. (Optional) In the **Secondary private IP address** field, assign secondary addresses. Use them as a backup option in case of incidents. For example, a backup node can take a secondary address of the main node when the main one fails. As a result, routing to this address can be preserved. After you click  **Assign secondary address**, you can specify a new address or select an already created allocation. You can assign no more than five secondary addresses. 4. In the **Public IP address** field, specify whether the VM should have a public address and whether this address should be dynamic, static or taken from an allocation. If you need to secure your VM and make it isolated, you can create a VM without a public IP address. If you need to connect to this VM from the internet, you can [set up a WireGuard jump server](/compute/virtual-machines/wireguard). It has an IP address in the internet and an IP address in the VM's network. As a result, you can access the VM via the jump server from the internet. This approach enhances security and still provides access to the VM. For more information, see [How to enable a public IP address for a VM](/compute/virtual-machines/network#how-to-enable-a-public-ip-address-for-a-vm). 9. In the **Username and SSH key** field, add credentials, so you can [connect to the VM](/compute/virtual-machines/connect): 1. Generate an [SSH key pair](/compute/virtual-machines/ssh-keys). 2. In the **Username and SSH key** field, click . 3. If you added an SSH key earlier and you want to reuse it, select the key from the drop-down list. If you want to add a new key, click  **Add credentials**. 4. In the window that opens, specify the username of the VM user, a public key of your SSH key pair and the credentials name to recognize the key in the list. Do not use the `root` or `admin` usernames. They are reserved for internal needs and are not allowed to connect to a VM by SSH. 10. Click **Add credentials**. 11. (Optional) Select an existing service account or add a new one to associate it with the VM. The service account will perform actions on behalf of the VM, for example, run scripts. 12. (Optional) Select **Enable custom cloud-init config** and set a configuration in the [cloud-init](https://cloudinit.readthedocs.io/en/latest/reference/modules.html#users-and-groups) format. This configuration affects the settings for shared filesystems and access that you set up earlier: * If you add a cloud-init configuration, you cannot manage the **Auto mount** option for filesystems. Their mounting settings automatically appear in the configuration. * The username and SSH key that you specify in the **Access** section are automatically added to a cloud-init configuration if you enable it. Ultimately, the settings from the configuration apply, not those from the **Access** section. The default configuration that only adds the user contains the following parameters: * `name`: Username for connecting to the VM. The above example sets the value of your machine's `USER` environment variable as the username for the VM. * `sudo`: Sudo policy. `ALL=(ALL) NOPASSWD:ALL` allows users unrestricted sudo access; `False` disables sudo access for users. * `shell`: Default shell. * `ssh_authorized_keys`: User's authorized keys. Allows configuring SSH access to the VM. You can specify several users and their public SSH keys. For more information, see [cloud-init configuration examples](https://cloudinit.readthedocs.io/en/latest/reference/examples.html). 13. Click **Create VM**. 1. (Optional) If you want to attach a filesystem to your VM, create this filesystem: ```bash theme={null} nebius compute filesystem create \ --name \ --size-gibibytes 10 \ --type network_ssd \ --block-size-bytes 4096 ``` Save the filesystem ID from the output `metadata.id` parameter. For more information about filesystem creation, see [Managing Compute volumes](/compute/storage/manage). You don't need to create disks for the VM in advance. You can create them along with the VM. Such disks are called [VM-managed](/compute/storage/types#vm-managed-and-standalone-disks). They are tied to the VM lifecycle. 2. (Optional) To provide the VM with an [allocation](/vpc/overview#allocation) that reserves a static public IP address, create this allocation. As a result, the address is preserved even if you delete the VM. 1. [Get the required subnet ID](/vpc/networking/resources#how-to-get-a-subnet-id). 2. Run the following command: ```bash theme={null} nebius vpc allocation create \ --ipv4-public-subnet-id \ --name ``` Save the allocation ID from the output `metadata.id` parameter. For more information about networking in Compute, see [Public IP addresses](/compute/virtual-machines/network#public-ip-addresses). 3. (Optional) If you create a VM with 8 GPUs (for example, for training models), use a GPU cluster for the VM. InfiniBand in the cluster allows you to accelerate tasks that require high-performance computing (HPC) power. A single VM without InfiniBand cannot perform these tasks as quickly. To create a GPU cluster, run the following command: ```bash theme={null} nebius compute gpu-cluster create \ --name \ --infiniband-fabric ``` To select the fabric, see [InfiniBand fabrics](/compute/clusters/gpu/index#infiniband-fabrics). Save the cluster ID from the output `metadata.id` parameter. 4. (Optional) Create a [service account](/iam/service-accounts/manage) that will perform actions on behalf of the VM: ```bash theme={null} nebius iam service-account create --name ``` 5. Create the VM: ```bash theme={null} nebius compute instance create \ --name \ --stopped \ --resources-platform \ --resources-preset \ --boot-disk-managed-disk-name \ --boot-disk-managed-disk-type \ --boot-disk-managed-disk-size-gibibytes \ --boot-disk-managed-disk-source-image-family-image-family \ --boot-disk-attach-mode READ_WRITE \ --boot-disk-device-id \ --secondary-disks '[{"attach_mode": "READ_WRITE", "device_id": "", "managed_disk": { "name": "", "spec": { "type": "", "size_gibibytes": 10 }}}]' \ --filesystems '[{"existing_filesystem": {"id": ""}, "attach_mode": "READ_WRITE", "mount_tag": ""}]' \ --cloud-init-user-data "$USER_DATA" \ --network-interfaces '[{"name": "eth0", "ip_address": {}, "public_ip_address": {"allocation_id": ""}, "subnet_id": ""}]' \ --gpu-cluster-id \ --hostname \ --reservation-policy-policy \ --reservation-policy-reservation-ids \ --recovery-policy \ --preemptible-on-preemption stop \ --service-account-id ``` The command contains the following parameters: * `--name`: VM's name. * `--stopped` (optional): If you want to create a VM but not launch it, specify the `false` value. The VM will remain in the `Stopped` status. For more information, see [Lifecycle of a Compute virtual machine](/compute/virtual-machines/lifecycle). * `--resources-platform`: [VM platform](/compute/virtual-machines/types). * `--resources-preset`: VM preset. Depends on the chosen platform. * `--boot-disk-managed-disk-name`: Name of the [VM-managed boot disk](/compute/storage/types#vm-managed-and-standalone-disks) that you create along with the VM. * `--boot-disk-managed-disk-type`: [Disk type](/compute/storage/types#network-ssd-disks). * `--boot-disk-managed-disk-size-gibibytes`: Disk size in gibibytes. Maximum boot disk size is 30,720 GiB (30 TiB). * `--boot-disk-managed-disk-source-image-family-image-family`: Public image that Nebius AI Cloud supports. For the list of available public images, see [Boot disk images for Compute virtual machines](/compute/storage/boot-disk-images). * `--boot-disk-attach-mode`: Write permission of the boot disk, `READ_ONLY` or `READ_WRITE`. * `--boot-disk-device-id` (optional): User-defined ID for mounting the boot disk to the VM. The default value is `disk-n` where `n` is an integer index. A `virtio-` prefix is added to the specified (or default) device ID. * `--secondary-disks` (optional): Settings of additional VM-managed disks that you create along with the VM. You can attach one or several disks. * `attach_mode`: Write permission of the additional disk, `READ_ONLY` or `READ_WRITE`. * `device_id`: User-defined ID for mounting the disk to the VM. * `managed_disk.name`: Name of a new disk. * `managed_disk.spec.type`: Disk type. * `managed_disk.spec.size_gibibytes`: Disk size in gibibytes. * `--filesystems` (optional): Filesystem settings. You can attach several filesystems, if required. * `id`: ID of the filesystem created earlier. * `attach_mode`: Write permission of the filesystem, `READ_ONLY` or `READ_WRITE`. * `mount_tag`: Tag for mounting the filesystem to the VM. Create your own tag, such as `my-filesystem`. Make sure that it is unique within the VM. If you do not specify the tag, it takes the `filesystem-N` default value where `N` is an integer. For example, `filesystem-0`. After you create the VM, [mount the additional disks and filesystems](/compute/storage/use#how-to-mount-volumes-to-vms) to it. Otherwise, the VM's operating system does not recognize these volumes. * `--cloud-init-user-data` (optional): Configuration of VM users in the [cloud-init](https://cloud-init.io/) format. * `--network-interfaces`: Network settings. * To assign a dynamic public IP address, specify `"public_ip_address": {}`. A dynamic public IP address is randomly allocated from the [IPv4 public range](#get-public-ip-range) of Nebius AI Cloud and is not persistent. If a VM with a dynamic address has the `Stopped` status for more than one hour, the address is automatically returned to the IPv4 public range. After that, Compute may allocate this address to a different VM. * To assign a static public IP address, specify `"public_ip_address": {"static": true}`. A static public IP address is also randomly allocated from the IPv4 public range of Nebius AI Cloud. If you stop a VM that has a static IP address, the address will not return to the range. However, if you delete this VM, the address will return. * To assign the allocation created earlier, specify `"public_ip_address": {"allocation_id": ""}`. An allocation allows you to use a reserved static public address for the VM. This address will not return to the IPv4 range even if you delete the VM. * To create a VM without a public IP address, remove the `public_ip_address` parameter from the JSON. The VM will only have a private address. If you need to secure your VM and make it isolated, you can create a VM without a public IP address. If you need to connect to this VM from the internet, you can [set up a WireGuard jump server](/compute/virtual-machines/wireguard). It has an IP address in the internet and an IP address in the VM's network. As a result, you can access the VM via the jump server from the internet. This approach enhances security and still provides access to the VM. * `--gpu-cluster-id` (optional): ID of the GPU cluster created earlier. * `--local-disks-passthrough-group-requested` (optional): Requests local SSD disks to be added to the VM when set to `true`. Local SSD disks are available only for supported platforms and presets. For details, see [Availability](/compute/storage/local-disks#availability). * `--hostname` (optional): Hostname for the VM's [FQDN](/compute/virtual-machines/fqdn). By default, the FQDN has the `..compute.internal.` format. If you want to customize it, use a hostname instead of the VM's ID in the FQDN. For example, if you specify `--hostname my-host`, the FQDN is `my-host.vpcnetwork-e00***.compute.internal.`. * `--reservation-policy-policy` (optional): Policy for reservation usage. You can use [reservations of capacity resources](/compute/virtual-machines/reservations) and run your VM based on them. As a result, the VM resources are reserved and always available. * `--reservation-policy-reservation-ids` (optional): IDs of specific reservations. These are capacity block groups that a Nebius manager has created. For information about how to configure `--reservation-policy-policy` and `--reservation-policy-reservation-ids`, see [How to add reservations to VMs](/compute/virtual-machines/reservations#how-to-add-reservations-to-vms). * `--recovery-policy` (optional): Defines what Compute does with the VM after it is preempted or fails. [Preemptible VMs](/compute/virtual-machines/preemptible) only support the `fail` value that stops the VM. They do not support the `recover` value that tries to restart the VM. If you set `recover` for a preemptible VM, it will cause an error. * `--preemptible-on-preemption` (optional; for preemptible VMs only): Specifies what happens when the VM is preempted. The only supported value is `stop`: Compute stops the VM without deleting or restarting it. * `--service-account-id` (optional): Service account associated with the VM. 1. (Optional) If you want to attach a filesystem to your VM, create this filesystem: ```hcl theme={null} resource "nebius_compute_v1_filesystem" "my_filesystem" { name = "" parent_id = "" size_gibibytes = 10 type = "NETWORK_SSD" block_size_bytes = 4096 } ``` For more information, see [Volume parameters](/compute/storage/manage#volume-parameters). You don't need to create disks for the VM in advance. You can create them along with the VM. Such disks are called [VM-managed](/compute/storage/types#vm-managed-and-standalone-disks). They are tied to the VM lifecycle. 2. (Optional) To provide the VM with an [allocation](/vpc/overview#allocation) that reserves a static public IP address, create this allocation. As a result, the address is preserved even if you delete the VM. ```hcl theme={null} resource "nebius_vpc_v1_allocation" "my_allocation" { name = "" parent_id = "" ipv4_public = { subnet_id = "" } } ``` To create the allocation, [get the required subnet ID](/vpc/networking/resources#how-to-get-a-subnet-id). For more information about networking in Compute, see [Public IP addresses](/compute/virtual-machines/network#public-ip-addresses). 3. (Optional) If you create a VM with 8 GPUs (for example, for training models), use a GPU cluster for the VM. InfiniBand in the cluster allows you to accelerate tasks that require high-performance computing (HPC) power. A single VM without InfiniBand cannot perform these tasks as quickly. To create a GPU cluster, use the following configuration: ```hcl theme={null} resource "nebius_compute_v1_gpu_cluster" "my_gpu_cluster" { name = "" parent_id = "" infiniband_fabric = "" } ``` To select the fabric, see [InfiniBand fabrics](/compute/clusters/gpu/index#infiniband-fabrics). 4. (Optional) Create a [service account](/iam/service-accounts/manage) that will perform actions on behalf of the VM: ```hcl theme={null} resource "nebius_iam_v1_service_account" "my_sa" { name = "" parent_id = "" } ``` 5. (Optional) If your `resources` block uses a platform and preset that support local SSD disks, add a `local_disks` block to the `nebius_compute_v1_instance` resource in the next step. The local SSD disks are provisioned as raw Non-Volatile Memory Express (NVMe) devices (`nvme0`, `nvme1`, and so on). You can enable local SSD disks only when you create the VM. For more information, see [Availability](/compute/storage/local-disks#availability). For example: ```hcl theme={null} resource "nebius_compute_v1_instance" "my_vm" { # ... local_disks = { passthrough_group = { requested = true } } } ``` 6. Create the VM: ```hcl theme={null} resource "nebius_compute_v1_instance" "my_vm" { name = "" parent_id = "" stopped = resources = { platform = "" preset = "" } boot_disk = { managed_disk = { name = "" spec = { type = "" size_gibibytes = source_image_family = { image_family = "" } } } attach_mode = "" device_id = "" } secondary_disks = [ { managed_disk = { name = "" spec = { type = "" size_gibibytes = } } attach_mode = "" device_id = "" } ] filesystems = [ { existing_filesystem = { id = nebius_compute_v1_filesystem.my_filesystem.id } attach_mode = "" mount_tag = "" } ] cloud_init_user_data = var.user_data network_interfaces = [ { name = "eth0" ip_address = {} public_ip_address = { allocation_id = nebius_vpc_v1_allocation.my_allocation.id } subnet_id = "" } ] gpu_cluster = { id = nebius_compute_v1_gpu_cluster.my_gpu_cluster.id } hostname = "" reservation_policy = { policy = "" reservation_ids = "" } recovery_policy = "" preemptible = { on_preemption = "STOP" } service_account_id = nebius_iam_v1_service_account.my_sa.id } ``` The configuration contains the following parameters: * `name`: VM's name. * `stopped` (optional): If you want to create a VM but not launch it, specify the `false` value. The VM will remain in the `Stopped` status. For more information, see [Lifecycle of a Compute virtual machine](/compute/virtual-machines/lifecycle). * `resources.platform`: [VM platform](/compute/virtual-machines/types). * `resources.preset`: VM preset. Depends on the chosen platform. * `boot_disk`: Settings of a [VM-managed boot disk](/compute/storage/types#vm-managed-and-standalone-disks) that you create along with the VM. * `managed_disk.name`: Name of the disk. * `managed_disk.spec.type`: [Disk type](/compute/storage/types#network-ssd-disks). * `managed_disk.spec.size_gibibytes`: Disk size in gibibytes. Maximum boot disk size is 30,720 GiB (30 TiB). * `managed_disk.spec.source_image_family.image_family`: Public image that Nebius AI Cloud supports. For the list of available public images, see [Boot disk images for Compute virtual machines](/compute/storage/boot-disk-images). * `attach_mode`: Write permission of the boot disk, `READ_ONLY` or `READ_WRITE`. * `device_id` (optional): User-defined ID for mounting the disk to the VM. The default value is `disk-n`, where `n` is an integer index. A `virtio-` prefix is added to the specified (or default) device ID. * `secondary_disks` (optional): Settings of additional VM-managed disks that you create along with the VM. You can attach one or several disks. * `managed_disk.name`: Name of a new disk. * `managed_disk.spec.type`: Disk type. * `managed_disk.spec.size_gibibytes`: Disk size in gibibytes. * `attach_mode`: Write permission of the additional disk, `READ_ONLY` or `READ_WRITE`. * `device_id`: User-defined ID for mounting the disk to the VM. * `filesystems` (optional): Filesystem settings. You can attach several filesystems, if required. * `existing_filesystem.id`: ID of the filesystem created earlier. * `attach_mode`: Write permission of the filesystem, `READ_ONLY` or `READ_WRITE`. * `mount_tag`: Tag for mounting the filesystem to the VM. Create your own tag, such as `my-filesystem`. Make sure that it is unique within the VM. If you do not specify the tag, it takes the `filesystem-N` default value where `N` is an integer. For example, `filesystem-0`. After you create the VM, [mount the additional disks and filesystems](/compute/storage/use#how-to-mount-volumes-to-vms) to it. Otherwise, the VM's operating system does not recognize these volumes. * `cloud_init_user_data` (optional): Configuration of VM users in the [cloud-init](https://cloud-init.io/) format. * `network_interfaces`: Network settings. * To assign a dynamic public IP address, specify `public_ip_address = {}`. A dynamic public IP address is randomly allocated from the [IPv4 public range](#get-public-ip-range) of Nebius AI Cloud and is not persistent. If a VM with a dynamic address has the `Stopped` status for more than one hour, the address is automatically returned to the IPv4 public range. After that, Compute may allocate this address to a different VM. * To assign a static public IP address, specify `public_ip_address = {static = true}`. A static public IP address is also randomly allocated from the IPv4 public range of Nebius AI Cloud. If you stop a VM that has a static IP address, the address will not return to the range. However, if you delete this VM, the address will return. * To assign the allocation created earlier, specify `public_ip_address = {allocation_id = nebius_vpc_v1_allocation.my_allocation.id}`. An allocation allows you to use a reserved static public address for the VM. This address will not return to the IPv4 range even if you delete the VM. * To create a VM without a public IP address, remove the `public_ip_address` parameter from the configuration. The VM will only have a private address. If you need to secure your VM and make it isolated, you can create a VM without a public IP address. If you need to connect to this VM from the internet, you can [set up a WireGuard jump server](/compute/virtual-machines/wireguard). It has an IP address in the internet and an IP address in the VM's network. As a result, you can access the VM via the jump server from the internet. This approach enhances security and still provides access to the VM. * `gpu_cluster.id` (optional): ID of the GPU cluster created earlier. * `local_disks` (optional): Set `passthrough_group.requested = true` to request local SSD disks to be added to the VM. Local SSD disks are available only for supported platforms and presets. For details, see [Availability](/compute/storage/local-disks#availability). * `hostname` (optional): Hostname for the VM's [FQDN](/compute/virtual-machines/fqdn). By default, the FQDN has the `..compute.internal.` format. If you want to customize it, use a hostname instead of the VM's ID in the FQDN. For example, if you specify `hostname = "my-host"`, the FQDN is `my-host.vpcnetwork-e00***.compute.internal.`. * `reservation_policy.policy` (optional): Policy for reservation usage. You can use [reservations of capacity resources](/compute/virtual-machines/reservations) and run your VM based on them. As a result, VM resources are reserved and always available. * `reservation_policy.reservation_ids` (optional): IDs of specific reservations. These are capacity block groups that a Nebius manager has created. For information about how to configure `reservation_policy.policy` and `reservation_policy.reservation_ids`, see [How to add reservations to VMs](/compute/virtual-machines/reservations#how-to-add-reservations-to-vms). * `recovery_policy` (optional): Defines what Compute does with the VM after it is preempted or fails. [Preemptible VMs](/compute/virtual-machines/preemptible) only support the `FAIL` value that stops the VM. They do not support the `RECOVER` value that tries to restart the VM. If you set `RECOVER` for a preemptible VM, it will cause an error. * `preemptible.on_preemption` (optional; for preemptible VMs only): Specifies what happens when the VM is preempted. The only supported value is `STOP`: Compute stops the VM without deleting or restarting it. * `service_account_id` (optional): Service account associated with the VM. 7. Check that the configuration is correct: ```bash theme={null} terraform validate ``` 8. Apply the changes: ```bash theme={null} terraform apply ``` ## Examples ### Create a VM without an additional disk or filesystem To create a VM, run the following command: ```bash theme={null} nebius compute instance create \ --name \ --resources-platform \ --resources-preset \ --boot-disk-managed-disk-name managed-boot-disk \ --boot-disk-managed-disk-type network_ssd \ --boot-disk-managed-disk-size-gibibytes 10 \ --boot-disk-managed-disk-source-image-family-image-family ubuntu24.04-driverless \ --boot-disk-attach-mode READ_WRITE \ --network-interfaces '[{"name": "eth0", "ip_address": {}, "public_ip_address": {}, "subnet_id": ""}]' ``` The VM is provided with a dynamic public IPv4 address. For more information about the command parameters, see [Create a VM](#create-a-vm). 1. [Install and configure](/terraform-provider/quickstart) the Nebius AI Cloud provider for Terraform. 2. Create a VM: ```hcl theme={null} resource "nebius_compute_v1_instance" "my_vm" { name = "" parent_id = "" resources = { platform = "" preset = "" } boot_disk = { managed_disk = { name = "managed-boot-disk" spec = { type = "network_ssd" size_gibibytes = 10 source_image_family = { image_family = "ubuntu24.04-driverless" } } } attach_mode = "" } network_interfaces = [ { name = "eth0" ip_address = {} public_ip_address = {} subnet_id = "" } ] } ``` The VM is provided with a dynamic public IPv4 address. For more information about the configuration parameters, see [Create a VM](#create-a-vm). 3. Check that the configuration is correct: ```bash theme={null} terraform validate ``` 4. Apply the changes: ```bash theme={null} terraform apply ``` ### Create a VM with an additional disk Create a VM, its boot disk and an additional disk together: ```bash theme={null} nebius compute instance create \ --name \ --resources-platform \ --resources-preset \ --boot-disk-managed-disk-name managed-boot-disk \ --boot-disk-managed-disk-type network_ssd \ --boot-disk-managed-disk-size-gibibytes 10 \ --boot-disk-managed-disk-source-image-family-image-family ubuntu24.04-driverless \ --boot-disk-attach-mode READ_WRITE \ --secondary-disks "[{\"attach_mode\": \"READ_WRITE\", \"device_id\": \"device-1\", \"managed_disk\": { \"name\": \"managed-secondary-disk\", \"spec\": { \"type\": \"network_ssd\", \"size_gibibytes\": 10 }}}]" \ --network-interfaces '[{"name": "eth0", "ip_address": {}, "public_ip_address": {}, "subnet_id": ""}]' ``` The VM is provided with a dynamic public IPv4 address. For more information about the command parameters, see [Create a VM](#create-a-vm). 1. [Install and configure](/terraform-provider/quickstart) the Nebius AI Cloud provider for Terraform. 2. Create a VM, its boot disk and an additional disk together: ```hcl theme={null} resource "nebius_compute_v1_instance" "my_vm" { name = "" parent_id = "" resources = { platform = "" preset = "" } boot_disk = { managed_disk = { name = "managed-boot-disk" spec = { type = "network_ssd" size_gibibytes = 10 source_image_family = { image_family = "ubuntu24.04-driverless" } } } attach_mode = "" } secondary_disks = [ { managed_disk = { name = "managed-additional-disk" spec = { type = "" size_gibibytes = } } attach_mode = "" device_id = "device-1" } ] network_interfaces = [ { name = "eth0" ip_address = {} public_ip_address = {} subnet_id = "" } ] } ``` The VM is provided with a dynamic public IPv4 address. For more information about the configuration parameters, see [Create a VM](#create-a-vm). 3. Check that the configuration is correct: ```bash theme={null} terraform validate ``` 4. Apply the changes: ```bash theme={null} terraform apply ``` ### Create a VM with a filesystem 1. Create a filesystem: ```bash theme={null} nebius compute filesystem create \ --name \ --size-gibibytes 10 \ --type network_ssd \ --block-size-bytes 4096 ``` Save the filesystem ID from the output `metadata.id` parameter. [Mount filesystems](/compute/storage/use#shared-filesystems) after you create the VM. Otherwise, the filesystems are not attached to the VM. 2. Create the VM: ```bash theme={null} nebius compute instance create \ --name \ --stopped \ --resources-platform \ --resources-preset \ --boot-disk-managed-disk-name managed-boot-disk \ --boot-disk-managed-disk-type network_ssd \ --boot-disk-managed-disk-size-gibibytes 10 \ --boot-disk-managed-disk-source-image-family-image-family ubuntu24.04-driverless \ --boot-disk-attach-mode READ_WRITE \ --filesystems '[{"existing_filesystem": {"id": ""}, "attach_mode": "READ_WRITE", "mount_tag": ""}]' \ --network-interfaces '[{"name": "eth0", "ip_address": {}, "public_ip_address": {}, "subnet_id": ""}]' ``` The VM is provided with a dynamic public IPv4 address. For more information about the command parameters, see [Create a VM](#create-a-vm). 1. [Install and configure](/terraform-provider/quickstart) the Nebius AI Cloud provider for Terraform. 2. Create a filesystem: ```hcl theme={null} resource "nebius_compute_v1_filesystem" "my_filesystem" { name = "" parent_id = "" size_gibibytes = 10 type = "NETWORK_SSD" block_size_bytes = 4096 } ``` For more information, see [Volume parameters](/compute/storage/manage#volume-parameters). [Mount filesystems](/compute/storage/use#shared-filesystems) after you create the VM. Otherwise, the filesystems are not attached to the VM. 3. Create the VM: ```hcl theme={null} resource "nebius_compute_v1_instance" "my_vm" { name = "" parent_id = "" resources = { platform = "" preset = "" } boot_disk = { managed_disk = { name = "managed-boot-disk" spec = { type = "network_ssd" size_gibibytes = 10 source_image_family = { image_family = "ubuntu24.04-driverless" } } } attach_mode = "" } filesystems = [ { existing_filesystem = { id = nebius_compute_v1_filesystem.my_filesystem.id } attach_mode = "" mount_tag = "" } ] network_interfaces = [ { name = "eth0" ip_address = {} public_ip_address = {} subnet_id = "" } ] } ``` The VM is provided with a dynamic public IPv4 address. For more information about the configuration parameters, see [Create a VM](#create-a-vm). 4. Check that the configuration is correct: ```bash theme={null} terraform validate ``` 5. Apply the changes: ```bash theme={null} terraform apply ``` ### Create a VM with local SSD disks Local SSD disks are available only for supported platforms and presets. For details, see [Availability](/compute/storage/local-disks#availability). To create a VM with local SSD disks, run the following command: ```bash theme={null} nebius compute instance create \ --name \ --stopped \ --resources-platform \ --resources-preset \ --boot-disk-managed-disk-name managed-boot-disk \ --boot-disk-managed-disk-type network_ssd \ --boot-disk-managed-disk-size-gibibytes 10 \ --boot-disk-managed-disk-source-image-family-image-family ubuntu24.04-driverless \ --boot-disk-attach-mode READ_WRITE \ --network-interfaces '[{"name": "eth0", "ip_address": {}, "public_ip_address": {}, "subnet_id": ""}]' \ --local-disks-passthrough-group-requested true ``` This adds ephemeral local storage to the VM. The example creates a private IPv4 address and doesn't assign a public IPv4 address. For more information about the command parameters, see [Create a VM](#create-a-vm). 1. [Install and configure](/terraform-provider/quickstart) the Nebius AI Cloud provider for Terraform. 2. Create the VM: ```hcl theme={null} resource "nebius_compute_v1_instance" "my_vm" { name = "" parent_id = "" resources = { platform = "" preset = "" } boot_disk = { managed_disk = { name = "managed-boot-disk" spec = { type = "network_ssd" size_gibibytes = 10 source_image_family = { image_family = "ubuntu24.04-driverless" } } } attach_mode = "" } network_interfaces = [ { name = "eth0" ip_address = {} public_ip_address = {} subnet_id = "" } ] local_disks = { passthrough_group = { requested = true } } } ``` This provides a VM with ephemeral local storage. The example creates a private IPv4 address and doesn't assign a public IPv4 address. For more information about the configuration parameters, see [Create a VM](#create-a-vm). 3. Check that the configuration is correct: ```bash theme={null} terraform validate ``` 4. Apply the changes: ```bash theme={null} terraform apply ``` ### Create a VM with standalone boot and additional disks By default, when you create a VM, its disks are created along with this VM. Such disks are called [VM-managed](/compute/storage/types#vm-managed-and-standalone-disks): their lifecycle is tied to the VM, so when you delete the VM, its disks are deleted along with it. Alternatively, if you already have a disk or you want to keep the disk after the VM deletion, create a standalone disk first and attach it to the VM afterward. To create standalone disks and a VM with them, do the following: 1. Create a boot disk: ```bash theme={null} nebius compute disk create \ --name \ --size-gibibytes 50 \ --type network_ssd \ --source-image-family-image-family ubuntu24.04-cuda13.0 \ --block-size-bytes 4096 ``` Save the disk ID from the output `metadata.id` parameter. For more information about disk creation, see [Managing Compute volumes](/compute/storage/manage). 2. Create an additional disk: ```bash theme={null} nebius compute disk create \ --name \ --size-gibibytes 10 \ --type network_ssd \ --block-size-bytes 4096 ``` Save the disk ID from the output `metadata.id` parameter. After you create the VM, [mount the additional disks](/compute/storage/use#how-to-mount-volumes-to-vms) to it. Otherwise, the VM's operating system does not recognize these disks. 3. Create a VM: ```bash theme={null} nebius compute instance create \ --name \ --resources-platform \ --resources-preset \ --boot-disk-existing-disk-id \ --boot-disk-attach-mode \ --boot-disk-device-id \ --secondary-disks "[{\"existing_disk\": {\"id\": \"\"}, \"attach_mode\": \"READ_WRITE\", \"device_id\": \"device-1\"}]" \ --network-interfaces '[{"name": "eth0", "ip_address": {}, "public_ip_address": {}, "subnet_id": ""}]' ``` The VM is provided with a dynamic public IPv4 address. For more information about the command parameters, see [Create a VM](#create-a-vm). 1. [Install and configure](/terraform-provider/quickstart) the Nebius AI Cloud provider for Terraform. 2. Create a boot disk by using the following configuration: ```hcl theme={null} resource "nebius_compute_v1_disk" "my_boot_disk" { name = "" parent_id = "" size_gibibytes = "50" type = "NETWORK_SSD" source_image_family = { image_family = "ubuntu24.04-cuda13.0" } block_size_bytes = 4096 } ``` Set the `parent_id` to your [Project ID](/iam/manage-projects#terraform-3). For more information, see [Volume parameters](/compute/storage/manage#volume-parameters). 3. Create an additional disk: ```hcl theme={null} resource "nebius_compute_v1_disk" "my_additional_disk" { name = "" parent_id = "" size_gibibytes = "10" type = "NETWORK_SSD" block_size_bytes = 4096 } ``` After you create the VM, [mount the additional disks](/compute/storage/use#how-to-mount-volumes-to-vms) to it. Otherwise, the VM's operating system does not recognize these disks. 4. Create a VM: ```hcl theme={null} resource "nebius_compute_v1_instance" "my_vm" { name = "" parent_id = "" resources = { platform = "" preset = "" } boot_disk = { existing_disk = { id = nebius_compute_v1_disk.my_boot_disk.id } attach_mode = "" } secondary_disks = [ { existing_disk = { id = nebius_compute_v1_disk.my_additional_disk.id } attach_mode = "" device_id = "" } ] network_interfaces = [ { name = "eth0" ip_address = {} public_ip_address = {} subnet_id = "" } ] } ``` The VM is provided with a dynamic public IPv4 address. For more information about the configuration parameters, see [Create a VM](#create-a-vm). 5. Check that the configuration is correct: ```bash theme={null} terraform validate ``` 6. Apply the changes: ```bash theme={null} terraform apply ``` ### Create a VM within a GPU cluster If you want to create a VM with 8 GPUs (for example, for training models), create a GPU cluster for the VM. By using InfiniBand, the cluster accelerates tasks that require high-performance computing (HPC) power. 1. Create a GPU cluster: ```bash theme={null} nebius compute gpu-cluster create \ --name \ --infiniband-fabric ``` To select the fabric, see [InfiniBand fabrics](/compute/clusters/gpu/index#infiniband-fabrics). Save the cluster ID from the output `metadata.id` parameter. 2. Create a VM: ```bash theme={null} nebius compute instance create \ --name \ --resources-platform \ --resources-preset \ --boot-disk-managed-disk-name managed-boot-disk \ --boot-disk-managed-disk-type network_ssd \ --boot-disk-managed-disk-size-gibibytes 10 \ --boot-disk-managed-disk-source-image-family-image-family ubuntu24.04-cuda13.0 \ --boot-disk-attach-mode READ_WRITE \ --network-interfaces '[{"name": "eth0", "ip_address": {}, "public_ip_address": {}, "subnet_id": ""}]' \ --gpu-cluster-id ``` The VM is provided with a dynamic public IPv4 address. For more information about the command parameters, see [Create a VM](#create-a-vm). 1. [Install and configure](/terraform-provider/quickstart) the Nebius AI Cloud provider for Terraform. 2. Create a GPU cluster: ```hcl theme={null} resource "nebius_compute_v1_gpu_cluster" "my_gpu_cluster" { name = "" parent_id = "" infiniband_fabric = "" } ``` To select the fabric, see [InfiniBand fabrics](/compute/clusters/gpu/index#infiniband-fabrics). 3. Create a VM: ```hcl theme={null} resource "nebius_compute_v1_instance" "my_vm" { name = "" parent_id = "" resources = { platform = "" preset = "" } boot_disk = { managed_disk = { name = "managed-boot-disk" spec = { type = "network_ssd" size_gibibytes = 10 source_image_family = { image_family = "ubuntu24.04-cuda13.0" } } } attach_mode = "" } network_interfaces = [ { name = "eth0" ip_address = {} public_ip_address = {} subnet_id = "" } ] gpu_cluster = { id = nebius_compute_v1_gpu_cluster.my_gpu_cluster.id } } ``` The VM is provided with a dynamic public IPv4 address. For more information about the configuration parameters, see [Create a VM](#create-a-vm). 