From 0248e53b7612de05f967dfa819df3ab911481db6 Mon Sep 17 00:00:00 2001 From: Automated Date: Wed, 28 Jun 2023 10:42:37 +0000 Subject: [PATCH] gcloud: Wed Jun 28 10:42:37 UTC 2023 --- gcloud/_version | 8 +- gcloud/alpha/artifacts/docker/images/describe | 5 +- gcloud/alpha/artifacts/go/help | 30 ++ gcloud/alpha/artifacts/go/upload | 86 +++++ gcloud/alpha/artifacts/help | 3 + gcloud/alpha/bigtable/backups/create | 8 +- gcloud/alpha/bigtable/backups/update | 8 +- .../blockchain-node-engine/locations/describe | 4 +- .../blockchain-node-engine/locations/list | 4 +- .../alpha/blockchain-node-engine/nodes/create | 4 +- .../alpha/blockchain-node-engine/nodes/delete | 4 +- .../blockchain-node-engine/nodes/describe | 4 +- .../alpha/blockchain-node-engine/nodes/list | 4 +- .../operations/describe | 4 +- .../blockchain-node-engine/operations/list | 4 +- gcloud/alpha/builds/connections/create/gitlab | 153 +++++++++ gcloud/alpha/builds/connections/create/help | 4 + gcloud/alpha/builds/connections/update/gitlab | 107 +++++++ gcloud/alpha/builds/connections/update/help | 4 + gcloud/alpha/compute/addresses/create | 18 +- gcloud/alpha/compute/addresses/delete | 2 +- gcloud/alpha/compute/addresses/describe | 4 +- .../compute/backend-services/add-backend | 19 +- .../compute/backend-services/update-backend | 19 +- gcloud/alpha/compute/disks/create | 12 +- .../compute/instances/add-partner-metadata | 95 ++++++ gcloud/alpha/compute/instances/create | 18 +- gcloud/alpha/compute/instances/help | 9 + .../compute/instances/patch-partner-metadata | 95 ++++++ .../compute/instances/remove-partner-metadata | 77 +++++ .../compute/tpus/queued-resources/create | 7 +- gcloud/alpha/compute/tpus/tpu-vm/update | 33 +- gcloud/alpha/container/fleet/memberships/help | 3 + .../fleet/memberships/support-access/describe | 64 ++++ .../fleet/memberships/support-access/disable | 64 ++++ .../fleet/memberships/support-access/enable | 64 ++++ .../fleet/memberships/support-access/get-yaml | 71 +++++ .../fleet/memberships/support-access/help | 45 +++ gcloud/alpha/container/hub/memberships/help | 3 + .../hub/memberships/support-access/describe | 64 ++++ .../hub/memberships/support-access/disable | 64 ++++ .../hub/memberships/support-access/enable | 64 ++++ .../hub/memberships/support-access/get-yaml | 71 +++++ .../hub/memberships/support-access/help | 45 +++ .../alpha/container/vmware/node-pools/create | 3 + .../alpha/container/vmware/node-pools/update | 3 + gcloud/alpha/filestore/instances/create | 15 +- gcloud/alpha/filestore/instances/update | 3 + gcloud/alpha/firestore/databases/create | 16 +- gcloud/alpha/firestore/databases/update | 9 +- gcloud/alpha/monitoring/policies/list | 4 +- .../network-security/firewall-endpoints/help | 3 + .../firewall-endpoints/update | 125 ++++++++ gcloud/alpha/pubsub/subscriptions/create | 52 ++- gcloud/alpha/pubsub/subscriptions/update | 62 +++- gcloud/alpha/recommender/insights/list | 17 +- gcloud/alpha/recommender/recommendations/list | 17 +- .../resource-manager/org-policies/set-policy | 16 + gcloud/alpha/sql/instances/help | 3 + gcloud/alpha/sql/instances/reencrypt | 40 +++ gcloud/alpha/storage/help | 3 + gcloud/alpha/storage/rsync | 301 ++++++++++++++++++ gcloud/artifacts/docker/images/describe | 5 +- gcloud/artifacts/go/help | 27 ++ gcloud/artifacts/go/upload | 82 +++++ gcloud/artifacts/help | 3 + gcloud/artifacts/repositories/create | 2 + gcloud/beta/artifacts/docker/images/describe | 5 +- gcloud/beta/artifacts/go/help | 28 ++ gcloud/beta/artifacts/go/upload | 84 +++++ gcloud/beta/artifacts/help | 3 + .../client-connector/gateways/create | 2 +- .../client-connector/gateways/delete | 2 +- .../client-connector/gateways/describe | 2 +- .../client-connector/gateways/get-iam-policy | 2 +- .../beyondcorp/client-connector/gateways/help | 12 +- .../beyondcorp/client-connector/gateways/list | 2 +- .../client-connector/gateways/set-iam-policy | 2 +- gcloud/beta/beyondcorp/client-connector/help | 2 +- .../client-connector/operations/describe | 2 +- .../client-connector/operations/help | 4 +- .../client-connector/operations/list | 2 +- .../client-connector/services/create | 2 +- .../client-connector/services/delete | 2 +- .../client-connector/services/describe | 2 +- .../client-connector/services/get-iam-policy | 2 +- .../beyondcorp/client-connector/services/help | 16 +- .../beyondcorp/client-connector/services/list | 2 +- .../client-connector/services/set-iam-policy | 2 +- .../client-connector/services/update | 2 +- gcloud/beta/beyondcorp/help | 3 +- gcloud/beta/bigtable/backups/create | 8 +- gcloud/beta/bigtable/backups/update | 8 +- gcloud/beta/builds/connections/create/gitlab | 149 +++++++++ gcloud/beta/builds/connections/create/help | 4 + gcloud/beta/builds/connections/update/gitlab | 105 ++++++ gcloud/beta/builds/connections/update/help | 4 + gcloud/beta/compute/addresses/create | 18 +- gcloud/beta/compute/addresses/delete | 2 +- gcloud/beta/compute/addresses/describe | 5 +- gcloud/beta/container/fleet/memberships/help | 3 + .../fleet/memberships/support-access/describe | 62 ++++ .../fleet/memberships/support-access/disable | 62 ++++ .../fleet/memberships/support-access/enable | 62 ++++ .../fleet/memberships/support-access/get-yaml | 69 ++++ .../fleet/memberships/support-access/help | 43 +++ gcloud/beta/container/hub/memberships/help | 3 + .../hub/memberships/support-access/describe | 62 ++++ .../hub/memberships/support-access/disable | 62 ++++ .../hub/memberships/support-access/enable | 62 ++++ .../hub/memberships/support-access/get-yaml | 69 ++++ .../hub/memberships/support-access/help | 43 +++ .../beta/container/vmware/node-pools/create | 3 + .../beta/container/vmware/node-pools/update | 3 + gcloud/beta/filestore/instances/create | 15 +- gcloud/beta/filestore/instances/update | 3 + .../network-security/firewall-endpoints/help | 3 + .../firewall-endpoints/update | 123 +++++++ gcloud/beta/pubsub/subscriptions/create | 52 ++- gcloud/beta/pubsub/subscriptions/update | 62 +++- gcloud/beta/recommender/recommendations/list | 6 +- gcloud/beta/redis/instances/create | 2 + gcloud/beta/redis/instances/upgrade | 2 + .../resource-manager/org-policies/set-policy | 16 + gcloud/beta/sql/instances/help | 3 + gcloud/beta/sql/instances/reencrypt | 38 +++ gcloud/bigtable/backups/create | 8 +- gcloud/bigtable/backups/update | 8 +- gcloud/compute/addresses/create | 14 +- gcloud/compute/addresses/delete | 2 +- gcloud/compute/addresses/describe | 5 +- gcloud/filestore/instances/create | 4 +- gcloud/org-policies/set-policy | 24 ++ gcloud/recommender/recommendations/list | 6 +- gcloud/redis/instances/create | 2 + gcloud/redis/instances/upgrade | 2 + .../resource-manager/org-policies/set-policy | 16 + gcloud/storage/help | 3 + gcloud/storage/rsync | 295 +++++++++++++++++ 139 files changed, 3939 insertions(+), 162 deletions(-) create mode 100644 gcloud/alpha/artifacts/go/help create mode 100644 gcloud/alpha/artifacts/go/upload create mode 100644 gcloud/alpha/builds/connections/create/gitlab create mode 100644 gcloud/alpha/builds/connections/update/gitlab create mode 100644 gcloud/alpha/compute/instances/add-partner-metadata create mode 100644 gcloud/alpha/compute/instances/patch-partner-metadata create mode 100644 gcloud/alpha/compute/instances/remove-partner-metadata create mode 100644 gcloud/alpha/container/fleet/memberships/support-access/describe create mode 100644 gcloud/alpha/container/fleet/memberships/support-access/disable create mode 100644 gcloud/alpha/container/fleet/memberships/support-access/enable create mode 100644 gcloud/alpha/container/fleet/memberships/support-access/get-yaml create mode 100644 gcloud/alpha/container/fleet/memberships/support-access/help create mode 100644 gcloud/alpha/container/hub/memberships/support-access/describe create mode 100644 gcloud/alpha/container/hub/memberships/support-access/disable create mode 100644 gcloud/alpha/container/hub/memberships/support-access/enable create mode 100644 gcloud/alpha/container/hub/memberships/support-access/get-yaml create mode 100644 gcloud/alpha/container/hub/memberships/support-access/help create mode 100644 gcloud/alpha/network-security/firewall-endpoints/update create mode 100644 gcloud/alpha/sql/instances/reencrypt create mode 100644 gcloud/alpha/storage/rsync create mode 100644 gcloud/artifacts/go/help create mode 100644 gcloud/artifacts/go/upload create mode 100644 gcloud/beta/artifacts/go/help create mode 100644 gcloud/beta/artifacts/go/upload create mode 100644 gcloud/beta/builds/connections/create/gitlab create mode 100644 gcloud/beta/builds/connections/update/gitlab create mode 100644 gcloud/beta/container/fleet/memberships/support-access/describe create mode 100644 gcloud/beta/container/fleet/memberships/support-access/disable create mode 100644 gcloud/beta/container/fleet/memberships/support-access/enable create mode 100644 gcloud/beta/container/fleet/memberships/support-access/get-yaml create mode 100644 gcloud/beta/container/fleet/memberships/support-access/help create mode 100644 gcloud/beta/container/hub/memberships/support-access/describe create mode 100644 gcloud/beta/container/hub/memberships/support-access/disable create mode 100644 gcloud/beta/container/hub/memberships/support-access/enable create mode 100644 gcloud/beta/container/hub/memberships/support-access/get-yaml create mode 100644 gcloud/beta/container/hub/memberships/support-access/help create mode 100644 gcloud/beta/network-security/firewall-endpoints/update create mode 100644 gcloud/beta/sql/instances/reencrypt create mode 100644 gcloud/storage/rsync diff --git a/gcloud/_version b/gcloud/_version index 003ce1645..13a97727c 100644 --- a/gcloud/_version +++ b/gcloud/_version @@ -1,8 +1,8 @@ -Google Cloud SDK 436.0.0 -alpha 2023.06.16 -beta 2023.06.16 +Google Cloud SDK 437.0.0 +alpha 2023.06.26 +beta 2023.06.26 bq 2.0.93 bundled-python3-unix 3.9.16 -core 2023.06.16 +core 2023.06.26 gcloud-crc32c 1.0.0 gsutil 5.24 diff --git a/gcloud/alpha/artifacts/docker/images/describe b/gcloud/alpha/artifacts/docker/images/describe index f0ea84194..5acbf7505 100644 --- a/gcloud/alpha/artifacts/docker/images/describe +++ b/gcloud/alpha/artifacts/docker/images/describe @@ -7,7 +7,7 @@ SYNOPSIS [--metadata-filter=METADATA_FILTER] [--show-all-metadata] [--show-build-details] [--show-deployment] [--show-image-basis] [--show-package-vulnerability] [--show-provenance] - [GCLOUD_WIDE_FLAG ...] + [--show-sbom-references] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Reference an image by tag or digest using the format: @@ -70,6 +70,9 @@ FLAGS provenance_summary section. To see all build metadata in the output, use --show-all-metadata or --show-build-details. + --show-sbom-references + Include SBOM metadata in the output. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/artifacts/go/help b/gcloud/alpha/artifacts/go/help new file mode 100644 index 000000000..0d9f6342a --- /dev/null +++ b/gcloud/alpha/artifacts/go/help @@ -0,0 +1,30 @@ +NAME + gcloud alpha artifacts go - manage Artifact Registry Go modules + +SYNOPSIS + gcloud alpha artifacts go COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Manage Artifact Registry Go modules. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + upload + (ALPHA) Upload a Go module to an artifact repository. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud artifacts go + + $ gcloud beta artifacts go + diff --git a/gcloud/alpha/artifacts/go/upload b/gcloud/alpha/artifacts/go/upload new file mode 100644 index 000000000..4cd56f2fb --- /dev/null +++ b/gcloud/alpha/artifacts/go/upload @@ -0,0 +1,86 @@ +NAME + gcloud alpha artifacts go upload - upload a Go module to an artifact + repository + +SYNOPSIS + gcloud alpha artifacts go upload --module-path=MODULE_PATH + --version=VERSION [--async] [--source=SOURCE; default="."] + [--location=LOCATION --repository=REPOSITORY] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Upload a Go module to an artifact repository. + +EXAMPLES + To upload version v0.1.0 of a Go module located in /path/to/code/ to a + repository in "us-central1": + + $ gcloud alpha artifacts go upload --location=us-central1 \ + --project=myproject --repository=myrepo \ + --module-path=the/module/path --version=v0.1.0 \ + --source=/path/to/code + +REQUIRED FLAGS + --module-path=MODULE_PATH + The module path of the Go module. + + --version=VERSION + The version of the Go module. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --source=SOURCE; default="." + The root directory of the go module source code, defaults to the + current directory. + + Repository resource - The Artifact Registry repository. If not specified, + the current artifacts/repository is used. The arguments in this group can + be used to specify the attributes of this resource. (NOTE) Some attributes + are not given arguments in this group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument --repository on the command line with a fully + specified name; + ◆ set the property artifacts/repository with a fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + --location=LOCATION + Location of the repository. + + To set the location attribute: + ▸ provide the argument --repository on the command line with a + fully specified name; + ▸ set the property artifacts/repository with a fully specified + name; + ▸ provide the argument --location on the command line; + ▸ set the property artifacts/location. + + --repository=REPOSITORY + ID of the repository or fully qualified identifier for the + repository. + + To set the repository attribute: + ▸ provide the argument --repository on the command line; + ▸ set the property artifacts/repository. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud artifacts go upload + + $ gcloud beta artifacts go upload + diff --git a/gcloud/alpha/artifacts/help b/gcloud/alpha/artifacts/help index 28962776b..c9090fbe5 100644 --- a/gcloud/alpha/artifacts/help +++ b/gcloud/alpha/artifacts/help @@ -24,6 +24,9 @@ GROUPS files (ALPHA) Manage Artifact Registry files. + go + (ALPHA) Manage Artifact Registry Go modules. + locations (ALPHA) Manage Artifact Registry resource locations. diff --git a/gcloud/alpha/bigtable/backups/create b/gcloud/alpha/bigtable/backups/create index 49e432dc6..2ce421a59 100644 --- a/gcloud/alpha/bigtable/backups/create +++ b/gcloud/alpha/bigtable/backups/create @@ -74,13 +74,13 @@ REQUIRED FLAGS Exactly one of these must be specified: --expiration-date=EXPIRATION_DATE - Absolute expiration time of the backup, must be at least 6 hours and - at most 30 days from the time the request is received. See $ gcloud + Absolute expiration time of the backup; must be at least 6 hours and + at most 90 days from the time the request is received. See $ gcloud topic datetimes for information on date/time formats. --retention-period=RETENTION_PERIOD - Retention period of the backup relative from now, must be at least 6 - hours and at most 30 days. See $ gcloud topic datetimes for + Retention period of the backup relative from now; must be at least 6 + hours and at most 90 days. See $ gcloud topic datetimes for information on duration formats. OPTIONAL FLAGS diff --git a/gcloud/alpha/bigtable/backups/update b/gcloud/alpha/bigtable/backups/update index 2317ff957..3ad12b22a 100644 --- a/gcloud/alpha/bigtable/backups/update +++ b/gcloud/alpha/bigtable/backups/update @@ -62,13 +62,13 @@ REQUIRED FLAGS Exactly one of these must be specified: --expiration-date=EXPIRATION_DATE - Absolute expiration time of the backup, must be at least 6 hours and - at most 30 days from the time the request is received. See $ gcloud + Absolute expiration time of the backup; must be at least 6 hours and + at most 90 days from the time the request is received. See $ gcloud topic datetimes for information on date/time formats. --retention-period=RETENTION_PERIOD - Retention period of the backup relative from now, must be at least 6 - hours and at most 30 days from backup creation time. See $ gcloud + Retention period of the backup relative from now; must be at least 6 + hours and at most 90 days from backup creation time. See $ gcloud topic datetimes for information on duration formats. See $ gcloud bigtable backups describe for creation time. diff --git a/gcloud/alpha/blockchain-node-engine/locations/describe b/gcloud/alpha/blockchain-node-engine/locations/describe index af90ed792..651d5af70 100644 --- a/gcloud/alpha/blockchain-node-engine/locations/describe +++ b/gcloud/alpha/blockchain-node-engine/locations/describe @@ -47,8 +47,8 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. API REFERENCE - This command uses the blockchainnodeengine/v1alpha1 API. The full - documentation for this API can be found at: + This command uses the blockchainnodeengine/v1 API. The full documentation + for this API can be found at: https://cloud.google.com/blockchain-node-engine NOTES diff --git a/gcloud/alpha/blockchain-node-engine/locations/list b/gcloud/alpha/blockchain-node-engine/locations/list index c21f8747c..1fdacf0fb 100644 --- a/gcloud/alpha/blockchain-node-engine/locations/list +++ b/gcloud/alpha/blockchain-node-engine/locations/list @@ -51,8 +51,8 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. API REFERENCE - This command uses the blockchainnodeengine/v1alpha1 API. The full - documentation for this API can be found at: + This command uses the blockchainnodeengine/v1 API. The full documentation + for this API can be found at: https://cloud.google.com/blockchain-node-engine NOTES diff --git a/gcloud/alpha/blockchain-node-engine/nodes/create b/gcloud/alpha/blockchain-node-engine/nodes/create index 684ea0b8d..43e323f0d 100644 --- a/gcloud/alpha/blockchain-node-engine/nodes/create +++ b/gcloud/alpha/blockchain-node-engine/nodes/create @@ -111,8 +111,8 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. API REFERENCE - This command uses the blockchainnodeengine/v1alpha1 API. The full - documentation for this API can be found at: + This command uses the blockchainnodeengine/v1 API. The full documentation + for this API can be found at: https://cloud.google.com/blockchain-node-engine NOTES diff --git a/gcloud/alpha/blockchain-node-engine/nodes/delete b/gcloud/alpha/blockchain-node-engine/nodes/delete index 330880074..e51c5c7db 100644 --- a/gcloud/alpha/blockchain-node-engine/nodes/delete +++ b/gcloud/alpha/blockchain-node-engine/nodes/delete @@ -66,8 +66,8 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. API REFERENCE - This command uses the blockchainnodeengine/v1alpha1 API. The full - documentation for this API can be found at: + This command uses the blockchainnodeengine/v1 API. The full documentation + for this API can be found at: https://cloud.google.com/blockchain-node-engine NOTES diff --git a/gcloud/alpha/blockchain-node-engine/nodes/describe b/gcloud/alpha/blockchain-node-engine/nodes/describe index 09b98e7cc..de2f85ec7 100644 --- a/gcloud/alpha/blockchain-node-engine/nodes/describe +++ b/gcloud/alpha/blockchain-node-engine/nodes/describe @@ -55,8 +55,8 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. API REFERENCE - This command uses the blockchainnodeengine/v1alpha1 API. The full - documentation for this API can be found at: + This command uses the blockchainnodeengine/v1 API. The full documentation + for this API can be found at: https://cloud.google.com/blockchain-node-engine NOTES diff --git a/gcloud/alpha/blockchain-node-engine/nodes/list b/gcloud/alpha/blockchain-node-engine/nodes/list index 2b746c793..c3e8087c0 100644 --- a/gcloud/alpha/blockchain-node-engine/nodes/list +++ b/gcloud/alpha/blockchain-node-engine/nodes/list @@ -80,8 +80,8 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. API REFERENCE - This command uses the blockchainnodeengine/v1alpha1 API. The full - documentation for this API can be found at: + This command uses the blockchainnodeengine/v1 API. The full documentation + for this API can be found at: https://cloud.google.com/blockchain-node-engine NOTES diff --git a/gcloud/alpha/blockchain-node-engine/operations/describe b/gcloud/alpha/blockchain-node-engine/operations/describe index 1bf27574e..8f36a9d79 100644 --- a/gcloud/alpha/blockchain-node-engine/operations/describe +++ b/gcloud/alpha/blockchain-node-engine/operations/describe @@ -56,8 +56,8 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. API REFERENCE - This command uses the blockchainnodeengine/v1alpha1 API. The full - documentation for this API can be found at: + This command uses the blockchainnodeengine/v1 API. The full documentation + for this API can be found at: https://cloud.google.com/blockchain-node-engine NOTES diff --git a/gcloud/alpha/blockchain-node-engine/operations/list b/gcloud/alpha/blockchain-node-engine/operations/list index 682d5bd80..f123ae83f 