NAME
    gcloud dns managed-zones update - update an existing Cloud DNS managed-zone

SYNOPSIS
    gcloud dns managed-zones update ZONE [--async]
        [--denial-of-existence=DENIAL_OF_EXISTENCE] [--description=DESCRIPTION]
        [--dnssec-state=DNSSEC_STATE] [--forwarding-targets=[IP_ADDRESSES,...]]
        [--gkeclusters=[GKECLUSTERS,...]] [--ksk-algorithm=KSK_ALGORITHM]
        [--ksk-key-length=KSK_KEY_LENGTH] [--location=LOCATION]
        [--[no-]log-dns-queries] [--managed-reverse-lookup]
        [--networks=[NETWORK,...]]
        [--private-forwarding-targets=[IP_ADDRESSES,...]]
        [--update-labels=[KEY=VALUE,...]] [--zsk-algorithm=ZSK_ALGORITHM]
        [--zsk-key-length=ZSK_KEY_LENGTH]
        [--clear-labels | --remove-labels=[KEY,...]]
        [--target-network=TARGET_NETWORK --target-project=TARGET_PROJECT]
        [GCLOUD_WIDE_FLAG ...]

DESCRIPTION
    Update an existing Cloud DNS managed-zone.

EXAMPLES
    To change the description of a managed-zone, run:

        $ gcloud dns managed-zones update my-zone \
            --description="Hello, world!"

    To change the description of a zonal managed-zone in us-east1-a, run:

        $ gcloud dns managed-zones update my-zone \
            --description="Hello, world!" --location=us-east1-a

POSITIONAL ARGUMENTS
     Zone resource - The name of the managed-zone to be updated. This
     represents a Cloud resource. (NOTE) Some attributes are not given
     arguments in this group but can be set in other ways.

     To set the project attribute:
      ◆ provide the argument zone on the command line with a fully specified
        name;
      ◆ provide the argument --project on the command line;
      ◆ set the property core/project.

     This must be specified.

       ZONE
          ID of the zone or fully qualified identifier for the zone.

          To set the zone attribute:
          ▸ provide the argument zone on the command line.

FLAGS
     --async
        Return immediately, without waiting for the operation in progress to
        complete.

     --denial-of-existence=DENIAL_OF_EXISTENCE
        Requires DNSSEC enabled. DENIAL_OF_EXISTENCE must be one of: nsec,
        nsec3.

     --description=DESCRIPTION
        Short description for the managed zone.

     --dnssec-state=DNSSEC_STATE
        The DNSSEC state for this managed zone. DNSSEC_STATE must be one of:

         off
            Disable DNSSEC for the managed zone.
         on
            Enable DNSSEC for the managed zone.
         transfer
            Enable DNSSEC and allow transferring a signed zone in or out.

     --forwarding-targets=[IP_ADDRESSES,...]
        List of IPv4 addresses that the zone will forward queries to. Ignored
        for public visibility. Non-RFC1918 addresses will forward to the target
        through the Internet. RFC1918 addresses will forward through the VPC.

     --gkeclusters=[GKECLUSTERS,...]
        List of GKE clusters that the zone should be visible in if the zone
        visibility is [private].

     --ksk-algorithm=KSK_ALGORITHM
        String mnemonic specifying the DNSSEC algorithm of the key-signing key.
        Requires DNSSEC enabled. KSK_ALGORITHM must be one of: ecdsap256sha256,
        ecdsap384sha384, rsasha1, rsasha256, rsasha512.

     --ksk-key-length=KSK_KEY_LENGTH
        Length of the key-signing key in bits. Requires DNSSEC enabled.

     --location=LOCATION
        Specifies the desired service location the request is sent to. Defaults
        to Cloud DNS global service. Use --location=global if you want to
        target the global service.

     --[no-]log-dns-queries
        Specifies whether to enable query logging. Defaults to False. Use
        --log-dns-queries to enable and --no-log-dns-queries to disable.

     --managed-reverse-lookup
        Specifies whether this zone is a managed reverse lookup zone, required
        for Cloud DNS to correctly resolve Non-RFC1918 PTR records.

     --networks=[NETWORK,...]
        List of networks that the zone should be visible in if the zone
        visibility is [private].

     --private-forwarding-targets=[IP_ADDRESSES,...]
        List of IPv4 addresses that the zone will forward queries to. Ignored
        for public visibility. All addresses specified for this parameter will
        be reached through the VPC.

     --update-labels=[KEY=VALUE,...]
        List of label KEY=VALUE pairs to update. If a label exists, its value
        is modified. Otherwise, a new label is created.

        Keys must start with a lowercase character and contain only hyphens
        (-), underscores (_), lowercase characters, and numbers. Values must
        contain only hyphens (-), underscores (_), lowercase characters, and
        numbers.

     --zsk-algorithm=ZSK_ALGORITHM
        String mnemonic specifying the DNSSEC algorithm of the key-signing key.
        Requires DNSSEC enabled. ZSK_ALGORITHM must be one of: ecdsap256sha256,
        ecdsap384sha384, rsasha1, rsasha256, rsasha512.

     --zsk-key-length=ZSK_KEY_LENGTH
        Length of the zone-signing key in bits. Requires DNSSEC enabled.

     At most one of these can be specified:

       --clear-labels
          Remove all labels. If --update-labels is also specified then
          --clear-labels is applied first.

          For example, to remove all labels:

              $ gcloud dns managed-zones update --clear-labels

          To remove all existing labels and create two new labels, foo and baz:

              $ gcloud dns managed-zones update --clear-labels \
                --update-labels foo=bar,baz=qux

       --remove-labels=[KEY,...]
          List of label keys to remove. If a label does not exist it is
          silently ignored. If --update-labels is also specified then
          --update-labels is applied first.

     --target-network=TARGET_NETWORK
        Network ID of the Google Compute Engine private network to forward
        queries to.

     --target-project=TARGET_PROJECT
        Project ID of the Google Compute Engine private network to forward
        queries to.

GCLOUD WIDE FLAGS
    These flags are available to all commands: --access-token-file, --account,
    --billing-project, --configuration, --flags-file, --flatten, --format,
    --help, --impersonate-service-account, --log-http, --project, --quiet,
    --trace-token, --user-output-enabled, --verbosity.

    Run $ gcloud help for details.

NOTES
    These variants are also available:

        $ gcloud alpha dns managed-zones update

        $ gcloud beta dns managed-zones update