4. Check that the configuration is correct: ```bash theme={null} terraform validate ``` 5. Apply the changes: ```bash theme={null} terraform apply ``` ## "Not enough resources" error Sometimes, demand for virtual machines and GPUs in certain [Nebius AI Cloud regions](/overview/regions) might be higher than the available supply. When this happens, you might see a "Not enough resources" error when creating or restarting VMs in the affected region. For more details, see ["Not enough resources" error for virtual machines in Nebius AI Cloud](/compute/virtual-machines/not-enough-resources). ## See also * [Private and public IP addresses of Compute virtual machines](/compute/virtual-machines/network) * [InfiniBand™ networking for Compute virtual machines with GPUs](/compute/clusters/gpu/index) * [Types of storage volumes in Compute](/compute/storage/types) * [Managing Compute volumes](/compute/storage/manage) * [Attaching and mounting Compute volumes to VMs](/compute/storage/use) *** *InfiniBand and InfiniBand Trade Association are registered trademarks of the InfiniBand Trade Association.* # Private and public IP addresses of Compute virtual machines Source: https://docs.nebius.com/compute/virtual-machines/network Virtual machines in Compute can be reached at their private and public IP addresses. ## Private IP addresses Each VM is created with a network interface that has a private IPv4 address. VMs can communicate with each other without internet access by using their private addresses. Private address ranges are randomly allocated from subnets with the `10.0.0.0/8` and `192.168.0.0/16` IPv4 CIDR blocks. If you assign a VM a private IPv4 address within the `172.17.0.0/16` CIDR block, VMs running Docker cannot reach it. Because default boot disk images come with Docker preinstalled, this affects most VMs in your network. For more information, see [Virtual machine is unreachable due to a Docker subnet conflict](/compute/virtual-machines/docker-subnet-conflict). ### How to get a VM's private IP address 1. In the sidebar, go to  **Compute** → **Virtual machines**. 2. Open the page of the required VM. 3. Copy the **Private IPv4** value from the **Network** block. ```bash theme={null} export PRIVATE_IP_ADDRESS=$(nebius compute instance get-by-name \ --name \ --format json \ | jq -r '.status.network_interfaces[0].ip_address.address | split("/")[0]') echo $PRIVATE_IP_ADDRESS ``` ### How to assign a secondary private IP address to a VM You can use secondary private IP addresses as a backup option in case of incidents. For example, a backup node can take a secondary address of the main node when the main one fails. As a result, routing to this address can be preserved. To assign a secondary private address to a VM: 1. In the sidebar, go to  **Compute** → **Virtual machines**. 2. Open the page of the required VM. 3. Click **Attach resource** → **Secondary private IP**. 4. In the window that opens, select whether you want to reuse an existing IP address as a secondary one or create a new address. 5. For an existing IP address, select an allocation and then click **Assign address**. 6. For a new address, specify the allocation name and address. After that, click **Create and assign address**. To assign a secondary private address to a VM, first create a private allocation with the required address. After that, add this allocation to the VM specification. 1. Get the [subnet ID](/vpc/networking/resources#how-to-get-a-subnet) for the allocation. 2. Check what private CIDR blocks this subnet includes: ```bash theme={null} nebius vpc subnet get --id ``` The available CIDR blocks are specified in the `status.ipv4_private_cidrs` parameter in the output. 3. Create an allocation that reserves a private address. Use the address that belongs to one of the received private CIDR blocks. ```bash theme={null} nebius vpc allocation create \ --name private_allocation \ --ipv4-private-subnet-id \ --ipv4-private-cidr ``` Copy the allocation ID from the output. 4. Assign the allocation to the required VM: ```bash theme={null} nebius compute instance update \ --id \ --network-interfaces "[{\"aliases\": [{\"allocation_id\": \"\"}] }]" ``` For more information, see [Allocating custom private addresses to resources](/vpc/addressing/custom-private-addresses). ## Public IP addresses When creating a VM, you can enable public IPv4 addressing for it. A VM's public address is mapped to its private address by using one-to-one NAT. All IP addresses assigned to a VM are [allocations](/vpc/overview#allocation). When you create a VM and automatically assign a static or dynamic public address, Compute creates an allocation for it and assigns this address to this VM. After that, Compute manages the lifecycle of this allocation. In particular, Compute deletes the allocation when the VM is deleted. Public IP addresses are allocated from the public IPv4 ranges available for a given project. The available range depends on the [region](/overview/regions) where you create a VM. For instructions on how to get these ranges, see [Getting public IPv4 ranges for projects](/vpc/addressing/public-address-ranges). If you assign an already existing allocation when you create a VM, Virtual Networks manages the lifecycle of this allocation. In this case, the allocation is preserved even if you delete the VM. If you need to secure your VM and make it isolated, you can create a VM without a public IP address. If you need to connect to this VM from the internet, you can [set up a WireGuard jump server](/compute/virtual-machines/wireguard). It has an IP address in the internet and an IP address in the VM's network. As a result, you can access the VM via the jump server from the internet. This approach enhances security and still provides access to the VM. ### How to enable a public IP address for a VM To enable a public address, either [create a VM](#how-to-create-a-vm-with-a-public-ip-address) with it or [assign a public address to an existing VM](#how-to-enable-a-public-ip-address-for-an-existing-vm). A VM must be in the same [region](/overview/regions) as the VM's subnet. An allocation assigned to a VM must belong to the VM's subnet. For more information, see [Virtual Networks documentation](/vpc/overview). #### How to create a VM with a public IP address On the VM creation page ( **Compute** → **Virtual machines** → **Create virtual machine** → **Network** → **Public IP address**), select one of the following options: * **Auto assign dynamic IP** (default): A dynamic public IP address is randomly allocated from the [public IPv4 ranges available for the project](/vpc/addressing/public-address-ranges). Dynamic public IP addresses are not persistent. If a VM with a dynamic address has the `Stopped` status for more than one hour, the address automatically returns to the IPv4 public range of Nebius AI Cloud. After that, Compute may allocate this address to a different VM. If you want to preserve the address, assign a static address or an [allocation](/vpc/overview#allocation) to the VM. * **Auto assign static IP**: A static public IP address is randomly allocated from the public IPv4 ranges available for the project. If you stop a VM that has a static IP address, the address will not return to the range. However, if you delete this VM, the address will return. * **Select from already allocated**: A preliminarily created allocation is assigned to a VM. If you use an allocation, its address will not return to the IPv4 range even if you delete the VM. If you want to create a VM with a private address only, select the **No public IP** option. You can [create a VM](/compute/virtual-machines/manage) with a public IP address. This can be either a dynamic address, a static address or an [allocation](/vpc/overview#allocation): * A dynamic public IP address is randomly allocated from the [IPv4 public range](#get-public-ip-range) of Nebius AI Cloud and is not persistent. If a VM with a dynamic address has the `Stopped` status for more than one hour, the address is automatically returned to the IPv4 public range. After that, Compute may allocate this address to a different VM. * A static public IP address is also randomly allocated from the IPv4 public range of Nebius AI Cloud. If you stop a VM that has a static IP address, the address will not return to the range. However, if you delete this VM, the address will return. * An allocation allows you to use a reserved static public address for the VM. This address will not return to the IPv4 range even if you delete the VM. To create a VM with a **dynamic public IP address**: 1. Get the [subnet ID](/vpc/networking/resources#how-to-get-a-subnet-id) for the VM. 2. Run the following command and specify the subnet ID in it: ```bash theme={null} nebius compute instance create \ ... \ --network-interfaces "[{\"name\": \"eth0\", \"ip_address\": {}, \"public_ip_address\": {}, \"subnet_id\": \"\"}]" ``` To create a VM with a **static public IP address**: 1. Get the [subnet ID](/vpc/networking/resources#how-to-get-a-subnet-id) for the VM. 2. Run the following command and specify the subnet ID in it: ```bash theme={null} nebius compute instance create \ ... \ --network-interfaces "[{\"name\": \"eth0\", \"ip_address\": {}, \"public_ip_address\": {\"static\": true}, \"subnet_id\": \"\"}]" ``` To create a VM with an **already allocated public IP address**: 1. Get the [subnet ID](/vpc/networking/resources#how-to-get-a-subnet-id) for the VM. 2. Create an allocation that reserves a static public address: ```bash theme={null} nebius vpc allocation create \ --ipv4-public-subnet-id \ --name ``` 3. Create the VM. Specify the subnet ID and the allocation ID in the command: ```bash theme={null} nebius compute instance create \ ... \ --network-interfaces "[{\"name\": \"eth0\", \"ip_address\": {}, \"public_ip_address\": {\"allocation_id\": \"\"}, \"subnet_id\": \"\"}]" ``` If you want to create a VM with a private address only, omit the `public_ip_address` parameter in the `nebius compute instance create` command. If an allocation with a public address has not been assigned to any resource for 30 days, Nebius AI Cloud can delete this allocation and release its address. If you want to preserve the address, assign its allocation to a Nebius AI Cloud resource. #### How to enable a public IP address for an existing VM You can only assign one public IP address to a VM. If the VM already has a public address, you cannot assign one more. 1. In the [web console](https://console.nebius.com), go to  **Compute** → **Virtual machines**. 2. Open the page of the required VM. 3. Click **Attach resource** → **Public IP address**. 4. In the window that opens, select whether you want to assign an existing IP address or create a new one. 5. For an existing IP address, select the required one and then click **Assign address**. 6. For a new address, specify the address type: dynamic or static. After that, click **Create and assign address**. After you enable an IP address for a VM, you can change the type of this address: make it static or dynamic. To do so, go to the VM page, open the **Network interface** tab and then click  → **Edit type** in the line of the required address. To enable a **dynamic public IP address** for a VM, run the following command: ```bash theme={null} nebius compute instance update \ --id \ --network-interfaces "[{\"public_ip_address\": {} }]" ``` To enable a **static public IP address** for a VM, run the following command: ```bash theme={null} nebius compute instance update \ --id \ --network-interfaces "[{\"public_ip_address\": {\"static\": true}}]" ``` To assign an **already allocated public IP address** to a VM: 1. Get the [subnet ID](/vpc/networking/resources#how-to-get-a-subnet-id) for the VM. 2. Create an allocation that reserves a static public address: ```bash theme={null} nebius vpc allocation create \ --ipv4-public-subnet-id \ --name ``` 3. Assign this allocation to the VM: ```bash theme={null} nebius compute instance update \ --id \ --network-interfaces "[{\"public_ip_address\": {\"allocation_id\": \"\"}}]" ``` ### How to get a VM's public IP address 1. In the sidebar, go to  **Compute** → **Virtual machines**. 2. Open the page of the required VM. 3. Copy the **Public IPv4** value from the **Network** block. ```bash theme={null} export PUBLIC_IP_ADDRESS=$(nebius compute instance get-by-name \ --name \ --format json \ | jq -r '.status.network_interfaces[0].public_ip_address.address | split("/")[0]') echo $PUBLIC_IP_ADDRESS ``` ### How to migrate a public static IP address from one VM to another To reassign a public static IP address from one VM to another, detach this address from the source VM and attach it to the target VM. Before you begin, make sure that you have a VM with a public static IP address (the source VM) and a VM without a public address (the target VM). For information about creating VMs, see [How to create a virtual machine in Nebius AI Cloud](/compute/virtual-machines/manage). To migrate the address, do the following: 1. To get IDs of the source and target VMs, list all VMs: ```bash theme={null} nebius compute instance list ``` 2. Store the VMs' IDs in environment variables: ```bash theme={null} SOURCE_VM="" TARGET_VM="" ``` 3. Extract the allocation ID of the public static IP address currently attached to the source VM. This value is required to reassign the IP address to another VM. ```bash theme={null} ALLOC_ID=$(nebius compute instance get \ --id "$SOURCE_VM" \ --format json | jq -r '.status.network_interfaces[] | select(.name=="eth0") | .public_ip_address.allocation_id') ``` 4. Pin the allocation in the source VM specification. This prevents the allocation from being deleted when you detach it in the next step. ```bash theme={null} nebius compute instance update --patch \ --id "$SOURCE_VM" \ "$(jq -n --arg alloc "$ALLOC_ID" '{"spec":{"network_interfaces":[{"name":"eth0","public_ip_address":{"static":true,"allocation_id":$alloc}}]}}')" ``` 5. Remove the public IP address from the source VM. This makes the allocation available for reuse. ```bash theme={null} nebius compute instance update --patch \ --id "$SOURCE_VM" \ '{"spec":{"network_interfaces": [{"name":"eth0","public_ip_address":null}]}}' ``` 6. Assign the same allocation ID to the target VM: ```bash theme={null} nebius compute instance update --patch \ --id "$TARGET_VM" \ "$(jq -n --arg alloc "$ALLOC_ID" '{"spec":{"network_interfaces": [{"name":"eth0","public_ip_address":{"static":true,"allocation_id":$alloc}}]}}')" ``` The output of this command shows that the allocation is attached to the target VM. ## How to detach an IP address from a VM To detach a public address or a secondary private address from a VM: 1. In the [web console](https://console.nebius.com), go to  **Compute** → **Virtual machines**. 2. Open the page of the required VM and then go to the **Network interface** tab. 3. In the line of the allocation that you want to detach from a VM, click  → **Detach**. 4. In the window that opens, confirm the action. # "Not enough resources" error for virtual machines in Nebius AI Cloud Source: https://docs.nebius.com/compute/virtual-machines/not-enough-resources Sometimes, demand for virtual machines and GPUs in certain [Nebius AI Cloud regions](/overview/regions) might be higher than the available supply. When this happens, you might see a "Not enough resources" error when creating or restarting VMs in the affected region. ## Error creating a VM If you receive a "Not enough resources" error when [creating a VM](/compute/virtual-machines/manage) in an affected region, consider creating the VM with similar resources or in a different region. > For example, instead of creating the VM on the NVIDIA® H200 NVLink with Intel Sapphire Rapids platform in the eu-west1 region, you can try NVIDIA® H100 NVLink with Intel Sapphire Rapids in eu-north1. For VMs with GPUs, you can use the [capacity advisor](/compute/virtual-machines/capacity-advisor) to get information about the availability of computing resources based on your quotas and the current physical capacity. Availability of platforms and presets differs by region and project. To change the platform or preset of a VM, you might need to change its project as well. For more information about availability, see [Types of virtual machines and GPUs in Nebius AI Cloud](/compute/virtual-machines/types) and [How to find out platforms and presets available in a project](/compute/virtual-machines/list-platforms). If your workload does not work with another VM platform or preset, you can request to reserve the required capacity. For more details, [contact the Nebius sales team](https://nebius.com/#ai-contact-form). ## Error restarting a stopped VM If you get a "Not enough resources" error when restarting a stopped VM in an affected region, check the [capacity advisor](/compute/virtual-machines/capacity-advisor) for detailed information on available computing resources. # Parameters of a virtual machine configuration in Compute Source: https://docs.nebius.com/compute/virtual-machines/params When you [create a virtual machine](/compute/virtual-machines/manage) (VM) or edit its configuration, you operate with VM settings. Below is the list of the VM settings available in the [web console](https://console.nebius.com), on the VM creation page. ## Computing resources In the **Computing resources** section, you configure the following settings: * Whether a VM should have GPUs. * VM type, regular or [preemptible](/compute/virtual-machines/preemptible), for a VM with GPUs. [Containers over VMs](/compute/virtual-machines/containers) and VMs without GPUs are always based on regular VMs, so the selection of the VM type is unavailable for them. * [Platform and preset](/compute/virtual-machines/types). * (Optional) [GPU cluster](/compute/clusters/gpu/index). Allows accelerating tasks that require high-performance computing (HPC) power, such as training a model. A GPU cluster only helps if you add at least two VMs with 8 GPUs each to the cluster. For containers over VMs, you can assign a GPU cluster in the **Advanced settings** section. ## Disks In the VM configuration, you can add a boot disk and additional disks. In their configuration, you specify their type, size and block size. A boot disk is additionally based on an operating system. For more information, see [Volume parameters](/compute/storage/manage#volume-parameters). Boot disks are unavailable for containers over VMs. Only additional disks are available in advanced settings. ## Shared filesystems In the **Shared filesystems** section, you attach a filesystem to a VM. A filesystem has the following settings: * [Name, size and block size](/compute/storage/manage#volume-parameters). * Mount tag for mounting the filesystem to the VM. Create your own tag, such as `my-filesystem`. Make sure that it is unique within a VM. * **Auto mount** option enabled to mount the filesystem to the VM automatically. ## Network In the **Network** section, you select a [network and subnet](/vpc/overview). Also, you manage the VM addresses: * **Private address**: Select whether to allocate a random private IP address for the VM or to attach an allocation of a private address. * **Public address**: Specify whether the VM should have a public IP address and whether it should be static or dynamic. If you need to secure your VM and make it isolated, you can create a VM without a public IP address. If you need to connect to this VM from the internet, you can [set up a WireGuard jump server](/compute/virtual-machines/wireguard). It has an IP address in the internet and an IP address in the VM's network. As a result, you can access the VM via the jump server from the internet. This approach enhances security and still provides access to the VM. For more information about the settings of the addresses, see [Private and public IP addresses of Compute virtual machines](/compute/virtual-machines/network). ## Access In the **Access** section, you add a username and SSH key. As a result, you add credentials of the user on behalf of whom you can [connect to the VM](/compute/virtual-machines/connect). The access settings include the following: * Username of the VM user. Cannot be `root` or `admin`. These usernames are reserved for internal needs and are not allowed to connect to a VM by SSH. * [Public key of your SSH key pair](/compute/virtual-machines/ssh-keys#getting-the-public-key). * Name of credentials to recognize the key in the list of keys. ## Additional In the **Additional** section, specify a [service account](/iam/service-accounts/manage) that will perform actions on behalf of the VM, for example, run scripts. # Preemptible virtual machines Source: https://docs.nebius.com/compute/virtual-machines/preemptible *Preemptible VMs*, also known as spot VMs or spot instances, are virtual machines that Compute may stop at any time. This can happen when the system needs resources to launch a regular VM in the same region. Compute sends a `SIGTERM` signal 60 seconds before stopping the VM. If your system does not respond in time, Compute sends a `SIGKILL` signal to force shutdown. Compute preserves all data on the volumes attached to a stopped preemptible VM. It does not preserve dynamic resources, such as dynamic public IP addresses. Preemptible VMs [cost less than regular ones](/compute/resources/pricing#prices), but they do not provide guaranteed availability. You can create a preemptible VM, but you cannot change the type of an existing VM—either from regular to preemptible or from preemptible to regular. ## Supported platforms You can run preemptible VMs on all [VM platforms with GPUs](/compute/virtual-machines/types). To get an up-to-date list of platforms, run the `nebius compute platform list` [command](/cli/reference/compute/platform/list). The platforms available for preemptible VMs are marked as `allowed_for_preemptibles: true`. ## How to create a preemptible VM 1. Go to the [web console](https://console.nebius.com), click **Create resource** and then select **Virtual machine**. 2. When creating a VM, set the **VM type** parameter to **Preemptible**. When [creating a VM](/compute/virtual-machines/manage): * Select a [platform that supports preemptible VMs](#supported-platforms). * Add the following parameters to the `nebius compute instance create` command: ```bash theme={null} nebius compute instance create \ ... \ --recovery-policy fail \ --preemptible-on-preemption stop ``` In this configuration, the following values are specified: * `recovery_policy` defines what Compute does with a VM after it's preempted or fails. Preemptible VMs support only the `FAIL` value, which stops the VM. They do not support the `RECOVER` value, which tries to restart the VM. Setting `RECOVER` for a preemptible VM results in an error. * `on_preemption` specifies what happens when the VM is preempted. The only supported value is `STOP`: Compute stops the VM without deleting or restarting it. For details about the nebius compute instance create command, see the [Nebius AI Cloud CLI reference](/cli/reference/compute/instance/create). When creating a VM, select a [platform that supports preemptible VMs](#supported-platforms) and set the following parameters in the VM configuration: ```hcl theme={null} resource "nebius_compute_v1_instance" "instance" { ... recovery_policy = "FAIL" preemptible = { on_preemption = "STOP" } ... } ``` In this configuration, the following values are specified: * `recovery_policy` defines what Compute does with a VM after it's preempted or fails. Preemptible VMs support only the `FAIL` value, which stops the VM. They do not support the `RECOVER` value, which tries to restart the VM. Setting `RECOVER` for a preemptible VM results in an error. * `on_preemption` specifies what happens when the VM is preempted. The only supported value is `STOP`: Compute stops the VM without deleting or restarting it. For details about the nebius\_compute\_v1\_instance Terraform resource, see the [provider reference](/terraform-provider/reference/resources/compute_v1_instance). A dynamic IP address is released when a preemptible VM stops. To keep your workload stable, consider using a static IP address instead. ## How to continue working with a stopped preemptible VM When Compute stops a preemptible VM, it preserves all data on the attached volumes. To resume work, [start the VM](/compute/virtual-machines/stop-start) again. If you used a dynamic IP address, update all systems that depended on the old IP address. If the VM uses local SSD disks, use them with caution. Local SSD disks are ephemeral, meaning any data stored on them will be lost when the preemptible VM stops. You can also [create a regular VM](/compute/virtual-machines/manage) with the same attached volumes. # Capacity reservations for Compute virtual machines Source: https://docs.nebius.com/compute/virtual-machines/reservations To make sure that GPU capacity is always available for your virtual machines (VMs), you can reserve GPUs. A *reservation* represents a [capacity block group](/overview/limits/capacity-block-groups), and it reserves a specific number of GPUs that are allocated to your infrastructure. GPUs from a reservation remain available, even if a VM is stopped. Without reservations, GPU capacity is taken from a shared pool and returned when a VM is stopped (for example, by you or a [maintenance event](/compute/virtual-machines/maintenance)). To start using reservations, send a request to your Nebius manager. In this request, specify how many GPUs you would like to reserve and for what period. If you are not in contact with a Nebius manager, you can ask [technical support](https://console.nebius.com/support/create-ticket) to connect you with one. After reservations are ready, you can add them to your VMs when you create or update these VMs. You can also check your capacity block groups on the **Limits** page and get detailed information about them. For more information, see [List of capacity block groups](/overview/limits/capacity-block-groups#list-of-capacity-block-groups). GPUs allocated from reservations do not count towards [quotas on the number of GPUs](/compute/resources/quotas-limits#gpu-virtual-machines). ## How to add reservations to VMs VMs of a regular type and with GPUs support reservations. [Preemptible VMs](/compute/virtual-machines/preemptible) and VMs without GPUs do not support them. If you want to [create a VM](/compute/virtual-machines/manage#create-a-vm), in the creation form, under **Computing resources**, select **With GPU** and a regular VM type. After that, specify the **Reservation usage** settings. If you want to modify an existing VM, [stop it](/compute/virtual-machines/stop-start#how-to-stop-and-start-vms-manually) first and then go to its **Settings** tab on the VM page. Next, update the **Reservation usage** settings. The **Reservation usage** settings are only displayed if you have capacity block groups. Available **Reservation usage** options: * **With reservations**: Resources are allocated from reservations. You can use one of the following reservation types: * **Any** (default): You do not need to select reservations. The service uses the reservations that are most suitable for the configuration of your VM. * **Specific**: Select specific reservations. Make sure to select reservations that have enough capacity and that do not expire in several days. If there are no reservations available during the VM lifecycle, you can run your VM without reservations. Resources for it will be taken from the common pool. To configure this behavior, enable the **Start without a reservation when reservation capacity is exhausted** option. * **Without reservations**: Resources are allocated from the common pool, and no reservations are used for the VM. Use the `--reservation-policy-*` parameters when creating or updating a VM: * To create a VM, use the following command: ```bash theme={null} nebius compute instance create \ ... \ --reservation-policy-policy \ --reservation-policy-reservation-ids ``` * To update a VM, [stop it](/compute/virtual-machines/stop-start#how-to-stop-and-start-vms-manually) first and then use the following command: ```bash theme={null} nebius compute instance update \ ... \ --reservation-policy-policy \ --reservation-policy-reservation-ids ``` Description of the parameters: * `--reservation-policy-policy`: Policy for reservation usage. Supports the following values: * `auto`: VM resources are allocated from reservations. If no reservations are currently available, the VM runs without them. In this case, resources for the VM are provided from the common pool. The `auto` value is default. If you don't have any reservations and you don't set the `--reservation-policy-policy` parameter, the `auto` value applies and the VM runs without reservations. * `forbid`: VM resources are provided from the common pool, and no reservations are used. * `strict`: VM resources are exclusively allocated from reservations. The VM doesn't run without the reservations. * `--reservation-policy-reservation-ids` (optional): IDs of specific reservations (capacity block groups). Use this parameter only if you need specific reservations. Specify the IDs in the order in which reservations should apply. For instance, resources should be allocated from the first specified reservation. When it is exhausted or expired, the service uses resources from the second specified reservation, and so on. Make sure to select reservations that have enough capacity and that do not expire in several days. To find out how different combinations of parameter values impact the result, see the table below: | `policy` | `reservation-ids` | **Behavior** | | -------- | ----------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `auto` | Not specified | Compute tries to launch a VM in any available and suitable reservation. If none is found, VM resources are provided from the common pool, not from a reservation. | | `auto` | Specified | Compute tries to launch a VM in one of the specified reservations. If none of them fit (for example, they are not currently active or there are not enough GPUs), VM resources are provided from the common pool. | | `forbid` | Not specified | VM resources are provided from the common pool. No reservations are used. | | `forbid` | Specified | Not supported. If you apply this combination, it will result in a validation error. | | `strict` | Not specified | Compute tries to launch a VM in any available and suitable reservation. If none is found, a request for creating or updating a VM fails. | | `strict` | Specified | Compute tries to launch a VM in one of the specified reservations. If none of them fit, a request for creating or updating a VM fails. | Use the `reservation_policy` parameter in the VM configuration: ```hcl theme={null} resource "nebius_compute_v1_instance" "my_vm" { ... reservation_policy = { policy = "" reservation_ids = "" } ... } ``` Description of the parameters: * `policy`: Policy for reservation usage. Supports the following values: * `AUTO`: VM resources are allocated from reservations. If no reservations are currently available, the VM runs without them. In this case, resources for the VM are provided from the common pool. The `AUTO` value is default. If you don't have any reservations and you don't set the `policy` parameter, the `AUTO` value applies and the VM runs without reservations. * `FORBID`: VM resources are provided from the common pool, and no reservations are used. * `STRICT`: VM resources are exclusively allocated from reservations. The VM doesn't run without the reservations. * `reservation_ids`: IDs of specific reservations (capacity block groups). You can use this parameter with the `AUTO` and `STRICT` reservation usages: Specify the IDs in the order in which reservations should apply. For instance, resources should be allocated from the first specified reservation. When it is exhausted or expired, the service uses resources from the second specified reservation, and so on. Make sure to select reservations that have enough capacity and that do not expire in several days. To find out how different combinations of parameter values impact the result, see the table below: | `policy` | `reservation_ids` | **Behavior** | | -------- | ----------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | `AUTO` | Not specified | Compute tries to launch a VM in any available and suitable reservation. If none is found, VM resources are provided from the common pool, not from a reservation. | | `AUTO` | Specified | Compute tries to launch a VM in one of the specified reservations. If none of them fit (for example, they are not currently active or there are not enough GPUs), VM resources are provided from the common pool. | | `FORBID` | Not specified | VM resources are provided from the common pool. No reservations are used. | | `FORBID` | Specified | Not supported. If you apply this combination, it will result in a validation error. | | `STRICT` | Not specified | Compute tries to launch a VM in any available and suitable reservation. If none is found, a request for creating or updating a VM fails. | | `STRICT` | Specified | Compute tries to launch a VM in one of the specified reservations. If none of them fit, a request for creating or updating a VM fails. | ## How to find information about reservations for an already configured VM You can check the list of VMs and an overview of a given VM to find information about the VM reservations. ### List of VMs The [list of VMs](https://console.nebius.com/compute) provides the following: * The **Platform and VM type** column shows what configuration you have set up for a given VM. * The **Current reservations** column shows what reservations are currently used. Data in these columns does not always match: * If a VM is preemptible or stopped, **Current reservations** do not show any data (**N/A** is displayed). * If capacity in reservations is exhausted, **Current reservations** show that there are no reservations currently consumed. ### VM overview On the VM page, on the **VM overview** tab, in the **Resource capacity** block, you can find more detailed information: * The **VM type**, **Reservation usage** and **If no capacity** fields show the configuration that you have set up. * The **Current reservations** and **Next interval** fields show the current consumption of reservations. If the VM runs without reservations, no data about them is displayed. ## Billing for reservations Reservations and [billing models](/signup-billing/billing-models/overview) do not match directly. If your VMs run without reservations, this does not mean that the pay-as-you-go (PAYG) pricing applies by default for these VMs. It depends on whether you have an addendum for the commitment discounts. When a Nebius manager creates reservations for you, they also prepare an addendum for the commitment discounts. After the addendum comes into force, you are charged for VMs based on this billing model. If your VM runs without reservations, the service still charges you based on the commitment discounts because of the addendum. If you do not have the addendum, your VMs are based on PAYG. ## See also * [Capacity block groups in Nebius AI Cloud](/overview/limits/capacity-block-groups) * [Capacity reservations for Managed Service for Kubernetes® node groups](/kubernetes/node-groups/reservations) # How to generate SSH keys Source: https://docs.nebius.com/compute/virtual-machines/ssh-keys An *SSH key pair* is used to authenticate with a remote resource over SSH. It consists of: * A *public key* that you add to the resource or share with an administrator. * A *private key* that you keep on your local machine and use when connecting. You need an SSH key pair to: * Configure SSH access when [creating a virtual machine (VM)](/compute/virtual-machines/manage) and to [connect to your Compute VM](/compute/virtual-machines/connect) over SSH. * [Create a container over VM](/compute/virtual-machines/containers). * [Give another user access to a VM](/compute/virtual-machines/connect#shared-access-to-the-vm). * [Connect to login and worker nodes in a Soperator cluster](/slurm-soperator/clusters/connect). * [Access a VM through a jump server](/compute/virtual-machines/wireguard) when the VM does not have a public IP address. ## Generating a key pair 1. In the terminal, create the `.ssh` directory if it does not exist: ```bash theme={null} mkdir -p ~/.ssh chmod 700 ~/.ssh ``` 2. Go to the `~/.ssh` directory: ```bash theme={null} cd ~/.ssh ``` 3. Generate an SSH key pair: ```bash theme={null} ssh-keygen -t ed25519 ``` * To add a comment that identifies the key, add the optional `-C` parameter: ```bash theme={null} ssh-keygen -t ed25519 -C "" ``` 4. When prompted, enter the file path where you want to save the key pair. * To save the key pair to the default location, press `Enter`. * If you already have a key in the default location, specify a custom file name, for example: ```bash theme={null} /home//.ssh/nebius_ed25519 ``` 5. (Optional) When prompted, enter a passphrase for the private key. Press `Enter` to generate a key without a passphrase. However, using a passphrase protects the private key if someone gets access to your local machine. 