100644 --- a/gcloud/alpha/blockchain-node-engine/operations/list +++ b/gcloud/alpha/blockchain-node-engine/operations/list @@ -75,8 +75,8 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. API REFERENCE - This command uses the blockchainnodeengine/v1alpha1 API. The full - documentation for this API can be found at: + This command uses the blockchainnodeengine/v1 API. The full documentation + for this API can be found at: https://cloud.google.com/blockchain-node-engine NOTES diff --git a/gcloud/alpha/builds/connections/create/gitlab b/gcloud/alpha/builds/connections/create/gitlab new file mode 100644 index 000000000..e23983934 --- /dev/null +++ b/gcloud/alpha/builds/connections/create/gitlab @@ -0,0 +1,153 @@ +NAME + gcloud alpha builds connections create gitlab - create a Cloud Build + Connection for gitlab.com or GitLab Enterprise + +SYNOPSIS + gcloud alpha builds connections create gitlab + (CONNECTION : --region=REGION) + --authorizer-token-secret-version=AUTHORIZER_TOKEN_SECRET_VERSION + --read-authorizer-token-secret-version=READ_AUTHORIZER_TOKEN_SECRET_VERSION + --webhook-secret-secret-version=WEBHOOK_SECRET_SECRET_VERSION [--async] + [--host-uri=HOST_URI] + [--service-directory-service=SERVICE_DIRECTORY_SERVICE + : --ssl-ca-file=SSL_CA_FILE] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Create a Cloud Build Connection for gitlab.com or GitLab + Enterprise. + + A gitlab.com or GitLab Enterprise Connection can be created by using a + personal access token with api scope permission. A read_repository scoped + personal access token will also be required on gitlab.com or if the + self-hosted GitLab server doesn't support project access token (GitLab + Enterprise server version < 13.10). + + If the GitLab Enterprise server can only be accessed within a VPC, a + Service Directory service resource can be provided for connecting to it. + +EXAMPLES + To create a GitLab connection for gitlab.com, provide all the required + parameters: + + $ gcloud alpha builds connections create gitlab my-gitlab-conn \ + --project=myproj --region=us-central1 \ + --read-authorizer-token-secret-version=projects/myproj/secrets/\ + read-pat/versions/1 \ + --authorizer-token-secret-version=projects/myproj/secrets/\ + api-pat/versions/1 \ + --webhook-secret-secret-version=projects/myproj/secrets/\ + whsecret/versions/1 + + To create a GitLab connection for a GitLab server, provide host-uri + parameter as well: + + $ gcloud alpha builds connections create gitlab my-gle-conn \ + --host-uri=https://my.gle-server.net --project=myproj \ + --region=us-central1 \ + --authorizer-token-secret-version=projects/myproj/secrets/\ + api-pat/versions/1 \ + --read-authorizer-token-secret-version=projects/myproj/secrets/\ + read-pat/versions/1 \ + --webhook-secret-secret-version=projects/myproj/secrets/\ + whsecret/versions/1 + + To create a GitLab connection for a private GitLab server. provide the + service-directory-service and ssl-ca-file as well: + + $ gcloud alpha builds connections create gitlab my-gle-conn \ + --host-uri=https://my.private-gle-server.net --project=myproj \ + --region=us-central1 \ + --service-directory-service=projects/myproj/namespaces/x/\ + services/mysds --ssl-ca-file=mycertificate.crt \ + --authorizer-token-secret-version=projects/myproj/secrets/\ + api-pat/versions/1 \ + --read-authorizer-token-secret-version=projects/myproj/secrets/\ + read-pat/versions/1 \ + --webhook-secret-secret-version=projects/myproj/secrets/\ + whsecret/versions/1 + +POSITIONAL ARGUMENTS + Connection resource - Connection to create. The arguments in this group + can be used to specify the attributes of this resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. + + To set the project attribute: + ◆ provide the argument connection on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + CONNECTION + ID of the connection or fully qualified identifier for the + connection. + + To set the connection attribute: + ▸ provide the argument connection on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + The Google Cloud region. + + To set the region attribute: + ▸ provide the argument connection on the command line with a fully + specified name; + ▸ provide the argument --region on the command line; + ▸ set the property builds/region. + +REQUIRED FLAGS + --authorizer-token-secret-version=AUTHORIZER_TOKEN_SECRET_VERSION + Secret containing the api personal access token. + + --read-authorizer-token-secret-version=READ_AUTHORIZER_TOKEN_SECRET_VERSION + Secret containing the read_api personal access token. + + --webhook-secret-secret-version=WEBHOOK_SECRET_SECRET_VERSION + Secret containing the webhook secret string for validating webhook + events sent by GitLab. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --host-uri=HOST_URI + URI of the GitLab instance. + + Group of arguments for configuring access through Service Directory. + + --service-directory-service=SERVICE_DIRECTORY_SERVICE + Service Directory service resource to use for accessing the + gitlab.com or GitLab Enterprise Server. Necessary only if the server + has no public access from the internet. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --ssl-ca-file=SSL_CA_FILE + File containing the SSL_CA to be used. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the cloudbuild/v2 API. The full documentation for this + API can be found at: https://cloud.google.com/cloud-build/docs/ + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta builds connections create gitlab + diff --git a/gcloud/alpha/builds/connections/create/help b/gcloud/alpha/builds/connections/create/help index 362ad5352..8f74bd355 100644 --- a/gcloud/alpha/builds/connections/create/help +++ b/gcloud/alpha/builds/connections/create/help @@ -22,6 +22,10 @@ COMMANDS github-enterprise (ALPHA) Create a Cloud Build Connection of type GitHub Enterprise. + gitlab + (ALPHA) Create a Cloud Build Connection for gitlab.com or GitLab + Enterprise. + NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct diff --git a/gcloud/alpha/builds/connections/update/gitlab b/gcloud/alpha/builds/connections/update/gitlab new file mode 100644 index 000000000..39949df1b --- /dev/null +++ b/gcloud/alpha/builds/connections/update/gitlab @@ -0,0 +1,107 @@ +NAME + gcloud alpha builds connections update gitlab - update a Cloud Build + Connection of type gitlab.com or GitLab Enterprise + +SYNOPSIS + gcloud alpha builds connections update gitlab + (CONNECTION : --region=REGION) [--async] + [--authorizer-token-secret-version=AUTHORIZER_TOKEN_SECRET_VERSION] + [--host-uri=HOST_URI] + [--read-authorizer-token-secret-version=READ_AUTHORIZER_TOKEN_SECRET_VERSION] + [--service-directory-service=SERVICE_DIRECTORY_SERVICE] + [--ssl-ca-file=SSL_CA_FILE] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Update a Cloud Build Connection of type gitlab.com or GitLab + Enterprise. + +EXAMPLES + To update the ssl_ca, provide the connection name and the ssl_ca file: + + $ gcloud alpha builds connections update gitlab my-gle-conn \ + --region=us-west1 --ssl-ca-file=mycertificate.crt + + To update the authorization token, provide the connection name and the new + authorization token secret version. + + $ gcloud alpha builds connections update gitlab my-gle-conn \ + --region=us-west1 \ + --authorizer-token-secret-version=projects/myproj/secrets/\ + api-pat/versions/1 + +POSITIONAL ARGUMENTS + Connection resource - Connection to update. The arguments in this group + can be used to specify the attributes of this resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. + + To set the project attribute: + ◆ provide the argument connection on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + CONNECTION + ID of the connection or fully qualified identifier for the + connection. + + To set the connection attribute: + ▸ provide the argument connection on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + The Google Cloud region. + + To set the region attribute: + ▸ provide the argument connection on the command line with a fully + specified name; + ▸ provide the argument --region on the command line; + ▸ set the property builds/region. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --authorizer-token-secret-version=AUTHORIZER_TOKEN_SECRET_VERSION + Secret containing the api personal access token. + + --host-uri=HOST_URI + URI of the GitLab instance. + + --read-authorizer-token-secret-version=READ_AUTHORIZER_TOKEN_SECRET_VERSION + Secret containing the read_repository personal access token. Required + for GitLab Enterprise versions older than 13.10. + + --service-directory-service=SERVICE_DIRECTORY_SERVICE + Service Directory service resource to use for accessing the GitLab + Enterprise Server. Necessary only if the server has no public access + from the internet. + + --ssl-ca-file=SSL_CA_FILE + File containing the SSL_CA to be used. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the cloudbuild/v2 API. The full documentation for this + API can be found at: https://cloud.google.com/cloud-build/docs/ + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta builds connections update gitlab + diff --git a/gcloud/alpha/builds/connections/update/help b/gcloud/alpha/builds/connections/update/help index 6595f5b63..51333a224 100644 --- a/gcloud/alpha/builds/connections/update/help +++ b/gcloud/alpha/builds/connections/update/help @@ -22,6 +22,10 @@ COMMANDS github-enterprise (ALPHA) Update a Cloud Build Connection of type GitHub Enterprise. + gitlab + (ALPHA) Update a Cloud Build Connection of type gitlab.com or GitLab + Enterprise. + NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct diff --git a/gcloud/alpha/compute/addresses/create b/gcloud/alpha/compute/addresses/create index 2fa507ea7..87e237b97 100644 --- a/gcloud/alpha/compute/addresses/create +++ b/gcloud/alpha/compute/addresses/create @@ -19,8 +19,8 @@ DESCRIPTION EXAMPLES To reserve three IP addresses in the 'us-central1' region, run: - $ gcloud alpha compute addresses create ADDRESS-1 ADDRESS-2 \ - ADDRESS-3 --region=us-central1 + $ gcloud alpha compute addresses create address-1 address-2 \ + address-3 --region=us-central1 To reserve ephemeral IP addresses '162.222.181.198' and '23.251.146.189' which are being used by virtual machine instances in the 'us-central1' @@ -31,36 +31,36 @@ EXAMPLES In the above invocation, the two addresses will be assigned random names. - To reserve an IP address from the subnet 'default' in the 'us-central1' - region, run: + To reserve an IP address named subnet-address-1 from the subnet 'default' + in the 'us-central1' region, run: - $ gcloud alpha compute addresses create SUBNET-ADDRESS-1 \ + $ gcloud alpha compute addresses create subnet-address-1 \ --region=us-central1 --subnet=default To reserve an IP address that can be used by multiple internal load balancers from the subnet 'default' in the 'us-central1' region, run: - $ gcloud alpha compute addresses create SHARED-ADDRESS-1 \ + $ gcloud alpha compute addresses create shared-address-1 \ --region=us-central1 --subnet=default \ --purpose=SHARED_LOADBALANCER_VIP To reserve an IP range '10.110.0.0/16' from the network 'default' for 'VPC_PEERING', run: - $ gcloud alpha compute addresses create IP-RANGE-1 --global \ + $ gcloud alpha compute addresses create ip-range-1 --global \ --addresses=10.110.0.0 --prefix-length=16 \ --purpose=VPC_PEERING --network=default To reserve any IP range with prefix length '16' from the network 'default' for 'VPC_PEERING', run: - $ gcloud alpha compute addresses create IP-RANGE-1 --global \ + $ gcloud alpha compute addresses create ip-range-1 --global \ --prefix-length=16 --purpose=VPC_PEERING --network=default To reserve an address from network 'default' for PRIVATE_SERVICE_CONNECT, run: - $ gcloud alpha compute addresses create PSC-ADDRESS-1 --global \ + $ gcloud alpha compute addresses create psc-address-1 --global \ --addresses=10.110.0.10 --purpose=PRIVATE_SERVICE_CONNECT \ --network=default diff --git a/gcloud/alpha/compute/addresses/delete b/gcloud/alpha/compute/addresses/delete index 869930bb8..eb26168a0 100644 --- a/gcloud/alpha/compute/addresses/delete +++ b/gcloud/alpha/compute/addresses/delete @@ -17,7 +17,7 @@ EXAMPLES To release two addresses with the names 'address-name1' and 'address-name2', run: - $ gcloud alpha compute addresses delete addressname1 address-name2 + $ gcloud alpha compute addresses delete address-name1 address-name2 POSITIONAL ARGUMENTS NAME [NAME ...] diff --git a/gcloud/alpha/compute/addresses/describe b/gcloud/alpha/compute/addresses/describe index d866d7488..caef673d1 100644 --- a/gcloud/alpha/compute/addresses/describe +++ b/gcloud/alpha/compute/addresses/describe @@ -13,11 +13,11 @@ DESCRIPTION EXAMPLES To get details about a global address, run: - $ gcloud alpha compute addresses describe ADDRESS --global + $ gcloud alpha compute addresses describe my-address-name --global To get details about a regional address, run: - $ gcloud alpha compute addresses describe ADDRESS \ + $ gcloud alpha compute addresses describe my-address-name \ --region=us-central1 POSITIONAL ARGUMENTS diff --git a/gcloud/alpha/compute/backend-services/add-backend b/gcloud/alpha/compute/backend-services/add-backend index 0ab48f0c8..d7f7d8c68 100644 --- a/gcloud/alpha/compute/backend-services/add-backend +++ b/gcloud/alpha/compute/backend-services/add-backend @@ -13,7 +13,8 @@ SYNOPSIS | --network-endpoint-group-zone=NETWORK_ENDPOINT_GROUP_ZONE]) [--balancing-mode=BALANCING_MODE] [--capacity-scaler=CAPACITY_SCALER] [--description=DESCRIPTION] [--failover] - [--max-utilization=MAX_UTILIZATION] [--global | --region=REGION] + [--max-utilization=MAX_UTILIZATION] [--preference=PREFERENCE] + [--global | --region=REGION] [--max-connections=MAX_CONNECTIONS | --max-connections-per-endpoint=MAX_CONNECTIONS_PER_ENDPOINT | --max-connections-per-instance=MAX_CONNECTIONS_PER_INSTANCE @@ -232,6 +233,22 @@ OPTIONAL FLAGS capacity. For usage guidelines, see Balancing mode combinations (https://cloud.google.com/load-balancing/docs/backend-service#balancing-mode-combos). + --preference=PREFERENCE + Defines whether this backend should be fully utilized before sending + traffic to backends with default preference. This cannot be used with + regional managed instance groups and when the endpoint type of an + attached network endpoint group is INTERNET_IP_PORT, + INTERNET_FQDN_PORT, or SERVERLESS. PREFERENCE must be one of: + + DEFAULT + If preferred backends don't have enough capacity, backends in this + layer would be used and traffic would be assigned based on the load + balancing algorithm you use. This is the default. + + PREFERRED + Backends with this preference level will be filled up to their + capacity limits first, based on RTT. + At most one of these can be specified: --global diff --git a/gcloud/alpha/compute/backend-services/update-backend b/gcloud/alpha/compute/backend-services/update-backend index 067c0bb29..b5b205fcd 100644 --- a/gcloud/alpha/compute/backend-services/update-backend +++ b/gcloud/alpha/compute/backend-services/update-backend @@ -11,7 +11,8 @@ SYNOPSIS : --network-endpoint-group-zone=NETWORK_ENDPOINT_GROUP_ZONE]) [--balancing-mode=BALANCING_MODE] [--capacity-scaler=CAPACITY_SCALER] [--description=DESCRIPTION] [--failover] - [--max-utilization=MAX_UTILIZATION] [--global | --region=REGION] + [--max-utilization=MAX_UTILIZATION] [--preference=PREFERENCE] + [--global | --region=REGION] [--max-connections=MAX_CONNECTIONS | --max-connections-per-endpoint=MAX_CONNECTIONS_PER_ENDPOINT | --max-connections-per-instance=MAX_CONNECTIONS_PER_INSTANCE @@ -201,6 +202,22 @@ OPTIONAL FLAGS capacity. For usage guidelines, see Balancing mode combinations (https://cloud.google.com/load-balancing/docs/backend-service#balancing-mode-combos). + --preference=PREFERENCE + Defines whether this backend should be fully utilized before sending + traffic to backends with default preference. This cannot be used with + regional managed instance groups and when the endpoint type of an + attached network endpoint group is INTERNET_IP_PORT, + INTERNET_FQDN_PORT, or SERVERLESS. PREFERENCE must be one of: + + DEFAULT + If preferred backends don't have enough capacity, backends in this + layer would be used and traffic would be assigned based on the load + balancing algorithm you use. This is the default. + + PREFERRED + Backends with this preference level will be filled up to their + capacity limits first, based on RTT. + At most one of these can be specified: --global diff --git a/gcloud/alpha/compute/disks/create b/gcloud/alpha/compute/disks/create index a9004fe55..abad1a533 100644 --- a/gcloud/alpha/compute/disks/create +++ b/gcloud/alpha/compute/disks/create @@ -3,8 +3,8 @@ NAME SYNOPSIS gcloud alpha compute disks create DISK_NAME [DISK_NAME ...] - [--architecture=ARCHITECTURE] [--csek-key-file=FILE] - [--description=DESCRIPTION] [--enable-confidential-compute] + [--architecture=ARCHITECTURE] [--confidential-compute] + [--csek-key-file=FILE] [--description=DESCRIPTION] [--erase-windows-vss-signature] [--guest-os-features=[GUEST_OS_FEATURE,...]] [--interface=INTERFACE] [--labels=[KEY=VALUE,...]] [--licenses=[LICENSE,...]] [--multi-writer] @@ -68,6 +68,10 @@ FLAGS https://cloud.google.com/compute/docs/cpu-platforms. ARCHITECTURE must be one of: ARM64, X86_64. + --confidential-compute + Create the disk in confidential compute mode, CMEK layer is required + and only applicable to HyperDisk series. + --csek-key-file=FILE Path to a Customer-Supplied Encryption Key (CSEK) key file that maps Compute Engine resources to user managed keys to be used when creating, @@ -80,10 +84,6 @@ FLAGS --description=DESCRIPTION An optional, textual description for the disks being created. - --enable-confidential-compute - Create the disk in confidential compute mode, CMEK layer is required - and only applicable to HyperDisk series. - --erase-windows-vss-signature Specifies whether the disk restored from a source snapshot should erase Windows specific VSS signature. See diff --git a/gcloud/alpha/compute/instances/add-partner-metadata b/gcloud/alpha/compute/instances/add-partner-metadata new file mode 100644 index 000000000..51f24495a --- /dev/null +++ b/gcloud/alpha/compute/instances/add-partner-metadata @@ -0,0 +1,95 @@ +NAME + gcloud alpha compute instances add-partner-metadata - add or update or + patch partner metadata + +SYNOPSIS + gcloud alpha compute instances add-partner-metadata INSTANCE_NAME + [--partner-metadata=[KEY=VALUE,...]] + [--partner-metadata-from-file=LOCAL_FILE_PATH] [--zone=ZONE] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) gcloud alpha compute instances add-partner-metadata can be used to + add or update or patch partner metadata of a virtual machine instance. + Every instance has access to a metadata server that can be used to query + partner metadata that has been set through this tool. For information on + metadata, see + + Only Namespaces keys that are provided are mutated. Existing Namespaces + entries will remain unaffected. + + In order to retrieve partner metadata, run: + + $ gcloud compute instances describe example-instance --zone + us-central1-a --format="value(partnerMetadata)" + + where example-instance is the name of the virtual machine instance you're + querying partner metadata from. + +EXAMPLES + To add partner metadata under namespace gcar.googleapis.com/engine to + instance TEST_INSTANCE run: + + $ gcloud alpha compute instances add-partner-metadata \ + TEST_INSTANCE \ + --partner-metadata=gcar.googleapis.com/engine="{ "engine": { \ + "type": V8 } }" + + To add partner metadata from a file: + + $ gcloud alpha compute instances add-partner-metadata \ + TEST_INSTANCE --partner-metadata-from-file=examples/engine.json + +POSITIONAL ARGUMENTS + INSTANCE_NAME + Name of the instance to set partner metadata on. For details on valid + instance names, refer to the criteria documented under the field 'name' + at: https://cloud.google.com/compute/docs/reference/rest/v1/instances + +FLAGS + --partner-metadata=[KEY=VALUE,...] + Partner Metadata assigned to the instance. A map from a + subdomain(namespace) to entries map. + + --partner-metadata-from-file=LOCAL_FILE_PATH + path to json local file which including the definintion of partner + metadata. + + --zone=ZONE + Zone of the instance to set partner metadata on. If not specified, you + might be prompted to select a zone (interactive mode only). gcloud + attempts to identify the appropriate zone by searching for resources in + your currently active project. If the zone cannot be determined, gcloud + prompts you for a selection with all available Google Cloud Platform + zones. + + To avoid prompting when this flag is omitted, the user can set the + compute/zone property: + + $ gcloud config set compute/zone ZONE + + A list of zones can be fetched by running: + + $ gcloud compute zones list + + To unset the property, run: + + $ gcloud config unset compute/zone + + Alternatively, the zone can be stored in the environment variable + CLOUDSDK_COMPUTE_ZONE. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/compute/instances/create b/gcloud/alpha/compute/instances/create index f8f5f0d0a..4bc2c4d81 100644 --- a/gcloud/alpha/compute/instances/create +++ b/gcloud/alpha/compute/instances/create @@ -69,7 +69,9 @@ SYNOPSIS : --custom-extensions --custom-vm-type=CUSTOM_VM_TYPE] [--image-family-scope=IMAGE_FAMILY_SCOPE --image-project=IMAGE_PROJECT --image=IMAGE - | --image-family=IMAGE_FAMILY | --source-snapshot=SOURCE_SNAPSHOT] + | --image-family=IMAGE_FAMILY + | --source-instant-snapshot=SOURCE_INSTANT_SNAPSHOT + | --source-snapshot=SOURCE_SNAPSHOT] [--instance-kms-key=INSTANCE_KMS_KEY : --instance-kms-keyring=INSTANCE_KMS_KEYRING --instance-kms-location=INSTANCE_KMS_LOCATION @@ -383,6 +385,13 @@ FLAGS source snapshot. Must be specified with source-snapshot-csek-required. + source-instant-snapshot + The source disk instant snapshot that will be used to create the + disk. You can provide this as a full URL to the instant snapshot. + For example, the following is a valid value: + + ▸ https://compute.googleapis.com/compute/v1/projects/myproject/zones/myzone/instantSnapshots/instantSnapshot + image-csek-required Specifies the name of the CSK protected image that the disk will be initialized with. A new disk will be created based on the given @@ -1082,6 +1091,13 @@ FLAGS By default, debian-11 is assumed for this flag. + --source-instant-snapshot=SOURCE_INSTANT_SNAPSHOT + The name of the source disk instant snapshot that the instance boot + disk will be created from. You can provide this as a full URL to the + instant snapshot. For example, the following is a valid value: + + ▸ https://compute.googleapis.com/compute/v1/projects/myproject/zones/my-zone/instantSnapshots/instant-snapshot + --source-snapshot=SOURCE_SNAPSHOT The name of the source disk snapshot that the instance boot disk will be created from. You can provide this as a full URL to the snapshot diff --git a/gcloud/alpha/compute/instances/help b/gcloud/alpha/compute/instances/help index 7fdb0e7f1..b694884a3 100644 --- a/gcloud/alpha/compute/instances/help +++ b/gcloud/alpha/compute/instances/help @@ -59,6 +59,9 @@ COMMANDS add-metadata (ALPHA) Add or update instance metadata. + add-partner-metadata + (ALPHA) add or update or patch partner metadata. + add-resource-policies (ALPHA) Add resource policies to Compute Engine VM instances. @@ -115,6 +118,9 @@ COMMANDS (ALPHA) Move an instance and its attached persistent disks between zones. + patch-partner-metadata + (ALPHA) patch partner metadata. + perform-maintenance (ALPHA) Perform maintenance of Google Compute Engine instance. @@ -128,6 +134,9 @@ COMMANDS remove-metadata (ALPHA) Remove instance metadata. + remove-partner-metadata + (ALPHA) remove partner metadata namespace. + remove-resource-policies (ALPHA) Remove resource policies from Compute Engine VM instances. diff --git a/gcloud/alpha/compute/instances/patch-partner-metadata b/gcloud/alpha/compute/instances/patch-partner-metadata new file mode 100644 index 000000000..7b2d2d07c --- /dev/null +++ b/gcloud/alpha/compute/instances/patch-partner-metadata @@ -0,0 +1,95 @@ +NAME + gcloud alpha compute instances patch-partner-metadata - patch partner + metadata + +SYNOPSIS + gcloud alpha compute instances patch-partner-metadata INSTANCE_NAME + [--partner-metadata=[KEY=VALUE,...]] + [--partner-metadata-from-file=LOCAL_FILE_PATH] [--zone=ZONE] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) gcloud alpha compute instances patch-partner-metadata can be used + to add or patch partner metadata of a virtual machine instance. Every + instance has access to a metadata server that can be used to query partner + metadata that has been set through this tool. For information on metadata, + see + + Only Namespaces keys that are provided are mutated. Existing Namespaces + entries will remain unaffected. + + In order to retrieve partner metadata, run: + + $ gcloud compute instances describe example-instance --zone + us-central1-a --format="value(partnerMetadata)" + + where example-instance is the name of the virtual machine instance you're + querying partner metadata from. + +EXAMPLES + To add partner metadata under namespace gcar.googleapis.com/engine to + instance TEST_INSTANCE run: + + $ gcloud alpha compute instances patch-partner-metadata \ + TEST_INSTANCE \ + --partner-metadata=gcar.googleapis.com/engine="{ "engine": { \ + "type": V8 } }" + + To add partner metadata from a file: + + $ gcloud alpha compute instances add-partner-metadata \ + TEST_INSTANCE --partner-metadata-from-file=examples/engine.json + +POSITIONAL ARGUMENTS + INSTANCE_NAME + Name of the instance to set partner metadata on. For details on valid + instance names, refer to the criteria documented under the field 'name' + at: https://cloud.google.com/compute/docs/reference/rest/v1/instances + +FLAGS + --partner-metadata=[KEY=VALUE,...] + Partner Metadata assigned to the instance. A map from a + subdomain(namespace) to entries map. + + --partner-metadata-from-file=LOCAL_FILE_PATH + path to json local file which including the definintion of partner + metadata. + + --zone=ZONE + Zone of the instance to set partner metadata on. If not specified, you + might be prompted to select a zone (interactive mode only). gcloud + attempts to identify the appropriate zone by searching for resources in + your currently active project. If the zone cannot be determined, gcloud + prompts you for a selection with all available Google Cloud Platform + zones. + + To avoid prompting when this flag is omitted, the user can set the + compute/zone property: + + $ gcloud config set compute/zone ZONE + + A list of zones can be fetched by running: + + $ gcloud compute zones list + + To unset the property, run: + + $ gcloud config unset compute/zone + + Alternatively, the zone can be stored in the environment variable + CLOUDSDK_COMPUTE_ZONE. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/compute/instances/remove-partner-metadata b/gcloud/alpha/compute/instances/remove-partner-metadata new file mode 100644 index 000000000..723e5203c --- /dev/null +++ b/gcloud/alpha/compute/instances/remove-partner-metadata @@ -0,0 +1,77 @@ +NAME + gcloud alpha compute instances remove-partner-metadata - remove partner + metadata namespace + +SYNOPSIS + gcloud alpha compute instances remove-partner-metadata INSTANCE_NAME + [--zone=ZONE] [--all | --keys=KEY,[KEY,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) gcloud alpha compute instances remove-partner-metadata can be used + to remove instance metadata entries. + +EXAMPLES + To remove partner metadata namespace gcar.googleapis.com/engine and + gcar.googleapis.com/body along with their data from an instance named + INSTANCE_NAME, run: + + $ gcloud alpha compute instances remove-partner-metadata \ + INSTANCE_NAME \ + --keys=gcar.googleapis.com/engine,gcar.googleapis.com/body + + To remove all namespaces, run: $ gcloud alpha compute instances remove-partner-metadata \ + INSTANCE_NAME --all + +POSITIONAL ARGUMENTS + INSTANCE_NAME + Name of the instance to set partner metadata on. For details on valid + instance names, refer to the criteria documented under the field 'name' + at: https://cloud.google.com/compute/docs/reference/rest/v1/instances + +FLAGS + --zone=ZONE + Zone of the instance to set partner metadata on. If not specified, you + might be prompted to select a zone (interactive mode only). gcloud + attempts to identify the appropriate zone by searching for resources in + your currently active project. If the zone cannot be determined, gcloud + prompts you for a selection with all available Google Cloud Platform + zones. + + To avoid prompting when this flag is omitted, the user can set the + compute/zone property: + + $ gcloud config set compute/zone ZONE + + A list of zones can be fetched by running: + + $ gcloud compute zones list + + To unset the property, run: + + $ gcloud config unset compute/zone + + Alternatively, the zone can be stored in the environment variable + CLOUDSDK_COMPUTE_ZONE. + + At most one of these can be specified: + + --all + If provided, all partner metadata namespaces are removed. + + --keys=KEY,[KEY,...] + The namespaces partner metadata to remove. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/compute/tpus/queued-resources/create b/gcloud/alpha/compute/tpus/queued-resources/create index 4c5482d80..2f22db0c6 100644 --- a/gcloud/alpha/compute/tpus/queued-resources/create +++ b/gcloud/alpha/compute/tpus/queued-resources/create @@ -17,8 +17,8 @@ SYNOPSIS [--reservation-host-organization=RESERVATION_HOST_ORGANIZATION] [--reservation-host-project=RESERVATION_HOST_PROJECT] [--reserved] [--scopes=[SCOPES,...]] [--service-account=SERVICE_ACCOUNT] - [--shielded-secure-boot] [--subnetwork=SUBNETWORK] [--tags=[TAGS,...]] - [--valid-after-duration=VALID_AFTER_DURATION] + [--shielded-secure-boot] [--spot] [--subnetwork=SUBNETWORK] + [--tags=[TAGS,...]] [--valid-after-duration=VALID_AFTER_DURATION] [--valid-after-time=VALID_AFTER_TIME] [--valid-until-duration=VALID_UNTIL_DURATION] [--valid-until-time=VALID_UNTIL_TIME] [GCLOUD_WIDE_FLAG ...] @@ -232,6 +232,9 @@ OPTIONAL FLAGS Specifies that the TPU instances are created with secure boot enabled. This implicitly makes them Shielded VM instances. + --spot + If provided, the Node requested here will be created as Spot VMs. + --subnetwork=SUBNETWORK Subnetwork that this TPU will be a part of. diff --git a/gcloud/alpha/compute/tpus/tpu-vm/update b/gcloud/alpha/compute/tpus/tpu-vm/update index 35f199f54..3f825b532 100644 --- a/gcloud/alpha/compute/tpus/tpu-vm/update +++ b/gcloud/alpha/compute/tpus/tpu-vm/update @@ -2,9 +2,10 @@ NAME gcloud alpha compute tpus tpu-vm update - update a Cloud TPU VM node SYNOPSIS - gcloud alpha compute tpus tpu-vm update (TPU : --zone=ZONE) [--async] - [--update-labels=[KEY=VALUE,...]] - [--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...] + gcloud alpha compute tpus tpu-vm update (TPU : --zone=ZONE) + [--add-tags=[TAGS,...]] [--async] [--update-labels=[KEY=VALUE,...]] + [--clear-labels | --remove-labels=[KEY,...]] + [--clear-tags | --remove-tags=[TAG,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Update a Cloud TPU VM node. @@ -64,6 +65,12 @@ POSITIONAL ARGUMENTS ▸ set the property compute/zone. FLAGS + --add-tags=[TAGS,...] + Tags to add to the TPU Node. Tags are used to identify valid sources or + targets for network firewalls. See + https://cloud.google.com/vpc/docs/add-remove-network-tags for more + details. + --async Return immediately, without waiting for the operation in progress to complete. @@ -95,6 +102,26 @@ FLAGS silently ignored. If --update-labels is also specified then --update-labels is applied first. + At most one of these can be specified: + + --clear-tags + Remove all tags. If --add-tags is also specified then --clear-tags is + applied first. + + For example, to remove all tags: + + $ gcloud alpha compute tpus tpu-vm update --clear-tags + + To remove all existing tags and create two new tags, 'foo' and 'bar': + + $ gcloud alpha compute tpus tpu-vm update --clear-tags \ + --add-tags foo,bar + + --remove-tags=[TAG,...] + List of tags to remove. If a tag does not exist it is silently + ignored. If --add-tags is also specified then --add-tags is applied + first. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/container/fleet/memberships/help b/gcloud/alpha/container/fleet/memberships/help index 8f8ef9fba..2098ddceb 100644 --- a/gcloud/alpha/container/fleet/memberships/help +++ b/gcloud/alpha/container/fleet/memberships/help @@ -21,6 +21,9 @@ GROUPS bindings (ALPHA) Membership Bindings for permissions. + support-access + (ALPHA) Membership used for support access. + COMMANDS COMMAND is one of the following: diff --git a/gcloud/alpha/container/fleet/memberships/support-access/describe b/gcloud/alpha/container/fleet/memberships/support-access/describe new file mode 100644 index 000000000..e12564533 --- /dev/null +++ b/gcloud/alpha/container/fleet/memberships/support-access/describe @@ -0,0 +1,64 @@ +NAME + gcloud alpha container fleet memberships support-access describe - describe + support access for the specified membership + +SYNOPSIS + gcloud alpha container fleet memberships support-access describe + (MEMBERSHIP_NAME : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +EXAMPLES + To describe support access for membership my-membership run: + + $ gcloud alpha container fleet memberships support-access describe \ + my-membership + +POSITIONAL ARGUMENTS + Membership resource - The group of arguments defining a membership. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument MEMBERSHIP_NAME on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + MEMBERSHIP_NAME + ID of the membership or fully qualified identifier for the + membership. + + To set the membership attribute: + ▸ provide the argument MEMBERSHIP_NAME on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location of the membership resource, e.g. us-central1. If not + specified, defaults to global. + + To set the location attribute: + ▸ provide the argument MEMBERSHIP_NAME on the command line with a + fully specified name; + ▸ provide the argument --location on the command line; + ▸ set the property gkehub/location. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta container fleet memberships support-access describe + diff --git a/gcloud/alpha/container/fleet/memberships/support-access/disable b/gcloud/alpha/container/fleet/memberships/support-access/disable new file mode 100644 index 000000000..88cfce44c --- /dev/null +++ b/gcloud/alpha/container/fleet/memberships/support-access/disable @@ -0,0 +1,64 @@ +NAME + gcloud alpha container fleet memberships support-access disable - disable + support access for the specified membership + +SYNOPSIS + gcloud alpha container fleet memberships support-access disable + (MEMBERSHIP_NAME : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +EXAMPLES + To disable support access for membership my-membership run: + + $ gcloud alpha container fleet memberships support-access disable \ + my-membership + +POSITIONAL ARGUMENTS + Membership resource - The group of arguments defining a membership. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument MEMBERSHIP_NAME on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + MEMBERSHIP_NAME + ID of the membership or fully qualified identifier for the + membership. + + To set the membership attribute: + ▸ provide the argument MEMBERSHIP_NAME on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location of the membership resource, e.g. us-central1. If not + specified, defaults to global. + + To set the location attribute: + ▸ provide the argument MEMBERSHIP_NAME on the command line with a + fully specified name; + ▸ provide the argument --location on the command line; + ▸ set the property gkehub/location. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta container fleet memberships support-access disable + diff --git a/gcloud/alpha/container/fleet/memberships/support-access/enable b/gcloud/alpha/container/fleet/memberships/support-access/enable new file mode 100644 index 000000000..5c25929fe --- /dev/null +++ b/gcloud/alpha/container/fleet/memberships/support-access/enable @@ -0,0 +1,64 @@ +NAME + gcloud alpha container fleet memberships support-access enable - enable + support access for the specified membership + +SYNOPSIS + gcloud alpha container fleet memberships support-access enable + (MEMBERSHIP_NAME : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +EXAMPLES + To enable support access for membership my-membership run: + + $ gcloud alpha container fleet memberships support-access enable \ + my-membership + +POSITIONAL ARGUMENTS + Membership resource - The group of arguments defining a membership. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument MEMBERSHIP_NAME on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + MEMBERSHIP_NAME + ID of the membership or fully qualified identifier for the + membership. + + To set the membership attribute: + ▸ provide the argument MEMBERSHIP_NAME on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location of the membership resource, e.g. us-central1. If not + specified, defaults to global. + + To set the location attribute: + ▸ provide the argument MEMBERSHIP_NAME on the command line with a + fully specified name; + ▸ provide the argument --location on the command line; + ▸ set the property gkehub/location. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta container fleet memberships support-access enable + diff --git a/gcloud/alpha/container/fleet/memberships/support-access/get-yaml b/gcloud/alpha/container/fleet/memberships/support-access/get-yaml new file mode 100644 index 000000000..0405a632c --- /dev/null +++ b/gcloud/alpha/container/fleet/memberships/support-access/get-yaml @@ -0,0 +1,71 @@ +NAME + gcloud alpha container fleet memberships support-access get-yaml - + generates YAML for anthos support RBAC policies + +SYNOPSIS + gcloud alpha container fleet memberships support-access get-yaml + (MEMBERSHIP_NAME : --location=LOCATION) + [--rbac-output-file=RBAC_OUTPUT_FILE] [GCLOUD_WIDE_FLAG ...] + +EXAMPLES + To generate the YAML for support access RBAC policies with membership + my-membership, run: + + $ gcloud alpha container fleet memberships support-access get-yaml \ + my-membership + +POSITIONAL ARGUMENTS + Membership resource - The group of arguments defining a membership. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument MEMBERSHIP_NAME on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + MEMBERSHIP_NAME + ID of the membership or fully qualified identifier for the + membership. + + To set the membership attribute: + ▸ provide the argument MEMBERSHIP_NAME on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location of the membership resource, e.g. us-central1. If not + specified, defaults to global. + + To set the location attribute: + ▸ provide the argument MEMBERSHIP_NAME on the command line with a + fully specified name; + ▸ provide the argument --location on the command line; + ▸ set the property gkehub/location. + +FLAGS + --rbac-output-file=RBAC_OUTPUT_FILE + If specified, the generated RBAC policy will be written to the + designated local file. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta container fleet memberships support-access get-yaml + diff --git a/gcloud/alpha/container/fleet/memberships/support-access/help b/gcloud/alpha/container/fleet/memberships/support-access/help new file mode 100644 index 000000000..9ed2e15bb --- /dev/null +++ b/gcloud/alpha/container/fleet/memberships/support-access/help @@ -0,0 +1,45 @@ +NAME + gcloud alpha container fleet memberships support-access - membership used + for support access + +SYNOPSIS + gcloud alpha container fleet memberships support-access COMMAND + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) This command group allows for manipulation of support access for + the specified membership. + +EXAMPLES + Manage support access: + + $ gcloud alpha container fleet memberships support-access --help + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + describe + (ALPHA) Describe support access for the specified membership. + + disable + (ALPHA) Disable support access for the specified membership. + + enable + (ALPHA) Enable support access for the specified membership. + + get-yaml + (ALPHA) Generates YAML for anthos support RBAC policies. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta container fleet memberships support-access + diff --git a/gcloud/alpha/container/hub/memberships/help b/gcloud/alpha/container/hub/memberships/help index 1aaec5253..dd930b8d2 100644 --- a/gcloud/alpha/container/hub/memberships/help +++ b/gcloud/alpha/container/hub/memberships/help @@ -21,6 +21,9 @@ GROUPS bindings (ALPHA) Membership Bindings for permissions. + support-access + (ALPHA) Membership used for support access. + COMMANDS COMMAND is one of the following: diff --git a/gcloud/alpha/container/hub/memberships/support-access/describe b/gcloud/alpha/container/hub/memberships/support-access/describe new file mode 100644 index 000000000..60c921aea --- /dev/null +++ b/gcloud/alpha/container/hub/memberships/support-access/describe @@ -0,0 +1,64 @@ +NAME + gcloud alpha container hub memberships support-access describe - describe + support access for the specified membership + +SYNOPSIS + gcloud alpha container hub memberships support-access describe + (MEMBERSHIP_NAME : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +EXAMPLES + To describe support access for membership my-membership run: + + $ gcloud alpha container hub memberships support-access describe \ + my-membership + +POSITIONAL ARGUMENTS + Membership resource - The group of arguments defining a membership. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument MEMBERSHIP_NAME on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + MEMBERSHIP_NAME + ID of the membership or fully qualified identifier for the + membership. + + To set the membership attribute: + ▸ provide the argument MEMBERSHIP_NAME on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location of the membership resource, e.g. us-central1. If not + specified, defaults to global. + + To set the location attribute: + ▸ provide the argument MEMBERSHIP_NAME on the command line with a + fully specified name; + ▸ provide the argument --location on the command line; + ▸ set the property gkehub/location. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta container hub memberships support-access describe + diff --git a/gcloud/alpha/container/hub/memberships/support-access/disable b/gcloud/alpha/container/hub/memberships/support-access/disable new file mode 100644 index 000000000..39223f872 --- /dev/null +++ b/gcloud/alpha/container/hub/memberships/support-access/disable @@ -0,0 +1,64 @@ +NAME + gcloud alpha container hub memberships support-access disable - disable + support access for the specified membership + +SYNOPSIS + gcloud alpha container hub memberships support-access disable + (MEMBERSHIP_NAME : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +EXAMPLES + To disable support access for membership my-membership run: + + $ gcloud alpha container hub memberships support-access disable \ + my-membership + +POSITIONAL ARGUMENTS + Membership resource - The group of arguments defining a membership. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument MEMBERSHIP_NAME on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + MEMBERSHIP_NAME + ID of the membership or fully qualified identifier for the + membership. + + To set the membership attribute: + ▸ provide the argument MEMBERSHIP_NAME on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location of the membership resource, e.g. us-central1. If not + specified, defaults to global. + + To set the location attribute: + ▸ provide the argument MEMBERSHIP_NAME on the command line with a + fully specified name; + ▸ provide the argument --location on the command line; + ▸ set the property gkehub/location. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta container hub memberships support-access disable + diff --git a/gcloud/alpha/container/hub/memberships/support-access/enable b/gcloud/alpha/container/hub/memberships/support-access/enable new file mode 100644 index 000000000..dcbacae92 --- /dev/null +++ b/gcloud/alpha/container/hub/memberships/support-access/enable @@ -0,0 +1,64 @@ +NAME + gcloud alpha container hub memberships support-access enable - enable + support access for the specified membership + +SYNOPSIS + gcloud alpha container hub memberships support-access enable + (MEMBERSHIP_NAME : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +EXAMPLES + To enable support access for membership my-membership run: + + $ gcloud alpha container hub memberships support-access enable \ + my-membership + +POSITIONAL ARGUMENTS + Membership resource - The group of arguments defining a membership. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument MEMBERSHIP_NAME on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + MEMBERSHIP_NAME + ID of the membership or fully qualified identifier for the + membership. + + To set the membership attribute: + ▸ provide the argument MEMBERSHIP_NAME on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location of the membership resource, e.g. us-central1. If not + specified, defaults to global. + + To set the location attribute: + ▸ provide the argument MEMBERSHIP_NAME on the command line with a + fully specified name; + ▸ provide the argument --location on the command line; + ▸ set the property gkehub/location. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta container hub memberships support-access enable + diff --git a/gcloud/alpha/container/hub/memberships/support-access/get-yaml b/gcloud/alpha/container/hub/memberships/support-access/get-yaml new file mode 100644 index 000000000..92cd9735d --- /dev/null +++ b/gcloud/alpha/container/hub/memberships/support-access/get-yaml @@ -0,0 +1,71 @@ +NAME + gcloud alpha container hub memberships support-access get-yaml - generates + YAML for anthos support RBAC policies + +SYNOPSIS + gcloud alpha container hub memberships support-access get-yaml + (MEMBERSHIP_NAME : --location=LOCATION) + [--rbac-output-file=RBAC_OUTPUT_FILE] [GCLOUD_WIDE_FLAG ...] + +EXAMPLES + To generate the YAML for support access RBAC policies with membership + my-membership, run: + + $ gcloud alpha container hub memberships support-access get-yaml \ + my-membership + +POSITIONAL ARGUMENTS + Membership resource - The group of arguments defining a membership. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument MEMBERSHIP_NAME on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + MEMBERSHIP_NAME + ID of the membership or fully qualified identifier for the + membership. + + To set the membership attribute: + ▸ provide the argument MEMBERSHIP_NAME on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location of the membership resource, e.g. us-central1. If not + specified, defaults to global. + + To set the location attribute: + ▸ provide the argument MEMBERSHIP_NAME on the command line with a + fully specified name; + ▸ provide the argument --location on the command line; + ▸ set the property gkehub/location. + +FLAGS + --rbac-output-file=RBAC_OUTPUT_FILE + If specified, the generated RBAC policy will be written to the + designated local file. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta container hub memberships support-access get-yaml + diff --git a/gcloud/alpha/container/hub/memberships/support-access/help b/gcloud/alpha/container/hub/memberships/support-access/help new file mode 100644 index 000000000..9169641c0 --- /dev/null +++ b/gcloud/alpha/container/hub/memberships/support-access/help @@ -0,0 +1,45 @@ +NAME + gcloud alpha container hub memberships support-access - membership used for + support access + +SYNOPSIS + gcloud alpha container hub memberships support-access COMMAND + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) This command group allows for manipulation of support access for + the specified membership. + +EXAMPLES + Manage support access: + + $ gcloud alpha container hub memberships support-access --help + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + describe + (ALPHA) Describe support access for the specified membership. + + disable + (ALPHA) Disable support access for the specified membership. + + enable + (ALPHA) Enable support access for the specified membership. + + get-yaml + (ALPHA) Generates YAML for anthos support RBAC policies. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta container hub memberships support-access + diff --git a/gcloud/alpha/container/vmware/node-pools/create b/gcloud/alpha/container/vmware/node-pools/create index cdc56497d..500a8b936 100644 --- a/gcloud/alpha/container/vmware/node-pools/create +++ b/gcloud/alpha/container/vmware/node-pools/create @@ -96,6 +96,9 @@ REQUIRED FLAGS Applies the given kubernetes taints on all nodes in the new node pool, which can be used with tolerations for pod scheduling. + Taint effect must be one of the following: NoSchedule, + PreferNoSchedule, or NoExecute. + Examples: $ gcloud alpha container vmware node-pools create node-pool-1 \ diff --git a/gcloud/alpha/container/vmware/node-pools/update b/gcloud/alpha/container/vmware/node-pools/update index 7384d1728..ca5bb6b55 100644 --- a/gcloud/alpha/container/vmware/node-pools/update +++ b/gcloud/alpha/container/vmware/node-pools/update @@ -98,6 +98,9 @@ FLAGS Applies the given kubernetes taints on all nodes in the new node pool, which can be used with tolerations for pod scheduling. + Taint effect must be one of the following: NoSchedule, + PreferNoSchedule, or NoExecute. + Examples: $ gcloud alpha container vmware node-pools update node-pool-1 \ diff --git a/gcloud/alpha/filestore/instances/create b/gcloud/alpha/filestore/instances/create index 2bea64b2d..75d24a0d7 100644 --- a/gcloud/alpha/filestore/instances/create +++ b/gcloud/alpha/filestore/instances/create @@ -100,6 +100,9 @@ REQUIRED FLAGS ▸ BASIC_SSD: 2.5TB-63.9TB in 1GB increments or its multiples. ▸ HIGH_SCALE_SSD: 10TB-100TB in 2.5TB increments or its multiples. + ▸ ZONAL: 1TB-100TB: + ▫ 1TB-9.75TB in 256GB increments or its multiples. + ▫ 10TB-100TB in 2.5TB increments or its multiples. ▸ ENTERPRISE: 1TB-10TB in 256GB increments or its multiples. name @@ -189,8 +192,8 @@ REQUIRED FLAGS allocated IP address range is specified, it must be one of the ranges associated with the private service access connection. When specified as a direct CIDR value, it must be a /29 CIDR block for - Basic tier or a /24 CIDR block for High Scale or Enterprise tier in - one of the internal IP address ranges + Basic tier or a /24 CIDR block for High Scale, Zonal or Enterprise + tier in one of the internal IP address ranges (https://www.arin.net/knowledge/address_filters.html) that identifies the range of IP addresses reserved for this instance. For example, 10.0.0.0/29 or 192.168.0.0/24. The range you specify @@ -238,13 +241,19 @@ OPTIONAL FLAGS mission-critical workloads. high-scale-ssd High Scale instances offer NFS storage system with expanded - capacity and performance scaling capabilities. + capacity and performance scaling capabilities. Use ZONAL instead + whenever possible. premium Premium Filestore instance, An alias for BASIC_SSD. Use BASIC_SSD instead whenever possible. standard Standard Filestore instance, An alias for BASIC_HDD. Use BASIC_HDD instead whenever possible. + zonal + Zonal instances offer NFS storage system suitable for high + performance computing application requirements. It offers fast + performance that scales with capacity and allows you to grow and + shrink capacity. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/filestore/instances/update b/gcloud/alpha/filestore/instances/update index 074c800ba..267e60be0 100644 --- a/gcloud/alpha/filestore/instances/update +++ b/gcloud/alpha/filestore/instances/update @@ -114,6 +114,9 @@ FLAGS ▸ BASIC_SSD: 2.5TB-63.9TB in 1GB increments or its multiples. ▸ HIGH_SCALE_SSD: 10TB-100TB in 2.5TB increments or its multiples. + ▸ ZONAL: 1TB-100TB: + ▫ 1TB-9.75TB in 256GB increments or its multiples. + ▫ 10TB-100TB in 2.5TB increments or its multiples. ▸ ENTERPRISE: 1TB-10TB in 256GB increments or its multiples. name diff --git a/gcloud/alpha/firestore/databases/create b/gcloud/alpha/firestore/databases/create index bf3a0360f..eba8ddeba 100644 --- a/gcloud/alpha/firestore/databases/create +++ b/gcloud/alpha/firestore/databases/create @@ -5,7 +5,8 @@ NAME SYNOPSIS gcloud alpha firestore databases create --location=LOCATION [--database=DATABASE; default="(default)"] [--delete-protection] - [--type=TYPE; default="firestore-native"] [GCLOUD_WIDE_FLAG ...] + [--enable-pitr] [--type=TYPE; default="firestore-native"] + [GCLOUD_WIDE_FLAG ...] EXAMPLES To create a Firestore Native database in nam5. @@ -28,6 +29,12 @@ EXAMPLES $ gcloud alpha firestore databases create --location=nam5 \ --delete-protection + To create a Firestore Native database in nam5 with Point In Time Recovery + (PITR) enabled. + + $ gcloud alpha firestore databases create --location=nam5 \ + --enable-pitr + REQUIRED FLAGS --location=LOCATION The location to operate on. Available locations are listed at @@ -57,6 +64,13 @@ OPTIONAL FLAGS Default to false. + --enable-pitr + Whether to enable Point In Time Recovery (PITR) on the created + database. + + If set to true, PITR on the new database will be enabled. + Default to false. + --type=TYPE; default="firestore-native" The type of the database. TYPE must be one of: firestore-native, datastore-mode. diff --git a/gcloud/alpha/firestore/databases/update b/gcloud/alpha/firestore/databases/update index 4502af501..471417949 100644 --- a/gcloud/alpha/firestore/databases/update +++ b/gcloud/alpha/firestore/databases/update @@ -4,7 +4,8 @@ NAME SYNOPSIS gcloud alpha firestore databases update [--async] [--database=DATABASE] - [--delete-protection] [--type=TYPE] [GCLOUD_WIDE_FLAG ...] + [--delete-protection] [--enable-pitr] [--type=TYPE] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Update the database configuration of a Cloud Firestore database. @@ -45,6 +46,12 @@ FLAGS cannot be deleted. You can disable the delete protection via --no-delete-protection. + --enable-pitr + If set to true, the firestore database will be updated to enable Point + In Time Recovery. Customers will gradually gain the full read access to + their data over the past 7 days and they will be charged. You can + disable the this feature via --no-enable-pitr. + --type=TYPE The database type. TYPE must be one of: datastore-mode, firestore-native. diff --git a/gcloud/alpha/monitoring/policies/list b/gcloud/alpha/monitoring/policies/list index f8b7c99ff..102dd8a63 100644 --- a/gcloud/alpha/monitoring/policies/list +++ b/gcloud/alpha/monitoring/policies/list @@ -31,8 +31,8 @@ EXAMPLES $ gcloud alpha monitoring policies list \ --filter "description:(cloud)" - More information can be found at - https://cloud.google.com/monitoring/api/v3/sorting-and-filtering + Please find all supported fields at + https://cloud.google.com/monitoring/api/v3/sorting-and-filtering#alertpolicy. LIST COMMAND FLAGS --filter=EXPRESSION diff --git a/gcloud/alpha/network-security/firewall-endpoints/help b/gcloud/alpha/network-security/firewall-endpoints/help index 9b5002ca9..89e3f053f 100644 --- a/gcloud/alpha/network-security/firewall-endpoints/help +++ b/gcloud/alpha/network-security/firewall-endpoints/help @@ -29,6 +29,9 @@ COMMANDS list (ALPHA) List Firewall Plus endpoints. + update + (ALPHA) Update a Firewall Plus endpoint. + NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct diff --git a/gcloud/alpha/network-security/firewall-endpoints/update b/gcloud/alpha/network-security/firewall-endpoints/update new file mode 100644 index 000000000..7298764c9 --- /dev/null +++ b/gcloud/alpha/network-security/firewall-endpoints/update @@ -0,0 +1,125 @@ +NAME + gcloud alpha network-security firewall-endpoints update - update a Firewall + Plus endpoint + +SYNOPSIS + gcloud alpha network-security firewall-endpoints update + (FIREWALL_ENDPOINT : --organization=ORGANIZATION --zone=ZONE) [--async] + [--max-wait=MAX_WAIT; default="60m"] [--update-labels=[KEY=VALUE,...]] + [--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Update a firewall endpoint. Check the progress of endpoint update + by using gcloud network-security firewall-endpoints describe. + + For more examples, refer to the EXAMPLES section below. + +EXAMPLES + To update labels k1 and k2, run: + + $ gcloud alpha network-security firewall-endpoints update \ + my-endpoint --zone=us-central1-a --organization=1234 \ + --update-labels=k1=v1,k2=v2 + + To remove labels k3 and k4, run: + + $ gcloud alpha network-security firewall-endpoints update \ + my-endpoint --zone=us-central1-a --organization=1234 \ + --remove-labels=k3,k4 + + To clear all labels from the firewall endpoint, run: + + $ gcloud alpha network-security firewall-endpoints update \ + my-endpoint --zone=us-central1-a --organization=1234 \ + --clear-labels + +POSITIONAL ARGUMENTS + Firewall endpoint resource - Firewall Plus. The arguments in this group + can be used to specify the attributes of this resource. + + This must be specified. + + FIREWALL_ENDPOINT + ID of the firewall endpoint or fully qualified identifier for the + firewall endpoint. + + To set the endpoint-name attribute: + ▸ provide the argument FIREWALL_ENDPOINT on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --organization=ORGANIZATION + Organization ID of the firewall endpoint. + + To set the organization attribute: + ▸ provide the argument FIREWALL_ENDPOINT on the command line with a + fully specified name; + ▸ provide the argument --organization on the command line. + + --zone=ZONE + Zone of the firewall endpoint. + + To set the zone attribute: + ▸ provide the argument FIREWALL_ENDPOINT on the command line with a + fully specified name; + ▸ provide the argument --zone on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. The default is True. Enabled by default, use --no-async to + disable. + + --max-wait=MAX_WAIT; default="60m" + Time to synchronously wait for the operation to complete, after which + the operation continues asynchronously. Ignored if --no-async isn't + specified. See $ gcloud topic datetimes for information on time + formats. + + --update-labels=[KEY=VALUE,...] + List of label KEY=VALUE pairs to update. If a label exists, its value + is modified. Otherwise, a new label is created. + + Keys must start with a lowercase character and contain only hyphens + (-), underscores (_), lowercase characters, and numbers. Values must + contain only hyphens (-), underscores (_), lowercase characters, and + numbers. + + At most one of these can be specified: + + --clear-labels + Remove all labels. If --update-labels is also specified then + --clear-labels is applied first. + + For example, to remove all labels: + + $ gcloud alpha network-security firewall-endpoints update \ + --clear-labels + + To remove all existing labels and create two new labels, foo and baz: + + $ gcloud alpha network-security firewall-endpoints update \ + --clear-labels --update-labels foo=bar,baz=qux + + --remove-labels=[KEY,...] + List of label keys to remove. If a label does not exist it is + silently ignored. If --update-labels is also specified then + --update-labels is applied first. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta network-security firewall-endpoints update + diff --git a/gcloud/alpha/pubsub/subscriptions/create b/gcloud/alpha/pubsub/subscriptions/create index 2391a7ddc..2b9cdf67d 100644 --- a/gcloud/alpha/pubsub/subscriptions/create +++ b/gcloud/alpha/pubsub/subscriptions/create @@ -12,8 +12,15 @@ SYNOPSIS [--push-auth-service-account=SERVICE_ACCOUNT_EMAIL] [--push-auth-token-audience=OPTIONAL_AUDIENCE_OVERRIDE] [--push-endpoint=PUSH_ENDPOINT] [--retain-acked-messages] - [--bigquery-table=BIGQUERY_TABLE + [[--bigquery-table=BIGQUERY_TABLE : --drop-unknown-fields --use-topic-schema --write-metadata] + | [--cloud-storage-bucket=CLOUD_STORAGE_BUCKET + : --cloud-storage-file-prefix=CLOUD_STORAGE_FILE_PREFIX + --cloud-storage-file-suffix=CLOUD_STORAGE_FILE_SUFFIX + --cloud-storage-max-bytes=CLOUD_STORAGE_MAX_BYTES + --cloud-storage-max-duration=CLOUD_STORAGE_MAX_DURATION + --cloud-storage-output-format=OUTPUT_FORMAT; + default="text" --cloud-storage-write-metadata]] [--max-delivery-attempts=MAX_DELIVERY_ATTEMPTS [--dead-letter-topic=DEAD_LETTER_TOPIC : --dead-letter-topic-project=DEAD_LETTER_TOPIC_PROJECT]] @@ -169,6 +176,49 @@ OPTIONAL FLAGS Whether or not to write message metadata including message ID, publish timestamp, ordering key, and attributes to BigQuery. + Cloud Storage Config Options. The Cloud Pub/Sub service account + associated with the enclosing subscription's parent project (i.e., + service-{project_number}@gcp-sa-pubsub.iam.gserviceaccount.com) must + have permission to write to this Cloud Storage bucket and to read this + bucket's metadata. + + --cloud-storage-bucket=CLOUD_STORAGE_BUCKET + A Cloud Storage bucket to which to write messages for this + subscription. + + This flag argument must be specified if any of the other arguments + in this group are specified. + + --cloud-storage-file-prefix=CLOUD_STORAGE_FILE_PREFIX + The prefix for Cloud Storage filename. + + --cloud-storage-file-suffix=CLOUD_STORAGE_FILE_SUFFIX + The suffix for Cloud Storage filename. + + --cloud-storage-max-bytes=CLOUD_STORAGE_MAX_BYTES + The maximum bytes that can be written to a Cloud Storage file + before a new file is created. The value must be between 1KB to + 10GB. If the unit is omitted, KB is assumed. + + --cloud-storage-max-duration=CLOUD_STORAGE_MAX_DURATION + The maximum duration that can elapse before a new Cloud Storage + file is created. The value must be between 1m and 10m. Valid values + are strings of the form INTEGER[UNIT], where UNIT is one of "s", + "m", "h", and "d" for seconds, minutes, hours, and days, + respectively. If the unit is omitted, seconds is assumed. + + --cloud-storage-output-format=OUTPUT_FORMAT; default="text" + The output format for data written to Cloud Storage. Values: text + (messages will be written as raw text, separated by a newline) or + avro (messages will be written as an Avro binary). OUTPUT_FORMAT + must be one of: text, avro. + + --cloud-storage-write-metadata + Whether or not to write the subscription name, message_id, + publish_time, attributes, and ordering_key as additional fields in + the output. This has an effect only for subscriptions with + --cloud-storage-output-format=avro. + Dead Letter Queue Options. The Cloud Pub/Sub service account associated with the enclosing subscription's parent project (i.e., service-{project_number}@gcp-sa-pubsub.iam.gserviceaccount.com) must have diff --git a/gcloud/alpha/pubsub/subscriptions/update b/gcloud/alpha/pubsub/subscriptions/update index 7e4125983..66819d25d 100644 --- a/gcloud/alpha/pubsub/subscriptions/update +++ b/gcloud/alpha/pubsub/subscriptions/update @@ -12,7 +12,15 @@ SYNOPSIS [--push-endpoint=PUSH_ENDPOINT] [--retain-acked-messages] [--update-labels=[KEY=VALUE,...]] [--clear-bigquery-config | [--bigquery-table=BIGQUERY_TABLE - : --drop-unknown-fields --use-topic-schema --write-metadata]] + : --drop-unknown-fields --use-topic-schema --write-metadata] + | --clear-cloud-storage-config + | [--cloud-storage-bucket=CLOUD_STORAGE_BUCKET + : --cloud-storage-file-prefix=CLOUD_STORAGE_FILE_PREFIX + --cloud-storage-file-suffix=CLOUD_STORAGE_FILE_SUFFIX + --cloud-storage-max-bytes=CLOUD_STORAGE_MAX_BYTES + --cloud-storage-max-duration=CLOUD_STORAGE_MAX_DURATION + --cloud-storage-output-format=OUTPUT_FORMAT; + default="text" --cloud-storage-write-metadata]] [--clear-dead-letter-policy | --max-delivery-attempts=MAX_DELIVERY_ATTEMPTS [--dead-letter-topic=DEAD_LETTER_TOPIC @@ -138,6 +146,58 @@ FLAGS Whether or not to write message metadata including message ID, publish timestamp, ordering key, and attributes to BigQuery. + At most one of these can be specified: + + --clear-cloud-storage-config + If set, clear the Cloud Storage config from the subscription. + + Cloud Storage Config Options. The Cloud Pub/Sub service account + associated with the enclosing subscription's parent project (i.e., + service-{project_number}@gcp-sa-pubsub.iam.gserviceaccount.com) must + have permission to write to this Cloud Storage bucket and to read this + bucket's metadata. + + Note that an update to the Cloud Storage config will replace it with a + new config containing only the flags that are passed in the update + CLI. + + --cloud-storage-bucket=CLOUD_STORAGE_BUCKET + A Cloud Storage bucket to which to write messages for this + subscription. + + This flag argument must be specified if any of the other + arguments in this group are specified. + + --cloud-storage-file-prefix=CLOUD_STORAGE_FILE_PREFIX + The prefix for Cloud Storage filename. + + --cloud-storage-file-suffix=CLOUD_STORAGE_FILE_SUFFIX + The suffix for Cloud Storage filename. + + --cloud-storage-max-bytes=CLOUD_STORAGE_MAX_BYTES + The maximum bytes that can be written to a Cloud Storage file + before a new file is created. The value must be between 1KB to + 10GB. If the unit is omitted, KB is assumed. + + --cloud-storage-max-duration=CLOUD_STORAGE_MAX_DURATION + The maximum duration that can elapse before a new Cloud Storage + file is created. The value must be between 1m and 10m. Valid + values are strings of the form INTEGER[UNIT], where UNIT is one + of "s", "m", "h", and "d" for seconds, minutes, hours, and days, + respectively. If the unit is omitted, seconds is assumed. + + --cloud-storage-output-format=OUTPUT_FORMAT; default="text" + The output format for data written to Cloud Storage. Values: text + (messages will be written as raw text, separated by a newline) or + avro (messages will be written as an Avro binary). OUTPUT_FORMAT + must be one of: text, avro. + + --cloud-storage-write-metadata + Whether or not to write the subscription name, message_id, + publish_time, attributes, and ordering_key as additional fields + in the output. This has an effect only for subscriptions with + --cloud-storage-output-format=avro. + At most one of these can be specified: --clear-dead-letter-policy diff --git a/gcloud/alpha/recommender/insights/list b/gcloud/alpha/recommender/insights/list index 8a7baf2be..65fdd9793 100644 --- a/gcloud/alpha/recommender/insights/list +++ b/gcloud/alpha/recommender/insights/list @@ -2,12 +2,12 @@ NAME gcloud alpha recommender insights list - list insights for a cloud entity SYNOPSIS - gcloud alpha recommender insights list --insight-type=INSIGHT_TYPE - --location=LOCATION + gcloud alpha recommender insights list --location=LOCATION (--billing-account=BILLING_ACCOUNT | --folder=FOLDER_ID | --organization=ORGANIZATION_ID | --project=PROJECT_ID) - [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] - [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] + [--insight-type=INSIGHT_TYPE] [--filter=EXPRESSION] [--limit=LIMIT] + [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) This command will list all insights for a given cloud entity, @@ -23,10 +23,6 @@ EXAMPLES --location=global --insight-type=google.compute.firewall.Insight REQUIRED FLAGS - --insight-type=INSIGHT_TYPE - Insight type to list insights for. Supported insight-types can be found - here: https://cloud.google.com/recommender/docs/insights/insight-types - --location=LOCATION Location @@ -50,6 +46,11 @@ REQUIRED FLAGS The Google Cloud Platform project ID. Overrides the default core/project property value for this command invocation. +FLAGS + --insight-type=INSIGHT_TYPE + Insight type to list insights for. Supported insight-types can be found + here: https://cloud.google.com/recommender/docs/insights/insight-types + LIST COMMAND FLAGS --filter=EXPRESSION Apply a Boolean filter EXPRESSION to each resource item to be listed. diff --git a/gcloud/alpha/recommender/recommendations/list b/gcloud/alpha/recommender/recommendations/list index 905bc95b9..1d39e688d 100644 --- a/gcloud/alpha/recommender/recommendations/list +++ b/gcloud/alpha/recommender/recommendations/list @@ -4,11 +4,11 @@ NAME SYNOPSIS gcloud alpha recommender recommendations list --location=LOCATION - --recommender=RECOMMENDER (--billing-account=BILLING_ACCOUNT | --folder=FOLDER_ID | --organization=ORGANIZATION_ID | --project=PROJECT_ID) - [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] - [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] + [--recommender=RECOMMENDER] [--filter=EXPRESSION] [--limit=LIMIT] + [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) This command will list all recommendations for a given @@ -26,10 +26,6 @@ REQUIRED FLAGS --location=LOCATION Location - --recommender=RECOMMENDER - Recommender to list recommendations for. Supported recommenders can be - found here: https://cloud.google.com/recommender/docs/recommenders - Resource that is associated with cloud entity type. Currently four mutually exclusive flags are supported, --project, --billing-account, --folder, --organization. @@ -50,6 +46,13 @@ REQUIRED FLAGS The Google Cloud Platform project ID. Overrides the default core/project property value for this command invocation. +FLAGS + --recommender=RECOMMENDER + Recommender to list recommendations for. If no recommender is + specified, recommendations for all supported recommenders is listed. + Supported recommenders can be found here: + https://cloud.google.com/recommender/docs/recommenders + LIST COMMAND FLAGS --filter=EXPRESSION Apply a Boolean filter EXPRESSION to each resource item to be listed. diff --git a/gcloud/alpha/resource-manager/org-policies/set-policy b/gcloud/alpha/resource-manager/org-policies/set-policy index 1d7bf91fe..dac98db4d 100644 --- a/gcloud/alpha/resource-manager/org-policies/set-policy +++ b/gcloud/alpha/resource-manager/org-policies/set-policy @@ -12,6 +12,22 @@ DESCRIPTION from a file that contains the JSON or YAML encoded Organization Policy. EXAMPLES + Organization policy list constraint YAML file example: + + constraint: constraints/CONSTRAINT_NAME + listPolicy: + deniedValues: + - VALUE_A + + Organization policy list constraint JSON file example: + + { + "constraint": "constraints/CONSTRAINT_NAME", + "listPolicy": { + "deniedValues": ["VALUE_A"] + } + } + The following command sets an Organization Policy for a constraint on project foo-project from file /tmp/policy.yaml: diff --git a/gcloud/alpha/sql/instances/help b/gcloud/alpha/sql/instances/help index 40127eea5..73863cbcf 100644 --- a/gcloud/alpha/sql/instances/help +++ b/gcloud/alpha/sql/instances/help @@ -58,6 +58,9 @@ COMMANDS promote-replica (ALPHA) Promotes Cloud SQL read replica to a stand-alone instance. + reencrypt + (ALPHA) Reencrypts a Cloud SQL CMEK instance. + reset-ssl-config (ALPHA) Deletes all client certificates and generates a new server certificate. diff --git a/gcloud/alpha/sql/instances/reencrypt b/gcloud/alpha/sql/instances/reencrypt new file mode 100644 index 000000000..ca90e854c --- /dev/null +++ b/gcloud/alpha/sql/instances/reencrypt @@ -0,0 +1,40 @@ +NAME + gcloud alpha sql instances reencrypt - reencrypts a Cloud SQL CMEK instance + +SYNOPSIS + gcloud alpha sql instances reencrypt INSTANCE [--async] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Reencrypt a Cloud SQL CMEK instance with the primary key version. + +EXAMPLES + To reencrypt a Cloud SQL CMEK instance with the primary key version: + + $ gcloud alpha sql instances reencrypt instance-foo + +POSITIONAL ARGUMENTS + INSTANCE + Cloud SQL instance ID. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta sql instances reencrypt + diff --git a/gcloud/alpha/storage/help b/gcloud/alpha/storage/help index a44cb3574..3db5f9d5e 100644 --- a/gcloud/alpha/storage/help +++ b/gcloud/alpha/storage/help @@ -54,6 +54,9 @@ COMMANDS rm (ALPHA) Delete objects and buckets. + rsync + (ALPHA) Synchronize content of two buckets/directories. + service-agent (ALPHA) Manage a project's Cloud Storage service agent, which is used to perform Cloud KMS operations. diff --git a/gcloud/alpha/storage/rsync b/gcloud/alpha/storage/rsync new file mode 100644 index 000000000..8a673b5d3 --- /dev/null +++ b/gcloud/alpha/storage/rsync @@ -0,0 +1,301 @@ +NAME + gcloud alpha storage rsync - synchronize content of two buckets/directories + +SYNOPSIS + gcloud alpha storage rsync SOURCE DESTINATION + [--additional-headers=HEADER=VALUE] + [--canned-acl=PREDEFINED_ACL, + --predefined-acl=PREDEFINED_ACL, -a PREDEFINED_ACL] + [--checksums-only] [--no-clobber, -n] [--continue-on-error, -c] + [--delete-unmatched-destination-objects] [--dry-run] + [--exclude=[REGEX,...], -x [REGEX,...]] + [--gzip-in-flight=[FILE_EXTENSIONS,...], -j [FILE_EXTENSIONS,...]] + [--gzip-in-flight-all, -J] [--no-ignore-symlinks] + [--preserve-posix, -P] [--recursive, -R, -r] + [--skip-if-dest-has-newer-mtime, -u] [--skip-unsupported, -U] + [--decryption-keys=[DECRYPTION_KEY,...] + --encryption-key=ENCRYPTION_KEY] + [--cache-control=CACHE_CONTROL + --content-disposition=CONTENT_DISPOSITION + --content-encoding=CONTENT_ENCODING + --content-language=CONTENT_LANGUAGE --content-md5=MD5_DIGEST + --content-type=CONTENT_TYPE + --custom-time=CUSTOM_TIME --clear-custom-metadata + | --custom-metadata=[CUSTOM_METADATA_KEYS_AND_VALUES,...] + | --remove-custom-metadata=[METADATA_KEYS,...] + --update-custom-metadata=[CUSTOM_METADATA_KEYS_AND_VALUES,...]] + [--if-generation-match=GENERATION + --if-metageneration-match=METAGENERATION] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) gcloud alpha storage rsync copies to and updates objects at + DESTINATION to match SOURCE. SOURCE must specify a directory, bucket, or + bucket subdirectory. gcloud alpha storage rsync does not copy empty + directory trees, since storage providers use a flat namespace + (https://cloud.google.com/storage/docs/folders). + + Note, shells (like bash, zsh) sometimes attempt to expand wildcards in ways + that can be surprising. Also, attempting to copy files whose names contain + wildcard characters can result in problems. + + If synchronizing a large amount of data between clouds you might consider + setting up a Google Compute Engine account and running gcloud alpha storage + rsync there. Since gcloud alpha storage rsync cross-provider data transfers + flow through the machine where gcloud alpha storage rsync is running, doing + this can make your transfer run significantly faster than on your local + workstation. + +EXAMPLES + To sync the contents of the local directory data to the bucket + gs://my-bucket/data: + + $ gcloud alpha storage rsync data gs://my-bucket/data + + To recurse into directories use --recursive: + + $ gcloud alpha storage rsync data gs://my-bucket/data --recursive + + To make the local directory my-data the same as the contents of + gs://mybucket/data and delete objects in the local directory that are not + in gs://mybucket/data: + + $ gcloud alpha storage rsync gs://mybucket/data my-data \ + --recursive --delete-unmatched-destination-objects + + To make the contents of gs://mybucket2 the same as gs://mybucket1 and + delete objects in gs://mybucket2 that are not in gs://mybucket1: + + $ gcloud alpha storage rsync gs://mybucket1 gs://mybucket2 \ + --recursive --delete-unmatched-destination-objects + + To copy all objects from dir1 into dir2 and delete all objects in dir2 + which are not in dir1: + + $ gcloud alpha storage rsync dir1 dir2 --recursive - \ + --delete-unmatched-destination-objects + + To mirror your content across cloud providers: + + $ gcloud alpha storage rsync gs://my-gs-bucket s3://my-s3-bucket \ + --recursive --delete-unmatched-destination-objects + + To apply gzip compression to only uploaded image files in dir: + + $ gcloud alpha storage rsync dir gs://my-bucket/data \ + --gzip-in-flight=jpeg,jpg,gif,png + + To skip the file dir/data1/a.txt: + + $ gcloud alpha storage rsync dir gs://my-bucket \ + --exclude="data./.*\.txt$" + + To skip all .txt and .jpg files: + + $ gcloud alpha storage rsync dir gs://my-bucket \ + --exclude=".*\.txt$|.*\.jpg$" + +POSITIONAL ARGUMENTS + SOURCE + The source container path. + + DESTINATION + The destination container path. + +FLAGS + --additional-headers=HEADER=VALUE + Includes arbitrary headers in storage API calls. Accepts a comma + separated list of key=value pairs, e.g. header1=value1,header2=value2. + Overrides the default storage/additional_headers property value for + this command invocation. + + --canned-acl=PREDEFINED_ACL, --predefined-acl=PREDEFINED_ACL, -a PREDEFINED_ACL + Applies predefined, or "canned," ACLs to a resource. See docs for a + list of predefined ACL constants: + https://cloud.google.com/storage/docs/access-control/lists#predefined-acl + + --checksums-only + When comparing objects with matching names at the source and + destination, skip modification time check and compare object hashes. + Normally, hashes are only compared if modification times are not + available. + + --no-clobber, -n + Do not overwrite existing files or objects at the destination. Skipped + items will be printed. This option may perform an additional GET + request for cloud objects before attempting an upload. + + --continue-on-error, -c + If any operations are unsuccessful, the command will exit with a + non-zero exit status after completing the remaining operations. This + flag takes effect only in sequential execution mode (i.e. processor and + thread count are set to 1). Parallelism is default. + + --delete-unmatched-destination-objects + Delete extra files under DESTINATION not found under SOURCE. By default + extra files are not deleted. + + Note: this option can delete data quickly if you specify the wrong + source and destination combination. + + --dry-run + Print what operations rsync would perform without actually executing + them. + + --exclude=[REGEX,...], -x [REGEX,...] + Exclude objects matching regex pattern from rsync. + + Note that this is a Python regular expression, not a pure wildcard + pattern. For example, matching a string ending in "abc" is .*abc$ + rather than *abc. Also note that the exclude path is relative, as + opposed to absolute (similar to Linux rsync and tar exclude options). + + For the Windows cmd.exe command line interpreter, use ^ as an escape + character instead of \ and escape the | character. When using Windows + PowerShell, use ' instead of " and surround the | character with ". + + --gzip-in-flight=[FILE_EXTENSIONS,...], -j [FILE_EXTENSIONS,...] + Applies gzip transport encoding to any file upload whose extension + matches the input extension list. This is useful when uploading files + with compressible content such as .js, .css, or .html files. This also + saves network bandwidth while leaving the data uncompressed in Cloud + Storage. + + When you specify the --gzip-in-flight option, files being uploaded are + compressed in-memory and on-the-wire only. Both the local files and + Cloud Storage objects remain uncompressed. The uploaded objects retain + the Content-Type and name of the original files. + + --gzip-in-flight-all, -J + Applies gzip transport encoding to file uploads. This option works like + the --gzip-in-flight option described above, but it applies to all + uploaded files, regardless of extension. + + CAUTION: If some of the source files don't compress well, such as + binary data, using this option may result in longer uploads. + + --ignore-symlinks + Ignore file symlinks instead of copying what they point to. Symlinks + pointing to directories will always be ignored. Enabled by default, use + --no-ignore-symlinks to disable. + + --preserve-posix, -P + Causes POSIX attributes to be preserved when objects are copied. With + this feature enabled, gcloud storage will copy several fields provided + by the stat command: access time, modification time, owner UID, owner + group GID, and the mode (permissions) of the file. + + For uploads, these attributes are read off of local files and stored in + the cloud as custom metadata. For downloads, custom cloud metadata is + set as POSIX attributes on files after they are downloaded. + + On Windows, this flag will only set and restore access time and + modification time because Windows doesn't have a notion of POSIX UID, + GID, and mode. + + --recursive, -R, -r + Recursively copy the contents of any directories that match the source + path expression. + + --skip-if-dest-has-newer-mtime, -u + Skip operating on destination object if it has a newer modification + time than the source. + + --skip-unsupported, -U + Skip objects with unsupported object types. + +ENCRYPTION FLAGS + --decryption-keys=[DECRYPTION_KEY,...] + A comma-separated list of customer-supplied encryption keys (RFC 4648 + section 4 base64-encoded AES256 strings) that will be used to decrypt + Google Cloud Storage objects. Data encrypted with a customer-managed + encryption key (CMEK) is decrypted automatically, so CMEKs do not need + to be listed here. + + --encryption-key=ENCRYPTION_KEY + The encryption key to use for encrypting target objects. The specified + encryption key can be a customer-supplied encryption key (An RFC 4648 + section 4 base64-encoded AES256 string), or a customer-managed + encryption key of the form + projects/{project}/locations/{location}/keyRings/ + {key-ring}/cryptoKeys/{crypto-key}. The specified key also acts as a + decryption key, which is useful when copying or moving encryted data to + a new location. Using this flag in an objects update command triggers a + rewrite of target objects. + +OBJECT METADATA FLAGS + --cache-control=CACHE_CONTROL + How caches should handle requests and responses. + + --content-disposition=CONTENT_DISPOSITION + How content should be displayed. + + --content-encoding=CONTENT_ENCODING + How content is encoded (e.g. gzip). + + --content-language=CONTENT_LANGUAGE + Content's language (e.g. en signifies "English"). + + --content-md5=MD5_DIGEST + Manually specified MD5 hash digest for the contents of an uploaded + file. This flag cannot be used when uploading multiple files. The + custom digest is used by the cloud provider for validation. + + --content-type=CONTENT_TYPE + Type of data contained in the object (e.g. text/html). + + --custom-time=CUSTOM_TIME + Custom time for Google Cloud Storage objects in RFC 3339 format. + + At most one of these can be specified: + + --clear-custom-metadata + Clears all custom metadata on objects. When used with + --preserve-posix, POSIX attributes will still be stored in custom + metadata. + + --custom-metadata=[CUSTOM_METADATA_KEYS_AND_VALUES,...] + Sets custom metadata on objects. When used with --preserve-posix, + POSIX attributes are also stored in custom metadata. + + Flags that preserve unspecified existing metadata cannot be used with + --custom-metadata or --clear-custom-metadata, but can be specified + together: + + --remove-custom-metadata=[METADATA_KEYS,...] + Removes individual custom metadata keys from objects. This flag can + be used with --update-custom-metadata. When used with + --preserve-posix, POSIX attributes specified by this flag are not + preserved. + + --update-custom-metadata=[CUSTOM_METADATA_KEYS_AND_VALUES,...] + Adds or sets individual custom metadata key value pairs on objects. + Existing custom metadata not specified with this flag is not + changed. This flag can be used with --remove-custom-metadata. When + keys overlap with those provided by --preserve-posix, values + specified by this flag are used. + +PRECONDITION FLAGS + --if-generation-match=GENERATION + Execute only if the generation matches the generation of the requested + object. + + --if-metageneration-match=METAGENERATION + Execute only if the metageneration matches the metageneration of the + requested object. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud storage rsync + diff --git a/gcloud/artifacts/docker/images/describe b/gcloud/artifacts/docker/images/describe index 187b5e90b..b5212b558 100644 --- a/gcloud/artifacts/docker/images/describe +++ b/gcloud/artifacts/docker/images/describe @@ -7,7 +7,7 @@ SYNOPSIS [--metadata-filter=METADATA_FILTER] [--show-all-metadata] [--show-build-details] [--show-deployment] [--show-image-basis] [--show-package-vulnerability] [--show-provenance] - [GCLOUD_WIDE_FLAG ...] + [--show-sbom-references] [GCLOUD_WIDE_FLAG ...] DESCRIPTION Reference an image by tag or digest using the format: @@ -70,6 +70,9 @@ FLAGS provenance_summary section. To see all build metadata in the output, use --show-all-metadata or --show-build-details. + --show-sbom-references + Include SBOM metadata in the output. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/artifacts/go/help b/gcloud/artifacts/go/help new file mode 100644 index 000000000..1da6d390c --- /dev/null +++ b/gcloud/artifacts/go/help @@ -0,0 +1,27 @@ +NAME + gcloud artifacts go - manage Artifact Registry Go modules + +SYNOPSIS + gcloud artifacts go COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Manage Artifact Registry Go modules. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + upload + Upload a Go module to an artifact repository. + +NOTES + These variants are also available: + + $ gcloud alpha artifacts go + + $ gcloud beta artifacts go + diff --git a/gcloud/artifacts/go/upload b/gcloud/artifacts/go/upload new file mode 100644 index 000000000..3e0e5fdcb --- /dev/null +++ b/gcloud/artifacts/go/upload @@ -0,0 +1,82 @@ +NAME + gcloud artifacts go upload - upload a Go module to an artifact repository + +SYNOPSIS + gcloud artifacts go upload --module-path=MODULE_PATH --version=VERSION + [--async] [--source=SOURCE; default="."] + [--location=LOCATION --repository=REPOSITORY] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Upload a Go module to an artifact repository. + +EXAMPLES + To upload version v0.1.0 of a Go module located in /path/to/code/ to a + repository in "us-central1": + + $ gcloud artifacts go upload --location=us-central1 \ + --project=myproject --repository=myrepo \ + --module-path=the/module/path --version=v0.1.0 \ + --source=/path/to/code + +REQUIRED FLAGS + --module-path=MODULE_PATH + The module path of the Go module. + + --version=VERSION + The version of the Go module. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --source=SOURCE; default="." + The root directory of the go module source code, defaults to the + current directory. + + Repository resource - The Artifact Registry repository. If not specified, + the current artifacts/repository is used. The arguments in this group can + be used to specify the attributes of this resource. (NOTE) Some attributes + are not given arguments in this group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument --repository on the command line with a fully + specified name; + ◆ set the property artifacts/repository with a fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + --location=LOCATION + Location of the repository. + + To set the location attribute: + ▸ provide the argument --repository on the command line with a + fully specified name; + ▸ set the property artifacts/repository with a fully specified + name; + ▸ provide the argument --location on the command line; + ▸ set the property artifacts/location. + + --repository=REPOSITORY + ID of the repository or fully qualified identifier for the + repository. + + To set the repository attribute: + ▸ provide the argument --repository on the command line; + ▸ set the property artifacts/repository. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha artifacts go upload + + $ gcloud beta artifacts go upload + diff --git a/gcloud/artifacts/help b/gcloud/artifacts/help index 16a77ef09..6f1eb4fcb 100644 --- a/gcloud/artifacts/help +++ b/gcloud/artifacts/help @@ -24,6 +24,9 @@ GROUPS files Manage Artifact Registry files. + go + Manage Artifact Registry Go modules. + locations Manage Artifact Registry resource locations. diff --git a/gcloud/artifacts/repositories/create b/gcloud/artifacts/repositories/create index 76da96288..b7c82d80e 100644 --- a/gcloud/artifacts/repositories/create +++ b/gcloud/artifacts/repositories/create @@ -78,6 +78,8 @@ REQUIRED FLAGS APT package format. docker Docker image format. + go + Go module format. kfp KFP package format. maven diff --git a/gcloud/beta/artifacts/docker/images/describe b/gcloud/beta/artifacts/docker/images/describe index abcfe0055..0fb5ab09a 100644 --- a/gcloud/beta/artifacts/docker/images/describe +++ b/gcloud/beta/artifacts/docker/images/describe @@ -7,7 +7,7 @@ SYNOPSIS [--metadata-filter=METADATA_FILTER] [--show-all-metadata] [--show-build-details] [--show-deployment] [--show-image-basis] [--show-package-vulnerability] [--show-provenance] - [GCLOUD_WIDE_FLAG ...] + [--show-sbom-references] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) Reference an image by tag or digest using the format: @@ -70,6 +70,9 @@ FLAGS provenance_summary section. To see all build metadata in the output, use --show-all-metadata or --show-build-details. + --show-sbom-references + Include SBOM metadata in the output. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/beta/artifacts/go/help b/gcloud/beta/artifacts/go/help new file mode 100644 index 000000000..a77c3bee6 --- /dev/null +++ b/gcloud/beta/artifacts/go/help @@ -0,0 +1,28 @@ +NAME + gcloud beta artifacts go - manage Artifact Registry Go modules + +SYNOPSIS + gcloud beta artifacts go COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Manage Artifact Registry Go modules. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + upload + (BETA) Upload a Go module to an artifact repository. + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud artifacts go + + $ gcloud alpha artifacts go + diff --git a/gcloud/beta/artifacts/go/upload b/gcloud/beta/artifacts/go/upload new file mode 100644 index 000000000..58e059bb8 --- /dev/null +++ b/gcloud/beta/artifacts/go/upload @@ -0,0 +1,84 @@ +NAME + gcloud beta artifacts go upload - upload a Go module to an artifact + repository + +SYNOPSIS + gcloud beta artifacts go upload --module-path=MODULE_PATH --version=VERSION + [--async] [--source=SOURCE; default="."] + [--location=LOCATION --repository=REPOSITORY] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Upload a Go module to an artifact repository. + +EXAMPLES + To upload version v0.1.0 of a Go module located in /path/to/code/ to a + repository in "us-central1": + + $ gcloud beta artifacts go upload --location=us-central1 \ + --project=myproject --repository=myrepo \ + --module-path=the/module/path --version=v0.1.0 \ + --source=/path/to/code + +REQUIRED FLAGS + --module-path=MODULE_PATH + The module path of the Go module. + + --version=VERSION + The version of the Go module. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --source=SOURCE; default="." + The root directory of the go module source code, defaults to the + current directory. + + Repository resource - The Artifact Registry repository. If not specified, + the current artifacts/repository is used. The arguments in this group can + be used to specify the attributes of this resource. (NOTE) Some attributes + are not given arguments in this group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument --repository on the command line with a fully + specified name; + ◆ set the property artifacts/repository with a fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + --location=LOCATION + Location of the repository. + + To set the location attribute: + ▸ provide the argument --repository on the command line with a + fully specified name; + ▸ set the property artifacts/repository with a fully specified + name; + ▸ provide the argument --location on the command line; + ▸ set the property artifacts/location. + + --repository=REPOSITORY + ID of the repository or fully qualified identifier for the + repository. + + To set the repository attribute: + ▸ provide the argument --repository on the command line; + ▸ set the property artifacts/repository. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud artifacts go upload + + $ gcloud alpha artifacts go upload + diff --git a/gcloud/beta/artifacts/help b/gcloud/beta/artifacts/help index a3da2e567..12f42a589 100644 --- a/gcloud/beta/artifacts/help +++ b/gcloud/beta/artifacts/help @@ -24,6 +24,9 @@ GROUPS files (BETA) Manage Artifact Registry files. + go + (BETA) Manage Artifact Registry Go modules. + locations (BETA) Manage Artifact Registry resource locations. diff --git a/gcloud/beta/beyondcorp/client-connector/gateways/create b/gcloud/beta/beyondcorp/client-connector/gateways/create index c16e478a7..6bb1212a3 100644 --- a/gcloud/beta/beyondcorp/client-connector/gateways/create +++ b/gcloud/beta/beyondcorp/client-connector/gateways/create @@ -1,6 +1,6 @@ NAME gcloud beta beyondcorp client-connector gateways create - create a new - BeyondCorp client gateway + BeyondCorp client gateway (Deprecated) SYNOPSIS gcloud beta beyondcorp client-connector gateways create diff --git a/gcloud/beta/beyondcorp/client-connector/gateways/delete b/gcloud/beta/beyondcorp/client-connector/gateways/delete index df6549d72..fef14ecc7 100644 --- a/gcloud/beta/beyondcorp/client-connector/gateways/delete +++ b/gcloud/beta/beyondcorp/client-connector/gateways/delete @@ -1,6 +1,6 @@ NAME gcloud beta beyondcorp client-connector gateways delete - delete a single - BeyondCorp client gateway + BeyondCorp client gateway (Deprecated) SYNOPSIS gcloud beta beyondcorp client-connector gateways delete diff --git a/gcloud/beta/beyondcorp/client-connector/gateways/describe b/gcloud/beta/beyondcorp/client-connector/gateways/describe index 6fcd4cb58..28451495b 100644 --- a/gcloud/beta/beyondcorp/client-connector/gateways/describe +++ b/gcloud/beta/beyondcorp/client-connector/gateways/describe @@ -1,6 +1,6 @@ NAME gcloud beta beyondcorp client-connector gateways describe - describe a - single BeyondCorp client gateway + single BeyondCorp client gateway (Deprecated) SYNOPSIS gcloud beta beyondcorp client-connector gateways describe diff --git a/gcloud/beta/beyondcorp/client-connector/gateways/get-iam-policy b/gcloud/beta/beyondcorp/client-connector/gateways/get-iam-policy index 07949aa74..1b7515367 100644 --- a/gcloud/beta/beyondcorp/client-connector/gateways/get-iam-policy +++ b/gcloud/beta/beyondcorp/client-connector/gateways/get-iam-policy @@ -1,6 +1,6 @@ NAME gcloud beta beyondcorp client-connector gateways get-iam-policy - get the - IAM policy for a BeyondCorp client gateway + IAM policy for a BeyondCorp client gateway (Deprecated) SYNOPSIS gcloud beta beyondcorp client-connector gateways get-iam-policy diff --git a/gcloud/beta/beyondcorp/client-connector/gateways/help b/gcloud/beta/beyondcorp/client-connector/gateways/help index 0e5149c44..70137fd31 100644 --- a/gcloud/beta/beyondcorp/client-connector/gateways/help +++ b/gcloud/beta/beyondcorp/client-connector/gateways/help @@ -23,22 +23,22 @@ COMMANDS COMMAND is one of the following: create - (BETA) Create a new BeyondCorp client gateway. + (BETA) Create a new BeyondCorp client gateway (Deprecated). delete - (BETA) Delete a single BeyondCorp client gateway. + (BETA) Delete a single BeyondCorp client gateway (Deprecated). describe - (BETA) Describe a single BeyondCorp client gateway. + (BETA) Describe a single BeyondCorp client gateway (Deprecated). get-iam-policy - (BETA) Get the IAM policy for a BeyondCorp client gateway. + (BETA) Get the IAM policy for a BeyondCorp client gateway (Deprecated). list - (BETA) List BeyondCorp client gateway resources. + (BETA) List BeyondCorp client gateway resources (Deprecated). set-iam-policy - (BETA) Set the IAM policy for a BeyondCorp client gateway. + (BETA) Set the IAM policy for a BeyondCorp client gateway (Deprecated). NOTES This command is currently in beta and might change without notice. diff --git a/gcloud/beta/beyondcorp/client-connector/gateways/list b/gcloud/beta/beyondcorp/client-connector/gateways/list index aa276a516..f21653d8a 100644 --- a/gcloud/beta/beyondcorp/client-connector/gateways/list +++ b/gcloud/beta/beyondcorp/client-connector/gateways/list @@ -1,6 +1,6 @@ NAME gcloud beta beyondcorp client-connector gateways list - list BeyondCorp - client gateway resources + client gateway resources (Deprecated) SYNOPSIS gcloud beta beyondcorp client-connector gateways list --location=LOCATION diff --git a/gcloud/beta/beyondcorp/client-connector/gateways/set-iam-policy b/gcloud/beta/beyondcorp/client-connector/gateways/set-iam-policy index de264b109..ff2e33746 100644 --- a/gcloud/beta/beyondcorp/client-connector/gateways/set-iam-policy +++ b/gcloud/beta/beyondcorp/client-connector/gateways/set-iam-policy @@ -1,6 +1,6 @@ NAME gcloud beta beyondcorp client-connector gateways set-iam-policy - set the - IAM policy for a BeyondCorp client gateway + IAM policy for a BeyondCorp client gateway (Deprecated) SYNOPSIS gcloud beta beyondcorp client-connector gateways set-iam-policy diff --git a/gcloud/beta/beyondcorp/client-connector/help b/gcloud/beta/beyondcorp/client-connector/help index c0aa5929f..c4a12826d 100644 --- a/gcloud/beta/beyondcorp/client-connector/help +++ b/gcloud/beta/beyondcorp/client-connector/help @@ -1,6 +1,6 @@ NAME gcloud beta beyondcorp client-connector - provides context-aware access to - non-web applications + non-web applications (Deprecated) SYNOPSIS gcloud beta beyondcorp client-connector GROUP [GCLOUD_WIDE_FLAG ...] diff --git a/gcloud/beta/beyondcorp/client-connector/operations/describe b/gcloud/beta/beyondcorp/client-connector/operations/describe index cacc4306a..715fde97a 100644 --- a/gcloud/beta/beyondcorp/client-connector/operations/describe +++ b/gcloud/beta/beyondcorp/client-connector/operations/describe @@ -1,6 +1,6 @@ NAME gcloud beta beyondcorp client-connector operations describe - describe a - BeyondCorp client connector operation + BeyondCorp client connector operation (Deprecated) SYNOPSIS gcloud beta beyondcorp client-connector operations describe diff --git a/gcloud/beta/beyondcorp/client-connector/operations/help b/gcloud/beta/beyondcorp/client-connector/operations/help index d974f321b..3250cdecd 100644 --- a/gcloud/beta/beyondcorp/client-connector/operations/help +++ b/gcloud/beta/beyondcorp/client-connector/operations/help @@ -18,10 +18,10 @@ COMMANDS COMMAND is one of the following: describe - (BETA) Describe a BeyondCorp client connector operation. + (BETA) Describe a BeyondCorp client connector operation (Deprecated). list - (BETA) List BeyondCorp client connector operations. + (BETA) List BeyondCorp client connector operations (Deprecated). NOTES This command is currently in beta and might change without notice. diff --git a/gcloud/beta/beyondcorp/client-connector/operations/list b/gcloud/beta/beyondcorp/client-connector/operations/list index 4f576aa2e..3a895ff77 100644 --- a/gcloud/beta/beyondcorp/client-connector/operations/list +++ b/gcloud/beta/beyondcorp/client-connector/operations/list @@ -1,6 +1,6 @@ NAME gcloud beta beyondcorp client-connector operations list - list BeyondCorp - client connector operations + client connector operations (Deprecated) SYNOPSIS gcloud beta beyondcorp client-connector operations list --location=LOCATION diff --git a/gcloud/beta/beyondcorp/client-connector/services/create b/gcloud/beta/beyondcorp/client-connector/services/create index 54b4b00dc..ba1540d07 100644 --- a/gcloud/beta/beyondcorp/client-connector/services/create +++ b/gcloud/beta/beyondcorp/client-connector/services/create @@ -1,6 +1,6 @@ NAME gcloud beta beyondcorp client-connector services create - create a new - BeyondCorp client connector service + BeyondCorp client connector service (Deprecated) SYNOPSIS gcloud beta beyondcorp client-connector services create diff --git a/gcloud/beta/beyondcorp/client-connector/services/delete b/gcloud/beta/beyondcorp/client-connector/services/delete index cb8bce547..7b7feecf3 100644 --- a/gcloud/beta/beyondcorp/client-connector/services/delete +++ b/gcloud/beta/beyondcorp/client-connector/services/delete @@ -1,6 +1,6 @@ NAME gcloud beta beyondcorp client-connector services delete - delete a - BeyondCorp client connector service + BeyondCorp client connector service (Deprecated) SYNOPSIS gcloud beta beyondcorp client-connector services delete diff --git a/gcloud/beta/beyondcorp/client-connector/services/describe b/gcloud/beta/beyondcorp/client-connector/services/describe index 52cb21ff5..09a8530d3 100644 --- a/gcloud/beta/beyondcorp/client-connector/services/describe +++ b/gcloud/beta/beyondcorp/client-connector/services/describe @@ -1,6 +1,6 @@ NAME gcloud beta beyondcorp client-connector services describe - describe a - BeyondCorp client connector service + BeyondCorp client connector service (Deprecated) SYNOPSIS gcloud beta beyondcorp client-connector services describe diff --git a/gcloud/beta/beyondcorp/client-connector/services/get-iam-policy b/gcloud/beta/beyondcorp/client-connector/services/get-iam-policy index 7425b8372..8c1faf6c0 100644 --- a/gcloud/beta/beyondcorp/client-connector/services/get-iam-policy +++ b/gcloud/beta/beyondcorp/client-connector/services/get-iam-policy @@ -1,6 +1,6 @@ NAME gcloud beta beyondcorp client-connector services get-iam-policy - get the - IAM policy for a BeyondCorp client connector service + IAM policy for a BeyondCorp client connector service (Deprecated) SYNOPSIS gcloud beta beyondcorp client-connector services get-iam-policy diff --git a/gcloud/beta/beyondcorp/client-connector/services/help b/gcloud/beta/beyondcorp/client-connector/services/help index 3b71ee820..6f9760207 100644 --- a/gcloud/beta/beyondcorp/client-connector/services/help +++ b/gcloud/beta/beyondcorp/client-connector/services/help @@ -25,25 +25,27 @@ COMMANDS COMMAND is one of the following: create - (BETA) Create a new BeyondCorp client connector service. + (BETA) Create a new BeyondCorp client connector service (Deprecated). delete - (BETA) Delete a BeyondCorp client connector service. + (BETA) Delete a BeyondCorp client connector service (Deprecated). describe - (BETA) Describe a BeyondCorp client connector service. + (BETA) Describe a BeyondCorp client connector service (Deprecated). get-iam-policy - (BETA) Get the IAM policy for a BeyondCorp client connector service. + (BETA) Get the IAM policy for a BeyondCorp client connector service + (Deprecated). list - (BETA) List BeyondCorp client connector service resources. + (BETA) List BeyondCorp client connector service resources (Deprecated). set-iam-policy - (BETA) Set the IAM policy for a BeyondCorp client connector service. + (BETA) Set the IAM policy for a BeyondCorp client connector service + (Deprecated). update - (BETA) Update a BeyondCorp client connector service. + (BETA) Update a BeyondCorp client connector service (Deprecated). NOTES This command is currently in beta and might change without notice. diff --git a/gcloud/beta/beyondcorp/client-connector/services/list b/gcloud/beta/beyondcorp/client-connector/services/list index 80673c98a..9d8a924eb 100644 --- a/gcloud/beta/beyondcorp/client-connector/services/list +++ b/gcloud/beta/beyondcorp/client-connector/services/list @@ -1,6 +1,6 @@ NAME gcloud beta beyondcorp client-connector services list - list BeyondCorp - client connector service resources + client connector service resources (Deprecated) SYNOPSIS gcloud beta beyondcorp client-connector services list --location=LOCATION diff --git a/gcloud/beta/beyondcorp/client-connector/services/set-iam-policy b/gcloud/beta/beyondcorp/client-connector/services/set-iam-policy