Write kubeconfig for cluster

Merge external endpoint into kubeconfig; drop --external for internal VPC

yc managed-kubernetes cluster get-credentials <name> --external --force

More yc commands

List clusters as JSON

yc managed-kubernetes cluster list --format json | jq -r '.[]|[.name,.status,.id]|@tsv'

Tabulate cluster name/status/id for scripting and audits
Create autoscaling node group

yc managed-kubernetes node-group create --cluster-name <name> --name ng-1 --platform standard-v3 --auto-scale min=1,max=5,initial=2 --location zone=ru-central1-a

Cluster autoscaler node group with min/max bounds in one zone
Create VPC subnet

yc vpc subnet create --name sub-a --network-name net-1 --range 10.0.0.0/24 --zone ru-central1-a

Zone-scoped subnet bound to a network; CIDR must not overlap peers
Replace security group rules

yc vpc security-group update-rules <name> --add-rule 'direction=ingress,port=443,protocol=tcp,v4-cidrs=[0.0.0.0/0]'

Add stateful SG rule; note: rules are evaluated as allow-list
Inspect network load balancer

yc load-balancer network-load-balancer get <name> --format json | jq '.listeners,.attached_target_groups'

Dump NLB listeners and target groups to debug routing