6. Repeat the passphrase when prompted. The command creates two files: * The private key, for example `~/.ssh/id_ed25519`. * The public key, for example `~/.ssh/id_ed25519.pub`. ## Getting the public key You need the contents of the public key when a resource or configuration asks for an SSH public key. For example, you can add it to a VM to configure SSH access or send it to an administrator who manages access to the resource. To get the contents of the public key, run: ```bash theme={null} cat ~/.ssh/id_ed25519.pub ``` If you saved the public key to a custom file when you generated the key, specify the name with the `.pub` extension: ```bash theme={null} cat ~/.ssh/.pub ``` The output contains the contents of the public key, for example: ```text theme={null} ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAI*** user@example.com ``` ## Protecting the private key Follow these recommendations when using SSH keys: * Keep the private key only on your local machine and don't share it with others. * Share only the public key, which is stored in the file with the `.pub` extension. * Use a passphrase for the private key. * Use a separate key pair for each user. * Remove public keys that are no longer used from the resource. # How to stop and start Compute virtual machines Source: https://docs.nebius.com/compute/virtual-machines/stop-start To proceed with [maintenance](/compute/virtual-machines/maintenance), stop and start virtual machines [manually](#how-to-stop-and-start-vms-manually) or [automatically](#how-to-stop-and-start-vms-automatically-by-using-autohealing). If you need to keep your VMs running, [contact the support team](https://console.nebius.com/support/create-ticket) and consult them about the possibility of rescheduling maintenance of the affected VMs. Do not stop your VM by using Linux commands, such as `shutdown` or `halt`. Compute considers this as a failure, reboots the VM automatically and continues charging for this VM. Use Nebius AI Cloud interfaces instead and follow the instructions below. ## How to stop and start VMs manually 1. In the sidebar, go to  **Compute** → **Virtual machines**. 2. Find VMs with the maintenance label. maintenance-label 3. Click  → **Stop** for these VMs. 4. In the window that opens, confirm stopping the VM. 5. When the VM status changes to **Stopped**, click  → **Start**. 6. In the window that opens, confirm starting the VM. 1. Check whether maintenance is scheduled for a VM: ```bash theme={null} nebius compute instance get --id ``` If the output contains the `status.maintenance_event_id` parameter, this means that you need to stop and start this VM. 2. Stop the VM: ```bash theme={null} nebius compute instance stop --id ``` 3. Start the VM: ```bash theme={null} nebius compute instance start --id ``` ## How to stop and start VMs automatically by using autohealing You can create a VM with the autohealing function. It allows a VM to automatically stop and start each time maintenance is scheduled. As a result, the applications on this VM are highly available. Use autohealing only if the automatic VM shutdown is safe for the workloads on this VM. If you cannot stop the VM at any time, it is better to manage the VM [manually](#how-to-stop-and-start-vms-manually). To create a VM that stops and starts automatically during maintenance events: 1. Make sure you are in a [group](/iam/authorization/groups/index) that has the `admin` role within your tenant or project; for example, the default `admins` group. You can check this in the [Administration → IAM](https://console.nebius.com/iam) section of the web console. 2. [Create a service account](/iam/service-accounts/manage#create-a-service-account). 3. Add it to the default `viewers` group: 1. Get the ID of the `viewers` group: ```bash theme={null} nebius iam group get-by-name --name viewers \ --parent-id \ --format json | jq -r '.metadata.id' ``` In the command, specify your [Tenant ID](/iam/get-tenants#cli). 2. Get the ID of the service account: ```bash theme={null} nebius iam service-account get-by-name \ --name \ --format json | jq -r '.metadata.id' ``` 3. Add the service account to the `viewers` group: ```bash theme={null} nebius iam group-membership create \ --parent-id \ --member-id ``` 4. [Create a VM](/compute/virtual-machines/manage). In its configuration, specify the following: * [Settings that allow connections](/compute/virtual-machines/connect#set-up-the-vm) to this VM. * Created service account: ```bash theme={null} nebius compute instance create \ ... \ --service-account-id ``` 5. [Connect to the VM](/compute/virtual-machines/connect#connect-to-the-vm-by-using-ssh). 6. Install `jq` on the VM: ```bash Ubuntu theme={null} sudo apt-get install jq ``` ```bash macOS theme={null} brew install jq ``` 7. Go to the `/usr/local/bin/` directory: ```bash theme={null} cd /usr/local/bin/ ``` 8. Create the `vm_maintenance.sh` file: ```bash theme={null} sudo nano vm_maintenance.sh ``` 9. Add the following Bash script to the file: ```bash theme={null} #!/bin/bash INSTANCE_ID_FILE="/mnt/cloud-metadata/instance-id" CHECK_INTERVAL=600 # 10 minutes in seconds # Check if the Nebius AI Cloud CLI is installed check_nebius_installed() { if ! command -v nebius &> /dev/null; then echo "$(date) - Nebius utility not found, exiting..." exit 1 fi } get_instance_id() { if [[ -f "$INSTANCE_ID_FILE" ]]; then cat "$INSTANCE_ID_FILE" else echo "File with the virtual machine ID is not found" exit 1 fi } # Handle a maintenance event handle_maintenance_event() { # Add custom actions before stopping the virtual machine echo "$(date) - Custom actions before stopping the virtual machine" sudo shutdown -h +1 "Restarting virtual machine due to maintenance" } check_nebius_installed # main loop while true; do INSTANCE_ID=$(get_instance_id) if [[ -z "$INSTANCE_ID" ]]; then echo "Virtual machine ID is empty" exit 1 fi RESPONSE=$(nebius compute instance get --id "$INSTANCE_ID" --format json) if echo "$RESPONSE" | jq -e '.status.maintenance_event_id' >/dev/null; then echo "$(date) - Maintenance event detected" handle_maintenance_event else echo "$(date) - No maintenance event detected" fi sleep "$CHECK_INTERVAL" done ``` 10. Make the file executable: ```bash theme={null} sudo chmod +x /usr/local/bin/vm_maintenance.sh ``` 11. To make the script run continuously and restart it when the VM fails or reboots, add a `systemd` unit to the script: ```bash theme={null} sudo bash -c 'cat > /etc/systemd/system/vm_maintenance.service << EOF [Unit] Description=VM Maintenance Event Handler After=network.target [Service] ExecStart=/usr/local/bin/vm_maintenance.sh Restart=always User=root Environment=PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin WorkingDirectory=/usr/local/bin StandardOutput=append:/var/log/vm_maintenance.log StandardError=append:/var/log/vm_maintenance.log [Install] WantedBy=multi-user.target EOF' ``` 12. Start the service created with the `systemd` unit, and let it restart in case of the VM reboot: ```bash theme={null} sudo systemctl daemon-reload sudo systemctl start vm_maintenance sudo systemctl enable vm_maintenance sudo systemctl status vm_maintenance ``` The output example is the following: ```text theme={null} Created symlink /etc/systemd/system/multi-user.target.wants/vm_maintenance.service → /etc/systemd/system/vm_maintenance.service. ● vm_maintenance.service - VM Maintenance Event Handler Loaded: loaded (/etc/systemd/system/vm_maintenance.service; enabled; vendor preset: enabled) Active: active (running) since Fri 2025-04-25 10:19:19 UTC; 214ms ago Main PID: 28530 (vm_maintenance.) Tasks: 6 (limit: 19056) Memory: 24.3M CPU: 25ms CGroup: /system.slice/vm_maintenance.service ├─28530 /bin/bash /usr/local/bin/vm_maintenance.sh └─28535 nebius compute instance get --id computeinstance-*** --format json Apr 25 10:19:19 computeinstance-*** systemd[1]: Started VM Maintenance Event Handler. ``` Now, the script runs continuously, and the VM stops and starts during maintenance events. # Charging for a virtual machine that was stopped by using Linux commands Source: https://docs.nebius.com/compute/virtual-machines/stopped-with-linux-commands If you connect to your virtual machine (VM) and shut it down by using Linux commands (for example, `shutdown` or `halt`), the VM is not stopped properly. Compute automatically reboots the VM and continues charging you for it. The service considers such a shutdown as a failure and therefore runs the recovery policy. To stop a VM properly, use Nebius AI Cloud interfaces, for instance, the web console or a CLI command. Then, the VM is stopped reliably, and you are not charged for it. For more information, see [How to stop and start Compute virtual machines](/compute/virtual-machines/stop-start). # Tuning TCP window sizes on Linux virtual machines Source: https://docs.nebius.com/compute/virtual-machines/tcp-window-tuning TCP throughput depends on how much unacknowledged data a sender and receiver can keep in flight. On long-distance or high-latency connections, the default Linux TCP buffer limits can constrain a single flow before the network link is saturated. This article shows how to increase TCP receive and send window limits on a Linux virtual machine (VM) in Nebius AI Cloud. Use this tuning if your workload transfers large amounts of data over connections with both: * High bandwidth * Noticeable round-trip latency Typical examples include: * Cross-region replication * Large model or dataset transfers * Long-lived TCP sessions that need higher per-flow throughput If your traffic is short-lived, latency-sensitive, or limited by the application rather than the network path, this tuning may have little effect. ## Recommended values The following settings increase the maximum TCP buffer sizes while keeping default behavior unchanged: ```text theme={null} net.ipv4.tcp_rmem = 4096 131072 268435456 net.ipv4.tcp_wmem = 4096 16384 268435456 net.core.rmem_max = 536870912 net.core.wmem_max = 536870912 net.ipv4.tcp_adv_win_scale = 1 ``` These values keep the minimum and default TCP buffer settings close to the Linux defaults, while increasing the maximum values for high-bandwidth links. The recommended maximum TCP window targets a single flow of about 3 Gbit/s over a 300 ms round-trip-time path. That bandwidth-delay product is about 108 MB, which is rounded up to 128 MiB and then doubled to account for the effect of `net.ipv4.tcp_adv_win_scale=1`. Larger TCP buffers can increase memory consumption under heavy connection fan-out. Verify available memory before applying this tuning on smaller VMs or on hosts with many simultaneous high-throughput flows. ## How to tune TCP window sizes ### Prerequisites Make sure that: 1. The VM runs Linux. 2. You can connect to the VM by using SSH. For more information, see [How to connect to virtual machines in Nebius AI Cloud](/compute/virtual-machines/connect). 3. You have `sudo` privileges on the VM. ### Apply the changes 1. Connect to the VM: ```bash theme={null} ssh @ ``` 2. Create a sysctl configuration file: ```bash theme={null} sudo tee /etc/sysctl.d/90-nebius-tcp-window.conf >/dev/null <<'EOF' net.ipv4.tcp_rmem = 4096 131072 268435456 net.ipv4.tcp_wmem = 4096 16384 268435456 net.core.rmem_max = 536870912 net.core.wmem_max = 536870912 net.ipv4.tcp_adv_win_scale = 1 EOF ``` 3. Apply the configuration: ```bash theme={null} sudo sysctl --system ``` ### Verify the configuration Check that the VM reports the configured values: ```bash theme={null} sysctl \ net.ipv4.tcp_rmem \ net.ipv4.tcp_wmem \ net.core.rmem_max \ net.core.wmem_max \ net.ipv4.tcp_adv_win_scale ``` Expected output: ```text theme={null} net.ipv4.tcp_rmem = 4096 131072 268435456 net.ipv4.tcp_wmem = 4096 16384 268435456 net.core.rmem_max = 536870912 net.core.wmem_max = 536870912 net.ipv4.tcp_adv_win_scale = 1 ``` If your application still does not reach the expected throughput, check the end-to-end path for other limits such as application-level buffer sizing, rate limiting, packet loss or congestion on the remote side. ### Roll back the changes To remove the configuration: ```bash theme={null} sudo rm /etc/sysctl.d/90-nebius-tcp-window.conf sudo sysctl --system ``` After rollback, the VM uses the remaining sysctl configuration from the operating system image and any other files in `/etc/sysctl.d`. # Types of virtual machines and GPUs in Nebius AI Cloud Source: https://docs.nebius.com/compute/virtual-machines/types Compute offers the following platforms for virtual machines (VMs) ([private regions](/overview/regions) are marked with \*): | Platform name | Platform ID | CPU | [Regions](/overview/regions) | | ----------------------------------------------- | -------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------ | ----------------------------------------------------------------------------------------------------------------------------------- | | NVIDIA® B300 NVLink with Intel Granite Rapids | gpu-b300-sxm | [Intel Xeon 6776P](https://www.intel.com/content/www/us/en/products/sku/243691/intel-xeon-6776p-processor-336m-cache-2-30-ghz/specifications.html) | `uk-south1` | | NVIDIA® B200 NVLink with Intel Emerald Rapids | gpu-b200-sxm | [Intel Xeon Platinum 8580](https://www.intel.com/content/www/us/en/products/sku/237250/intel-xeon-platinum-8580-processor-300m-cache-2-00-ghz/specifications.html) | `us-central1` | | NVIDIA® B200 NVLink with Intel Emerald Rapids | gpu-b200-sxm-a | [Intel Xeon Platinum 8570](https://www.intel.com/content/www/us/en/products/sku/237264/intel-xeon-platinum-8570-processor-300m-cache-2-10-ghz/specifications.html) | `me-west1` | | NVIDIA® H200 NVLink with Intel Sapphire Rapids | gpu-h200-sxm | [Intel Xeon Platinum 8468](https://ark.intel.com/content/www/us/en/ark/products/231735/intel-xeon-platinum-8468-processor-105m-cache-2-10-ghz.html) | `eu-north1`, `eu-north2`*\**, `eu-west1`, `us-central1` | | NVIDIA® H100 NVLink with Intel Sapphire Rapids | gpu-h100-sxm | Intel Xeon Platinum 8468 | `eu-north1` | | NVIDIA® RTX PRO™ 6000 with Intel Granite Rapids | gpu-rtx6000 | Intel Xeon 6776P | `us-central1` | | NVIDIA® L40S PCIe with Intel Ice Lake | gpu-l40s-a | [Intel Xeon Gold 6338](https://ark.intel.com/content/www/us/en/ark/products/212285/intel-xeon-gold-6338-processor-48m-cache-2-00-ghz.html) | `eu-north1` | | NVIDIA® L40S PCIe with AMD EPYC Genoa | gpu-l40s-d | [AMD EPYC™ 9654](https://www.amd.com/en/products/processors/server/epyc/4th-generation-9004-and-8004-series/amd-epyc-9654.html) | `eu-north1` | | Non-GPU AMD EPYC Genoa | cpu-d3 | AMD EPYC™ 9654 | `eu-north1`, `eu-west1`, `me-west1`, `us-central1`;
`eu-north2`*\**, `uk-south1` | | Non-GPU Intel Ice Lake | cpu-e2 | Intel Xeon Gold 6338 | `eu-north1` | Each platform offers different *presets* for creating VMs. The presets vary by the number of GPUs (for platforms with GPUs), vCPUs and RAM size. The exact amount of these resources is indicated in the preset name. Thus, `1gpu-16vcpu-200gb` preset stands for a VM with 1 GPU, 16 vCPUs and 200 GiB RAM. Availability of platforms depends on a region and project. You can [get a list](/compute/virtual-machines/list-platforms) of platforms and presets supported in a given project. For VM platforms with GPUs, you can also use the [capacity advisor](/compute/virtual-machines/capacity-advisor) to get information about the availability of computing resources based on your quotas and the current physical capacity. ## GPU types Compute provides the following GPU types: * [NVIDIA B300](https://www.nvidia.com/en-us/data-center/dgx-platform/) (NVIDIA Blackwell Ultra architecture) in the SXM factor. It offers 270 GB of HBM3e RAM with up to 7.7 TB/s of memory bandwidth. Each set of eight physical GPUs uses eight NVIDIA ConnectX-8 adapter cards, each providing 800 Gbps InfiniBand™ interconnectivity, plus an NVIDIA BlueField-3 Ethernet adapter that provides a 400 Gbps connection to the underlying network. NVIDIA B300 SXM is available on the NVIDIA® B300 NVLink with Intel Granite Rapids platform. * [NVIDIA B200](https://www.nvidia.com/en-us/data-center/hgx/) (NVIDIA Blackwell architecture) in the SXM factor. It offers 180 GB of HBM3e RAM with up to 7.7 TB/s of memory bandwidth. Each set of eight physical GPUs uses eight NVIDIA ConnectX-7 adapter cards, each providing 400 Gbps InfiniBand interconnectivity, plus an NVIDIA BlueField-3 Ethernet adapter that provides a 200 Gbps connection to the underlying network. NVIDIA B200 SXM is available on the NVIDIA® B200 NVLink with Intel Emerald Rapids platform (gpu-b200-sxm and gpu-b200-sxm-a). * [NVIDIA H200](https://www.nvidia.com/en-us/data-center/h200/) (NVIDIA Hopper architecture) in the SXM factor. It offers 141 GB of HBM3e RAM with up to 4.8 TB/s of memory bandwidth. Each set of eight physical GPUs uses eight NVIDIA ConnectX-7 adapter cards, each providing 400 Gbps InfiniBand interconnectivity, plus an NVIDIA BlueField-3 Ethernet adapter that provides a 200 Gbps connection to the underlying network. NVIDIA H200 SXM is available on the NVIDIA® H200 NVLink with Intel Sapphire Rapids platform. * [NVIDIA H100](https://www.nvidia.com/en-us/data-center/h100/) (NVIDIA Hopper architecture) in the SXM factor. It offers 80 GB of HBM3 RAM with up to 3.35 TB/s of memory bandwidth. Each set of eight physical GPUs uses eight NVIDIA ConnectX-7 adapter cards, each providing 400 Gbps InfiniBand interconnectivity, plus an NVIDIA ConnectX-6 Ethernet adapter that provides a 100 Gbps connection to the underlying network. NVIDIA H100 SXM is available on the NVIDIA® H100 NVLink with Intel Sapphire Rapids platform. * [NVIDIA RTX PRO 6000 Server Edition](https://www.nvidia.com/en-us/data-center/rtx-pro-6000-blackwell-server-edition/) (NVIDIA Blackwell architecture) in a PCIe Gen5 form factor. Each GPU offers 96 GB of GDDR7 memory with up to 1.6 TB/s of memory bandwidth. Networking is enabled via a 400 Gbps BlueField-3 adapter. NVIDIA RTX PRO 6000 Server Edition is available on the NVIDIA® RTX PRO™ 6000 with Intel Granite Rapids platform. * [NVIDIA L40S](https://www.nvidia.com/en-us/data-center/l40s/) (NVIDIA Ada Lovelace architecture) in the PCIe factor. It offers 48 GB of GDDR6 RAM with up to 864 GB/s of memory bandwidth. NVIDIA L40S is available on the NVIDIA® L40S PCIe with Intel Ice Lake and NVIDIA® L40S PCIe with AMD EPYC Genoa platforms. ## Presets for GPU platforms * NVIDIA® B300 NVLink with Intel Granite Rapids (gpu-b300-sxm), available in uk-south1: | Preset name | Number of GPUs | Number of vCPUs | RAM, GiB | | --------------------- | -------------- | --------------- | --------------------------- | | `1gpu-24vcpu-346gb` | 1 | 24 | 346 | | `8gpu-192vcpu-2768gb` | 8 | 192 | 2768 | * NVIDIA® B200 NVLink with Intel Emerald Rapids (gpu-b200-sxm and gpu-b200-sxm-a), available in us-central1 and me-west1 respectively: | Preset name | Number of GPUs | Number of vCPUs | RAM, GiB | | --------------------- | -------------- | --------------- | -------- | | `1gpu-20vcpu-224gb` | 1 | 20 | 224 | | `8gpu-160vcpu-1792gb` | 8 | 160 | 1792 | * NVIDIA® H200 NVLink with Intel Sapphire Rapids (gpu-h200-sxm), available in eu-north1, eu-north2\*, eu-west1 and us-central1: | Preset name | Number of GPUs | Number of vCPUs | RAM, GiB | [Regions](/overview/regions) | | --------------------- | -------------- | --------------- | -------- | ----------------------------------------------------------------------------------------------- | | `1gpu-16vcpu-200gb` | 1 | 16 | 200 | eu-north1, eu-west1, us-central1, eu-north2 | | `8gpu-128vcpu-1600gb` | 8 | 128 | 1600 | eu-north1, eu-west1, us-central1, eu-north2 | * NVIDIA® H100 NVLink with Intel Sapphire Rapids (gpu-h100-sxm), available in eu-north1: | Preset name | Number of GPUs | Number of vCPUs | RAM, GiB | | --------------------- | -------------- | --------------- | -------- | | `1gpu-16vcpu-200gb` | 1 | 16 | 200 | | `8gpu-128vcpu-1600gb` | 8 | 128 | 1600 | * NVIDIA® RTX PRO™ 6000 with Intel Granite Rapids (gpu-rtx6000), available in us-central1: | Preset name | Number of GPUs | Number of vCPUs | RAM, GiB | | --------------------- | -------------- | --------------- | -------- | | `1gpu-24vcpu-218gb` | 1 | 24 | 218 | | `8gpu-192vcpu-1744gb` | 8 | 192 | 1744 | * NVIDIA® L40S PCIe with Intel Ice Lake (gpu-l40s-a), available in eu-north1: | Preset name | Number of GPUs | Number of vCPUs | RAM, GiB | | ------------------- | -------------- | --------------- | -------- | | `1gpu-8vcpu-32gb` | 1 | 8 | 32 | | `1gpu-16vcpu-64gb` | 1 | 16 | 64 | | `1gpu-24vcpu-96gb` | 1 | 24 | 96 | | `1gpu-32vcpu-128gb` | 1 | 32 | 128 | | `1gpu-40vcpu-160gb` | 1 | 40 | 160 | * NVIDIA® L40S PCIe with AMD EPYC Genoa (gpu-l40s-d), available in eu-north1: | Preset name | Number of GPUs | Number of vCPUs | RAM, GiB | | --------------------- | -------------- | --------------- | -------- | | `1gpu-16vcpu-96gb` | 1 | 16 | 96 | | `1gpu-32vcpu-192gb` | 1 | 32 | 192 | | `1gpu-48vcpu-288gb` | 1 | 48 | 288 | | `2gpu-64vcpu-384gb` | 2 | 64 | 384 | | `2gpu-96vcpu-576gb` | 2 | 96 | 576 | | `4gpu-128vcpu-768gb` | 4 | 128 | 768 | | `4gpu-192vcpu-1152gb` | 4 | 192 | 1152 | ### Presets compatible with GPU clusters If you are adding a VM to a [GPU cluster](/compute/clusters/gpu/index), select from the following platforms and presets: | Platform | Presets | [Regions](/overview/regions) | | ----------------------------------------------------------------------- | --------------------- | --------------------------------------------------------------------------------------------------- | | NVIDIA® B300 NVLink with Intel Granite Rapids
(`gpu-b300-sxm`) | `8gpu-192vcpu-2768gb` | `uk-south1` | | NVIDIA® B200 NVLink with Intel Emerald Rapids
(`gpu-b200-sxm`) | `8gpu-160vcpu-1792gb` | `us-central1` | | NVIDIA® B200 NVLink with Intel Emerald Rapids
(`gpu-b200-sxm-a`) | `8gpu-160vcpu-1792gb` | `me-west1` | | NVIDIA® H200 NVLink with Intel Sapphire Rapids
(`gpu-h200-sxm`) | `8gpu-128vcpu-1600gb` | `eu-north1`, `eu-north2`*\**, `eu-west1`, `us-central1` | | NVIDIA® H100 NVLink with Intel Sapphire Rapids
(`gpu-h100-sxm`) | `8gpu-128vcpu-1600gb` | `eu-north1` | Other presets and platforms are not compatible with GPU clusters. ## Presets for non-GPU platforms * Non-GPU AMD EPYC Genoa (cpu-d3): | Preset name | Number of vCPUs | RAM, GiB | [Regions](/overview/regions) | | ---------------- | --------------- | -------- | ----------------------------------------- | | `4vcpu-16gb` | 4 | 16 | All regions | | `8vcpu-32gb` | 8 | 32 | All regions | | `16vcpu-64gb` | 16 | 64 | All regions | | `32vcpu-128gb` | 32 | 128 | All regions | | `48vcpu-192gb` | 48 | 192 | All regions | | `64vcpu-256gb` | 64 | 256 | All regions | | `96vcpu-384gb` | 96 | 384 | All regions | | `128vcpu-512gb` | 128 | 512 | All regions | | `160vcpu-640gb` | 160 | 640 | All regions except eu-north1 | | `192vcpu-768gb` | 192 | 768 | All regions except eu-north1 | | `224vcpu-896gb` | 224 | 896 | All regions except eu-north1 | | `256vcpu-1024gb` | 256 | 1024 | All regions except eu-north1 | * Non-GPU Intel Ice Lake (cpu-e2), available in eu-north1: | Preset name | Number of vCPUs | RAM, GiB | | -------------- | --------------- | -------- | | `2vcpu-8gb` | 2 | 8 | | `4vcpu-16gb` | 4 | 16 | | `8vcpu-32gb` | 8 | 32 | | `16vcpu-64gb` | 16 | 64 | | `32vcpu-128gb` | 32 | 128 | | `48vcpu-192gb` | 48 | 192 | | `64vcpu-256gb` | 64 | 256 | | `80vcpu-320gb` | 80 | 320 | ## Compatibility with boot disk images Nebius AI Cloud provides boot disk images for GPU and non-GPU VMs. The image that you choose for a VM must be compatible with the VM's platform. For compatibility details, see [Boot disk images for Compute virtual machines](/compute/storage/boot-disk-images). ## Compatibility with VM types All platforms support regular VMs. All platforms with GPUs also support [preemptible VMs](/compute/virtual-machines/preemptible). To get an up-to-date list of platforms, run the `nebius compute platform list` [command](/cli/reference/compute/platform/list). The platforms available for preemptible VMs are marked as `allowed_for_preemptibles: true`. # Creating a jump server with WireGuard installed on it Source: https://docs.nebius.com/compute/virtual-machines/wireguard You can create a jump server to build a reliable tunnel between two zones: * Secure zone that consists of virtual machine (VMs) created in Nebius AI Cloud * Demilitarized zone (DMZ) that consists of machines outside Nebius AI Cloud All connections from the DMZ to the secure zone go through the jump server. This solution provides several benefits: * You can use one public IP address to access all VMs. * You can keep the number of public addresses within a [quota](/compute/resources/quotas-limits#network). * You can limit access to the secure zone and allow only authorized machines to connect to the secure zone. To create a jump server, deploy a VM with [WireGuard](https://www.wireguard.com) installed and configure a VPN. The traffic between the zones is routed in an encrypted form via the jump server. To create a VM with WireGuard deployed, Nebius AI Cloud offers a Terraform-based solution. You can apply manifests that contain configuration of a VM with a WireGuard image. ## Costs The tutorial includes the following chargeable resources: * [Compute virtual machines](/compute/resources/pricing#virtual-machines-gpus-vcpus-ram) * [Compute disks](/compute/resources/pricing#disks) ## Prerequisites 1. [Install Terraform](https://developer.hashicorp.com/terraform/install). 2. [Install](/cli/install) and [configure](/cli/configure) CLI for Nebius AI Cloud. The Terraform-based solution uses the CLI to get credentials. For enhanced security, [use a service account](/cli/configure#authorize-with-a-service-account) to configure the CLI. Make sure that this account is in a [group](/iam/authorization/groups/index) that has at least the `editor` role within your tenant; for example, the default `editors` group. You can check this in the [Administration → IAM](https://console.nebius.com/iam) section of the web console. 3. Install `jq`: ```bash Ubuntu theme={null} sudo apt-get install jq ``` ```bash macOS theme={null} brew install jq ``` 4. Clone the [nebius-solution-library](https://github.com/nebius/nebius-solution-library/tree/main) repository from where the WireGuard solution is going to be deployed: ```bash theme={null} git clone git@github.com:nebius/nebius-solution-library.git ``` 5. Generate an [SSH key pair](/compute/virtual-machines/ssh-keys). ## Steps ### Deploy infrastructure 1. In your terminal, go to the `wireguard` directory in the cloned repository: ```bash theme={null} cd nebius-solution-library/wireguard ``` 2. In the `environment.sh` file in this directory, uncomment the following variables and specify values for them: * `NEBIUS_TENANT_ID`: [Tenant ID](/iam/get-tenants). * `NEBIUS_PROJECT_ID`: [Project ID](/iam/manage-projects#terraform-3). * `NEBIUS_REGION`: The [region](/overview/regions) where your project is located. You can find the region in the web console, in the list of projects. 3. Run the script that creates an access token for Terraform, saves the token to environment variables and configures Terraform state to be saved in Object Storage: ```bash theme={null} source ./environment.sh ``` 4. Initialize Terraform in the `wireguard` directory: ```bash theme={null} terraform init ``` 5. In the `terraform.tfvars` file in this directory, uncomment the following variables and specify values for them: * `ssh_user_name`: The user required for an SSH connection to the VM, for example `user1`. * `ssh_public_key`: The public SSH key that you [created earlier](#prerequisites). Specify either the key body or the path to this key. * `public_ip_allocation_id`: An ID of an [allocation](/vpc/overview#allocation) with a public IP address. The WireGuard UI will be available at this address. To preserve the address even in case of the VM deletion, create the allocation: ```bash theme={null} nebius vpc allocation create \ --ipv4-public-subnet-id \ --name wireguard_allocation \ --parent-id \ --format json \ | jq -r ".metadata.id" ``` The command returns the allocation ID. Specify it in the `public_ip_allocation_id` variable. 6. Preview the configuration that you are going to deploy: ```bash theme={null} terraform plan ``` 7. Apply the changes: ```bash theme={null} terraform apply ``` When the command is finished, it returns the VM public address: ```text theme={null} Outputs: wg_instance_pib = "" ``` Copy the address: It is required to connect to the deployed VM. ### Access WireGuard 1. Connect to the VM: ```bash theme={null} ssh -i @ ``` The command contains: * Path to the private SSH key that you [created earlier](#prerequisites) * Username specified in the `terraform.tfvars` file * Public IP address of the deployed VM 2. Get the WireGuard UI password: ```bash theme={null} sudo cat /var/lib/wireguard-ui/initial_password ``` 3. In the browser, open the WireGuard UI at `http://:5000`. 4. In the window that opens, sign in with the `admin` username and the password retrieved from the VM. The working space of the WireGuard UI opens. ### Configure WireGuard Set up a VPN and grant access to the VMs in the secure zone. To do this, add the DMZ machines as WireGuard clients: 1. Click  **New client**. 2. In the window that opens, specify details of the machines that require access. In the **Allowed IPs** field, enter CIDRs of these machines. 3. Click **Submit**. 4. After the window is closed, click **Apply config**. Click this button every time after you create, change or delete WireGuard clients. After that, the DMZ machines are able to connect to the VMs in the secure zone. You do not need to configure the same access for the jump server because it is located in the same subnet as the VMs in the secure zone. ## How to delete the created resources The created Compute virtual machine and its boot disk are chargeable. If you do not need them, delete these resources, so Nebius AI Cloud does not charge for it. Use the following command to delete all the created infrastructure at once: ```bash theme={null} terraform destroy -target=nebius_compute_v1_instance.wireguard_instance ``` # How to authenticate in Container Registry Source: https://docs.nebius.com/container-registry/authentication You can authenticate in Container Registry with the help of a short-lived [access token](/iam/authorization/access-tokens) issued by the Nebius AI Cloud CLI each time, or with a long-lived [static key token](/iam/authorization/static-keys) issued for the Container Registry service. * For a [local machine](#working-on-a-local-machine), use a Docker credential helper. * For a [CI/CD environment](#working-in-a-ci/cd-environment), use a service account and either issue a [long-lived static key](#long-lived-static-key-token) and save it in your pipeline settings, or get a [short-lived token](#short-lived-access-token) each time your pipeline runs. ## Working on a local machine On your local machine, you can simply configure a Docker credential helper to work with Container Registry. 1. Run the following command: ```bash theme={null} nebius registry configure-helper ``` 2. Check that the credential helper is configured: 1. Open the file from the previous command output, for example, with the `cat` command: ```bash theme={null} cat ~/.docker/config.json ``` 2. Check that the `credHelpers` property contains the following lines: ```json theme={null} "cr.eu-north1.nebius.cloud": "nebius" "cr.eu-north2.nebius.cloud": "nebius" "cr.eu-west1.nebius.cloud": "nebius" "cr.me-west1.nebius.cloud": "nebius" "cr.uk-south1.nebius.cloud": "nebius" "cr.us-central1.nebius.cloud": "nebius" ``` When you run any `docker` command after this configuration, it requests credentials from `nebius`, which might require you to log in with the help of the [Nebius AI Cloud web console](https://console.nebius.com). ## Working in a CI/CD environment In your CI/CD environment, you are unlikely to be able to log into the web console. Therefore, you need to [create a service account](/iam/service-accounts/manage#create-a-service-account) and use it to get credentials. Make sure that the service account is in a [group](/iam/authorization/groups/index) that has at least the `viewer` role within your tenant; for example, the default `viewers` group. There are two ways to work with a service account: * Issue a long-lived [static key](/iam/authorization/static-keys) for Container Registry. * Get a short-lived [access token](/iam/authorization/access-tokens) in each run of your pipeline job. ### Long-lived static key token To use a long-lived token, you need to [issue a static key](/iam/authorization/static-keys/manage) and store the token in your CI/CD environment configuration. 1. Create a static key for your service account: ```bash theme={null} nebius iam static-key issue \ --account-service-account-id= \ --service=CONTAINER_REGISTRY ``` By default, the key lifetime is 6 months. If you need a different lifetime, add the `--expires-at` parameter to this command. It accepts the date of expiration in [ISO 8601](https://en.wikipedia.org/wiki/ISO_8601) format, for example `2025-11-23T11:44:43.232142Z`. You can set a lifetime of up to 3 years. 2. Get the static key token from the `token` parameter of the output. 3. Configure the job that works with Container Registry to use this token: ```bash theme={null} docker login cr..nebius.cloud \ --username iam \ --password ``` In this command, set the [region](/overview/regions) of the registry with which the pipeline is working. ### Short-lived access token To use a short-lived access token, you need to get it from Nebius AI Cloud CLI, which should be installed in your CI/CD environment. Access tokens have a lifetime of 12 hours. 1. Create an [authorized key](/iam/service-accounts/authorized-keys) for your service account. 2. [Install the Nebius AI Cloud CLI](/cli/install) in your environment. 3. [Configure a profile](/iam/service-accounts/authorized-keys#configure-your-profile) for your service account in the `.nebius/config.yaml` file. 4. Configure the job that works with Container Registry to generate credentials with `nebius` and pipe them directly into a `docker` command: ```bash theme={null} nebius iam get-access-token | \ docker login cr..nebius.cloud \ --username iam \ --password-stdin ``` In this command, set the [region](/overview/regions) of the registry with which the pipeline is working. You can do the same if you are using `helm registry login`: ```bash theme={null} nebius iam get-access-token | \ helm registry login cr..nebius.cloud \ --username iam \ --password-stdin ``` ## Troubleshooting If you are getting the "Permission denied" error when trying to access Container Registry from your [local machine](#working-on-a-local-machine), double-check that the Docker credential helper was configured correctly: * Check that the system can find the Nebius AI Cloud CLI binary: ```bash theme={null} which nebius ``` It should return a path, for example: ```bash theme={null} /home/user/.nebius/bin/nebius ``` If it does not, reinstall Nebius AI Cloud CLI, and then rerun `nebius registry configure-helper`. * Check that the system can find the credential helper: ```bash theme={null} which docker-credential-nebius ``` It should return a path, for example: ```bash theme={null} /home/user/.nebius/bin/docker-credential-nebius ``` If it does not, rerun `nebius registry configure-helper`. * Check that the region of the registry you are trying to access is present in the `.docker/config.json` file: ```json theme={null} "cr..nebius.cloud": "nebius" ``` If it is not, add it manually or rerun `nebius registry configure-helper`. # Copying images to and from registries in Container Registry Source: https://docs.nebius.com/container-registry/images/copy You can copy Docker images to and from Container Registry: 1. [Set up authentication in Container Registry](/container-registry/authentication) on your machine. 2. Get the fully qualified domain names (FQDNs) of your source and destination registries. In Nebius AI Cloud, a registry's FQDN is `cr..nebius.cloud` where `` is the ID of a [Nebius AI Cloud region](/overview/regions); for example, `cr.eu-north1.nebius.cloud`. To get a registry's FQDN, run the Nebius AI Cloud CLI command `nebius registry list` or `nebius registry get `; the output contains the FQDN in the `.status.registry_fqdn` parameter. For more details about the commands, see the references for [nebius registry list](/cli/reference/registry/list) and [nebius registry get](/cli/reference/registry/get). 3. Pull the image from the source registry: ```bash theme={null} docker pull //: ``` 4. Add a destination registry tag to the image and push it to the registry: ```bash theme={null} docker tag \ //: \ //: docker push //: ``` > For example, to copy the `hello-world:hello` image from the `my-registry` registry in Nebius AI Cloud's `eu-north1` region and transfer it to a [GitHub Packages container registry](https://docs.github.com/en/packages/working-with-a-github-packages-registry/working-with-the-container-registry) called `octocat`, run the following commands: > > ```bash theme={null} > docker pull cr.eu-north1.nebius.cloud/my-registry/hello-world:hello > docker tag \ > cr.eu-north1.nebius.cloud/my-registry/hello-world:hello \ > ghcr.io/octocat/hello-world:hello > docker push ghcr.io/octocat/hello-world:hello > ``` # Container Registry Source: https://docs.nebius.com/container-registry/index Container Registry allows you to store and distribute Docker images. The service is available in all [Nebius AI Cloud regions](/overview/regions). Create your first registry, push a Docker image to it and run the image Learn how to create and delete registries Set up credentials to access registries from your local machine and CI/CD environments # Getting started with Container Registry: Create your first registry and manage a Docker image in it Source: https://docs.nebius.com/container-registry/quickstart Container Registry helps you manage Docker images for your resources. This guide covers how to set up your environment to work with the service, create your first *registry*, push a Docker image to it and run the image. ## Prepare your environment In this guide, you will use the terminal in your environment, for example, on your local machine, to run commands that create and manage Nebius AI Cloud resources. The commands use the Nebius AI Cloud CLI and tools that you need to install first. 1. Install Docker Engine: * [Ubuntu](https://docs.docker.com/engine/install/ubuntu/) * [macOS](https://docs.docker.com/desktop/install/mac-install/) 2. Install **jq** which parses JSON outputs from the Nebius AI Cloud CLI and extracts resource IDs for other commands: ```bash Ubuntu theme={null} sudo apt-get install jq ``` ```bash macOS theme={null} brew install jq ``` 3. Install the **Nebius AI Cloud CLI** ([how to install](/cli/install)) which manages all Nebius AI Cloud resources: ```bash theme={null} curl -sSL https://storage.eu-north1.nebius.cloud/cli/install.sh | bash ``` 4. Configure the **Nebius AI Cloud CLI**: ```bash theme={null} nebius profile create ``` The last command, `nebius profile create`, will guide you through several prompts. After you complete the prompts, your browser will open the Nebius AI Cloud web console sign-in screen. Sign in to the web console to complete the initialization. If you have access to multiple tenants, the CLI will prompt you to choose a tenant ID. After that, save your project ID in the CLI configuration: If the project ID has not been configured during the `nebius profile create` flow, [get the project ID](/iam/manage-projects#how-to-get-a-project-id) and save it in the CLI configuration: ```bash theme={null} nebius config set parent-id ``` 5. Create an environment variable for the [region](/overview/regions) in which your project is located: ```bash theme={null} export REGION_ID= ``` For available region IDs, see [Nebius AI Cloud regions](/overview/regions). ## Create a registry Create a test registry and save a part of its ID to an environment variable: ```bash theme={null} export REGISTRY_PATH=$(nebius registry create \ --name quickstart-registry \ --format json | jq -r ".metadata.id" | cut -d- -f 2) ``` ## Configure Docker Configure Docker to work with the created registry: 1. Run the Nebius AI Cloud Docker credential helper. It lets you use registries in Container Registry without running the `docker login`. ```bash theme={null} nebius registry configure-helper ``` 2. Check that the credential helper is configured: 1. Open the file from the previous command output, for example, with the `cat` command: ```bash theme={null} cat ~/.docker/config.json ``` 2. Check that the `credHelpers` property contains the following lines: ```json theme={null} "cr.eu-north1.nebius.cloud": "nebius" "cr.eu-north2.nebius.cloud": "nebius" "cr.eu-west1.nebius.cloud": "nebius" "cr.me-west1.nebius.cloud": "nebius" "cr.uk-south1.nebius.cloud": "nebius" "cr.us-central1.nebius.cloud": "nebius" ``` ## Push and run a Docker image Do not run Docker commands as root. The credential helper is configured for your user account, so root may not be able to access the credentials. 1. Pull an image from the [Docker Hub](https://hub.docker.com/): ```bash theme={null} docker pull hello-world ``` 2. Assign the image a tag: ```bash theme={null} docker tag hello-world \ cr.$REGION_ID.nebius.cloud/$REGISTRY_PATH/hello-world:hello ``` 3. Push the image to the Container Registry: ```bash theme={null} docker push cr.$REGION_ID.nebius.cloud/$REGISTRY_PATH/hello-world:hello ``` 4. Run the image: ```bash theme={null} docker run cr.$REGION_ID.nebius.cloud/$REGISTRY_PATH/hello-world:hello ``` # How to manage registries in Container Registry Source: https://docs.nebius.com/container-registry/registries/manage Registries in Container Registry store Docker images and make them available to your resources. This guide will help you create and delete registries in Container Registry. ## How to create a registry To create a registry in Container Registry, run the Nebius AI Cloud CLI command: ```bash theme={null} nebius registry create \ --name ``` Though the `--name` parameter is not required, the registry name simplifies finding the registry in the list of registries in Container Registry. To access the created registry, do the following: 1. Get the region of the project in which you created a registry. You can get it from the endpoint saved in your configuration: ```bash theme={null} nebius config get endpoint ``` In the output, copy the part after `api.`. See all region IDs in [Nebius AI Cloud regions](/overview/regions). 2. From the registry creation command output, copy the registry ID part from the `metadata.id` parameter without the `registry-` prefix. 3. Use the values in the registry URL: ```bash theme={null} cr..nebius.cloud/ ``` ## How to delete a registry To delete a registry: 1. Get its ID and path by listing the registries: ```bash theme={null} nebius registry list ``` The ID is returned in the `.metadata.id` parameter of the registry resource. The registry path is the registry ID part without the `registry-` prefix. 2. Check that the registry does not contain images. If you've already set up the [region](/container-registry/quickstart#prepare-your-environment) and [registry path](/container-registry/quickstart#create-a-registry) environment variables, use the following command: ```bash theme={null} docker images cr.$REGION_ID.nebius.cloud/$REGISTRY_PATH ``` Alternatively, use the following command: ```bash theme={null} docker images cr..nebius.cloud/ ``` For example, for the registry with the `registry-a00bcdefghe12xyz3f` ID in the `eu-north1` region, use the following command: ```bash theme={null} docker images cr.eu-north1.nebius.cloud/a00bcdefghe12xyz3f ``` See all region IDs in [Nebius AI Cloud regions](/overview/regions). 3. Run the following command with the registry ID: ```bash theme={null} storage..nebius.cloud registry delete --id ``` If you have just one registry and are sure it does not contain images, use this set of commands to delete it more quickly: ```bash theme={null} export REGISTRY_ID=$(nebius registry list \ --format json | jq -r ".items[0].metadata.id") nebius registry delete --id $REGISTRY_ID ``` # Pricing in Container Registry Source: https://docs.nebius.com/container-registry/resources/pricing The Container Registry service in Nebius AI Cloud is provided free of charge. # Quotas in Container Registry Source: https://docs.nebius.com/container-registry/resources/quotas-limits Container Registry has quotas for every [tenant](/iam/overview#tenants). | Quota name | Default value per [region](/overview/regions) | | ---------- | --------------------------------------------- | | Registries | 10 | For details on what quotas are and how to manage them, see [Quotas in Nebius AI Cloud](/overview/quotas). # Using docs with AI Source: https://docs.nebius.com/docs-ai Nebius documentation includes AI-ready formats and integrations that help you work with AI agents and coding assistants. ## Markdown pages Agents don't need to parse the HTML version of this documentation. All documentation pages are available as Markdown: * Append `.md` to the page URL. For example, [https://docs.nebius.com/serverless/overview.md](/serverless/overview.md). * Use the menu in the top-right corner of any page to copy or view the page content in Markdown. * Send an `Accept: text/markdown` header. This is useful when a tool or script already requests the HTML page URL, but you want the response as Markdown without changing the path. ```bash theme={null} curl -H "Accept: text/markdown" https://docs.nebius.com/serverless/overview ``` ## Use llms.txt and llms-full.txt Give your AI agent or coding assistant context on Nebius AI Cloud and how it works with these files when it needs documentation context beyond a single page: | Resource | Best for | Use it when you want to | | ------------------------------- | --------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------- | | [llms.txt](/llms.txt) | A lightweight documentation index | Discover relevant pages, route an agent to specific documents or avoid loading more context than necessary | | [llms-full.txt](/llms-full.txt) | Broad documentation context | Answer questions that span multiple services, provide a larger documentation snapshot to an AI tool or compare concepts across different parts of the platform | ## Docs Model Context Protocol server The Nebius docs Model Context Protocol (MCP) server gives any [MCP](https://modelcontextprotocol.io/)-compatible AI tool a direct connection to the Nebius documentation. This is useful when you want your AI tool to search the current documentation and retrieve relevant pages while you work. The Nebius docs MCP server provides documentation search only. It doesn't execute Nebius CLI commands or act on your resources. To work with the Nebius CLI from an AI agent, see [nebius/mcp-server](https://github.com/nebius/mcp-server). ### URL-based connection If your client supports remote MCP servers, paste the server URL into its connector settings. ```text theme={null} https://docs.nebius.com/mcp ``` ### Direct connectors Our documentation pages include direct connectors in the `Copy page` menu in the top-right corner. You can use the menu to configure the MCP directly in VS Code or Claude. ### File-based configuration If your client uses an `mcp.json` or equivalent configuration file, update it to connect to the hosted Nebius docs MCP server in one of the following ways: ```json theme={null} { "servers": { "nebius-docs": { "url": "https://docs.nebius.com/mcp" } } } ``` ```json theme={null} { "mcpServers": { "nebius-docs": { "url": "https://docs.nebius.com/mcp" } } } ``` Most clients support an entry like the example above. If yours doesn't, check the client's documentation for the exact configuration wrapper. # Reference on GitHub Source: https://docs.nebius.com/grpc-api/api-github # Authentication in the Nebius AI Cloud API Source: https://docs.nebius.com/grpc-api/auth For authentication, use an [access token](/iam/authorization/access-tokens). Include it in the HTTP header `Authorization: Bearer `. The authentication process differs for a [user account and a service account](/iam/overview#accounts-and-members). ## Authentication for a user account 1. [Install](/cli/install) and [configure](/cli/configure) the Nebius AI Cloud CLI. 2. Create an access token: ```bash theme={null} nebius iam get-access-token ``` An access token is valid for 12 hours. After it expires, create a new one. 3. Add the token to your API request. For example: ```bash theme={null} grpcurl -H "Authorization: Bearer " \ cpl.iam.api.nebius.cloud:443 \ nebius.iam.v1.ProfileService/Get ``` ## Authentication for a service account To authenticate a service account, create an [authorized key](/iam/service-accounts/authorized-keys) for it and then convert this key into an access token by using a [JSON Web Token (JWT)](https://en.wikipedia.org/wiki/JSON_Web_Token). Next, use the obtained access token for authentication. ### Prepare a service account 1. Make sure you are in a [group](/iam/authorization/groups/index) that has the `admin` role within your tenant or project; for example, the default `admins` group. You can check this in the [Administration → IAM](https://console.nebius.com/iam) section of the web console. 2. [Create a service account](/iam/service-accounts/manage) if you haven't already. 3. [Add the service account to a group](/iam/authorization/groups/members) to grant it necessary permissions. In most cases, a group with the `editor` role should be enough; add the account to a group with the `admin` role only if you want to manage other accounts' group memberships through the API. Learn more about [groups](/iam/authorization/groups/index) and their [permissions](/iam/authorization/roles). ### Prepare an authorized key 1. Create an authorized key: ```bash theme={null} openssl genrsa -out private.pem 4096 && \ openssl rsa -in private.pem -outform PEM -pubout -out public.pem ``` This command creates the `public.pem` and `private.pem` key files in a local directory. 2. Upload the key to the service account profile: 1. In the [web console](https://console.nebius.com), go to **Administration** → **IAM**. 2. Open the **Service accounts** tab. 3. Open the page of the required service account. 4. Click **Upload authorized key**. 5. Click **Attach file** and then select `public.pem`. 6. (Optional) Set an expiration date. 7. Click **Upload key**. The key is displayed on the **Authorized keys** tab. ```bash theme={null} nebius iam auth-public-key create \ --account-service-account-id \ --data "$(cat )" \ --expires-at ``` The command contains the following parameters: * `--account-service-account-id`: Service account ID. To get it, run nebius iam service-account list or nebius iam service-account get-by-name --name \. * `--data`: Contents of the `public.pem` file created earlier. * `--expires-at` (optional): Expiration date of the authorized key. ```yaml theme={null} metadata: created_at: "2025-08-22T09:37:07.023669Z" id: publickey-*** parent_id: project-*** spec: account: service_account: id: serviceaccount-*** data: | -----BEGIN PUBLIC KEY----- ... -----END PUBLIC KEY----- expires_at: "2025-12-31T02:30:59Z" status: algorithm: RSA fingerprint: a4c4*** key_size: 4096 state: ACTIVE ``` 3. Copy and save the account ID and the authorized key ID. You need them for the JWT. ### Create a JWT 1. [Install jwt-cli](https://github.com/mike-engel/jwt-cli?tab=readme-ov-file#installation), the CLI for JWT management. 2. Create the JWT: ```bash theme={null} jwt encode \ --alg RS256 \ --kid \ --iss \ --sub \ --exp="$(date --date="+5minutes" +%s 2>/dev/null || date -v+5M +%s)" \ --secret @ ``` The command returns the JWT as a string. Use this value as `subjectToken` in the token exchange request. In the command, specify the copied authorized key ID and the service account ID. Also, specify the current path to the `private.pem` file created earlier. The JWT is based on the RS256 signing algorithm and expires five minutes after its creation. The lifetime is short because the JWT is only used to create an access token. ### Get an access token 1. To exchange the JWT for an access token, send the following API request: ```bash theme={null} grpcurl -d '{ "grantType": "urn:ietf:params:oauth:grant-type:token-exchange", "requestedTokenType": "urn:ietf:params:oauth:token-type:access_token", "subjectToken": "", "subjectTokenType": "urn:ietf:params:oauth:token-type:jwt" }' \ tokens.iam.api.nebius.cloud:443 \ nebius.iam.v1.TokenExchangeService/Exchange ``` Specify the JWT in the request. The output is the following: ```json theme={null} { "accessToken": "", "issuedTokenType": "urn:ietf:params:oauth:token-type:access_token", "tokenType": "Bearer", "expiresIn": "43200" } ``` The access token expires 12 hours after its creation. The `expiresIn` value from the output is specified in seconds. 2. Add the token to your API request. For example: ```bash theme={null} grpcurl -H "Authorization: Bearer " \ cpl.iam.api.nebius.cloud:443 \ nebius.iam.v1.ProfileService/Get ``` # Generating clients for the Nebius AI Cloud API from the proto files Source: https://docs.nebius.com/grpc-api/calls/clients To make gRPC API calls to Nebius AI Cloud services in your code, you can generate API clients from the Protocol Buffer specifications hosted on [GitHub](https://github.com/nebius/api/). The proto files come with a configuration file for [Buf](https://buf.build/docs/). To generate an API client by using the Buf CLI: 1. [Install the Buf CLI](https://buf.build/docs/installation/) for macOS or Linux, for example, by using Homebrew: ```bash theme={null} brew install bufbuild/buf/buf ``` 2. Clone the [Nebius AI Cloud API repository](https://github.com/nebius/api/) and view the [Nebius AI Cloud Buf configuration](https://github.com/nebius/api/blob/main/buf.gen.yaml): ```bash theme={null} git clone https://github.com/nebius/api.git cd api cat buf.gen.yaml ``` 3. Edit the configuration to keep only the programming languages you support. For example, for Java only: ```yaml theme={null} version: v2 plugins: - remote: buf.build/protocolbuffers/java out: gen/java - remote: buf.build/grpc/java out: gen/java ``` 4. To generate the client code, run the following command: ```bash theme={null} buf generate ``` 5. To get the generated client code, go to the `gen/` directory. For example, if you generated a Java client, go to `gen/java`. # How to invoke a Nebius AI Cloud API method by using gRPCurl Source: https://docs.nebius.com/grpc-api/calls/invoke-methods To manually invoke or debug a Nebius AI Cloud API method, you can send an authenticated gRPC request with `grpcurl`: 1. Get an access token for authentication: ```bash theme={null} nebius iam get-access-token ``` 2. In the [services and endpoints list](https://github.com/nebius/api/blob/main/endpoints.md), find a gRPC service that you want to send a request to, and determine its endpoint. For example, to get a list of virtual machines (VMs) in a project, use the following: * `compute.api.nebius.cloud:443` endpoint for the Compute service. * `nebius.compute.v1.InstanceService` gRPC service for VMs. For more information, see [How to define an endpoint](/grpc-api/endpoints/define). 3. To check what the request body should contain, open the `***_service.proto` file of the selected endpoint. You can open it from the same [services and endpoints list](https://github.com/nebius/api/blob/main/endpoints.md). For example, to get a list of VMs in a project, use the `ListInstancesRequest` message. It requires the `parent_id` parameter (the ID of your project). 4. Send the `grpcurl` request with the request body and authorization header. For example, to get a list of VMs, you can run the following `grpcurl` command: ```bash theme={null} grpcurl -rpc-header "Authorization: Bearer " \ -d '{ "parent_id": "project-e***" }' \ compute.api.nebius.cloud:443 \ nebius.compute.v1.InstanceService/List ``` # How to define an endpoint Source: https://docs.nebius.com/grpc-api/endpoints/define To call a Nebius AI Cloud gRPC service, construct its endpoint from the service name defined in the API proto files. 1. In the [Nebius AI Cloud API repository](https://github.com/nebius/api/tree/main/nebius), find and open the `.proto` file of the required service. 2. Find the value of the `api_service_name` option. The `.proto` file of [OperationService](/grpc-api/endpoints/index#operationservice-endpoint) does not contain the `api_service_name` option because the service does not have its own endpoint. Use the endpoint of the service that initiated the operation. 3. Paste the value into the endpoint format: . 4. Send a gRPC request to the resulting endpoint. ## Example To define the endpoint for `TokenExchangeService`: 1. Open the service [.proto file](https://github.com/nebius/api/blob/main/nebius/iam/v1/token_exchange_service.proto). 2. Copy the value of the `api_service_name` option. In this example, it is `tokens.iam`. 3. Paste the value into the endpoint format: . # Nebius AI Cloud API endpoints Source: https://docs.nebius.com/grpc-api/endpoints/index Nebius AI Cloud gRPC services are available at endpoints in the following format: ``` .api.nebius.cloud:443 ``` The value of `` corresponds to the `api_service_name` parameter that is defined in the respective `.proto` file. > For example, requests to [TokenExchangeService](https://github.com/nebius/api/blob/main/nebius/iam/v1/token_exchange_service.proto) from the `iam` API package must be sent to . For the complete list of services and their endpoints, see [Services and their endpoints](https://github.com/nebius/api/blob/main/endpoints.md) on GitHub. ## OperationService endpoint [OperationService](https://github.com/nebius/api/blob/main/nebius/common/v1/operation_service.proto) from the `common` API package does not have its own endpoint. It represents an operation as a result of some action in any service. For example, creating a virtual machine or changing settings of a Managed Service for Kubernetes® cluster both return an operation. Use the same endpoint for OperationService as the service that initiated the operation. > For example, if you performed an operation on a disk by using [DiskService](https://github.com/nebius/api/blob/main/nebius/compute/v1/disk_service.proto) from the compute API package, use to check that the operation is successful. # Nebius AI Cloud API Source: https://docs.nebius.com/grpc-api/index Build client applications based on the gRPC API by Nebius AI Cloud. It enables you to automate resource management and send requests between your applications and Nebius AI Cloud services. Besides interacting with the API directly, you can also use the following tools that are based on the API: * [Nebius AI Cloud CLI](/cli/index) * [Terraform provider](/terraform-provider/index) * [SDK for Go](/grpc-api/sdk/go) * [SDK for Python](/grpc-api/sdk/python) * [SDK for JavaScript](/grpc-api/sdk/javascript) They make working with the API easier and serve as an alternative. For instance, you can use off-the-shelf libraries or declarative descriptions of resources instead of constructing API requests and parsing responses. Understand endpoint formats for gRPC services, service naming and special cases Learn how to construct an endpoint Find out how to authenticate a user or service account in the API Learn how to generate a Nebius AI Cloud API client for your programming language # Nebius AI Cloud SDK for Go Source: https://docs.nebius.com/grpc-api/sdk/go The Nebius AI Cloud SDK for Go is a client library for working with Nebius AI Cloud resources from Go applications. For documentation, see: * [Nebius AI Cloud repository for the Go SDK](https://github.com/nebius/gosdk) * [Go SDK reference](https://pkg.go.dev/github.com/nebius/gosdk) ## Supported Go versions The SDK supports Go 1.24 and later. New SDK versions include breaking changes in the underlying libraries. If your project uses an earlier SDK version, pin the dependency to `~v0.1, \ --output ``` In the command, set the following parameters: * `--service-account-id`: ID of your service account. * `--output`: Path to the service account credentials file, for example, `credentials.json`. 3. Initialize the SDK with the service account credentials file: ```go theme={null} import ( "fmt" "github.com/nebius/gosdk" "github.com/nebius/gosdk/auth" ) sdk, err := gosdk.New( ctx, gosdk.WithUserAgentPrefix("/"), gosdk.WithCredentials( gosdk.ServiceAccountReader( auth.NewServiceAccountCredentialsFileParser( nil, "", ), ), ), ) if err != nil { return fmt.Errorf("create gosdk: %w", err) } defer sdk.Close() ``` The `gosdk.New` constructor initializes the SDK and uses the service account credentials file to authenticate requests. The `WithUserAgentPrefix` method adds a prefix to the [User-Agent header](https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/User-Agent) sent with each request. Use `WithUserAgentPrefix` to identify your application in the list of requests. In the script, set the following parameters: * `/`: Application or library that calls the SDK. The version or comment is optional. * ``: Path to the service account credentials file. For local usage, authenticate SDK requests by using an IAM token. For more information, see the [Go SDK repository](https://github.com/nebius/gosdk#using-an-iam-token). ## Sending a request The SDK provides service clients grouped by Nebius AI Cloud services and API versions. For mutating operations, such as creating, updating and deleting resources, the SDK returns an operation object. If an operation is asynchronous, call `Wait` to wait until it is completed. The following example creates a [Compute virtual machine (VM)](/compute/). 1. Create a Go file with the following code. This script already includes SDK initialization and authentication. ```go theme={null} package main import ( "context" "fmt" "github.com/nebius/gosdk" "github.com/nebius/gosdk/auth" common "github.com/nebius/gosdk/proto/nebius/common/v1" compute "github.com/nebius/gosdk/proto/nebius/compute/v1" ) // Run the resource creation workflow. func main() { if err := CreateInstance(context.Background()); err != nil { panic(err) } } // CreateInstance creates a boot disk and a VM that uses it. func CreateInstance(ctx context.Context) error { // Initialize the SDK with service account credentials. sdk, err := gosdk.New( ctx, gosdk.WithUserAgentPrefix("/"), gosdk.WithCredentials( gosdk.ServiceAccountReader( auth.NewServiceAccountCredentialsFileParser( nil, "", ), ), ), ) if err != nil { return fmt.Errorf("create gosdk: %w", err) } defer sdk.Close() // Create the boot disk. diskOperation, err := sdk.Services().Compute().V1().Disk().Create(ctx, &compute.CreateDiskRequest{ Metadata: &common.ResourceMetadata{ ParentId: "", Name: "my-boot-disk", }, Spec: &compute.DiskSpec{ Size: &compute.DiskSpec_SizeGibibytes{ SizeGibibytes: 93, }, Type: compute.DiskSpec_NETWORK_SSD, Source: &compute.DiskSpec_SourceImageFamily{ SourceImageFamily: &compute.SourceImageFamily{ ParentId: "", ImageFamily: "", }, }, }, }) if err != nil { return fmt.Errorf("create disk: %w", err) } diskOperation, err = diskOperation.Wait(ctx) if err != nil { return fmt.Errorf("wait for disk create: %w", err) } // Create the VM that uses the boot disk. instanceOperation, err := sdk.Services().Compute().V1().Instance().Create(ctx, &compute.CreateInstanceRequest{ Metadata: &common.ResourceMetadata{ ParentId: "", Name: "my-vm", }, Spec: &compute.InstanceSpec{ Resources: &compute.ResourcesSpec{ Platform: "", Size: &compute.ResourcesSpec_Preset{ Preset: "", }, }, NetworkInterfaces: []*compute.NetworkInterfaceSpec{ { Name: "eth0", SubnetId: "", IpAddress: &compute.IPAddress{}, }, }, BootDisk: &compute.AttachedDiskSpec{ AttachMode: compute.AttachedDiskSpec_READ_WRITE, Type: &compute.AttachedDiskSpec_ExistingDisk{ ExistingDisk: &compute.ExistingDisk{ Id: diskOperation.ResourceID(), }, }, DeviceId: "boot-disk", }, }, }) if err != nil { return fmt.Errorf("create VM: %w", err) } _, err = instanceOperation.Wait(ctx) if err != nil { return fmt.Errorf("wait for VM creation: %w", err) } return nil } ``` In the script, set the following parameters: * `/`: Application or library that calls the SDK. For more information, see [Initialization and authentication](#initialization-and-authentication). * ``: Path to the service account credentials file. * ``: ID of the project where you create the resources. * ``: Name of the [boot disk image family](/compute/storage/boot-disk-images), for example, `ubuntu24.04-driverless`. * ``: Name of the [Compute platform](/compute/virtual-machines/types), for example, `cpu-e2`. * ``: Name of the resource preset. Available presets depend on the selected platform, for example, `2vcpu-8gb` for `cpu-e2`. * ``: ID of the [subnet](/vpc/networking/resources#how-to-get-a-subnet-id) for the VM. 2. Execute the file: ```bash theme={null} go run .go ``` After you run the example, delete the VM and its boot disk if you no longer need them. Otherwise, Compute continues [charging](/compute/resources/pricing) for these resources. # Nebius AI Cloud SDKs Source: https://docs.nebius.com/grpc-api/sdk/index The Nebius AI Cloud SDKs are client libraries for working with Nebius AI Cloud resources from applications. They are built on gRPC and are based on the [Nebius AI Cloud API](https://github.com/nebius/api). Use the SDKs to manage resources, handle authentication and call Nebius AI Cloud services without building API requests manually. Nebius AI Cloud provides SDKs for the following programming languages: * [Go](/grpc-api/sdk/go) * [Python](/grpc-api/sdk/python) * [JavaScript](/grpc-api/sdk/javascript) # Nebius AI Cloud SDK for JavaScript Source: https://docs.nebius.com/grpc-api/sdk/javascript The Nebius AI Cloud SDK for JavaScript is a client library for working with Nebius AI Cloud resources from JavaScript applications. For documentation, see: * [Nebius AI Cloud repository for the JavaScript SDK](https://github.com/nebius/js-sdk) * [JavaScript SDK reference](https://nebius.github.io/js-sdk/) ## Supported Node.js versions The SDK supports Node.js 22, 24 and 25. ## Installation and update Install the SDK package: ```bash theme={null} npm install @nebius/js-sdk ``` If you installed the SDK earlier, update it to the latest version: ```bash theme={null} npm install @nebius/js-sdk@latest ``` ## Initialization and authentication For server-to-server communication, use a [service account](/iam/overview#accounts-and-members) to authenticate SDK requests. The SDK uses the service account credentials to generate a JSON Web Token, exchange it for an IAM token and refresh the IAM token in the background. 1. [Create a service account](/iam/service-accounts/manage#creating-a-service-account). 2. Generate an authorized key and create a service account credentials file: ```bash theme={null} nebius iam auth-public-key generate \ --service-account-id \ --output ``` In the command, set the following parameters: * `--service-account-id`: ID of your service account. * `--output`: Path to the service account credentials file, for example, `credentials.json`. 3. Initialize the SDK with the service account credentials file: ```javascript theme={null} import { SDK } from '@nebius/js-sdk'; import { CredentialsFileReader } from '@nebius/js-sdk/runtime/service_account/credentials_file'; const sdk = new SDK({ userAgentPrefix: '/', credentials: new CredentialsFileReader(''), }); await sdk.close(); ``` The `SDK` constructor initializes the SDK and uses the service account credentials file to authenticate requests. The `userAgentPrefix` argument adds a prefix to the [User-Agent header](https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/User-Agent) sent with each request. Use `userAgentPrefix` to identify your application in the list of requests. In the script, set the following parameters: * `/`: Application or library that calls the SDK. The version or comment is optional. * ``: Path to the service account credentials file. For local usage, authenticate SDK requests by using an IAM token, CLI configuration or service account credentials. For more information, see the [JavaScript SDK repository](https://github.com/nebius/js-sdk#initialize-the-sdk). ## Sending a request The SDK provides service clients grouped by Nebius AI Cloud services and API versions. For mutating operations, such as creating, updating and deleting resources, the SDK returns an operation object. If an operation is asynchronous, call `wait` to wait until it is completed. The following example creates a [Compute virtual machine (VM)](/compute/virtual-machines/manage). 1. Create a JavaScript file with the following code. This script already includes SDK initialization and authentication. ```javascript theme={null} import { SDK } from '@nebius/js-sdk'; import { AttachedDiskSpec_AttachMode, CreateDiskRequest, CreateInstanceRequest, DiskService as DiskServiceClient, DiskSpec_DiskType, InstanceService as InstanceServiceClient, } from '@nebius/js-sdk/api/nebius/compute/v1/index'; import { CredentialsFileReader } from '@nebius/js-sdk/runtime/service_account/credentials_file'; async function createInstance() { const sdk = new SDK({ userAgentPrefix: '/', credentials: new CredentialsFileReader(''), }); try { const diskService = new DiskServiceClient(sdk); const instanceService = new InstanceServiceClient(sdk); // Create the boot disk. const diskOperation = await diskService.create( CreateDiskRequest.create({ metadata: { parentId: '', name: 'my-boot-disk', }, spec: { size: { $case: 'sizeGibibytes', sizeGibibytes: 93, }, type: DiskSpec_DiskType.NETWORK_SSD, source: { $case: 'sourceImageFamily', sourceImageFamily: { imageFamily: '', }, }, }, }), ).result; await diskOperation.wait(); console.log('Boot disk ID:', diskOperation.resourceId()); // Create the VM that uses the boot disk. const instanceOperation = await instanceService.create( CreateInstanceRequest.create({ metadata: { parentId: '', name: 'my-vm', }, spec: { resources: { platform: '', size: { $case: 'preset', preset: '', }, }, networkInterfaces: [ { name: 'eth0', subnetId: '', ipAddress: {}, }, ], bootDisk: { attachMode: AttachedDiskSpec_AttachMode.READ_WRITE, type: { $case: 'existingDisk', existingDisk: { id: diskOperation.resourceId(), }, }, deviceId: 'boot-disk', }, }, }), ).result; await instanceOperation.wait(); console.log('VM ID:', instanceOperation.resourceId()); } finally { await sdk.close(); } } await createInstance(); ``` In the script, set the following parameters: * `/`: Application or library that calls the SDK. For more information, see [Initialization and authentication](#initialization-and-authentication). * ``: Path to the service account credentials file. * ``: ID of the project where you create the resources. * ``: Name of the [boot disk image family](/compute/storage/boot-disk-images), for example, `ubuntu24.04-driverless`. * ``: Name of the [Compute platform](/compute/virtual-machines/types), for example, `cpu-e2`. * ``: Name of the resource preset. Available presets depend on the selected platform, for example, `2vcpu-8gb` for `cpu-e2`. * ``: ID of the [subnet](/vpc/networking/resources#how-to-get-a-subnet-id) for the VM. 2. Execute the file: ```bash theme={null} node .mjs ``` After you run the example, delete the VM and its boot disk if you no longer need them. Otherwise, Compute continues [charging](/compute/resources/pricing) for these resources. # Nebius AI Cloud SDK for Python Source: https://docs.nebius.com/grpc-api/sdk/python The Nebius AI Cloud SDK for Python is a client library for working with Nebius AI Cloud resources from Python applications. For documentation, see: * [Nebius AI Cloud repository for the Python SDK](https://github.com/nebius/pysdk) * [Python SDK reference](https://nebius.github.io/pysdk/apiReference.html) ## Supported Python versions The SDK supports Python 3.10 and later. If your project uses SDK version 0.2.x, check the migration notes in the [Python SDK repository](https://github.com/nebius/pysdk#migration-from-02x-to-03x) before updating to version 0.3.x or later. ## Installation and update Before installing the SDK, consider creating a [Python virtual environment](https://docs.python.org/3/library/venv.html) for your project to avoid dependency conflicts. Install the SDK package: ```bash theme={null} python3 -m pip install nebius ``` If you installed the SDK earlier, update it to the latest version: ```bash theme={null} python3 -m pip install -U nebius ``` ## Initialization and authentication For server-to-server communication, use a [service account](/iam/overview#accounts-and-members) to authenticate SDK requests. The SDK uses the service account credentials to generate a JSON Web Token, exchange it for an IAM token and refresh the IAM token in the background. 1. [Create a service account](/iam/service-accounts/manage#creating-a-service-account). 2. Create a private and public key pair: ```bash theme={null} openssl genrsa -out private.pem 4096 && \ openssl rsa -in private.pem -outform PEM -pubout -out public.pem ``` This command creates the `private.pem` and `public.pem` files in the current directory. 3. Upload the public key to create an authorized key: ```bash theme={null} nebius iam auth-public-key create \ --account-service-account-id \ --data "$(cat public.pem)" ``` In the command, specify the service account ID. 4. Initialize the SDK with the private key file: ```python theme={null} from nebius.sdk import SDK sdk = SDK( user_agent_prefix="/", service_account_private_key_file_name="", service_account_public_key_id="", service_account_id="", ) ``` The `SDK` constructor initializes the SDK and uses the service account private key file to authenticate requests. The `user_agent_prefix` argument adds a prefix to the [User-Agent header](https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/User-Agent) sent with each request. Use `user_agent_prefix` to identify your application in the list of requests. In the script, set the following parameters: * `/`: Application or library that calls the SDK. The version or comment is optional. * ``: Path to the private key file, for example `private.pem`. * ``: ID of the public key generated for the service account. * ``: ID of your service account. For local usage, authenticate SDK requests by using an IAM token, CLI configuration or a credentials file. For more information, see the [Python SDK repository](https://github.com/nebius/pysdk#how-to). ## Sending a request The SDK provides service clients grouped by Nebius AI Cloud services and API versions. For mutating operations, such as creating, updating and deleting resources, the SDK returns an operation object. If an operation is asynchronous, call `wait` to wait until it is completed. The following example creates a [Compute virtual machine (VM)](/compute/). 1. Create a Python file with the following code. This script already includes SDK initialization and authentication. ```python theme={null} import asyncio from nebius.api.nebius.common.v1 import ResourceMetadata from nebius.api.nebius.compute.v1 import ( AttachedDiskSpec, CreateDiskRequest, CreateInstanceRequest, DiskServiceClient, DiskSpec, ExistingDisk, InstanceServiceClient, InstanceSpec, IPAddress, NetworkInterfaceSpec, ResourcesSpec, SourceImageFamily, ) from nebius.sdk import SDK async def create_instance() -> None: # Initialize the SDK with the service account private key file. sdk = SDK( user_agent_prefix="/", service_account_private_key_file_name="", service_account_public_key_id="", service_account_id="", ) async with sdk: disk_service = DiskServiceClient(sdk) instance_service = InstanceServiceClient(sdk) # Create the boot disk. disk_operation = await disk_service.create( CreateDiskRequest( metadata=ResourceMetadata( parent_id="", name="my-boot-disk", ), spec=DiskSpec( size_gibibytes=93, type=DiskSpec.DiskType.NETWORK_SSD, source_image_family=SourceImageFamily( image_family="", ), ), ) ) await disk_operation.wait() # Create the VM that uses the boot disk. instance_operation = await instance_service.create( CreateInstanceRequest( metadata=ResourceMetadata( parent_id="", name="my-vm", ), spec=InstanceSpec( resources=ResourcesSpec( platform="", preset="", ), network_interfaces=[ NetworkInterfaceSpec( name="eth0", subnet_id="", ip_address=IPAddress(), ), ], boot_disk=AttachedDiskSpec( attach_mode=AttachedDiskSpec.AttachMode.READ_WRITE, existing_disk=ExistingDisk( id=disk_operation.resource_id, ), device_id="boot-disk", ), ), ) ) await instance_operation.wait() if __name__ == "__main__": asyncio.run(create_instance()) ``` In the script, set the following parameters: * `/`: Application or library that calls the SDK. For more information, see [Initialization and authentication](#initialization-and-authentication). * ``: Path to the private key file. * ``: ID of the public key generated for the service account. * ``: ID of your service account. * ``: ID of the project where you create the resources. * ``: Name of the [boot disk image family](/compute/storage/boot-disk-images), for example, `ubuntu24.04-driverless`. * ``: Name of the [Compute platform](/compute/virtual-machines/types), for example, `cpu-e2`. * ``: Name of the resource preset. Available presets depend on the selected platform, for example, `2vcpu-8gb` for `cpu-e2`. * ``: ID of the [subnet](/vpc/networking/resources#how-to-get-a-subnet-id) for the VM. 2. Execute the file: ```bash theme={null} python3 .py ``` After you run the example, delete the VM and its boot disk if you no longer need them. Otherwise, Compute continues [charging](/compute/resources/pricing) for these resources. # Access tokens in Nebius AI Cloud Source: https://docs.nebius.com/iam/authorization/access-tokens Access tokens are used for authentication when you work with Nebius AI Cloud interfaces: [Terraform](/terraform-provider/index) and the [API](/grpc-api/index). To create an access token, use the following command: ```bash theme={null} nebius iam get-access-token ``` An access token is valid for 12 hours. After it expires, create a new one. ## Access keys and access tokens Do not confuse [access keys](/iam/service-accounts/access-keys) with access tokens. * Access keys are used to authenticate [service accounts](/iam/service-accounts/manage) in AWS-compatible services, such as Object Storage. * Access tokens are used to authenticate user accounts in Nebius AI Cloud interfaces. # How to invite users to a tenant Source: https://docs.nebius.com/iam/authorization/add-users You can add users in one of the following ways: * If you have created a [federation](/iam/overview#federations) and configured single sign-on, you can create user accounts in your application in one of the [supported identity providers](/iam/federations/saml-sso). Then, users can sign in to Nebius AI Cloud by using the federation ID. * If you do not have a federation or you want to use an alternative method, you can send invitations to users from Nebius AI Cloud. In this case, users receive their invitations via email. Once the user accepts the invitation, they can [sign in by using any available method](/iam/log-in#how-to-sign-in-to-the-web-console), including the federation ID. By default, an invitation is valid for three days. When you create invitations by using the CLI, you can customize this period with the `--expires-in` parameter. To send an invitation, do the following: 1. Create it: 1. In the sidebar, go to  **Administration** → **IAM**. 2. Open the **Invitations** tab. 3. Click  **Create invitation**. 4. In the window that opens, specify the email of the user whom you would like to invite. 5. Click **Create**. Run the following command: ```bash theme={null} nebius iam invitation create --parent-id --email --expires-in 24h ``` In the command, specify: * `--email`: Email of the user whom you would like to invite. * `--parent-id`: [Tenant ID](/iam/get-tenants#cli). * `--expires-in` (optional): How long the invitation remains valid after creation. If omitted, the invitation is valid for three days. 1. [Install and configure](/terraform-provider/quickstart) the Nebius AI Cloud provider for Terraform. 2. Create the following configuration file: ```hcl theme={null} resource "nebius_iam_v1_invitation" "" { parent_id = "" email = "" } ``` In the file, specify: * `email`: Email of the user whom you would like to invite. * `parent_id`: [Tenant ID](/iam/get-tenants). 3. Check that the configuration is correct: ```bash theme={null} terraform validate ``` 4. Apply the changes: ```bash theme={null} terraform apply ``` The invitation to the tenant is sent to the specified email. 2. Add the user to the required group. You can do it at any time, even before the user accepts their invitation. 1. In the sidebar, go to  **Administration** → **IAM**. 2. Open the **Invitations** tab. 3. In the line of the invited user, click  → **Add to group**. If you cannot find the user in the list of pending invitations, switch to accepted invitations. 4. In the window that opens, select the groups to which you want to add the user. 5. Click **Close**. 1. Get a list of groups, so you can choose the group for the user and copy the group ID: ```bash theme={null} nebius iam group list --parent-id ``` Save the `metadata.id` value for the required group. 2. Get the ID of the invited user: ```bash theme={null} nebius iam invitation list --parent-id ``` Save the `metadata.status.tenant_user_account_id` value for the required user. 3. Assign the group to the user: ```bash theme={null} nebius iam group-membership create \ --parent-id group-*** \ --member-id tenantuseraccount-*** ``` Specify the group and user ID that you saved earlier. 1. In the directory with the already created Terraform manifest, add the following configuration file: ```hcl theme={null} resource "nebius_iam_v1_group_membership" "" { parent_id = data.nebius_iam_v1_group..id member_id = nebius_iam_v1_invitation..status.tenant_user_account_id } data "nebius_iam_v1_group" "" { parent_id = "" name = "" } ``` The file contains the following: * Resource that adds a group to the user. In the resource, specify the names of the group and invitation resources. * Data source that you use to get the group ID. In the data source, specify the tenant ID and the name of the group to which you want to add the user. 2. Check that the configuration is correct: ```bash theme={null} terraform validate ``` 3. Apply the changes: ```bash theme={null} terraform apply ``` The user is added to the specified group. Now, the user has access to the tenant and they can manage resources within it. # How to delete groups Source: https://docs.nebius.com/iam/authorization/groups/delete-groups You can delete any group, whether default or custom. After you delete a group, its users and service accounts will lose their access rights assigned within this group. Deleting a group is permanent and irreversible. If you are part of the `admins` group and you delete it, you lose access rights of the `admin` role in the tenant. To recover access, [contact support](https://console.nebius.com/support/create-ticket). To delete a group, do the following: 1. In the [web console](https://console.nebius.com), go to  **Administration** → **IAM**. 2. On the **Groups** tab, in the line of the required group, click → **Delete**. 3. In the window that opens, confirm the deletion. 1. Get the group ID: ```bash theme={null} nebius iam group list --parent-id ``` 2. Delete the group: ```bash theme={null} nebius iam group delete --id ``` # Groups within Nebius AI Cloud tenants Source: https://docs.nebius.com/iam/authorization/groups/index *Groups* in Nebius AI Cloud help you organize and authorize [users and service accounts](/iam/overview#accounts-and-members) to view and manage your tenant resources. By default, new users and service accounts do not have access to any resources in a tenant. When you [add a user or service account to a group](/iam/authorization/groups/members), they receive a specific level of access to resources, as defined by the [roles](/iam/authorization/roles) that are assigned to the group. Your tenant includes pre-created [default groups](#default-groups) that provide broad permissions through the [general roles](/iam/authorization/roles#general-roles) assigned to them. You can also create and configure [custom groups](#custom-groups) for more granular control over access. For instructions, see [Managing custom groups](/iam/authorization/groups/manage). If you want to delete a group, see [How to delete groups](/iam/authorization/groups/delete-groups). ## Default groups From least to most access, the default groups in a tenant are the following: * `auditors` can view **certain types** of resources **without access to data**. * `viewers` can view **most types** of resources (except some resources related to access management, security, etc.) and **access data** in them (e.g. download objects in buckets). * `editors` can view **and manage** most types of resources and access data in them. * `admins` can view and manage **all types** of resources and access data in them. Each default group is assigned a corresponding tenant-wide [general role](/iam/authorization/roles#general-roles). Default groups and general roles grant a wide range of permissions across all services. To follow the [principle of least privilege](https://en.wikipedia.org/wiki/Principle_of_least_privilege), create custom groups and assign roles with as few permissions as possible to these groups. ## Custom groups Custom groups give you granular control over permissions. You can create custom groups in your tenant or in a specific project. To manage group permissions, you should then create access permits that assign roles for specific resources to the group. The access permits can assign roles to the resources at the following levels: * **Tenant**: A tenant, all projects and all resources within it. * **Project**: A project and all resources within it. * **Individual resource**: A resource that supports access permits, and its child resources. For example: * If you create an access permit for a group, it also applies to its group memberships because they are its child resources. * If you create an access permit for an account, it does not apply to its access keys, because their parent is the project, not the account. The following resource types support access permits: * Identity and Access Management resources (see the list in the **Identity and Access Management** section in [Roles for Nebius AI Cloud groups](/iam/authorization/roles#general-roles)) * Virtual machines ([Compute](/compute/index)) * Buckets ([Object Storage](/object-storage/index)) * Container registries ([Container Registry](/container-registry/index)) * Secrets ([MysteryBox](/mysterybox/index)) For instructions, see [Managing custom groups](/iam/authorization/groups/manage). If you need granular access rights to objects in a bucket, set up a [bucket policy](/object-storage/buckets/bucket-policy) in Object Storage. You can use it instead of an access permit or apply both of them. # Managing custom groups Source: https://docs.nebius.com/iam/authorization/groups/manage In addition to [default groups](/iam/authorization/groups#default-groups) that come with your tenant when you sign up for Nebius AI Cloud, you can create and manage [custom groups](/iam/authorization/groups#custom-groups) in the tenant and its projects for granular control over permissions. To manage group permissions, create access permits that assign [roles](/iam/authorization/roles) for specific resources to the group. ## Prerequisites The prerequisites for this guide depend on the interface that you use. Make sure you are in a [group](/iam/authorization/groups/index) that has the `admin` role within your tenant or project; for example, the default `admins` group. You can check this in the [Administration → IAM](https://console.nebius.com/iam) section of the web console. 1. Make sure you are in a [group](/iam/authorization/groups/index) that has the `admin` role within your tenant or project; for example, the default `admins` group. You can check this in the [Administration → IAM](https://console.nebius.com/iam) section of the web console. 2. [Install](/cli/install) and [configure](/cli/configure) the Nebius AI Cloud CLI. 3. Install [jq](https://jqlang.github.io/jq/download/) to extract IDs and tokens from JSON data returned by the Nebius AI Cloud CLI: ```bash Ubuntu theme={null} sudo apt-get install jq ``` ```bash macOS theme={null} brew install jq ``` ## Setting up custom groups To create a group and set up its permissions, go through the following steps: 1. Create a group within your tenant or project: 1. In the sidebar, go to **Administration** → **IAM**. 2. Click **Create entity** and select **Group**. 3. In the window that opens, specify the group name and define its scope by selecting either your tenant or a specific project in the tenant. 4. Click **Create** to finish creating the group. 2. Create an access permit for the group: 1. Open the newly created group and switch to the **Access permits** tab. 2. Click **Manage permits**. 3. In the window that opens, select the resource that you want the group to have access to. If the resource is not listed, enter its ID in the **Resource** field and press `Enter`. Only specific resource types support access permits. For the list of supported resource types, see [Custom groups](/iam/authorization/groups#custom-groups). The available resources depend on the scope of the group: * A group created in a tenant can have permits for the tenant, any projects and resources within it. * A group created in a project can only have permits for this project and resources within it. 4. Select [roles](/iam/authorization/roles) to assign to the group. These roles define the permissions of the group members. 5. Click **Save changes** to apply your changes. 3. [Add members](/iam/authorization/groups/members) to the group. 1. Create a group within your tenant or project: ```bash theme={null} nebius iam group create \ --parent-id \ --name ``` In the `--parent-id` parameter, you can specify either the [ID of your tenant](/iam/get-tenants#cli) or the [ID of the specific project](/iam/manage-projects#cli-3). From the output of this command, copy the group ID to use it in the next step. 2. Create an access permit for the group: ```bash theme={null} nebius iam access-permit create \ --parent-id \ --resource-id \ --role ``` In this command, set the following parameters: * `--parent-id`: Group ID that you got on the previous step. * `--resource-id`: ID of the resource for which the permit is created. Only specific resource types support access permits. For the list of supported resource types, see [Custom groups](/iam/authorization/groups#custom-groups). The available resources depend on the scope of the group: * A group created in a tenant can have permits for the tenant, any projects and resources within it. * A group created in a project can only have permits for this project and resources within it. * `--role`: One of the [roles](/iam/authorization/roles) that provide a set of permissions. ### Examples In this example, you will create a group within a project that gives its members permissions to create, read, update or delete any resources in this project. However, the members of this group will not be able to manage groups and permissions. This set of permissions is provided by the `editor` role. Run the following command to create the group and an access permit, and save the group ID to an environment variable: ```bash theme={null} export PROJECT_EDITOR_GROUP_ID=$(nebius iam group create \ --parent-id \ --name my-project-editors \ --format json \ | jq -r ".metadata.id") nebius iam access-permit create \ --parent-id $PROJECT_EDITOR_GROUP_ID \ --resource-id \ --role editor ``` After the operation is completed, use the group ID in the `PROJECT_EDITOR_GROUP_ID` variable to [add members](/iam/authorization/groups/members) to this group. In this example, you will create a group within a tenant that gives its members permissions to view all resources in the tenant but only manage one specific MysteryBox secret. This set of permissions is provided by the `viewer` and `editor` roles for various resources. Run the following command to create the group and access permits, and save the group ID to an environment variable: ```bash theme={null} export SECRET_EDITOR_GROUP_ID=$(nebius iam group create \ --parent-id \ --name my-secret-editors \ --format json \ | jq -r ".metadata.id") nebius iam access-permit create \ --parent-id $SECRET_EDITOR_GROUP_ID \ --resource-id \ --role viewer nebius iam access-permit create \ --parent-id $SECRET_EDITOR_GROUP_ID \ --resource-id \ --role editor ``` After the operation is completed, use the group ID in the `SECRET_EDITOR_GROUP_ID` variable to [add members](/iam/authorization/groups/members) to this group. ## Revoking role assignments To revoke the role that you previously assigned to a group: Remove the access permit that assigned this role: 1. In the sidebar, go to **Administration** → **IAM**. 2. Switch to the **Groups** tab and select the group you want to update. 3. On the group page, switch to the **Access permits** tab. 4. Click → **Manage permits** next to the name of the resource. 5. In the window that opens, deselect individual permits or click **Delete permits** to remove all access permits from the group. Delete the access permit that grants this role: ```bash theme={null} nebius iam access-permit delete --id ``` If you don't know the ID of the access permit, you can list all access permits for a group and find the one you need. Run the following command: ```bash theme={null} nebius iam access-permit list --parent-id ``` Output example: ```yaml theme={null} items: - metadata: created_at: "2025-05-14T11:28:31.685598Z" id: accesspermit-*** parent_id: group-*** spec: resource_id: tenant-*** role: viewer ``` # How to add accounts to groups Source: https://docs.nebius.com/iam/authorization/groups/members To grant users and service accounts access to tenant resources, add them to one of the [groups](/iam/authorization/groups/index). ## Prerequisites Make sure you are in a [group](/iam/authorization/groups/index) that has the `admin` role within your tenant or project; for example, the default `admins` group. You can check this in the [Administration → IAM](https://console.nebius.com/iam) section of the web console. 1. Make sure you are in a [group](/iam/authorization/groups/index) that has the `admin` role within your tenant or project; for example, the default `admins` group. You can check this in the [Administration → IAM](https://console.nebius.com/iam) section of the web console. 2. [Install](/cli/install) and [configure](/cli/configure) the Nebius AI Cloud CLI. 3. Check that your project ID is saved in the Nebius AI Cloud CLI profile configuration: ```bash theme={null} cat ~/.nebius/config.yaml ``` 4. Install jq to extract IDs and tokens from JSON data returned by the Nebius AI Cloud CLI: ```bash Ubuntu theme={null} sudo apt-get install jq ``` ```bash macOS theme={null} brew install jq ``` 5. In the [web console](https://console.nebius.com), go to **Administration** → **IAM**. 6. If the group was created in a tenant, [get the tenant ID](/iam/get-tenants#cli) and save it to an environment variable: ```bash theme={null} export TENANT_ID= ``` 7. If the group was created in a project, [get the project ID](/iam/manage-projects#cli-3) and save it to an environment variable: ```bash theme={null} export PROJECT_ID= ``` 8. Get the relevant group ID and save it to an environment variable: ```bash theme={null} export GROUP_ID=$(nebius iam group get-by-name \ --name \ --parent-id <$TENANT_ID|$PROJECT_ID> \ --format json \ | jq -r ".metadata.id") ``` ## Adding a user account To add a user to a group: 1. In the sidebar, go to **Administration** → **IAM**. 2. On the **Groups** tab, click the group you want to add a user to. 3. Click **Add members**. 4. In the window that opens, find the user you want to add to the group and click **Add** next to their name. To add a user to a group via the Nebius AI Cloud CLI, you must have their email address. 1. Save a user email to an environment variable: ```bash theme={null} export USER_EMAIL= ``` 2. Get the user account ID and save it to an environment variable: ```bash theme={null} export USER_ID=$(nebius iam tenant-user-account-with-attributes list \ --parent-id $TENANT_ID --all \ --format json | jq -r --arg user_email "$USER_EMAIL" \ '.items[] | select(.attributes.email == $user_email) | .tenant_user_account.metadata.id') ``` With `--all`, the command returns the full list of user accounts instead of only the first page of results that may not contain the required user account. 3. To add the user account to the group, set up its membership: ```bash theme={null} nebius iam group-membership create \ --parent-id $GROUP_ID \ --member-id $USER_ID ``` 4. Check that the account has appeared in the group: ```bash theme={null} nebius iam group-membership list-members \ --parent-id $GROUP_ID | grep "$USER_ID" ``` ## Adding a service account To add a service account to a group: 1. In the sidebar, go to **Administration** → **IAM**. 2. On the **Groups** tab, click the group you want to add a service account to. 3. Click **Add members**. 4. In the window that opens, switch to the **Service accounts** tab. 5. Find the service account you want to add to the group and click **Add** next to its name. To add a service account to a group via the Nebius AI Cloud CLI, you must have its name. 1. Get the service account ID and save it to an environment variable: ```bash theme={null} export SA_ID=$(nebius iam service-account get-by-name \ --name \ --format json \ | jq -r ".metadata.id") ``` 2. Set up the account membership in the group: ```bash theme={null} nebius iam group-membership create \ --parent-id $GROUP_ID \ --member-id $SA_ID ``` 3. Check that the account has appeared in the group: ```bash theme={null} nebius iam group-membership list-members \ --parent-id $GROUP_ID | grep "$SA_ID" ``` If you don't know the name of the service account: 1. View all service accounts for your project: ```bash theme={null} nebius iam service-account list ``` 2. Get the service account ID and save it to an environment variable. If the required service account does not appear as the first item in the previous command output, change the digit in `.items[0].metadata.id`: ```bash theme={null} export SA_ID=$(nebius iam service-account list \ --format json \ | jq -r ".items[0].metadata.id") ``` 3. Set up the account membership in the group: ```bash theme={null} nebius iam group-membership create \ --parent-id $GROUP_ID \ --member-id $SA_ID ``` 4. Check that the new account has appeared in the group: ```bash theme={null} nebius iam group-membership list-members \ --parent-id $GROUP_ID | grep "$SA_ID" ``` # Roles for Nebius AI Cloud groups Source: https://docs.nebius.com/iam/authorization/roles Roles are sets of permissions that are granted to users and service accounts to work with resources in Nebius AI Cloud. Roles are assigned to [groups](/iam/authorization/groups/index): * **Default groups** in each tenant (`auditors`, `viewers`, `editors`, `admins`) have corresponding predefined [general roles](#general-roles). * When you create **custom groups**, you should create at least one access permit that assigns a role to the group. You can configure an access permit to apply to the entire tenant, a project within it or an individual resource within it. For more details and instructions, see [Managing custom groups](/iam/authorization/groups/manage). ## List of roles The following roles are available: * [General](#general-roles) * `auditor` * `viewer` * `editor` * `admin` * [Compute](#compute) * `compute.instance-power-operator` * [Object Storage](#object-storage) * `storage.viewer` * `storage.uploader` * `storage.editor` * `storage.object-editor` * `storage.object-viewer` * `storage.object-lister` * [Audit Logs](#audit-logs) * `auditlogs.audit-event-viewer` * `auditlogs.audit-event-exporter` * [MysteryBox](#mysterybox) * `mysterybox.payload-viewer` - [Data Subject Requests](#data-subject-requests) * `dsr.admin` ## General roles *General roles* grant permissions for resources from all services. For example, if you are in a group that has the `admin` role within a tenant, you can perform all actions listed below on all Compute virtual machines, Managed Kubernetes clusters, etc. in the tenant. The default groups within a tenant are assigned corresponding tenant-wide general roles. Default groups and general roles grant a wide range of permissions across all services. To follow the [principle of least privilege](https://en.wikipedia.org/wiki/Principle_of_least_privilege), create custom groups and assign roles with as few permissions as possible to these groups. The following general roles are available: * `auditor`: view **certain types** of resources **without access to data**. * `viewer`: view **most types** of resources (except some resources related to access management, security and similar areas) and **access data** in them (for example, download objects in buckets). * `editor`: view **and manage** most types of resources and access data in them. * `admin`: view and manage **all types** of resources and access data in them. The graph below shows how general roles are related to each other (the arrow means "is a sub-role of"): ```mermaid theme={null} graph LR classDef default fill:#e0ff4f,stroke-width:0px,color:#111c30; auditor --> viewer --> editor --> admin; ``` The `auditor` role is going to be deprecated in the near future. We recommend using the `viewer` role and `viewers` default group instead. General roles contain the following permissions: | **Resource type** | `auditor`
(`auditors` default group) | `viewer`
(`viewers` default group) | `editor`
(`editors` default group) | `admin`
(`admins` default group) | | ------------------------------------------------------------------------- | ---------------------------------------------------------- | ---------------------------------------------------------- | -------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------- | | **Compute** | `auditor` | `viewer` | `editor` | `admin` | | Virtual machines | - | View | View
Create
Modify
Stop
Start
Delete | View
Create
Modify
Stop
Start
Delete | | GPU clusters | - | View | View
Create
Add/remove VMs
Modify
Delete | View
Create
Add/remove VMs
Modify
Delete | | Disks | - | View | View
Create
Attach to/detach from VMs
Modify
Delete | View
Create
Attach to/detach from VMs
Modify
Delete | | Shared filesystems | - | View | View
Create
Attach to/detach from VMs
Modify
Delete | View
Create
Attach to/detach from VMs
Modify
Delete | | Boot disk images | - | View | View
Create
Modify
Delete | View
Create
Modify
Delete | | Disk snapshots | - | View | View
Create
Modify
Delete | View
Create
Modify
Delete | | **Soperator** | `auditor` | `viewer` | `editor` | `admin` | | Clusters | - | View | View
Create
Modify
Stop
Start
Delete | View
Create
Modify
Stop
Start
Delete | | **Managed Service for Kubernetes** | `auditor` | `viewer` | `editor` | `admin` | | Clusters | - | View | View
Create
Modify
Delete | View
Create
Modify
Delete | | Node groups | - | View | View
Create
Modify
Delete | View
Create
Modify
Delete | | **Serverless AI** | `auditor` | `viewer` | `editor` | `admin` | | Endpoints | - | View | View
Create
Modify
Stop
Start
Delete | View
Create
Modify
Stop
Start
Delete | | Jobs | - | View | View
Create
Modify
Cancel
Delete | View
Create
Modify
Cancel
Delete | | **Object Storage** | `auditor` | `viewer` | `editor` | `admin` | | Buckets | View | View | View
Create
Delete
Undelete
Purge | View
Create
Delete
Undelete
Purge | | Objects, versions | - | List
Download | List
Download
Upload
Delete
Restore | List
Download
Upload
Delete
Restore | | Multipart uploads | - | List uploads | List uploads
List parts
Create | List uploads
List parts
Create | | Transfers | View transfers
View iterations | View transfers
View iterations | View transfers
View iterations
Create
Modify
Stop
Start
Delete | View transfers
View iterations
Create
Modify
Stop
Start
Delete | | Bucket settings | View | View | View
Modify | View
Modify | | **Managed Service for PostgreSQL®** | `auditor` | `viewer` | `editor` | `admin` | | Clusters | - | View | View
Create
Modify
Stop
Start
Delete | View
Create
Modify
Stop
Start
Delete | | **Container Registry** | `auditor` | `viewer` | `editor` | `admin` | | Registries | - | View | View
Create
Modify
Delete | View
Create
Modify
Delete | | Images | - | List
Pull | List
Pull
Push
Modify | List
Pull
Push
Modify | | **Managed Service for MLflow** | `auditor` | `viewer` | `editor` | `admin` | | Clusters | - | View | View
Stop
Start | View
Stop
Start
Create
Modify
Delete | | **Applications** | `auditor` | `viewer` | `editor` | `admin` | | Standalone applications | - | View | View
Create
Modify
Stop
Start
Delete | View
Create
Modify
Stop
Start
Delete | | Applications for Managed Kubernetes | - | View | View
Create
Create/delete endpoints
Delete | View
Create
Create/delete endpoints
Delete | | **Observability** | `auditor` | `viewer` | `editor` | `admin` | | Metrics | - | View | View | View | | Alerts | - | View | View
Create
Modify
Delete | View
Create
Modify
Delete | | Logs | - | View | View
Write | View
Write | | **Virtual Networks** | `auditor` | `viewer` | `editor` | `admin` | | IP address pools | - | View | View | View | | IP address allocations | - | View | View
Create
Assign to/de-assign from resources
Delete | View
Create
Assign to/de-assign from resources
Delete | | Networks | - | View | View
Create
Modify
Delete | View
Create
Modify
Delete | | Subnets | - | View | View
Create
Use
Modify
Delete | View
Create
Use
Modify
Delete | | Routing tables | - | View | View
Create
Assign to subnets
Modify
Delete | View
Create
Assign to subnets
Modify
Delete | | Routes | - | View | View
Create
Modify
Delete | View
Create
Modify
Delete | | Security groups | - | View | View
Create
Assign to VMs
Modify
Delete | View
Create
Assign to VMs
Modify
Delete | | Security rules | - | View | View
Create
Modify
Delete | View
Create
Modify
Delete | | **Billing** | `auditor` | `viewer` | `editor` | `admin` | | Billing details – general:
payer type, country, payment method, etc. | View | View | View | View | | Billing details – sensitive:
payer name, billing address, etc. | - | View | View | View | | Documents | View | View | View | View | | Prices | View | View | View | View | | Pay-as-you-go balance | - | View | View | View | | Usage details | - | View | View | View | | Transactions | - | View | View | View | | Budgets | - | View | View
Create
Modify
Delete | View
Create
Modify
Delete | | **Identity and Access Management** | `auditor` | `viewer` | `editor` | `admin` | | Users | View | View | View | View | | Groups | View | View | View | View
Add members
Remove members | | Service accounts | View | View | View
Create
Modify
Delete | View
Create
Modify
Delete | | Authorized keys | View | View | View | View
Upload
Modify
Delete | | Access keys | View | View | View | View
Create
Modify
Delete | | **Audit Logs** | `auditor` | `viewer` | `editor` | `admin` | | Events | - | - | - | View | | Exports | - | - | - | View
Create | | **Key Management Service** | `auditor` | `viewer` | `editor` | `admin` | | Symmetric and asymmetric keys | View
List | View
List | View
List
Create
Update
Delete
Restore | View
List
Create
Update
Delete
Restore | | **MysteryBox** | `auditor` | `viewer` | `editor` | `admin` | | Secrets | View
List | View
List | View
List
Create
Update
Delete
Restore | View
List
Create
Update
Delete
Restore | | Versions | View
List | View
List | View
List
Create
Delete
Restore | View
List
Create
Delete
Restore | | Payloads | - | - | - | View | | **Quotas** | `auditor` | `viewer` | `editor` | `admin` | | Limits | - | View | View | View | | Requests | - | View | View | View
Create
Cancel | | **Support** | `auditor` | `viewer` | `editor` | `admin` | | Regular requests | View
Create
Comment
Attach files
Close | View
Create
Comment
Attach files
Close | View
Create
Comment
Attach files
Close | View
Create
Comment
Attach files
Close | | Data Subject Requests to receive copies of data | - | - | - | View
Create
Comment
Attach files
Close | | Data Subject Requests to erase data | - | - | - | View
Create
Comment
Attach files
Close | ## Compute *Compute roles* grant permissions for [Compute](/compute/index) virtual machines. The only available role is `compute.instance-power-operator`, which allows you to perform power operations on virtual machines without broader Compute permissions. `compute.instance-power-operator` contains the following permissions: | **Compute** | `compute.instance-power-operator` | | ---------------- | ----------------------------------------------------------------- | | Virtual machines | View
View metadata
Start
Stop
View operations | ## Object Storage *Object Storage roles* grant permissions for [Object Storage](/object-storage/index) buckets and objects. The following Object Storage roles are available: * `storage.object-viewer`: download objects and view their metadata * `storage.object-lister`: list objects and view their version metadata * `storage.viewer`: view buckets, list and download objects but not upload them * `storage.uploader`: view buckets, upload objects but not list or download them * `storage.object-editor`: view buckets, list, download, upload and manage objects * `storage.editor`: view and manage buckets, list, download, upload and manage objects The graph below shows how Object Storage roles are related to each other and to general roles, shown in green (the arrow means "is a sub-role of"): ```mermaid theme={null} graph LR classDef default fill:#dbefff,stroke-width:0px,color:#111c30; classDef general fill:#e0ff4f; storage.editor --> editor; storage.viewer --> viewer; storage.viewer --> storage.object-editor; viewer --> editor; storage.uploader --> storage.object-editor; storage.object-editor --> storage.editor; storage.object-viewer --> storage.viewer; storage.object-lister --> storage.viewer; class editor general; class viewer general; ``` Object Storage roles contain the following permissions: | **Object Storage** | `storage.object-viewer` | `storage.object-lister` | `storage.viewer` | `storage.uploader` | `storage.object-editor` | `storage.editor` | | ------------------ | ----------------------- | ----------------------- | ------------------ | ---------------------- | ------------------------------------------------------- | ------------------------------------------------------- | | Buckets | - | - | View | View | View | View
Create
Delete | | Objects, versions | Download | List | List
Download | Upload | List
Download
Upload
Delete
Restore | List
Download
Upload
Delete
Restore | | Multipart uploads | - | - | List uploads | List parts
Create | List uploads
List parts
Create | List uploads
List parts
Create | | Transfers | - | - | - | - | - | - | | Bucket settings | - | - | View | View | View | View
Modify | For more details on the actions available to different roles, see [Actions supported by Object Storage roles](/object-storage/supported-actions). If you want to configure fine-grained access to objects in a bucket, apply a [bucket policy](/object-storage/buckets/bucket-policy) in Object Storage. ## Audit Logs *Audit Logs roles* grant permissions for viewing or exporting events in [Audit Logs](/audit-logs/index). The following Audit Logs roles are available: * `auditlogs.audit-event-viewer`: view audit events for the tenant * `auditlogs.audit-event-exporter`: view and list available audit log exports, start a new export and cancel an export Audit Logs roles contain the following permissions: | **Audit Logs** | `auditlogs.audit-event-viewer` | `auditlogs.audit-event-exporter` | | -------------- | ------------------------------ | ------------------------------------- | | Events | View | - | | Exports | - | View
List
Start
Cancel | ## MysteryBox *MysteryBox roles* grant permissions for [MysteryBox](/mysterybox/index) secrets. The only available role is `mysterybox.payload-viewer`, which is a sub-role of the `admin` general role. `mysterybox.payload-viewer` contains the following permissions: | **MysteryBox** | `mysterybox.payload-viewer` | | -------------- | --------------------------- | | Secrets | - | | Versions | - | | Payloads | View | Creating a secret or a version of a secret does not automatically grant you access to view payloads in that secret or version. The `editor` role is enough to create a secret or a version, but viewing payloads requires the `mysterybox.payload-viewer` role, which is a sub-role of `admin` but not `editor`. ## Data Subject Requests *Roles for Data Subject Requests* (DSRs) grant permissions to receive copies of personal and non-personal data stored in a tenant and its resources in a machine-readable format, and erase the data if required. If you represent a legal entity and want to [send a DSR](/overview/support#data-subject-requests), you need a role for DSRs. The only available role for DSRs is `dsr.admin`, which allows you to create Data Subject Requests and general support requests. It is a sub-role of the `admin` general role. `dsr.admin` contains the following permissions: | **Support** | `dsr.admin` | | ----------------------------------------------- | ---------------------------------------------------------- | | Regular requests | View
Create
Comment
Attach files
Close | | Data Subject Requests to receive copies of data | View
Create
Comment
Attach files
Close | | Data Subject Requests to erase data | View
Create
Comment
Attach files
Close | The `dsr.admin` role allows you to receive copies of and erase **all** personal and non-personal data in the tenant. Assign this role with caution. *** *Postgres, PostgreSQL and the Slonik Logo are trademarks or registered trademarks of the PostgreSQL Community Association of Canada, and used with their permission.* # Static keys in Nebius AI Cloud Source: https://docs.nebius.com/iam/authorization/static-keys/index Static keys provide a method of authentication in Nebius AI Cloud services from third-party tools and systems. Static keys are useful when you need long-term credentials. The lifetime of a static key is up to three years. ## Use cases * Integrate Observability with third-party tools. You can authorize tools like Grafana® to access Nebius AI Cloud [metrics](/observability/metrics/grafana) and [logs](/observability/logs/grafana). For example, see [How to ingest metrics into Nebius AI Cloud](/observability/metrics/ingest/index). * Access the Container Registry service from external systems. You can deploy artifacts from Container Registry to external systems that have no access to Nebius AI Cloud. For security reasons, static keys are available only for these Nebius AI Cloud services. ## Limitations * You can only use static keys for [service accounts](/iam/overview#accounts-and-members). * Each static key is issued for a specific Nebius AI Cloud service and cannot be used for other services. * Static key level of access cannot be greater than the level of access of the service account for which it is issued. For example, if the service account is only in a [group](/iam/authorization/groups/index) with the `auditor` [role](/iam/authorization/roles#general-roles), the account is not allowed to view the metrics. Therefore, the static key issued for this service account does not let you fetch the metrics from Nebius Observability. *** *The Grafana Labs Marks are trademarks of Grafana Labs, and are used with Grafana Labs’ permission. We are not affiliated with, endorsed or sponsored by Grafana Labs or its affiliates.* # How to manage static keys Source: https://docs.nebius.com/iam/authorization/static-keys/manage [Static keys](/iam/authorization/static-keys) provide a method of authentication in Nebius AI Cloud services from third-party tools and systems. ## Prerequisites [Install](/cli/install) and [configure](/cli/configure) the Nebius AI Cloud CLI. ## Creating a static key Run the following command: ```bash theme={null} nebius iam static-key issue \ --account-service-account-id= \ --service= \ --expires-at= ``` In this command, change the following parameters: * `--account-service-account-id`: The ID of the service account for which the static key is created. * `--service`: The service for which you create the static key. The following values are possible: * `CONTAINER_REGISTRY`: [Container Registry](/container-registry/index) * `OBSERVABILITY`: [Observability services](/observability/index) * `--expires-at` (optional): The date of expiration in [ISO 8601](https://en.wikipedia.org/wiki/ISO_8601) format. The default lifetime of a static key is 6 months. Output example: ```yaml theme={null} ... metadata: parent_id: project-*** spec: account: service_account: id: serviceaccount-*** service: CONTAINER_REGISTRY resource_id: statickey-*** token: ******** ``` Save the token from the `token` parameter of the output. You will not be able to access it later. You can also get the ID of the static key from the `resource_id` parameter. The ID can be helpful later if you need to get the information about the static key or revoke it. ## Listing static keys To get all static keys in your tenant, run the following command: ```bash theme={null} nebius iam static-key list ``` To get the details about a static key, run the following command: ```bash theme={null} nebius iam static-key get --id= ``` ## Revoking a static key You can revoke a static key by using the following command: ```bash theme={null} nebius iam static-key delete --id= ``` If you only know the token value, run the following command to revoke the token: ```bash theme={null} nebius iam static-key revoke --token= ``` # Creating a tenant in Nebius AI Cloud Source: https://docs.nebius.com/iam/create-tenants When you sign up for Nebius AI Cloud, the platform creates a [tenant](/iam/overview#tenants) for you automatically. After the sign-up, you can create additional tenants regardless of whether you have access to any tenants or not. As a result, you can work in an isolated environment with dedicated billing. ## Prerequisites 1. [Sign up for Nebius AI Cloud](/signup-billing/sign-up) if you have not done so yet. 2. Do not use [single sign-on](/iam/federations/saml-sso) (SSO) when you register and log in. Users who use this type of authentication cannot create tenants. 3. If you have access to ten or more tenants, [contact technical support](https://console.nebius.com/support/create-ticket) and ask them to grant you access for creating an additional tenant. If you have ten or more tenants, by default you cannot create one more tenant. First, you need to request access rights for this. After that, you can proceed to the creation process as usual. This limitation does not apply to tenant invitations. If you are invited, for example, to the eleventh tenant, you can accept the invitation and be added to this tenant. ## How to create a tenant 1. If you have access to a tenant, expand the top-left list of tenants and then click  **Create tenant**. If you do not have access to any tenant, click  **Create tenant**. If an error is displayed and the **Create tenant** button is missing, you might have logged in by using SSO, or you have reached the limit on the number of tenants. 2. In the window that opens, specify the following: * **Prefix** that is added to the tenant name. Nebius AI Cloud generates a random and unique name. You can customize it and add a prefix. After the tenant is created, you can [rename](/iam/rename-tenants) it. * **Email** that Nebius AI Cloud uses to send notifications about the new tenant, its projects and maintenance of services. The specified email becomes your personal contact within this new tenant. A tenant must have at least one email subscribed to its notifications, so an email is required. For more information, see [Contacts in Nebius AI Cloud](/overview/contacts/index). 3. Click **Create tenant**. After that, Nebius AI Cloud creates a tenant and a [project](/iam/overview#projects) per [region](/overview/regions) in it. If you receive an error stating that a [tenant subscription](/overview/subscriptions/index#tenant-subscription) is not created, manually subscribe a contact to tenant notifications via the [Administration → Notification settings](https://console.nebius.com/notify) section of the web console. For more information, see [How to subscribe to notifications](/overview/subscriptions/manage-subscriptions#how-to-subscribe-to-notifications). # Configuration of single sign-on in Microsoft Entra ID Source: https://docs.nebius.com/iam/federations/configure-sso-entra-id In this tutorial, you'll learn to configure SSO in Nebius AI Cloud with [Microsoft Entra ID](https://learn.microsoft.com/en-us/entra/fundamentals/whatis). To configure SSO, you need access to two systems: * Nebius AI Cloud, where you create and configure a federation. * , where you create an application, make it available to the users for whom you configure SSO, and connect the to the federation. After the federation and are set up, users can sign in to Nebius AI Cloud by using their credentials. ## Costs This tutorial doesn't include any chargeable resources. The infrastructure you create is free of charge. ## Prerequisites 1. [Create a Microsoft Entra account](https://azure.microsoft.com/en-us/pricing/purchase-options/azure-account?icid=azurefreeaccount\&WT.mc_id=A261C142F). You can create it for free. 2. Make sure that this account has at least the [Cloud Application Administrator](https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference#cloud-application-administrator) and [User Administrator](https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference#user-administrator) roles. Otherwise, [assign them](https://learn.microsoft.com/en-us/entra/fundamentals/users-assign-role-azure-portal#assign-roles). 3. Make sure that your Nebius AI Cloud account is [added](/iam/authorization/groups/members) to the tenant group of administrators. To check this, in the [web console](https://console.nebius.com), go to  **Administration** → **IAM** → **Users**. 4. If you prefer not to use the [web console](https://console.nebius.com), prepare one of the other available Nebius AI Cloud interfaces: [Install](/cli/install) and [configure](/cli/configure) the Nebius AI Cloud CLI. [Install and configure](/terraform-provider/quickstart) the Nebius AI Cloud provider for Terraform. ## Steps ### Create an application in Microsoft Entra ID 1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com/). 2. [Create an enterprise application](https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/add-application-portal#add-an-enterprise-application): 1. In the **Browse Microsoft Entra Gallery** window, click **Create your own application**. 2. In the window that opens, specify the application name and select the option **Integrate any other application you don't find in the gallery (Non-gallery)**. 3. [Create and assign user accounts](https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/add-application-portal-assign-users) to the application. 4. [Enable SSO](https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/add-application-portal-setup-sso#enable-single-sign-on) for the application. On the **SAML-based Sign-on** page, in the **Basic SAML Configuration** section specify the following parameters: * **Identifier (Entity ID)**: . * **Reply URL (Assertion Consumer Service URL)**: . The two values use different domain names: auth.eu.nebius.com and auth.nebius.com. `federation-id` is used temporarily until you [create a federation](#create-a-federation-in-nebius-ai-cloud) and get its ID. After that, replace `federation-id` with the actual value. ### Download the application certificate from Microsoft Entra In the Microsoft Entra admin center, download an autogenerated base64 certificate. Find the certificate in the **Manage** → **Single sign-on** section, in the **Certificate (Base64)** field. For more information, see the [Microsoft Entra ID](https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/tutorial-manage-certificates-for-federated-single-sign-on#autogenerated-certificate-for-gallery-and-non-gallery-applications) documentation. ### Create a federation in Nebius AI Cloud 1. To create a federation: 1. In the sidebar, go to  **Administration** → **IAM**. 2. Click **Create entity** and select **Federation**. 3. Enable **Manual mode** and enter your federation name. 4. Specify the following parameters under **Identity provider (IdP)**: * **SSO URL**: Login URL from Microsoft Entra ID. * **Issuer**: Microsoft Entra Identifier. To get these values: 1. Open the application page in the Microsoft Entra admin center. 2. Go to the **Manage** → **Single sign-on** section. 3. Copy the values of the **Login URL** and **Microsoft Entra Identifier** fields. 5. Enter a name for your certificate. 6. Upload the certificate file that you obtained in the [previous step](#download-the-application-certificate-from-microsoft-entra) and click **Create federation**. Copy the ID of the newly created federation. 1. Run the following command: ```bash theme={null} nebius iam federation create \ --parent-id \ --name \ --user-account-auto-creation=true \ --saml-settings-sso-url \ --saml-settings-idp-issuer ``` The command contains the following parameters: * `--parent-id`: [Tenant ID](/iam/get-tenants#cli). * `--name`: The federation name. * `--user-account-auto-creation`: When the user signs in to Nebius AI Cloud via SSO, their account is automatically created in the tenant with the configured federation. * `--saml-settings-sso-url`: Login URL from Microsoft Entra ID. * `--saml-settings-idp-issuer`: Microsoft Entra Identifier. To get values for `--saml-settings-sso-url` and `--saml-settings-idp-issuer`: 1. Open the application page in the Microsoft Entra admin center. 2. Go to the **Manage** → **Single sign-on** section. 3. Copy the values of the **Login URL** and **Microsoft Entra Identifier** fields. 2. Copy and save the federation ID. It is returned in the `metadata.id` field of the command output. 1. Create the following configuration file: ```hcl theme={null} resource "nebius_iam_v1_federation" "" { name = "" parent_id = "" user_account_auto_creation = true saml_settings = { sso_url = "" idp_issuer = "" } } output "federation_id" { description = "ID of the created federation" value = nebius_iam_v1_federation..id } ``` The file contains a resource with federation settings and an output that returns the federation ID. The resource contains the following parameters: * `name`: The federation name. * `parent_id`: [Tenant ID](/iam/get-tenants). * `user_account_auto_creation`: When the user signs in to Nebius AI Cloud via SSO, their account is automatically created in the tenant with the configured federation. * `saml_settings.sso_url`: Login URL from Microsoft Entra ID. * `saml_settings.idp_issuer`: Microsoft Entra Identifier. To get values for `saml_settings.sso_url` and `saml_settings.idp_issuer`: 1. Open the application page in the Microsoft Entra admin center. 2. Go to the **Manage** → **Single sign-on** section. 3. Copy the values of the **Login URL** and **Microsoft Entra Identifier** fields. 2. Check that the configuration is correct: ```bash theme={null} terraform validate ``` 3. Apply the changes: ```bash theme={null} terraform apply ``` 4. Copy and save the federation ID. It is returned in the `terraform apply` output: ```text theme={null} Outputs: federation_id = "federation-e00*******" ``` 2. Change the SAML settings of the application in the Microsoft Entra admin center: 1. Open the application page. 2. Go to the **Manage** → **Single sign-on** section. 3. In the fields **Identifier (Entity ID)** and **Reply URL (Assertion Consumer Service URL)**, replace the `federation-id` part of the values with the copied federation ID. ### Add a certificate to the federation If you used the [web console](https://console.nebius.com) to create a federation, you can skip this part and proceed to the [next step](#log-in-to-nebius-ai-cloud). Add the certificate you obtained in the [previous step](#download-the-application-certificate-from-microsoft-entra) to the federation: 1. Prepare the `federation-cert.json` file: ```json theme={null} { "metadata": { "parent_id": "" }, "spec": { "description": "certificate for a federation", "data": "-----BEGIN CERTIFICATE-----\n\n-----END CERTIFICATE-----\n" } } ``` Specify the certificate body from the downloaded file and the federation ID. In this file, the certificate body is split into several lines. Paste it as a single line in `federation-cert.json`. 2. Apply the certificate file: ```bash theme={null} nebius iam federation-certificate create --file federation-cert.json ``` 1. Prepare a certificate manifest in the same directory where you store the `nebius_iam_v1_federation` resource: ```hcl theme={null} resource "nebius_iam_v1_federation_certificate" "certificate-for-" { parent_id = "" name = "certificate" data = < -----END CERTIFICATE----- EOT description = "certificate for a federation" depends_on = [ nebius_iam_v1_federation. ] } ``` Specify the federation name, ID and the certificate body. 2. Check that the configuration is correct: ```bash theme={null} terraform validate ``` 3. Apply the changes: ```bash theme={null} terraform apply ``` ### Log in to Nebius AI Cloud 1. Open the [Nebius AI Cloud web console](https://console.nebius.com). 2. Click **Get started with SSO**. 3. Enter the federation ID and click **Sign in**. 4. In the **Contact details** window that opens: 1. Specify your name and email. 2. Confirm that you agree with the [Nebius AI Cloud Terms of Use](/legal/terms-of-use). 3. Click **Continue**. A successful login means that you have correctly configured the federation and in Nebius AI Cloud and . ### Assign administrator rights for the new account After your first login to the new federation, a new user account is created in the tenant. To complete the setup and grant the new user account access to the platform, add it to a group with admin rights in Nebius AI Cloud: 1. Log out of your new account in the [web console](https://console.nebius.com). 2. Log in to your main Nebius AI Cloud account. 3. Go to  **Administration** → **IAM** → **Users** and [add](../authorization/groups/members) the new user to the relevant admin group. # Configuration of single sign-on in JumpCloud Source: https://docs.nebius.com/iam/federations/configure-sso-jumpcloud In this tutorial, you'll learn to configure SSO in Nebius AI Cloud with [JumpCloud](https://jumpcloud.com). To configure SSO, you need access to two systems: * Nebius AI Cloud, where you create and configure a federation. * , where you create an application, make it available to the users for whom you configure SSO, and connect the to the federation. After the federation and are set up, users can sign in to Nebius AI Cloud by using their credentials. ## Costs This tutorial doesn't include any chargeable resources. The infrastructure you create is free of charge. ## Prerequisites 1. [Create a JumpCloud account](https://console.jumpcloud.com/signup). 2. Make sure that this account has at least the [Administrator](https://jumpcloud.com/support/manage-admin-accounts) role. 3. Make sure that your Nebius AI Cloud account is [added](/iam/authorization/groups/members) to the tenant group of administrators. To check this, in the [web console](https://console.nebius.com), go to  **Administration** → **IAM** → **Users**. 4. If you prefer not to use the [web console](https://console.nebius.com), prepare one of the other available Nebius AI Cloud interfaces: [Install](/cli/install) and [configure](/cli/configure) the Nebius AI Cloud CLI. [Install and configure](/terraform-provider/quickstart) the Nebius AI Cloud provider for Terraform. ## Steps ### Create an application in JumpCloud 1. Sign in to the [JumpCloud admin portal](https://console.jumpcloud.com/login). If your data is stored in the EU, you have a different login URL: [https://console.eu.jumpcloud.com/login](https://console.eu.jumpcloud.com/login) 2. [Create and configure a custom SSO application](https://jumpcloud.com/support/sso-using-custom-saml-application-connectors#to-configure-jumpcloud): 1. Go to **Access** → **Applications** and click  **Add New Application**. 2. In the window that opens, select **Custom Application**, then select **Manage Single Sign-On (SSO)** with **Configure SSO with SAML**. 3. Enter a name for your application in the **Display Label** field. You can optionally add a description for your application and upload a logo or select a different color indicator. 4. On the **SSO** tab of your application, specify the following required parameters: * **IdP Entity ID**: Click **Copy Metadata URL** and paste the value in this field. * **SP Entity ID**: `https://auth.eu.nebius.com/saml2/rp/federation-id` * **ACS URLs**: `https://auth.nebius.com/login/saml2/provider/federation-id` `federation-id` is used temporarily until you [create a federation](#create-a-federation-in-nebius-ai-cloud) and get its ID. After that, replace `federation-id` with the actual value. * **SAMLSubject NameID**: `email` * **SAMLSubject NameID Format**: `urn:oasis:names:tc:SAML:1.0:nameid-format:unspecified` * **Signature Algorithm**: `RSA-SHA256` * **Sign**: `Response` Click **Save** to apply the changes. 3. [Create users](https://jumpcloud.com/support/add-users-to-admin-portal), then [add users to a user group](https://jumpcloud.com/support/get-started-user-groups#creating-user-groups). ### Download the application certificate from JumpCloud 1. Go to your application settings in the JumpCloud admin portal. 2. Click **Actions** → **Download Certificate** to download and save the certificate. ### Create a federation in Nebius AI Cloud 1. To create a federation: 1. In the sidebar, go to  **Administration** → **IAM**. 2. Click **Create entity** and select **Federation**. 3. Enable **Manual mode** and enter your federation name. 4. Specify the following parameters under **Identity provider (IdP)**: * **SSO URL**: Go to the **SSO** tab of your JumpCloud application settings and copy and paste the value from the **IdP URL** field. * **Issuer**: On the same tab in JumpCloud, click **Copy Metadata URL** and paste the value in this field. 5. Enter a name for your certificate. 6. Upload the certificate file that you obtained in the [previous step](#download-the-application-certificate-from-jumpcloud) and click **Create federation**. Copy the ID of the newly created federation. 1. Run the following command: ```bash theme={null} nebius iam federation create \ --parent-id \ --name \ --user-account-auto-creation=true \ --saml-settings-sso-url \ --saml-settings-idp-issuer ``` The command contains the following parameters: * `--parent-id`: [Tenant ID](/iam/get-tenants#cli). * `--name`: The federation name. * `--user-account-auto-creation`: When the user signs in to Nebius AI Cloud via SSO, their account is automatically created in the tenant with the configured federation. * `--saml-settings-sso-url`: Login URL from JumpCloud. * `--saml-settings-idp-issuer`: JumpCloud identifier. To get values for `--saml-settings-sso-url` and `--saml-settings-idp-issuer`: 1. Open the application settings page in the JumpCloud admin portal. 2. Go to the **SSO** tab and copy the values of the **IdP URL** and **IdP Entity ID** fields. 2. Copy and save the federation ID. It is returned in the `metadata.id` field of the command output. 1. Create the following configuration file: ```hcl theme={null} resource "nebius_iam_v1_federation" "" { name = "" parent_id = "" user_account_auto_creation = true saml_settings = { sso_url = "" idp_issuer = "" } } output "federation_id" { description = "ID of the created federation" value = nebius_iam_v1_federation..id } ``` The file contains a resource with federation settings and an output that returns the federation ID. The resource contains the following parameters: * `name`: The federation name. * `parent_id`: [Tenant ID](/iam/get-tenants). * `user_account_auto_creation`: When the user signs in to Nebius AI Cloud via SSO, their account is automatically created in the tenant with the configured federation. * `saml_settings.sso_url`: Login URL from JumpCloud. * `saml_settings.idp_issuer`: JumpCloud identifier. To get values for `saml_settings.sso_url` and `saml_settings.idp_issuer`: 1. Open the application settings page in the JumpCloud admin portal. 2. Go to the **SSO** tab and copy the values of the **IdP URL** and **IdP Entity ID** fields. 2. Check that the configuration is correct: ```bash theme={null} terraform validate ``` 3. Apply the changes: ```bash theme={null} terraform apply ``` 4. Copy and save the federation ID. It is returned in the `terraform apply` output: ```text theme={null} Outputs: federation_id = "federation-e00*******" ``` 2. Update the SSO settings of your application in the JumpCloud admin portal: 1. Open the application settings page and go to the **SSO** tab. 2. In the fields **SP Entity ID** and **ACS URLs**, replace the `federation-id` part of the values with the copied federation ID. ### Add a certificate to the federation If you used the [web console](https://console.nebius.com) to create a federation, you can skip this part and proceed to the [next step](#log-in-to-nebius-ai-cloud). Add the certificate you obtained in the [previous step](#download-the-application-certificate-from-jumpcloud) to the federation: 1. Prepare the `federation-cert.json` file: ```json theme={null} { "metadata": { "parent_id": "" }, "spec": { "description": "certificate for a federation", "data": "-----BEGIN CERTIFICATE-----\n\n-----END CERTIFICATE-----\n" } } ``` Specify the certificate body from the downloaded file and the federation ID. In this file, the certificate body is split into several lines. Paste it as a single line in `federation-cert.json`. 2. Apply the certificate file: ```bash theme={null} nebius iam federation-certificate create --file federation-cert.json ``` 1. Prepare a certificate manifest in the same directory where you store the `nebius_iam_v1_federation` resource: ```hcl theme={null} resource "nebius_iam_v1_federation_certificate" "certificate-for-" { parent_id = "" name = "certificate" data = < -----END CERTIFICATE----- EOT description = "certificate for a federation" depends_on = [ nebius_iam_v1_federation. ] } ``` Specify the federation name, ID and the certificate body. 2. Check that the configuration is correct: ```bash theme={null} terraform validate ``` 3. Apply the changes: ```bash theme={null} terraform apply ``` ### Log in to Nebius AI Cloud 1. Open the [Nebius AI Cloud web console](https://console.nebius.com). 2. Click **Get started with SSO**. 3. Enter the federation ID and click **Sign in**. 4. In the **Contact details** window that opens: 1. Specify your name and email. 2. Confirm that you agree with the [Nebius AI Cloud Terms of Use](/legal/terms-of-use). 3. Click **Continue**. A successful login means that you have correctly configured the federation and in Nebius AI Cloud and . ### Assign administrator rights for the new account After your first login to the new federation, a new user account is created in the tenant. To complete the setup and grant the new user account access to the platform, add it to a group with admin rights in Nebius AI Cloud: 1. Log out of your new account in the [web console](https://console.nebius.com). 2. Log in to your main Nebius AI Cloud account. 3. Go to  **Administration** → **IAM** → **Users** and [add](../authorization/groups/members) the new user to the relevant admin group. # Configuration of single sign-on in Keycloak Source: https://docs.nebius.com/iam/federations/configure-sso-keycloak In this tutorial, you'll learn to configure SSO in Nebius AI Cloud with [Keycloak](https://www.keycloak.org). To configure SSO, you need access to two systems: * Nebius AI Cloud, where you create and configure a federation. * , where you create an application, make it available to the users for whom you configure SSO, and connect the to the federation. After the federation and are set up, users can sign in to Nebius AI Cloud by using their credentials. ## Costs This tutorial doesn't include any chargeable resources. The infrastructure you create is free of charge. ## Prerequisites 1. [Deploy and configure a Keycloak server](https://www.keycloak.org/guides#getting-started). 2. Make sure that your Nebius AI Cloud account is [added](/iam/authorization/groups/members) to the tenant group of administrators. To check this, in the [web console](https://console.nebius.com), go to  **Administration** → **IAM** → **Users**. 3. If you prefer not to use the [web console](https://console.nebius.com), prepare one of the other available Nebius AI Cloud interfaces: [Install](/cli/install) and [configure](/cli/configure) the Nebius AI Cloud CLI. [Install and configure](/terraform-provider/quickstart) the Nebius AI Cloud provider for Terraform. ## Steps ### Create a client in Keycloak 1. Open the Keycloak admin console. 2. [Create a client](https://www.keycloak.org/docs/latest/server_admin/index.html#_client-saml-configuration): 1. Go to **Clients** and click **Create client**. 2. On the **General settings** step, specify the following required parameters: * **Client type**: `SAML` * **Client ID**: `https://auth.eu.nebius.com/saml2/rp/federation-id` Click **Next** to proceed to the **Login settings** step and specify the following parameters: * **Valid redirect URIs**: `https://auth.nebius.com/login/saml2/provider/federation-id` `federation-id` is used temporarily until you [create a federation](#create-a-federation-in-nebius-ai-cloud) and get its ID. After that, replace `federation-id` with the actual value. Click **Save** to create the client. 3. Open the newly created client, go to the **SAML capabilities** section on the **Settings** tab and specify the following parameters: * **Force POST binding**: `On` * **Include AuthnStatement**: `On` 4. In the **Signature and Encryption** section, specify the following parameters: * **Sign documents**: `On` * **Signature algorithm**: `RSA_SHA256` ### Download the SAML metadata file from Keycloak 1. Go to the **Realm settings** section in the Keycloak admin console. 2. On the **General** tab, find the **Endpoints** section and click **SAML 2.0 Identity Provider Metadata**. 3. In the browser tab that opens, save the XML file with metadata (for example, by using **Command** + **S** on macOS or **Ctrl** + **S** on Windows). ### Create a federation in Nebius AI Cloud 1. To create a federation: 1. In the sidebar, go to  **Administration** → **IAM**. 2. Click **Create entity** and select **Federation**. 3. Enter your federation name and click **Upload file**. 4. Select the XML file you saved in the [previous step](#download-the-saml-metadata-file-from-keycloak) and click **Continue**. 5. Enter a name for your certificate in the **Certificates** section and click **Create federation**. Copy the ID of the newly created federation. 1. Run the following command: ```bash theme={null} nebius iam federation create \ --parent-id \ --name \ --user-account-auto-creation=true \ --saml-settings-sso-url \ --saml-settings-idp-issuer ``` The command contains the following parameters: * `--parent-id`: [Tenant ID](/iam/get-tenants#cli). * `--name`: The federation name. * `--user-account-auto-creation`: When the user signs in to Nebius AI Cloud via SSO, their account is automatically created in the tenant with the configured federation. * `--saml-settings-sso-url`: Keycloak login URL. * `--saml-settings-idp-issuer`: Keycloak identifier. To get values for `--saml-settings-sso-url` and `--saml-settings-idp-issuer`: 1. Open the XML file with metadata that you saved in the [previous step](#download-the-saml-metadata-file-from-keycloak). 2. In the `EntityDescriptor` element, find the `entityID` attribute and use its value for `--saml-settings-idp-issuer`. 3. In one of the `SingleSignOnService` elements, find the `Location` parameter and use its value for `--saml-settings-sso-url`. 2. Copy and save the federation ID. It is returned in the `metadata.id` field of the command output. 1. Create the following configuration file: ```hcl theme={null} resource "nebius_iam_v1_federation" "" { name = "" parent_id = "" user_account_auto_creation = true saml_settings = { sso_url = "" idp_issuer = "" } } output "federation_id" { description = "ID of the created federation" value = nebius_iam_v1_federation..id } ``` The file contains a resource with federation settings and an output that returns the federation ID. The resource contains the following parameters: * `name`: The federation name. * `parent_id`: [Tenant ID](/iam/get-tenants). * `user_account_auto_creation`: When the user signs in to Nebius AI Cloud via SSO, their account is automatically created in the tenant with the configured federation. * `saml_settings.sso_url`: Keycloak login URL. * `saml_settings.idp_issuer`: Keycloak identifier. To get values for `saml_settings.sso_url` and `saml_settings.idp_issuer`: 1. Open the XML file with metadata that you saved in the [previous step](#download-the-saml-metadata-file-from-keycloak). 2. In the `EntityDescriptor` element, find the `entityID` attribute and use its value for `saml_settings.idp_issuer`. 3. In one of the `SingleSignOnService` elements, find the `Location` parameter and use its value for `saml_settings.sso_url`. 2. Check that the configuration is correct: ```bash theme={null} terraform validate ``` 3. Apply the changes: ```bash theme={null} terraform apply ``` 4. Copy and save the federation ID. It is returned in the `terraform apply` output: ```text theme={null} Outputs: federation_id = "federation-e00*******" ``` 2. Update the SSO settings of your client in the Keycloak admin console: 1. Go to **Clients** and open your client page. 2. On the **Settings** tab, find the **Client ID** and **Valid redirect URIs** fields and replace the `federation-id` part of the values with the copied federation ID. ### Add a certificate to the federation If you used the [web console](https://console.nebius.com) to create a federation, you can skip this part and proceed to the [next step](#log-in-to-nebius-ai-cloud). Add the certificate from the metadata file you obtained in the [previous step](#download-the-saml-metadata-file-from-keycloak) to the federation: 1. Prepare the `federation-cert.json` file: ```json theme={null} { "metadata": { "parent_id": "" }, "spec": { "description": "certificate for a federation", "data": "-----BEGIN CERTIFICATE-----\n\n-----END CERTIFICATE-----\n" } } ``` Specify the federation ID and the certificate body from the downloaded XML file. In this file, the certificate body is stored in the `X509Certificate` element. Paste it as a single line to `federation-cert.json`. 2. Apply the certificate file: ```bash theme={null} nebius iam federation-certificate create --file federation-cert.json ``` 1. Prepare the certificate file in the same directory where you [store](#create-a-federation-in-nebius-ai-cloud) the `nebius_iam_v1_federation` resource: ```hcl theme={null} resource "nebius_iam_v1_federation_certificate" "certificate-for-" { parent_id = "" name = "certificate" data = < -----END CERTIFICATE----- EOT description = "certificate for a federation" depends_on = [ nebius_iam_v1_federation. ] } ``` Specify the following: * Federation name * Federation ID * Certificate body from the downloaded XML file In this file, the certificate body is stored in the `X509Certificate` element. 2. Check that the configuration is correct: ```bash theme={null} terraform validate ``` 3. Apply the changes: ```bash theme={null} terraform apply ``` ### Log in to Nebius AI Cloud 1. Open the [Nebius AI Cloud web console](https://console.nebius.com). 2. Click **Get started with SSO**. 3. Enter the federation ID and click **Sign in**. 4. In the **Contact details** window that opens: 1. Specify your name and email. 2. Confirm that you agree with the [Nebius AI Cloud Terms of Use](/legal/terms-of-use). 3. Click **Continue**. A successful login means that you have correctly configured the federation and in Nebius AI Cloud and . ### Assign administrator rights for the new account After your first login to the new federation, a new user account is created in the tenant. To complete the setup and grant the new user account access to the platform, add it to a group with admin rights in Nebius AI Cloud: 1. Log out of your new account in the [web console](https://console.nebius.com). 2. Log in to your main Nebius AI Cloud account. 3. Go to  **Administration** → **IAM** → **Users** and [add](../authorization/groups/members) the new user to the relevant admin group. # Configuration of single sign-on in Okta Source: https://docs.nebius.com/iam/federations/configure-sso-okta In this tutorial, you'll learn to configure SSO in Nebius AI Cloud with [Okta](https://www.okta.com/). To configure SSO, you need access to two systems: * Nebius AI Cloud, where you create and configure a federation. * , where you create an application, make it available to the users for whom you configure SSO, and connect the to the federation. After the federation and are set up, users can sign in to Nebius AI Cloud by using their credentials. ## Costs This tutorial doesn't include any chargeable resources. The infrastructure you create is free of charge. ## Prerequisites 1. [Create an Okta account](https://www.okta.com/free-trial/). 2. Make sure that your Nebius AI Cloud account is [added](/iam/authorization/groups/members) to the tenant group of administrators. To check this, in the [web console](https://console.nebius.com), go to  **Administration** → **IAM** → **Users**. 3. If you prefer not to use the [web console](https://console.nebius.com), prepare one of the other available Nebius AI Cloud interfaces: [Install](/cli/install) and [configure](/cli/configure) the Nebius AI Cloud CLI. [Install and configure](/terraform-provider/quickstart) the Nebius AI Cloud provider for Terraform. ## Steps ### Create an application in Okta 1. Sign in to the Okta admin console. 2. [Create and configure a new application](https://help.okta.com/oie/en-us/content/topics/apps/apps_app_integration_wizard_saml.htm): 1. Go to **Applications** → **Applications** and click **Create App Integration**. 2. In the window that opens, select **SAML 2.0** and click **Next**. 3. On the **General settings** step, enter a name in the **App name** field. You can optionally upload a logo for your app. 4. Click **Next** to proceed to the **Configure SAML** step and specify the following parameters: * **Single sign-on URL**: `https://auth.nebius.com/login/saml2/provider/federation-id` * **Audience URI (SP Entity ID)**: `https://auth.eu.nebius.com/saml2/rp/federation-id` * **Name ID format**: `Unspecified` * **Application username**: `Okta username` `federation-id` is used temporarily until you [create a federation](#create-a-federation-in-nebius-ai-cloud) and get its ID. After that, replace `federation-id` with the actual value. 5. Click **Next** to proceed to the **Feedback** step and select the **This is an internal app that we have created** checkbox next to **App type**. 6. Click **Finish** to create the application. 3. [Create users](https://help.okta.com/oie/en-us/content/topics/users-groups-profiles/usgp-add-users.htm), [assign users to a group](https://help.okta.com/oie/en-us/content/topics/users-groups-profiles/usgp-assign-group-people.htm) and then [assign the group to your application](https://help.okta.com/oie/en-us/content/topics/users-groups-profiles/usgp-assign-app-group.htm). ### Download the IdP metadata file from Okta 1. Go to your application page in the Okta admin console. 2. Switch to the **Sign On** tab and find the **SAML Signing Certificates** section. 3. Click **Actions** → **View IdP metadata** next to the currently active certificate. If there are no active certificates, click **Generate new certificate** to create one. 4. On the browser tab that opens, save the XML file with metadata (for example, by using **Command** + **S** on macOS or **Ctrl** + **S** on Windows). To download the certificate without metadata, use **Actions** → **Download certificate**. ### Create a federation in Nebius AI Cloud 1. To create a federation: 1. In the sidebar, go to  **Administration** → **IAM**. 2. Click **Create entity** and select **Federation**. 3. Enter your federation name and click **Upload file**. 4. Select the XML file you saved in the [previous step](#download-the-idp-metadata-file-from-okta) and click **Continue**. 5. Enter a name for your certificate in the **Certificates** section and click **Create federation**. Copy the ID of the newly created federation. 1. Run the following command: ```bash theme={null} nebius iam federation create \ --parent-id \ --name \ --user-account-auto-creation=true \ --saml-settings-sso-url \ --saml-settings-idp-issuer ``` The command contains the following parameters: * `--parent-id`: The ID of the tenant where you are going to create a federation. To get the tenant ID, go to the [web console](https://console.nebius.com) and expand the top-left list of tenants. Next to the tenant’s name, click → **Copy tenant ID**. * `--name`: The federation name. * `--user-account-auto-creation`: When the user signs in to Nebius AI Cloud via SSO, their account is automatically created in the tenant with the configured federation. * `--saml-settings-sso-url`: Okta login URL. * `--saml-settings-idp-issuer`: Okta identifier. To get values for `--saml-settings-sso-url` and `--saml-settings-idp-issuer`: 1. Open the XML file with metadata that you saved in the [previous step](#download-the-idp-metadata-file-from-okta). 2. In the `EntityDescriptor` element, find the `entityID` attribute and use its value for `--saml-settings-idp-issuer`. 3. In one of the `SingleSignOnService` elements, find the `Location` parameter and use its value for `--saml-settings-sso-url`. 2. Copy and save the federation ID. It is returned in the `metadata.id` field of the command output. 1. Create the following configuration file: ```hcl theme={null} resource "nebius_iam_v1_federation" "" { name = "" parent_id = "" user_account_auto_creation = true saml_settings = { sso_url = "" idp_issuer = "" } } output "federation_id" { description = "ID of the created federation" value = nebius_iam_v1_federation..id } ``` The file contains a resource with federation settings and an output that returns the federation ID. The resource contains the following parameters: * `name`: The federation name. * `parent_id`: The ID of the tenant where you are going to create a federation. To get the tenant ID, go to the [web console](https://console.nebius.com) and expand the top-left list of tenants. Next to the tenant’s name, click → **Copy tenant ID**. * `user_account_auto_creation`: When the user signs in to Nebius AI Cloud via SSO, their account is automatically created in the tenant with the configured federation. * `saml_settings.sso_url`: Okta login URL. * `saml_settings.idp_issuer`: Okta identifier. To get values for `saml_settings.sso_url` and `saml_settings.idp_issuer`: 1. Open the XML file with metadata that you saved in the [previous step](#download-the-idp-metadata-file-from-okta). 2. In the `EntityDescriptor` element, find the `entityID` attribute and use its value for `saml_settings.idp_issuer`. 3. In one of the `SingleSignOnService` elements, find the `Location` parameter and use its value for `saml_settings.sso_url`. 2. Check that the configuration is correct: ```bash theme={null} terraform validate ``` 3. Apply the changes: ```bash theme={null} terraform apply ``` 4. Copy and save the federation ID. It is returned in the `terraform apply` output: ```text theme={null} Outputs: federation_id = "federation-e00*******" ``` 2. Update the SAML settings of your application in the Okta admin console: 1. Open the application page and go to the **General** tab. 2. In the **SAML Settings** section, click **Edit** and go to the **Configure SAML** step. 3. In the fields **Single sign-on URL** and **Audience URI (SP Entity ID)**, replace the `federation-id` part of the values with the copied federation ID. ### Add a certificate to the federation If you used the [web console](https://console.nebius.com) to create a federation, you can skip this part and proceed to the [next step](#log-in-to-nebius-ai-cloud). Add the certificate from the metadata file you obtained in the [previous step](#download-the-idp-metadata-file-from-okta) to the federation: 1. Prepare the `federation-cert.json` file: ```json theme={null} { "metadata": { "parent_id": "" }, "spec": { "description": "certificate for a federation", "data": "-----BEGIN CERTIFICATE-----\n\n-----END CERTIFICATE-----\n" } } ``` Specify the federation ID and the certificate body from the downloaded XML file. In this file, the certificate body is stored in the `X509Certificate` element. Paste it as a single line to `federation-cert.json`. 2. Apply the certificate file: ```bash theme={null} nebius iam federation-certificate create --file federation-cert.json ``` 1. Prepare the certificate file in the same directory where you [store](#create-a-federation-in-nebius-ai-cloud) the `nebius_iam_v1_federation` resource: ```hcl theme={null} resource "nebius_iam_v1_federation_certificate" "certificate-for-" { parent_id = "" name = "certificate" data = < -----END CERTIFICATE----- EOT description = "certificate for a federation" depends_on = [ nebius_iam_v1_federation. ] } ``` Specify the following: * Federation name * Federation ID * Certificate body from the downloaded XML file In this file, the certificate body is stored in the `X509Certificate` element. 2. Check that the configuration is correct: ```bash theme={null} terraform validate ``` 3. Apply the changes: ```bash theme={null} terraform apply ``` ### Log in to Nebius AI Cloud 1. Open the [Nebius AI Cloud web console](https://console.nebius.com). 2. Click **Get started with SSO**. 3. Enter the federation ID and click **Sign in**. 4. In the **Contact details** window that opens: 1. Specify your name and email. 2. Confirm that you agree with the [Nebius AI Cloud Terms of Use](/legal/terms-of-use). 3. Click **Continue**. A successful login means that you have correctly configured the federation and in Nebius AI Cloud and . ### Assign administrator rights for the new account After your first login to the new federation, a new user account is created in the tenant. To complete the setup and grant the new user account access to the platform, add it to a group with admin rights in Nebius AI Cloud: 1. Log out of your new account in the [web console](https://console.nebius.com). 2. Log in to your main Nebius AI Cloud account. 3. Go to  **Administration** → **IAM** → **Users** and [add](../authorization/groups/members) the new user to the relevant admin group. # How to manage federations in Nebius AI Cloud Source: https://docs.nebius.com/iam/federations/manage A [federation](/iam/overview#federations) connects your identity provider (IdP) to Nebius AI Cloud, allowing users from your organization to log in with [single sign-on (SSO)](/iam/federations/saml-sso). In Nebius AI Cloud, you can create, activate and deactivate federations, change their settings, and upload or delete attached certificates. ## Prerequisites 1. Make sure you are in a [group](/iam/authorization/groups/index) that has the `admin` role within your tenant or project; for example, the default `admins` group. You can check this in the [Administration → IAM](https://console.nebius.com/iam) section of the web console. 2. Make sure that you have access to your IdP admin portal and can get the SAML application metadata (login URL, identifier, certificate) required to create a federation. ## Creating a federation 1. In the [web console](https://console.nebius.com), go to  **Administration** → **IAM**. 2. Go to the **Federations** tab. 3. Click **Create entity** → **Federation**. 4. Specify the IdP settings: * If you have an XML file with SAML metadata: 1. Enter a federation name. 2. Click **Upload file** and select the XML file with the SAML metadata from your IdP, then click **Continue**. 3. On the page that opens, enter a name for the certificate in the **Certificates** section. * If you don't have an XML file, enter the SAML metadata manually: 1. Enable **Manual mode** and enter a federation name. 2. Under **Identity provider (IdP)**, specify the **SSO URL** and **Issuer** parameters from your IdP, then click **Continue**. 3. On the page that opens, enter a certificate name, then either upload the PEM certificate file, or copy and paste the certificate body into the field. 5. Click **Create federation**. 1. [Install and configure](/cli/quickstart) the Nebius AI Cloud CLI. 2. To create a federation, run the following command: ```bash theme={null} nebius iam federation create \ --name \ --parent-id \ --saml-settings-sso-url \ --saml-settings-idp-issuer ``` The command contains the following parameters: * `--name`: Federation name. * `--parent-id`: [ID of the tenant](/iam/get-tenants#cli) in which you create the federation. * `--saml-settings-sso-url`: URL of the page that opens when a federated user logs in. For example, Microsoft Entra ID calls it **Login URL**. * `--saml-settings-idp-issuer`: Identifier of your SAML application. For example, Microsoft Entra ID calls it **Microsoft Entra Identifier**. 3. Copy and save the federation ID. It is returned in the `metadata.id` parameter of the command output. 4. After you create a federation, attach a certificate to it. Prepare the `federation-cert.json` file: ```json theme={null} { "metadata": { "parent_id": "", "name": "" }, "spec": { "description": "certificate for a federation", "data": "-----BEGIN CERTIFICATE-----\n\n-----END CERTIFICATE-----\n" } } ``` If the certificate body is split into several lines in the source, paste the body as a single line in `federation-cert.json`. 5. Apply the certificate file: ```bash theme={null} nebius iam federation-certificate create --file federation-cert.json ``` 1. [Install and configure](/terraform-provider/quickstart) the Nebius AI Cloud provider for Terraform. 2. Create a federation: 1. Prepare the following configuration file: ```hcl theme={null} resource "nebius_iam_v1_federation" "" { name = "" parent_id = "" saml_settings = { sso_url = "" idp_issuer = "" } } ``` The file contains the following parameters: * `name`: Federation name. * `parent_id`: [ID of the tenant](/iam/get-tenants#cli) in which you create the federation. * `saml_settings.sso_url`: URL of the page that opens when a federated user logs in. For example, Microsoft Entra ID calls it **Login URL**. * `saml_settings.idp_issuer`: Identifier of your SAML application. For example, Microsoft Entra ID calls it **Microsoft Entra Identifier**. 2. Check that the configuration is correct: ```bash theme={null} terraform validate ``` 3. Apply the changes: ```bash theme={null} terraform apply ``` 3. After you create a federation, attach a certificate to it: 1. Prepare a certificate manifest in the same file where you store the `nebius_iam_v1_federation` resource: ```hcl theme={null} resource "nebius_iam_v1_federation_certificate" "certificate_for_" { parent_id = nebius_iam_v1_federation..id name = "certificate" data = < -----END CERTIFICATE----- EOT description = "certificate for a federation" depends_on = [ nebius_iam_v1_federation. ] } ``` Specify the federation name, ID and the certificate body. 2. Check that the configuration is correct: ```bash theme={null} terraform validate ``` 3. Apply the changes: ```bash theme={null} terraform apply ``` For more information, see examples for specific IdPs in [Configuring SSO with identity providers](/iam/federations/saml-sso). ## Changing federation settings 1. In the sidebar, go to  **Administration** → **IAM**. 2. Go to the **Federations** tab. 3. Next to the federation, click  → **Configure**. 4. Update federation settings: * **Name**: Federation name. * **SSO URL**: Login URL from your IdP. * **Issuer**: Your IdP identifier string. 5. Click **Save changes** to apply the new settings. To change federation settings, run the following command: ```bash theme={null} nebius iam federation update \ --name \ --saml-settings-sso-url \ --saml-settings-idp-issuer ``` You can change the following parameters: * `--name`: Federation name. * `--saml-settings-sso-url`: URL of the page that opens when a federated user logs in. For example, Microsoft Entra ID calls it **Login URL**. * `--saml-settings-idp-issuer`: Identifier of your SAML application. For example, Microsoft Entra ID calls it **Microsoft Entra Identifier**. ```bash theme={null} nebius iam federation list --parent-id ``` The ID is specified in the `.items.metadata.id` parameter. 1. Modify the manifest with the deployed federation: ```hcl theme={null} resource "nebius_iam_v1_federation" "" { name = "" saml_settings = { sso_url = "" idp_issuer = "" } ... } ``` You can change the following parameters: * `name`: Federation name. * `saml_settings.sso_url`: URL of the page that opens when a federated user logs in. For example, Microsoft Entra ID calls it **Login URL**. * `saml_settings.idp_issuer`: Identifier of your SAML application. For example, Microsoft Entra ID calls it **Microsoft Entra Identifier**. 2. Check that the configuration is correct: ```bash theme={null} terraform validate ``` 3. Apply the changes: ```bash theme={null} terraform apply ``` ## Changing federation certificates 1. In the sidebar, go to  **Administration** → **IAM**. 2. Go to the **Federations** tab and open the federation whose certificate you want to change. 3. On the **Certificates** tab, rename or delete a certificate. A federation cannot function correctly without at least one valid certificate. If you need to delete the only certificate attached to the federation, be sure to replace it with a new one. 4. To add a new certificate: 1. Click **Attach certificate**. 2. Enter a certificate name, then either upload the PEM certificate file, or copy and paste the certificate body into the field. 3. Click **Attach certificates**. When changing federation certificates, you can rename, add or delete a certificate. * Rename a certificate: ```bash theme={null} nebius iam federation-certificate update --name ``` * Delete a certificate: ```bash theme={null} nebius iam federation-certificate delete ``` A federation cannot function correctly without at least one valid certificate. If you need to delete the only certificate attached to the federation, be sure to replace it with a new one. For information about adding a new certificate, see [Creating a federation](#creating-a-federation). ```bash theme={null} nebius iam federation-certificate list-by-federation --federation-id ``` The ID is specified in the `.items.metadata.id` parameter. When changing federation certificates, you can rename, add or delete a certificate: * To rename a certificate, update the `name` parameter in the `nebius_iam_v1_federation_certificate` resource. * To delete a certificate, remove the `nebius_iam_v1_federation_certificate` resource from the configuration file. A federation cannot function correctly without at least one valid certificate. If you need to delete the only certificate attached to the federation, be sure to replace it with a new one. For information about adding a new certificate, see [Creating a federation](#creating-a-federation). ## Deactivating a federation When a federation is inactive, users who authenticate through that federation will not be able to sign in to Nebius AI Cloud until it's reactivated. 1. In the sidebar, go to  **Administration** → **IAM**. 2. Go to the **Federations** tab. 3. Next to the federation you want to deactivate, click  → **Deactivate**. To reactivate the federation, click  → **Activate**. To deactivate a federation, run the following command: ```bash theme={null} nebius iam federation deactivate --federation-id ``` To activate a federation again, run the following command: ```bash theme={null} nebius iam federation activate --federation-id ``` A federation is active by default after you create it. Run the `activate` command only if you deactivated the federation earlier. ```bash theme={null} nebius iam federation list --parent-id ``` The ID is specified in the `.items.metadata.id` parameter. # Single sign-on in Nebius AI Cloud Source: https://docs.nebius.com/iam/federations/saml-sso Nebius AI Cloud supports single sign-on (SSO) functionality to access the [web console](https://console.nebius.com) through a single identity provider. With SSO, you can unite users in a [federation](/iam/overview#federations) and allow them to log in to and work with Nebius AI Cloud within one [tenant](/iam/overview#tenants). You can set up SSO in Nebius AI Cloud with the following identity providers: * [Microsoft Entra ID](/iam/federations/configure-sso-entra-id) * [JumpCloud](/iam/federations/configure-sso-jumpcloud) * [Okta](/iam/federations/configure-sso-okta) * [Keycloak](/iam/federations/configure-sso-keycloak) # Getting a tenant ID in Nebius AI Cloud Source: https://docs.nebius.com/iam/get-tenants A [tenant](/iam/overview#tenants) in Nebius AI Cloud has a name and ID. For some actions, you need to provide your tenant ID. ## Prerequisites You do not need to complete any prerequisites if you use the web console. To get a tenant ID using the CLI, [install](/cli/install) and [configure](/cli/configure) the Nebius AI Cloud CLI. ## How to get a tenant ID To get the tenant ID: 1. In the [web console](https://console.nebius.com), expand the top-left list of tenants. 2. Next to the tenant name, click → **Copy tenant ID**. Run the following command: ```bash theme={null} nebius iam whoami --format json \ | jq -r '.user_profile.tenants[0].tenant_id' ``` The output contains the tenant ID. If you have multiple tenants, the command will return the ID of your first tenant as shown in the [web console](https://console.nebius.com) when you expand the top-left list of tenants. To get the ID of another tenant, change the array index. For example, to get the second tenant: ```bash theme={null} nebius iam whoami --format json \ | jq -r '.user_profile.tenants[1].tenant_id' ``` Alternatively, list all tenants that you have access to: ```bash theme={null} nebius iam tenant list ``` In the output, find the `metadata.id` value to get the tenant ID. # Identity and Access Management Source: https://docs.nebius.com/iam/index Identity and Access Management in Nebius AI Cloud helps you centrally manage user and service account access to resources. It ensures that only users and service accounts with specific permissions can interact with your resources. # How to authenticate in Nebius AI Cloud interfaces Source: https://docs.nebius.com/iam/log-in After you [sign up for Nebius AI Cloud](/signup-billing/sign-up), you can work with your resources by using the web console, CLI, Terraform provider or API. To get started with the CLI, Terraform and the API, create an [access token](/iam/authorization/access-tokens) for authentication. ## How to sign in to the web console 1. Open the [Nebius AI Cloud web console](https://console.nebius.com). 2. Select the Google, GitHub or Microsoft account that you used to sign up. Alternatively, click **Get started with SSO** and specify your [federation ID](/iam/overview#federations). ## How to get started with the CLI [Install](/cli/install) the Nebius AI Cloud CLI and then [configure it](/cli/configure). ## How to work with Terraform Follow the [Quickstart](/terraform-provider/quickstart) guide to install and configure the Nebius AI Cloud Terraform provider. ## How to authenticate in the API Authentication in the API depends on whether you use a service account or a user account. In both cases, you create an access token and include it in the `Authorization` HTTP header. For more information, follow the [authentication guide](/grpc-api/auth). # Managing projects in Nebius AI Cloud Source: https://docs.nebius.com/iam/manage-projects Resources in Nebius AI Cloud are organized and managed within projects. When a tenant is created, a project per [region](/overview/regions) is created by default. You can additionally [create](#how-to-create-a-project) projects and [edit](#how-to-edit-a-project) existing ones. ## Prerequisites The prerequisites for this guide depend on the interface that you use. Make sure you are in a [group](/iam/authorization/groups/index) that has the `admin` role within your tenant or project; for example, the default `admins` group. You can check this in the [Administration → IAM](https://console.nebius.com/iam) section of the web console. 1. Make sure you are in a [group](/iam/authorization/groups/index) that has the `admin` role within your tenant or project; for example, the default `admins` group. You can check this in the [Administration → IAM](https://console.nebius.com/iam) section of the web console. 2. [Install](/cli/install) and [configure](/cli/configure) the Nebius AI Cloud CLI. **Use one profile per project** Create a separate Nebius AI Cloud CLI profile for each project to ensure correct [region](/overview/regions)-specific configuration. [Install and configure](/terraform-provider/quickstart) the Nebius AI Cloud provider for Terraform. ## How to create a project 1. In the [web console](https://console.nebius.com), expand the top-left list of projects. 2. Click  **Create project**. 3. In the project creation form, specify the project settings: * Select the tenant and region. You cannot change them later. * Enter the name of the new project. The name should be unique in the tenant. You can [edit](#how-to-edit-a-project) it later. 4. Click **Create project**. Create a project: ```bash theme={null} nebius iam v2 project create \ --parent-id \ --name \ --region ``` The command contains the following parameters: * `--parent-id`: [Tenant ID](/iam/get-tenants#cli). * `--name`: Name of the project. * `--region`: Name of the [region](/overview/regions) where the project is created. You can only create a project via the Nebius AI Cloud CLI in [public regions](/overview/regions#public-regions). If you try to create a project in a private region, you receive an error. 1. Create the following configuration file: ```hcl theme={null} resource "nebius_iam_v2_project" "" { name = "" parent_id = "" region = "" } ``` The resource contains the following parameters: * `parent_id`: [Tenant ID](/iam/get-tenants). * `name`: Name of the project. * `region`: Name of the [region](/overview/regions) where the project is created. 2. Check that the configuration is correct: ```bash theme={null} terraform validate ``` 3. Apply the changes: ```bash theme={null} terraform apply ``` ## How to get a project ID To get the ID of a project: 1. In the [web console](https://console.nebius.com), expand the top-left list of projects. 2. Next to the project name, click → **Copy project ID**. Run the following command: ```bash theme={null} nebius iam v2 project get-by-name --parent-id --name ``` In this command, specify the parameters: * `--parent-id`: ID of the tenant where the project is created. * `--name`: Name of the project. If you do not know the exact name of the project, use the `list` command to view the list of all projects of your tenant: ```bash theme={null} nebius iam v2 project list --parent-id ``` In your Terraform working directory, get the attributes of your project using its name: ```bash theme={null} terraform state show nebius_iam_v2_project. ``` The `id` attribute in the output contains the project ID. If you do not know the exact name of the project, list all the resources from your Terraform state file (`.tfstate`) to find the project name: ```bash theme={null} terraform state list ``` ## How to edit a project For an existing project, you can only edit the name. You cannot move a project to another region or tenant. To edit the project name: 1. In the [web console](https://console.nebius.com), expand the top-left list of projects. 2. In the line of the required project, click → **Configure**. 3. Enter a new value in the **Name** field. 4. Click **Save**. Run the following command: ```bash theme={null} nebius iam v2 project edit \ --id [--editor ' --wait'] \ [--format ] ``` In this command, specify the parameters: * `--id`: ID of the project. * `--editor` (optional): Editor name. It can be any editor installed on your machine, such as `nano` or `emacs`. To check which of the popular editors are installed, run the following command: ```bash theme={null} which code emacs gedit micro nano subl vi vim ``` For an editor that opens in a separate window, add the `--wait` parameter to its name to ensure that the command waits until you close the editor. * `--format` (optional): Data format. Only `json` and `yaml` values are accepted. By default, YAML format is used. The editor you choose opens and shows the current configuration of the project. Change the project name and save the configuration. When you exit the editor, the Nebius AI Cloud CLI checks if the data is valid and updates the resource. 1. In the configuration file, edit the `name` argument of the corresponding `nebius_iam_v2_project` resource. 2. Check that the configuration is correct: ```bash theme={null} terraform validate ``` 3. Apply the changes: ```bash theme={null} terraform apply ``` ## How to delete a project Before you delete a project, make sure to remove all resources from it. You can only delete an empty project. 1. In the [web console](https://console.nebius.com), expand the top-left list of projects. 2. In the line of the required project, click → **Delete project**. Delete the project: ```bash theme={null} nebius iam v2 project delete --id ``` 1. Remove the corresponding `nebius_iam_v2_project` resource from the configuration file. 2. Check that the configuration is correct: ```bash theme={null} terraform validate ``` 3. Apply the changes: ```bash theme={null} terraform apply ``` # How resources, identities and access are managed in Nebius AI Cloud Source: https://docs.nebius.com/iam/overview In Nebius AI Cloud, you can manage virtual machines, GPU clusters, Kubernetes clusters and Object Storage buckets. These components are called *resources* and are part of a *project*. You can allow other users in your federation to access your resources. You can also create special *service accounts* that can be used in programming interfaces (for example, the [Nebius AI Cloud CLI](/cli/index)) to manage resources on your behalf. *Groups* are used to provide users and service accounts with different levels of access to resources. The mentioned entities are combined in a *tenant*, which is a central place for Identity and Access Management in Nebius AI Cloud. ## Resource management Resources are organized within a *project* and a project is part of a *tenant*. In the [web console](https://console.nebius.com), project-level resources appear in the navigation sidebar above the **Manage** section. Tenant-level resources, such as billing or Identity and Access Management settings, are listed below **Manage**. ### Tenants A *tenant* is your workspace in Nebius AI Cloud. It is the largest organizational unit that contains all other entities, including projects, users, quotas and billing information. A tenant includes: * Projects, which are isolated workspaces that contain [resources](#resource-hierarchy). * Groups with identity and access settings. * User accounts. * (Optional) A federation and user accounts from it. * Quotas and billing settings that define resource limits and usage accounting. * Audit logs that record actions performed within the tenant. When you [sign up for Nebius AI Cloud](/signup-billing/sign-up), a tenant is created automatically. You can also be added to other tenants and work with their resources. Additionally, you can [create multiple tenants](/iam/create-tenants) of your own and invite users to collaborate within them. You cannot delete a tenant. To allow a user or a service account to view or manage resources in the tenant, add the required members to a corresponding tenant [group](/iam/authorization/groups/index). Each group can perform different sets of operations with resources. ### Projects A *project* allows you to create and organize resources. Nebius AI Cloud provides you with a project per [region](/overview/regions) when you [sign up](/signup-billing/sign-up). Projects ensure isolation between environments. You can group resources by product, ML team or any other criteria. For example, you can keep development and production workloads in separate projects. A project contains: * Resources, such as Compute virtual machines, Managed Service for Kubernetes® clusters or Object Storage buckets. * [Service accounts](#accounts-and-members) for access to resources via the CLI or API. * Quotas that define resource limits. * Groups with project-level identity and access settings. When you sign up for Nebius AI Cloud, a project for your resources is created automatically. For more information about how to manage projects, see the [instructions](/iam/manage-projects). ### Resource hierarchy Most resources belong to and are managed by individual Nebius AI Cloud services. For example: * The Compute service manages virtual machines, disks and shared filesystems. * The Managed Kubernetes service manages Managed Kubernetes clusters. * The Object Storage service manages buckets. Each resource type has a parent–child relationship. The parent defines the scope of permissions and resource inheritance. Projects are the parents of most service resources, while tenants are the parents of projects. Some resources can include other resources, forming parent–child relationships with them. For example: * A Managed Kubernetes cluster includes node groups. * A MysteryBox secret includes secret versions. You can learn which service manages a resource by checking one of the following: * The documentation section (for example, [Compute](/compute/index), [Object Storage](/object-storage/index)). * The CLI command group (for example, `nebius compute disk ` or `nebius storage bucket `). In some cases, the web console may show a slightly different organization for usability. For example, disks and shared filesystems appear under **Storage** in the web console, though they are part of the Compute service. ```mermaid theme={null} --- config: layout: elk elk: nodePlacement.strategy: NETWORK_SIMPLEX edgeRouting: POLYLINE hierarchyHandling: INCLUDE_CHILDREN --- graph LR classDef default fill:#e0ff4f,stroke-width:0px,color:#111c30; T[Tenant] T --> U[User] T --> G[Group] T --> F[Federation] T --> A[Audit event] T --> AE[Audit event export] T --> Q[Quota] T --> CBG[Capacity block group] T --> P[Project] %% Project resources P --> GR[Group] P --> QU[Quota] P --> RS[Virtual machine, Soperator cluster, Object Storage bucket and other resources] P --> K8s[Managed Kubernetes cluster] P --> KMS[KMS key] P --> S[MysteryBox secret] P --> PGC[Managed PostgreSQL® cluster] P --> SA[Service account] P --> RT[Routing table] P --> SG[Security group] %% Kubernetes children K8s --> NG[Node group] %% Secrets children S --> SV[Secret version] SV --> PL[Payload] %% Service account children SA --> AK[Access key] SA --> AUK[Authorized key] SA --> SK[Static key] %% Group children G --> GM[Group membership] GR --> GRM[Group membership] G --> GAP[Access permit] GR --> GRAP[Access permit] %% Federation children F --> FC[Federation certificate] %%PostgreSQL cluster children PGC --> PGB[Backup] %%Network children RT --> RTE[Route] SG --> SR[Security rule] %% Capacity block group children CBG --> CI[Capacity interval] ```

Service

Resource

Parent

Associated resource

Identity and Access Management

User account

-

-

Tenant

-

-

Tenant user account

Tenant

-

Federation

Tenant

-

Federation certificate

Federation

-

Invitation

Tenant

Tenant user account

Group

Tenant
Project

-

Group membership

Group

Tenant user account
Service account

Access permit

Group

Different resource types

Project

Tenant

-

Service account

Project

-

Access key

Service account

-

Authorized public key

Service account

-

Static key

Project

Service account

Audit Logs

Audit event

Tenant

-

Audit event export

Tenant

-

Compute

Virtual machine (instance)

Project

Disk
Service account
GPU cluster
Platform
Subnet
Allocation
Security group

Disk

Project

Boot disk image
Disk snapshot

Shared filesystem

Project

-

GPU cluster

Project

-

Platform

Project

-

Managed Kubernetes®

Cluster

Project

Subnet
Allocation

Node group

Cluster

GPU cluster
Subnet

Serverless AI

Endpoint

Project

Virtual machine
Shared filesystem
Bucket
Subnet

Job

Project

Virtual machine
Shared filesystem
Bucket
Subnet

Managed MLflow

MLflow cluster

Project

Network
Service account

Managed PostgreSQL®

PostgreSQL cluster

-

Network

Backup

PostgreSQL cluster

-

Limits

Quota allowance

Tenant
Project

-

Capacity block group

Tenant

-

Capacity interval

Capacity block group

-

Container Registry

Registry

Project

-

Image

Registry

-

Object Storage

Bucket

Project

-

Virtual Networks

Allocation

Project

Pool

Network

Project

Pool

Pool

Project

-

Subnet

Project

Network
Routing table

Routing table

Project

Network

Route

Routing table

-

Security group

Project

Network

Security rule

Security group

Security group

Key Management Service

Symmetric or asymmetric key

Project

-

MysteryBox

Secret

Project

-

Secret version

Secret

-

Payload

Secret version

-
## Identity management ### Accounts and members You can use two types of accounts to work with Nebius AI Cloud resources: * Users from an identity federation. * Service accounts that are used to manage resources via programming interfaces, such as the [Nebius AI Cloud CLI](/cli). A service account belongs to the project where it was created, but its access to resources is defined by the [groups](/iam/authorization/groups) that it's added to. This means that a service account can be granted access to any resource in the tenant regardless of the project. ### Federations A *federation* is your identity federation in Nebius AI Cloud. You can create and manage federations so that your users can log into Nebius AI Cloud through [single sign-on (SSO)](/iam/federations/saml-sso). ### Service account keys To authenticate in Nebius AI Cloud, service accounts use the following key types: * [Access keys](/iam/service-accounts/access-keys) are used in services with AWS-compatible APIs, such as Object Storage. * [Authorized keys](/iam/service-accounts/authorized-keys) are used to obtain IAM tokens for service accounts. ## Access management Being on the tenant user list does not grant access to resources. Each account should be assigned to a group that specifies the level of access the account has to the tenant resources. From least to most access, the default groups in a tenant are the following: * `auditors` can view **certain types** of resources **without access to data**. * `viewers` can view **most types** of resources (except some resources related to access management, security, etc.) and **access data** in them (e.g. download objects in buckets). * `editors` can view **and manage** most types of resources and access data in them. * `admins` can view and manage **all types** of resources and access data in them. For more information, see [groups description](/iam/authorization/groups/index). Authentication methods vary depending on the type of account and interface used. For more details, see [How to authenticate in Nebius AI Cloud interfaces](/iam/log-in). *** *Postgres, PostgreSQL and the Slonik Logo are trademarks or registered trademarks of the PostgreSQL Community Association of Canada, and used with their permission.* # Renaming tenants in Nebius AI Cloud Source: https://docs.nebius.com/iam/rename-tenants A [tenant](/iam/overview#tenants) in Nebius AI Cloud has a name and ID. You can change the tenant name; the tenant ID remains the same. ## Prerequisites The preparations for this guide depend on your preferred interface. Make sure you are in a [group](/iam/authorization/groups/index) that has the `admin` role within your tenant or project; for example, the default `admins` group. You can check this in the [Administration → IAM](https://console.nebius.com/iam) section of the web console. 1. Make sure you are in a [group](/iam/authorization/groups/index) that has the `admin` role within your tenant or project; for example, the default `admins` group. You can check this in the [Administration → IAM](https://console.nebius.com/iam) section of the web console. 2. [Install](/cli/install) and [configure](/cli/configure) the Nebius AI Cloud CLI. ## How to rename a tenant 1. Go to the [web console](https://console.nebius.com) and expand the top-left list of tenants. 2. In the line of the required tenant, click → **Rename tenant**. 3. In the window that opens, specify the new name. 4. Click **Rename tenant**. A random suffix is appended to the name you specify, to ensure that the new name is unique. For example, if you entered `my-main-tenant`, the new name can be `my-main-tenant-jf3`. Run the following command: ```bash theme={null} nebius iam v2 tenant update --id \ --name-prefix ``` In this command, specify the following: * `--id`: [Tenant ID](/iam/get-tenants#cli). * `--name-prefix`: Desired name. A random suffix is appended to the name you specify, to ensure that the new name is unique. For example, if you entered `my-main-tenant`, the new name can be `my-main-tenant-jf3`. # How to use access keys to authenticate in Nebius AI Cloud as a service account Source: https://docs.nebius.com/iam/service-accounts/access-keys *Access keys* in Nebius AI Cloud are used to authenticate [service accounts](/iam/overview#accounts-and-members) in AWS-compatible services, such as Object Storage. To work with such services using their CLIs (for example, AWS CLI), create an access key and add it to the CLI configuration. The key ID is included in your requests and can be viewed. The secret key is used to sign the request parameters and is not included in the request. Access keys can be issued without an expiration date. Do not confuse [access tokens](/iam/authorization/access-tokens) with access keys. Access tokens are used for authentication in Nebius AI Cloud interfaces. ## Prerequisites 1. Make sure that you, or the service account that you use on your behalf, is in a [group](/iam/authorization/groups/index) that has the `admin` role within your tenant; for example, the default `admins` group. You can check this in the [Administration → IAM](https://console.nebius.com/iam) section of the web console. 2. Install and initialize the [Nebius AI Cloud CLI](/cli/quickstart). 3. Check that your project ID is saved in the Nebius AI Cloud CLI profile configuration: ```bash theme={null} cat ~/.nebius/config.yaml ``` 4. Install jq to extract IDs and tokens from JSON data returned by the Nebius AI Cloud CLI: ```bash Ubuntu theme={null} sudo apt-get install jq ``` ```bash macOS theme={null} brew install jq ``` 5. [Create a service account](/iam/service-accounts/manage#creating-a-service-account), if you don't have one already. 6. Get the ID of the service account for which you want to issue the key and save it to an environment variable: ```bash theme={null} export SA_ID=$(nebius iam service-account get-by-name \ --name \ --format jsonpath='{.metadata.id}') ``` ## Creating a key pair Create an access key pair and save its ID to an environment variable: ```bash theme={null} export ACCESS_KEY_ID=$(nebius iam v2 access-key create \ --account-service-account-id $SA_ID \ --expires-at \ --description 'AWS CLI key' \ --format json | jq -r '.metadata.id') ``` Where `--expires-at` allows you to create a temporary access key. To set the key expiration date, use the [ISO 8601](https://www.iso.org/iso-8601-date-and-time-format.html) format. Here's how to store an environment variable with a one-year expiration date: ```bash Ubuntu theme={null} EXPIRES_AT=$(date -d "+1 year" "+%Y-%m-%dT%H:%M:%SZ") ``` ```bash macOS theme={null} EXPIRES_AT=$(date -j -v+1y "+%Y-%m-%dT%H:%M:%SZ") ``` Then pass the variable as `--expires-at $EXPIRES_AT`. ## Configuring your AWS CLI profile In this example, you will configure the AWS CLI to work with Object Storage on behalf of the service account. 1. Get the access key pair AWS ID and save it to an environment variable: ```bash theme={null} export ACCESS_KEY_AWS_ID=$(nebius iam v2 access-key get \ --id $ACCESS_KEY_ID \ --format json | jq -r '.status.aws_access_key_id') ``` 2. Get the secret key and save it to an environment variable: ```bash theme={null} export SECRET_ACCESS_KEY=$(nebius iam v2 access-key get \ --id $ACCESS_KEY_ID \ --format json | jq -r '.status.secret') ``` 3. Add the key to the AWS CLI configuration: ```bash theme={null} aws configure set aws_access_key_id $ACCESS_KEY_AWS_ID aws configure set aws_secret_access_key $SECRET_ACCESS_KEY ``` 4. Depending on your project [region](/overview/regions), add the Nebius AI Cloud region ID and the Object Storage endpoint URL to the AWS CLI configuration: ```bash theme={null} aws configure set region aws configure endpoint_url https://storage..nebius.cloud ``` For example, run the following commands for a project in eu-north1: ```bash theme={null} aws configure set region eu-north1 aws configure set endpoint_url https://storage.eu-north1.nebius.cloud ``` # How to authenticate as a service account Source: https://docs.nebius.com/iam/service-accounts/authentication When a service account interacts with a resource in Nebius AI Cloud, IAM checks if it has access rights to perform the operation. Authenticated service accounts are given permissions based on their group memberships. To authenticate in a service as a service account: 1. [Create a service account](/iam/service-accounts/manage#creating-a-service-account). 2. Create authentication keys for the service account: * [Authorized keys](/iam/service-accounts/authorized-keys) to authenticate in the Nebius AI Cloud CLI or Terraform provider. * [Access keys](/iam/service-accounts/access-keys) to authenticate in services with AWS-compatible APIs, such as Object Storage. Make sure you are in a [group](/iam/authorization/groups/index) that has the `admin` role within your tenant or project; for example, the default `admins` group. You can check this in the [Administration → IAM](https://console.nebius.com/iam) section of the web console. 3. Configure the interface that will use the created keys: * [Nebius AI Cloud CLI configuration](/cli/configure) * [Terraform provider authentication](/terraform-provider/authentication) * [AWS CLI configuration](/object-storage/quickstart) # How to use authorized keys Source: https://docs.nebius.com/iam/service-accounts/authorized-keys To authenticate as a service account and perform operations on its behalf, use an *authorized key pair*. ## Prerequisites 1. Make sure that you, or the service account that you use on your behalf, is in a [group](/iam/authorization/groups/index) that has the `admin` role within your tenant; for example, the default `admins` group. You can check this in the [Administration → IAM](https://console.nebius.com/iam) section of the web console. 2. [Create a new service account](/iam/service-accounts/manage#creating-a-service-account) if needed. 1. Make sure that you, or the service account that you use on your behalf, is in a [group](/iam/authorization/groups/index) that has the `admin` role within your tenant; for example, the default `admins` group. You can check this in the [Administration → IAM](https://console.nebius.com/iam) section of the web console. 2. Install and initialize the [Nebius AI Cloud CLI](/cli/quickstart). 3. Check that your project ID is saved in the Nebius AI Cloud CLI profile configuration: ```bash theme={null} cat ~/.nebius/config.yaml ``` 4. [Create a new service account](/iam/service-accounts/manage#cli-2) if needed. 5. Get the ID of the service account for which you want to issue the key and save it to an environment variable: ```bash theme={null} export SA_ID=$(nebius iam service-account get-by-name \ --name \ --format json \ | jq -r ".metadata.id") ``` 1. Make sure that you, or the service account that you use on your behalf, is in a [group](/iam/authorization/groups/index) that has the `admin` role within your tenant; for example, the default `admins` group. You can check this in the [Administration → IAM](https://console.nebius.com/iam) section of the web console. 2. [Install and configure](/terraform-provider/quickstart) the Nebius AI Cloud provider for Terraform. 3. [Create a new service account](/iam/service-accounts/manage#terraform-2) if needed. ## Creating a key pair If you are using the CLI, this step is optional. If you use the `nebius iam auth-public-key generate` command in the [next step](#uploading-the-public-key), the CLI creates the key pair for you. Create a key pair on your local machine: ```bash theme={null} openssl genrsa -out private.pem 4096 && \ openssl rsa -in private.pem -outform PEM -pubout -out public.pem ``` This command creates the `public.pem` and `private.pem` key files in your local directory where you run the command. ## Uploading the public key 1. In the [web console](https://console.nebius.com), go to **Administration** → **IAM**. 2. Open the **Service accounts** tab. 3. Open the page of the required service account. 4. Click **Upload authorized key**. 5. Click **Attach file** and then select `public.pem`. 6. (Optional) Set an expiration date. 7. Click **Upload key**. The key is displayed on the **Authorized keys** tab. Depending on whether you already [created a key pair](#creating-a-key-pair), run one of the following commands: * To upload the public key if you already created a key pair: ```bash theme={null} nebius iam auth-public-key create \ --account-service-account-id $SA_ID \ --data "$(cat public.pem)" ``` * To create a new key pair, upload the public key and create a local CLI configuration file in one step: ```bash theme={null} nebius iam auth-public-key generate \ --service-account-id $SA_ID \ --output ~/.nebius/$SA_ID-credentials.json ``` To set an expiration date for the key, add the `--expires-at` parameter to either command with a timestamp in [ISO 8601](https://en.wikipedia.org/wiki/ISO_8601) format, for example `--expires-at 2026-04-01T20:00:00Z`. After you complete either option, you can find the authorized key in the [web console](https://console.nebius.com). In the sidebar, go to **Administration** → **IAM** → **Service accounts**, and select the service account for which you created the authorized key. To upload an authorized key with Terraform, the [provider must already be authenticated](/terraform-provider/authentication). You cannot upload the first authorized key for a service account using Terraform. If you already have an authorized key, for example, one created with the CLI, proceed to [update the configuration](#updating-the-configuration) to use your existing authorized key with Terraform. To upload a new authorized key with Terraform: 1. Inside the working directory, create a configuration file, for example `main.tf`: ```hcl theme={null} resource "nebius_iam_v1_auth_public_key" "sa_authorized_key" { name = "sa_authorized_key" parent_id = "" account = { service_account = { id = "" } } data = file("${path.module}/public.pem") expires_at = "" } ``` The resource contains the following parameters: * `parent_id`: [Project ID](/iam/manage-projects#terraform-3). * `account.service_account.id`: ID of the service account. To copy the service account from the [web console](https://console.nebius.com), go to **Administration** → **IAM** → **Service accounts**, next to the ID, click . * `data`: Contents of the `public.pem` file that you [created in the previous step](#creating-a-key-pair). In the example above, Terraform reads the contents of `public.pem` with the `file()` function. You can also use `trimspace(file(...))` to remove trailing whitespace. * `expires_at` (optional): Date and time when the authorized key expires, in [ISO 8601](https://en.wikipedia.org/wiki/ISO_8601) format, for example `2026-04-01T20:00:00Z`. 2. Check that the configuration is correct: ```bash theme={null} terraform validate ``` 3. Apply the changes: ```bash theme={null} terraform apply ``` For all available arguments and attributes, see the [full reference](/terraform-provider/reference/resources/iam_v1_auth_public_key). ## Updating the configuration Update your configuration to use the authorized key you created: If you used the web console to upload the public key, you do not need to update any additional configuration. Create a new CLI profile: 1. Initialize the Nebius AI Cloud CLI configuration: ```bash theme={null} nebius profile create \ --endpoint api.nebius.cloud \ --service-account-file ~/.nebius/$SA_ID-credentials.json \ --profile ``` 2. Check that your new profile has been created and set as default: ```sh theme={null} nebius profile list ``` Now you can run Nebius AI Cloud CLI commands on behalf of the service account. To do this, add `--profile ` to the commands. Configure the Nebius AI Cloud provider for Terraform to use an authorized key. Inside your Terraform working directory, add the `service_account` block to the provider configuration, for example in `providers.tf`: ```hcl theme={null} provider "nebius" { service_account = { account_id = "" public_key_id = "" private_key_file = "" } } ``` In this configuration: * `public_key_id`: The ID of the authorized key that you uploaded. To copy the public key ID: 1. In the [web console](https://console.nebius.com), go to **Administration** → **IAM** → **Service accounts**, and select the service account. 2. Click **Authorized keys**, and then click next to the ID of the public key you uploaded. * `private_key_file`: The path to the `private.pem` file you [created in the previous step](#creating-a-key-pair). You can also pass these values through environment variables: ```hcl theme={null} provider "nebius" { service_account = { account_id_env = "SA_ID" public_key_id_env = "AUTHKEY_ID" private_key_file_env = "AUTHKEY_PRIV_PATH" } } ``` ```bash theme={null} export SA_ID= export AUTHKEY_ID= export AUTHKEY_PRIV_PATH= ``` # How to manage service accounts Source: https://docs.nebius.com/iam/service-accounts/manage In this guide, you will learn how to create a service account, grant it access rights and delete it. ## Prerequisites You do not need to complete any prerequisites if you create a service account in the web console. 1. Install and initialize the [Nebius AI Cloud CLI](/cli/quickstart). 2. Check that your project ID is saved in the Nebius AI Cloud CLI profile configuration: ```bash theme={null} cat ~/.nebius/config.yaml ``` 3. Install [jq](https://jqlang.github.io/jq/download/) to extract IDs and tokens from JSON data returned by the Nebius AI Cloud CLI: ```bash Ubuntu theme={null} sudo apt-get install jq ``` ```bash macOS theme={null} brew install jq ``` 4. [Get the tenant ID](/iam/get-tenants#cli) and save it to an environment variable: ```bash theme={null} export TENANT_ID= ``` [Install and configure](/terraform-provider/quickstart) the Nebius AI Cloud provider for Terraform. ## Creating a service account 1. In the sidebar, go to  **Administration** → **IAM**. 2. Go to the **Service accounts** tab. 3. Click **Create entity** and select **Service account**. 4. In the window that opens, check the service account name and select the project. 5. Click **Create and continue**. Create a service account and save its ID to an environment variable: ```bash theme={null} export SA_ID=$(nebius iam service-account create \ --name \ --format json | jq -r '.metadata.id') ``` 1. Create the following configuration file: ```hcl theme={null} resource "nebius_iam_v1_service_account" "" { name = "" parent_id = "" description = "My service account" } ``` In the configuration, specify your [Project ID](/iam/manage-projects#terraform-3). 2. Validate the configuration: Check that the configuration is correct: ```bash theme={null} terraform validate ``` 3. If the configuration is valid, apply it: Apply the changes: ```bash theme={null} terraform apply ``` ## Granting editor access to the service account Make sure you are in a [group](/iam/authorization/groups/index) that has the `admin` role within your tenant or project; for example, the default `admins` group. You can check this in the [Administration → IAM](https://console.nebius.com/iam) section of the web console. To grant access rights to the service account: 1. On the **Service accounts** tab, locate the required service account and click → **Add to group**. 1. Get the ID of the default `editors` group: ```bash theme={null} nebius iam group get-by-name \ --name editors --parent-id \ --format json | jq -r '.metadata.id' ``` In the command, specify the [tenant ID](/iam/get-tenants#cli). 2. Add the service account to the `editors` group: ```bash theme={null} nebius iam group-membership create \ --parent-id \ --member-id ``` 1. Get and copy the ID of the default `editors` group: ```bash theme={null} nebius iam group get-by-name \ --name editors --parent-id \ --format json | jq -r '.metadata.id' ``` In the command, specify the [tenant ID](/iam/get-tenants#cli). 2. Add the `nebius_iam_v1_group_membership` resource to the configuration file. By using this resource, you add the service account to the `editors` group: ```hcl theme={null} resource "nebius_iam_v1_group_membership" "" { parent_id = "" member_id = nebius_iam_v1_service_account..id } ``` 3. Check that the configuration is correct: ```bash theme={null} terraform validate ``` 4. Apply the changes: ```bash theme={null} terraform apply ``` ## Deleting a service account Deleting a service account cannot be reversed. If you no longer need a service account: 1. Delete all resources associated with the account. 2. On the **Service accounts** tab, find the required service account and click → **Delete service account**. 3. In the window that opens, confirm the deletion. 1. Delete all resources associated with the account. 2. Get the service account ID and save it to an environment variable: ```bash theme={null} export SA_ID=$(nebius iam service-account get-by-name \ --name \ --format json | jq -r '.metadata.id') ``` 3. Delete the service account: ```bash theme={null} nebius iam service-account delete --id $SA_ID ``` 1. Delete all resources associated with the account. 2. Remove the corresponding `nebius_iam_v1_service_account` resource from the configuration file. 3. Check that the configuration is correct: ```bash theme={null} terraform validate ``` 4. Apply the changes: ```bash theme={null} terraform apply ``` # Nebius AI Cloud documentation Source: https://docs.nebius.com/index

Nebius AI Cloud documentation

Explore what Nebius AI Cloud has to offer, and learn how to make the most out of its resources and address any potential issues.

Getting started

Everything you need to deploy, scale and manage your applications on Nebius AI Cloud.

} href="/signup-billing/sign-up"> Create your account and get started with Nebius AI Cloud in minutes } href="/compute/quickstart-host-model"> Deploy and run your AI models on high-performance VMs with GPU support } href="/kubernetes/quickstart"> Set up and manage scalable Kubernetes clusters for containerized workloads } href="/compute/virtual-machines/containers"> Run Docker containers directly on virtual machines with full control

Platform services

All cloud infrastructure services to build, deploy, and scale your applications.

Compute

} href="/compute"> Cloud-hosted VMs with NVIDIA GPU support for ML/AI workloads } href="/compute/clusters/gpu"> InfiniBand™ networks for high-speed distributed computing } href="/slurm-soperator"> Slurm workload manager clusters for ML/AI experiments } href="/kubernetes"> Containerized application deployment with support for GPUs and InfiniBand } href="/compute/storage/types"> Block and file storage for Compute VMs and Managed Kubernetes nodes

Storage

} href="/object-storage"> AWS S3-compatible storage for ML/AI datasets and model artifacts } href="/postgresql"> Database clusters for ML/AI datasets and application data } href="/container-registry"> Docker image storage and distribution for containerized workloads

AI services