index 4243d50c6..ae11c28fa 100644 --- a/gcloud/beta/beyondcorp/client-connector/services/set-iam-policy +++ b/gcloud/beta/beyondcorp/client-connector/services/set-iam-policy @@ -1,6 +1,6 @@ NAME gcloud beta beyondcorp client-connector services set-iam-policy - set the - IAM policy for a BeyondCorp client connector service + IAM policy for a BeyondCorp client connector service (Deprecated) SYNOPSIS gcloud beta beyondcorp client-connector services set-iam-policy diff --git a/gcloud/beta/beyondcorp/client-connector/services/update b/gcloud/beta/beyondcorp/client-connector/services/update index 73a6b07b0..ebda4ea19 100644 --- a/gcloud/beta/beyondcorp/client-connector/services/update +++ b/gcloud/beta/beyondcorp/client-connector/services/update @@ -1,6 +1,6 @@ NAME gcloud beta beyondcorp client-connector services update - update a - BeyondCorp client connector service + BeyondCorp client connector service (Deprecated) SYNOPSIS gcloud beta beyondcorp client-connector services update diff --git a/gcloud/beta/beyondcorp/help b/gcloud/beta/beyondcorp/help index cc1195a30..5f6483860 100644 --- a/gcloud/beta/beyondcorp/help +++ b/gcloud/beta/beyondcorp/help @@ -31,7 +31,8 @@ GROUPS (BETA) Manages application connectors and connections. client-connector - (BETA) Provides context-aware access to non-web applications. + (BETA) Provides context-aware access to non-web applications + (Deprecated). NOTES This command is currently in beta and might change without notice. This diff --git a/gcloud/beta/bigtable/backups/create b/gcloud/beta/bigtable/backups/create index c9221e51a..5bb692dc4 100644 --- a/gcloud/beta/bigtable/backups/create +++ b/gcloud/beta/bigtable/backups/create @@ -74,13 +74,13 @@ REQUIRED FLAGS Exactly one of these must be specified: --expiration-date=EXPIRATION_DATE - Absolute expiration time of the backup, must be at least 6 hours and - at most 30 days from the time the request is received. See $ gcloud + Absolute expiration time of the backup; must be at least 6 hours and + at most 90 days from the time the request is received. See $ gcloud topic datetimes for information on date/time formats. --retention-period=RETENTION_PERIOD - Retention period of the backup relative from now, must be at least 6 - hours and at most 30 days. See $ gcloud topic datetimes for + Retention period of the backup relative from now; must be at least 6 + hours and at most 90 days. See $ gcloud topic datetimes for information on duration formats. OPTIONAL FLAGS diff --git a/gcloud/beta/bigtable/backups/update b/gcloud/beta/bigtable/backups/update index 9b24130da..cc70b03d6 100644 --- a/gcloud/beta/bigtable/backups/update +++ b/gcloud/beta/bigtable/backups/update @@ -62,13 +62,13 @@ REQUIRED FLAGS Exactly one of these must be specified: --expiration-date=EXPIRATION_DATE - Absolute expiration time of the backup, must be at least 6 hours and - at most 30 days from the time the request is received. See $ gcloud + Absolute expiration time of the backup; must be at least 6 hours and + at most 90 days from the time the request is received. See $ gcloud topic datetimes for information on date/time formats. --retention-period=RETENTION_PERIOD - Retention period of the backup relative from now, must be at least 6 - hours and at most 30 days from backup creation time. See $ gcloud + Retention period of the backup relative from now; must be at least 6 + hours and at most 90 days from backup creation time. See $ gcloud topic datetimes for information on duration formats. See $ gcloud bigtable backups describe for creation time. diff --git a/gcloud/beta/builds/connections/create/gitlab b/gcloud/beta/builds/connections/create/gitlab new file mode 100644 index 000000000..f3435fc86 --- /dev/null +++ b/gcloud/beta/builds/connections/create/gitlab @@ -0,0 +1,149 @@ +NAME + gcloud beta builds connections create gitlab - create a Cloud Build + Connection for gitlab.com or GitLab Enterprise + +SYNOPSIS + gcloud beta builds connections create gitlab (CONNECTION : --region=REGION) + --authorizer-token-secret-version=AUTHORIZER_TOKEN_SECRET_VERSION + --read-authorizer-token-secret-version=READ_AUTHORIZER_TOKEN_SECRET_VERSION + --webhook-secret-secret-version=WEBHOOK_SECRET_SECRET_VERSION [--async] + [--host-uri=HOST_URI] + [--service-directory-service=SERVICE_DIRECTORY_SERVICE + : --ssl-ca-file=SSL_CA_FILE] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Create a Cloud Build Connection for gitlab.com or GitLab Enterprise. + + A gitlab.com or GitLab Enterprise Connection can be created by using a + personal access token with api scope permission. A read_repository scoped + personal access token will also be required on gitlab.com or if the + self-hosted GitLab server doesn't support project access token (GitLab + Enterprise server version < 13.10). + + If the GitLab Enterprise server can only be accessed within a VPC, a + Service Directory service resource can be provided for connecting to it. + +EXAMPLES + To create a GitLab connection for gitlab.com, provide all the required + parameters: + + $ gcloud beta builds connections create gitlab my-gitlab-conn \ + --project=myproj --region=us-central1 \ + --read-authorizer-token-secret-version=projects/myproj/secrets/\ + read-pat/versions/1 \ + --authorizer-token-secret-version=projects/myproj/secrets/\ + api-pat/versions/1 \ + --webhook-secret-secret-version=projects/myproj/secrets/\ + whsecret/versions/1 + + To create a GitLab connection for a GitLab server, provide host-uri + parameter as well: + + $ gcloud beta builds connections create gitlab my-gle-conn \ + --host-uri=https://my.gle-server.net --project=myproj \ + --region=us-central1 \ + --authorizer-token-secret-version=projects/myproj/secrets/\ + api-pat/versions/1 \ + --read-authorizer-token-secret-version=projects/myproj/secrets/\ + read-pat/versions/1 \ + --webhook-secret-secret-version=projects/myproj/secrets/\ + whsecret/versions/1 + + To create a GitLab connection for a private GitLab server. provide the + service-directory-service and ssl-ca-file as well: + + $ gcloud beta builds connections create gitlab my-gle-conn \ + --host-uri=https://my.private-gle-server.net --project=myproj \ + --region=us-central1 \ + --service-directory-service=projects/myproj/namespaces/x/\ + services/mysds --ssl-ca-file=mycertificate.crt \ + --authorizer-token-secret-version=projects/myproj/secrets/\ + api-pat/versions/1 \ + --read-authorizer-token-secret-version=projects/myproj/secrets/\ + read-pat/versions/1 \ + --webhook-secret-secret-version=projects/myproj/secrets/\ + whsecret/versions/1 + +POSITIONAL ARGUMENTS + Connection resource - Connection to create. The arguments in this group + can be used to specify the attributes of this resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. + + To set the project attribute: + ◆ provide the argument connection on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + CONNECTION + ID of the connection or fully qualified identifier for the + connection. + + To set the connection attribute: + ▸ provide the argument connection on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + The Google Cloud region. + + To set the region attribute: + ▸ provide the argument connection on the command line with a fully + specified name; + ▸ provide the argument --region on the command line; + ▸ set the property builds/region. + +REQUIRED FLAGS + --authorizer-token-secret-version=AUTHORIZER_TOKEN_SECRET_VERSION + Secret containing the api personal access token. + + --read-authorizer-token-secret-version=READ_AUTHORIZER_TOKEN_SECRET_VERSION + Secret containing the read_api personal access token. + + --webhook-secret-secret-version=WEBHOOK_SECRET_SECRET_VERSION + Secret containing the webhook secret string for validating webhook + events sent by GitLab. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --host-uri=HOST_URI + URI of the GitLab instance. + + Group of arguments for configuring access through Service Directory. + + --service-directory-service=SERVICE_DIRECTORY_SERVICE + Service Directory service resource to use for accessing the + gitlab.com or GitLab Enterprise Server. Necessary only if the server + has no public access from the internet. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --ssl-ca-file=SSL_CA_FILE + File containing the SSL_CA to be used. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the cloudbuild/v2 API. The full documentation for this + API can be found at: https://cloud.google.com/cloud-build/docs/ + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha builds connections create gitlab + diff --git a/gcloud/beta/builds/connections/create/help b/gcloud/beta/builds/connections/create/help index 91169057d..068c4f065 100644 --- a/gcloud/beta/builds/connections/create/help +++ b/gcloud/beta/builds/connections/create/help @@ -22,6 +22,10 @@ COMMANDS github-enterprise (BETA) Create a Cloud Build Connection of type GitHub Enterprise. + gitlab + (BETA) Create a Cloud Build Connection for gitlab.com or GitLab + Enterprise. + NOTES This command is currently in beta and might change without notice. This variant is also available: diff --git a/gcloud/beta/builds/connections/update/gitlab b/gcloud/beta/builds/connections/update/gitlab new file mode 100644 index 000000000..08ba9a59b --- /dev/null +++ b/gcloud/beta/builds/connections/update/gitlab @@ -0,0 +1,105 @@ +NAME + gcloud beta builds connections update gitlab - update a Cloud Build + Connection of type gitlab.com or GitLab Enterprise + +SYNOPSIS + gcloud beta builds connections update gitlab (CONNECTION : --region=REGION) + [--async] + [--authorizer-token-secret-version=AUTHORIZER_TOKEN_SECRET_VERSION] + [--host-uri=HOST_URI] + [--read-authorizer-token-secret-version=READ_AUTHORIZER_TOKEN_SECRET_VERSION] + [--service-directory-service=SERVICE_DIRECTORY_SERVICE] + [--ssl-ca-file=SSL_CA_FILE] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Update a Cloud Build Connection of type gitlab.com or GitLab + Enterprise. + +EXAMPLES + To update the ssl_ca, provide the connection name and the ssl_ca file: + + $ gcloud beta builds connections update gitlab my-gle-conn \ + --region=us-west1 --ssl-ca-file=mycertificate.crt + + To update the authorization token, provide the connection name and the new + authorization token secret version. + + $ gcloud beta builds connections update gitlab my-gle-conn \ + --region=us-west1 \ + --authorizer-token-secret-version=projects/myproj/secrets/\ + api-pat/versions/1 + +POSITIONAL ARGUMENTS + Connection resource - Connection to update. The arguments in this group + can be used to specify the attributes of this resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. + + To set the project attribute: + ◆ provide the argument connection on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + CONNECTION + ID of the connection or fully qualified identifier for the + connection. + + To set the connection attribute: + ▸ provide the argument connection on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + The Google Cloud region. + + To set the region attribute: + ▸ provide the argument connection on the command line with a fully + specified name; + ▸ provide the argument --region on the command line; + ▸ set the property builds/region. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --authorizer-token-secret-version=AUTHORIZER_TOKEN_SECRET_VERSION + Secret containing the api personal access token. + + --host-uri=HOST_URI + URI of the GitLab instance. + + --read-authorizer-token-secret-version=READ_AUTHORIZER_TOKEN_SECRET_VERSION + Secret containing the read_repository personal access token. Required + for GitLab Enterprise versions older than 13.10. + + --service-directory-service=SERVICE_DIRECTORY_SERVICE + Service Directory service resource to use for accessing the GitLab + Enterprise Server. Necessary only if the server has no public access + from the internet. + + --ssl-ca-file=SSL_CA_FILE + File containing the SSL_CA to be used. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the cloudbuild/v2 API. The full documentation for this + API can be found at: https://cloud.google.com/cloud-build/docs/ + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha builds connections update gitlab + diff --git a/gcloud/beta/builds/connections/update/help b/gcloud/beta/builds/connections/update/help index 619273170..7b2403676 100644 --- a/gcloud/beta/builds/connections/update/help +++ b/gcloud/beta/builds/connections/update/help @@ -22,6 +22,10 @@ COMMANDS github-enterprise (BETA) Update a Cloud Build Connection of type GitHub Enterprise. + gitlab + (BETA) Update a Cloud Build Connection of type gitlab.com or GitLab + Enterprise. + NOTES This command is currently in beta and might change without notice. This variant is also available: diff --git a/gcloud/beta/compute/addresses/create b/gcloud/beta/compute/addresses/create index 626bf5367..75c113b91 100644 --- a/gcloud/beta/compute/addresses/create +++ b/gcloud/beta/compute/addresses/create @@ -19,8 +19,8 @@ DESCRIPTION EXAMPLES To reserve three IP addresses in the 'us-central1' region, run: - $ gcloud beta compute addresses create ADDRESS-1 ADDRESS-2 \ - ADDRESS-3 --region=us-central1 + $ gcloud beta compute addresses create address-1 address-2 \ + address-3 --region=us-central1 To reserve ephemeral IP addresses '162.222.181.198' and '23.251.146.189' which are being used by virtual machine instances in the 'us-central1' @@ -31,36 +31,36 @@ EXAMPLES In the above invocation, the two addresses will be assigned random names. - To reserve an IP address from the subnet 'default' in the 'us-central1' - region, run: + To reserve an IP address named subnet-address-1 from the subnet 'default' + in the 'us-central1' region, run: - $ gcloud beta compute addresses create SUBNET-ADDRESS-1 \ + $ gcloud beta compute addresses create subnet-address-1 \ --region=us-central1 --subnet=default To reserve an IP address that can be used by multiple internal load balancers from the subnet 'default' in the 'us-central1' region, run: - $ gcloud beta compute addresses create SHARED-ADDRESS-1 \ + $ gcloud beta compute addresses create shared-address-1 \ --region=us-central1 --subnet=default \ --purpose=SHARED_LOADBALANCER_VIP To reserve an IP range '10.110.0.0/16' from the network 'default' for 'VPC_PEERING', run: - $ gcloud beta compute addresses create IP-RANGE-1 --global \ + $ gcloud beta compute addresses create ip-range-1 --global \ --addresses=10.110.0.0 --prefix-length=16 \ --purpose=VPC_PEERING --network=default To reserve any IP range with prefix length '16' from the network 'default' for 'VPC_PEERING', run: - $ gcloud beta compute addresses create IP-RANGE-1 --global \ + $ gcloud beta compute addresses create ip-range-1 --global \ --prefix-length=16 --purpose=VPC_PEERING --network=default To reserve an address from network 'default' for PRIVATE_SERVICE_CONNECT, run: - $ gcloud beta compute addresses create PSC-ADDRESS-1 --global \ + $ gcloud beta compute addresses create psc-address-1 --global \ --addresses=10.110.0.10 --purpose=PRIVATE_SERVICE_CONNECT \ --network=default diff --git a/gcloud/beta/compute/addresses/delete b/gcloud/beta/compute/addresses/delete index fb16cee7e..9a4f09bdc 100644 --- a/gcloud/beta/compute/addresses/delete +++ b/gcloud/beta/compute/addresses/delete @@ -17,7 +17,7 @@ EXAMPLES To release two addresses with the names 'address-name1' and 'address-name2', run: - $ gcloud beta compute addresses delete addressname1 address-name2 + $ gcloud beta compute addresses delete address-name1 address-name2 POSITIONAL ARGUMENTS NAME [NAME ...] diff --git a/gcloud/beta/compute/addresses/describe b/gcloud/beta/compute/addresses/describe index 4b3c0526e..d2d753ef0 100644 --- a/gcloud/beta/compute/addresses/describe +++ b/gcloud/beta/compute/addresses/describe @@ -13,11 +13,12 @@ DESCRIPTION EXAMPLES To get details about a global address, run: - $ gcloud beta compute addresses describe ADDRESS --global + $ gcloud beta compute addresses describe my-address-name --global To get details about a regional address, run: - $ gcloud beta compute addresses describe ADDRESS --region=us-central1 + $ gcloud beta compute addresses describe my-address-name \ + --region=us-central1 POSITIONAL ARGUMENTS NAME diff --git a/gcloud/beta/container/fleet/memberships/help b/gcloud/beta/container/fleet/memberships/help index bd6036197..d8be27df1 100644 --- a/gcloud/beta/container/fleet/memberships/help +++ b/gcloud/beta/container/fleet/memberships/help @@ -21,6 +21,9 @@ GROUPS bindings (BETA) Membership Bindings for permissions. + support-access + (BETA) Membership used for support access. + COMMANDS COMMAND is one of the following: diff --git a/gcloud/beta/container/fleet/memberships/support-access/describe b/gcloud/beta/container/fleet/memberships/support-access/describe new file mode 100644 index 000000000..b5536a167 --- /dev/null +++ b/gcloud/beta/container/fleet/memberships/support-access/describe @@ -0,0 +1,62 @@ +NAME + gcloud beta container fleet memberships support-access describe - describe + support access for the specified membership + +SYNOPSIS + gcloud beta container fleet memberships support-access describe + (MEMBERSHIP_NAME : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +EXAMPLES + To describe support access for membership my-membership run: + + $ gcloud beta container fleet memberships support-access describe \ + my-membership + +POSITIONAL ARGUMENTS + Membership resource - The group of arguments defining a membership. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument MEMBERSHIP_NAME on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + MEMBERSHIP_NAME + ID of the membership or fully qualified identifier for the + membership. + + To set the membership attribute: + ▸ provide the argument MEMBERSHIP_NAME on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location of the membership resource, e.g. us-central1. If not + specified, defaults to global. + + To set the location attribute: + ▸ provide the argument MEMBERSHIP_NAME on the command line with a + fully specified name; + ▸ provide the argument --location on the command line; + ▸ set the property gkehub/location. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha container fleet memberships support-access describe + diff --git a/gcloud/beta/container/fleet/memberships/support-access/disable b/gcloud/beta/container/fleet/memberships/support-access/disable new file mode 100644 index 000000000..80d1b76a4 --- /dev/null +++ b/gcloud/beta/container/fleet/memberships/support-access/disable @@ -0,0 +1,62 @@ +NAME + gcloud beta container fleet memberships support-access disable - disable + support access for the specified membership + +SYNOPSIS + gcloud beta container fleet memberships support-access disable + (MEMBERSHIP_NAME : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +EXAMPLES + To disable support access for membership my-membership run: + + $ gcloud beta container fleet memberships support-access disable \ + my-membership + +POSITIONAL ARGUMENTS + Membership resource - The group of arguments defining a membership. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument MEMBERSHIP_NAME on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + MEMBERSHIP_NAME + ID of the membership or fully qualified identifier for the + membership. + + To set the membership attribute: + ▸ provide the argument MEMBERSHIP_NAME on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location of the membership resource, e.g. us-central1. If not + specified, defaults to global. + + To set the location attribute: + ▸ provide the argument MEMBERSHIP_NAME on the command line with a + fully specified name; + ▸ provide the argument --location on the command line; + ▸ set the property gkehub/location. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha container fleet memberships support-access disable + diff --git a/gcloud/beta/container/fleet/memberships/support-access/enable b/gcloud/beta/container/fleet/memberships/support-access/enable new file mode 100644 index 000000000..3deb3fb22 --- /dev/null +++ b/gcloud/beta/container/fleet/memberships/support-access/enable @@ -0,0 +1,62 @@ +NAME + gcloud beta container fleet memberships support-access enable - enable + support access for the specified membership + +SYNOPSIS + gcloud beta container fleet memberships support-access enable + (MEMBERSHIP_NAME : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +EXAMPLES + To enable support access for membership my-membership run: + + $ gcloud beta container fleet memberships support-access enable \ + my-membership + +POSITIONAL ARGUMENTS + Membership resource - The group of arguments defining a membership. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument MEMBERSHIP_NAME on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + MEMBERSHIP_NAME + ID of the membership or fully qualified identifier for the + membership. + + To set the membership attribute: + ▸ provide the argument MEMBERSHIP_NAME on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location of the membership resource, e.g. us-central1. If not + specified, defaults to global. + + To set the location attribute: + ▸ provide the argument MEMBERSHIP_NAME on the command line with a + fully specified name; + ▸ provide the argument --location on the command line; + ▸ set the property gkehub/location. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha container fleet memberships support-access enable + diff --git a/gcloud/beta/container/fleet/memberships/support-access/get-yaml b/gcloud/beta/container/fleet/memberships/support-access/get-yaml new file mode 100644 index 000000000..50a749e99 --- /dev/null +++ b/gcloud/beta/container/fleet/memberships/support-access/get-yaml @@ -0,0 +1,69 @@ +NAME + gcloud beta container fleet memberships support-access get-yaml - generates + YAML for anthos support RBAC policies + +SYNOPSIS + gcloud beta container fleet memberships support-access get-yaml + (MEMBERSHIP_NAME : --location=LOCATION) + [--rbac-output-file=RBAC_OUTPUT_FILE] [GCLOUD_WIDE_FLAG ...] + +EXAMPLES + To generate the YAML for support access RBAC policies with membership + my-membership, run: + + $ gcloud beta container fleet memberships support-access get-yaml \ + my-membership + +POSITIONAL ARGUMENTS + Membership resource - The group of arguments defining a membership. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument MEMBERSHIP_NAME on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + MEMBERSHIP_NAME + ID of the membership or fully qualified identifier for the + membership. + + To set the membership attribute: + ▸ provide the argument MEMBERSHIP_NAME on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location of the membership resource, e.g. us-central1. If not + specified, defaults to global. + + To set the location attribute: + ▸ provide the argument MEMBERSHIP_NAME on the command line with a + fully specified name; + ▸ provide the argument --location on the command line; + ▸ set the property gkehub/location. + +FLAGS + --rbac-output-file=RBAC_OUTPUT_FILE + If specified, the generated RBAC policy will be written to the + designated local file. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha container fleet memberships support-access get-yaml + diff --git a/gcloud/beta/container/fleet/memberships/support-access/help b/gcloud/beta/container/fleet/memberships/support-access/help new file mode 100644 index 000000000..bab3c2af6 --- /dev/null +++ b/gcloud/beta/container/fleet/memberships/support-access/help @@ -0,0 +1,43 @@ +NAME + gcloud beta container fleet memberships support-access - membership used + for support access + +SYNOPSIS + gcloud beta container fleet memberships support-access COMMAND + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) This command group allows for manipulation of support access for the + specified membership. + +EXAMPLES + Manage support access: + + $ gcloud beta container fleet memberships support-access --help + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + describe + (BETA) Describe support access for the specified membership. + + disable + (BETA) Disable support access for the specified membership. + + enable + (BETA) Enable support access for the specified membership. + + get-yaml + (BETA) Generates YAML for anthos support RBAC policies. + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha container fleet memberships support-access + diff --git a/gcloud/beta/container/hub/memberships/help b/gcloud/beta/container/hub/memberships/help index bf62d2e0d..9cb8deb61 100644 --- a/gcloud/beta/container/hub/memberships/help +++ b/gcloud/beta/container/hub/memberships/help @@ -21,6 +21,9 @@ GROUPS bindings (BETA) Membership Bindings for permissions. + support-access + (BETA) Membership used for support access. + COMMANDS COMMAND is one of the following: diff --git a/gcloud/beta/container/hub/memberships/support-access/describe b/gcloud/beta/container/hub/memberships/support-access/describe new file mode 100644 index 000000000..9cc5d22ad --- /dev/null +++ b/gcloud/beta/container/hub/memberships/support-access/describe @@ -0,0 +1,62 @@ +NAME + gcloud beta container hub memberships support-access describe - describe + support access for the specified membership + +SYNOPSIS + gcloud beta container hub memberships support-access describe + (MEMBERSHIP_NAME : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +EXAMPLES + To describe support access for membership my-membership run: + + $ gcloud beta container hub memberships support-access describe \ + my-membership + +POSITIONAL ARGUMENTS + Membership resource - The group of arguments defining a membership. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument MEMBERSHIP_NAME on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + MEMBERSHIP_NAME + ID of the membership or fully qualified identifier for the + membership. + + To set the membership attribute: + ▸ provide the argument MEMBERSHIP_NAME on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location of the membership resource, e.g. us-central1. If not + specified, defaults to global. + + To set the location attribute: + ▸ provide the argument MEMBERSHIP_NAME on the command line with a + fully specified name; + ▸ provide the argument --location on the command line; + ▸ set the property gkehub/location. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha container hub memberships support-access describe + diff --git a/gcloud/beta/container/hub/memberships/support-access/disable b/gcloud/beta/container/hub/memberships/support-access/disable new file mode 100644 index 000000000..a9e84acb1 --- /dev/null +++ b/gcloud/beta/container/hub/memberships/support-access/disable @@ -0,0 +1,62 @@ +NAME + gcloud beta container hub memberships support-access disable - disable + support access for the specified membership + +SYNOPSIS + gcloud beta container hub memberships support-access disable + (MEMBERSHIP_NAME : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +EXAMPLES + To disable support access for membership my-membership run: + + $ gcloud beta container hub memberships support-access disable \ + my-membership + +POSITIONAL ARGUMENTS + Membership resource - The group of arguments defining a membership. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument MEMBERSHIP_NAME on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + MEMBERSHIP_NAME + ID of the membership or fully qualified identifier for the + membership. + + To set the membership attribute: + ▸ provide the argument MEMBERSHIP_NAME on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location of the membership resource, e.g. us-central1. If not + specified, defaults to global. + + To set the location attribute: + ▸ provide the argument MEMBERSHIP_NAME on the command line with a + fully specified name; + ▸ provide the argument --location on the command line; + ▸ set the property gkehub/location. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha container hub memberships support-access disable + diff --git a/gcloud/beta/container/hub/memberships/support-access/enable b/gcloud/beta/container/hub/memberships/support-access/enable new file mode 100644 index 000000000..0bd2d21f6 --- /dev/null +++ b/gcloud/beta/container/hub/memberships/support-access/enable @@ -0,0 +1,62 @@ +NAME + gcloud beta container hub memberships support-access enable - enable + support access for the specified membership + +SYNOPSIS + gcloud beta container hub memberships support-access enable + (MEMBERSHIP_NAME : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +EXAMPLES + To enable support access for membership my-membership run: + + $ gcloud beta container hub memberships support-access enable \ + my-membership + +POSITIONAL ARGUMENTS + Membership resource - The group of arguments defining a membership. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument MEMBERSHIP_NAME on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + MEMBERSHIP_NAME + ID of the membership or fully qualified identifier for the + membership. + + To set the membership attribute: + ▸ provide the argument MEMBERSHIP_NAME on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location of the membership resource, e.g. us-central1. If not + specified, defaults to global. + + To set the location attribute: + ▸ provide the argument MEMBERSHIP_NAME on the command line with a + fully specified name; + ▸ provide the argument --location on the command line; + ▸ set the property gkehub/location. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha container hub memberships support-access enable + diff --git a/gcloud/beta/container/hub/memberships/support-access/get-yaml b/gcloud/beta/container/hub/memberships/support-access/get-yaml new file mode 100644 index 000000000..22c67d28c --- /dev/null +++ b/gcloud/beta/container/hub/memberships/support-access/get-yaml @@ -0,0 +1,69 @@ +NAME + gcloud beta container hub memberships support-access get-yaml - generates + YAML for anthos support RBAC policies + +SYNOPSIS + gcloud beta container hub memberships support-access get-yaml + (MEMBERSHIP_NAME : --location=LOCATION) + [--rbac-output-file=RBAC_OUTPUT_FILE] [GCLOUD_WIDE_FLAG ...] + +EXAMPLES + To generate the YAML for support access RBAC policies with membership + my-membership, run: + + $ gcloud beta container hub memberships support-access get-yaml \ + my-membership + +POSITIONAL ARGUMENTS + Membership resource - The group of arguments defining a membership. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument MEMBERSHIP_NAME on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + MEMBERSHIP_NAME + ID of the membership or fully qualified identifier for the + membership. + + To set the membership attribute: + ▸ provide the argument MEMBERSHIP_NAME on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location of the membership resource, e.g. us-central1. If not + specified, defaults to global. + + To set the location attribute: + ▸ provide the argument MEMBERSHIP_NAME on the command line with a + fully specified name; + ▸ provide the argument --location on the command line; + ▸ set the property gkehub/location. + +FLAGS + --rbac-output-file=RBAC_OUTPUT_FILE + If specified, the generated RBAC policy will be written to the + designated local file. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha container hub memberships support-access get-yaml + diff --git a/gcloud/beta/container/hub/memberships/support-access/help b/gcloud/beta/container/hub/memberships/support-access/help new file mode 100644 index 000000000..b72b23a09 --- /dev/null +++ b/gcloud/beta/container/hub/memberships/support-access/help @@ -0,0 +1,43 @@ +NAME + gcloud beta container hub memberships support-access - membership used for + support access + +SYNOPSIS + gcloud beta container hub memberships support-access COMMAND + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) This command group allows for manipulation of support access for the + specified membership. + +EXAMPLES + Manage support access: + + $ gcloud beta container hub memberships support-access --help + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + describe + (BETA) Describe support access for the specified membership. + + disable + (BETA) Disable support access for the specified membership. + + enable + (BETA) Enable support access for the specified membership. + + get-yaml + (BETA) Generates YAML for anthos support RBAC policies. + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha container hub memberships support-access + diff --git a/gcloud/beta/container/vmware/node-pools/create b/gcloud/beta/container/vmware/node-pools/create index d4769463d..81a150e35 100644 --- a/gcloud/beta/container/vmware/node-pools/create +++ b/gcloud/beta/container/vmware/node-pools/create @@ -96,6 +96,9 @@ REQUIRED FLAGS Applies the given kubernetes taints on all nodes in the new node pool, which can be used with tolerations for pod scheduling. + Taint effect must be one of the following: NoSchedule, + PreferNoSchedule, or NoExecute. + Examples: $ gcloud beta container vmware node-pools create node-pool-1 \ diff --git a/gcloud/beta/container/vmware/node-pools/update b/gcloud/beta/container/vmware/node-pools/update index c85d9ec35..b2e1bc08c 100644 --- a/gcloud/beta/container/vmware/node-pools/update +++ b/gcloud/beta/container/vmware/node-pools/update @@ -98,6 +98,9 @@ FLAGS Applies the given kubernetes taints on all nodes in the new node pool, which can be used with tolerations for pod scheduling. + Taint effect must be one of the following: NoSchedule, + PreferNoSchedule, or NoExecute. + Examples: $ gcloud beta container vmware node-pools update node-pool-1 \ diff --git a/gcloud/beta/filestore/instances/create b/gcloud/beta/filestore/instances/create index d411d2f22..b9068ddb1 100644 --- a/gcloud/beta/filestore/instances/create +++ b/gcloud/beta/filestore/instances/create @@ -110,6 +110,9 @@ REQUIRED FLAGS ▸ BASIC_SSD: 2.5TB-63.9TB in 1GB increments or its multiples. ▸ HIGH_SCALE_SSD: 10TB-100TB in 2.5TB increments or its multiples. + ▸ ZONAL: 1TB-100TB: + ▫ 1TB-9.75TB in 256GB increments or its multiples. + ▫ 10TB-100TB in 2.5TB increments or its multiples. ▸ ENTERPRISE: 1TB-10TB in 256GB increments or its multiples. name @@ -190,8 +193,8 @@ REQUIRED FLAGS allocated IP address range is specified, it must be one of the ranges associated with the private service access connection. When specified as a direct CIDR value, it must be a /29 CIDR block for - Basic tier or a /24 CIDR block for High Scale or Enterprise tier in - one of the internal IP address ranges + Basic tier or a /24 CIDR block for High Scale, Zonal or Enterprise + tier in one of the internal IP address ranges (https://www.arin.net/knowledge/address_filters.html) that identifies the range of IP addresses reserved for this instance. For example, 10.0.0.0/29 or 192.168.0.0/24. The range you specify @@ -261,13 +264,19 @@ OPTIONAL FLAGS mission-critical workloads. high-scale-ssd High Scale instances offer NFS storage system with expanded - capacity and performance scaling capabilities. + capacity and performance scaling capabilities. Use ZONAL instead + whenever possible. premium Premium Filestore instance, An alias for BASIC_SSD. Use BASIC_SSD instead whenever possible. standard Standard Filestore instance, An alias for BASIC_HDD. Use BASIC_HDD instead whenever possible. + zonal + Zonal instances offer NFS storage system suitable for high + performance computing application requirements. It offers fast + performance that scales with capacity and allows you to grow and + shrink capacity. Key resource - The Cloud KMS (Key Management Service) cryptokey that will be used to protect the instance. The 'Filestore Service Agent' service diff --git a/gcloud/beta/filestore/instances/update b/gcloud/beta/filestore/instances/update index 5335c8bff..bc0139ba8 100644 --- a/gcloud/beta/filestore/instances/update +++ b/gcloud/beta/filestore/instances/update @@ -111,6 +111,9 @@ FLAGS ▸ BASIC_SSD: 2.5TB-63.9TB in 1GB increments or its multiples. ▸ HIGH_SCALE_SSD: 10TB-100TB in 2.5TB increments or its multiples. + ▸ ZONAL: 1TB-100TB: + ▫ 1TB-9.75TB in 256GB increments or its multiples. + ▫ 10TB-100TB in 2.5TB increments or its multiples. ▸ ENTERPRISE: 1TB-10TB in 256GB increments or its multiples. name diff --git a/gcloud/beta/network-security/firewall-endpoints/help b/gcloud/beta/network-security/firewall-endpoints/help index b20bd6cd9..3881cb79d 100644 --- a/gcloud/beta/network-security/firewall-endpoints/help +++ b/gcloud/beta/network-security/firewall-endpoints/help @@ -29,6 +29,9 @@ COMMANDS list (BETA) List Firewall Plus endpoints. + update + (BETA) Update a Firewall Plus endpoint. + NOTES This command is currently in beta and might change without notice. This variant is also available: diff --git a/gcloud/beta/network-security/firewall-endpoints/update b/gcloud/beta/network-security/firewall-endpoints/update new file mode 100644 index 000000000..3d6deb492 --- /dev/null +++ b/gcloud/beta/network-security/firewall-endpoints/update @@ -0,0 +1,123 @@ +NAME + gcloud beta network-security firewall-endpoints update - update a Firewall + Plus endpoint + +SYNOPSIS + gcloud beta network-security firewall-endpoints update + (FIREWALL_ENDPOINT : --organization=ORGANIZATION --zone=ZONE) [--async] + [--max-wait=MAX_WAIT; default="60m"] [--update-labels=[KEY=VALUE,...]] + [--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Update a firewall endpoint. Check the progress of endpoint update by + using gcloud network-security firewall-endpoints describe. + + For more examples, refer to the EXAMPLES section below. + +EXAMPLES + To update labels k1 and k2, run: + + $ gcloud beta network-security firewall-endpoints update \ + my-endpoint --zone=us-central1-a --organization=1234 \ + --update-labels=k1=v1,k2=v2 + + To remove labels k3 and k4, run: + + $ gcloud beta network-security firewall-endpoints update \ + my-endpoint --zone=us-central1-a --organization=1234 \ + --remove-labels=k3,k4 + + To clear all labels from the firewall endpoint, run: + + $ gcloud beta network-security firewall-endpoints update \ + my-endpoint --zone=us-central1-a --organization=1234 \ + --clear-labels + +POSITIONAL ARGUMENTS + Firewall endpoint resource - Firewall Plus. The arguments in this group + can be used to specify the attributes of this resource. + + This must be specified. + + FIREWALL_ENDPOINT + ID of the firewall endpoint or fully qualified identifier for the + firewall endpoint. + + To set the endpoint-name attribute: + ▸ provide the argument FIREWALL_ENDPOINT on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --organization=ORGANIZATION + Organization ID of the firewall endpoint. + + To set the organization attribute: + ▸ provide the argument FIREWALL_ENDPOINT on the command line with a + fully specified name; + ▸ provide the argument --organization on the command line. + + --zone=ZONE + Zone of the firewall endpoint. + + To set the zone attribute: + ▸ provide the argument FIREWALL_ENDPOINT on the command line with a + fully specified name; + ▸ provide the argument --zone on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. The default is True. Enabled by default, use --no-async to + disable. + + --max-wait=MAX_WAIT; default="60m" + Time to synchronously wait for the operation to complete, after which + the operation continues asynchronously. Ignored if --no-async isn't + specified. See $ gcloud topic datetimes for information on time + formats. + + --update-labels=[KEY=VALUE,...] + List of label KEY=VALUE pairs to update. If a label exists, its value + is modified. Otherwise, a new label is created. + + Keys must start with a lowercase character and contain only hyphens + (-), underscores (_), lowercase characters, and numbers. Values must + contain only hyphens (-), underscores (_), lowercase characters, and + numbers. + + At most one of these can be specified: + + --clear-labels + Remove all labels. If --update-labels is also specified then + --clear-labels is applied first. + + For example, to remove all labels: + + $ gcloud beta network-security firewall-endpoints update \ + --clear-labels + + To remove all existing labels and create two new labels, foo and baz: + + $ gcloud beta network-security firewall-endpoints update \ + --clear-labels --update-labels foo=bar,baz=qux + + --remove-labels=[KEY,...] + List of label keys to remove. If a label does not exist it is + silently ignored. If --update-labels is also specified then + --update-labels is applied first. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha network-security firewall-endpoints update + diff --git a/gcloud/beta/pubsub/subscriptions/create b/gcloud/beta/pubsub/subscriptions/create index 14dee7eaa..20160c2c8 100644 --- a/gcloud/beta/pubsub/subscriptions/create +++ b/gcloud/beta/pubsub/subscriptions/create @@ -12,8 +12,15 @@ SYNOPSIS [--push-auth-service-account=SERVICE_ACCOUNT_EMAIL] [--push-auth-token-audience=OPTIONAL_AUDIENCE_OVERRIDE] [--push-endpoint=PUSH_ENDPOINT] [--retain-acked-messages] - [--bigquery-table=BIGQUERY_TABLE + [[--bigquery-table=BIGQUERY_TABLE : --drop-unknown-fields --use-topic-schema --write-metadata] + | [--cloud-storage-bucket=CLOUD_STORAGE_BUCKET + : --cloud-storage-file-prefix=CLOUD_STORAGE_FILE_PREFIX + --cloud-storage-file-suffix=CLOUD_STORAGE_FILE_SUFFIX + --cloud-storage-max-bytes=CLOUD_STORAGE_MAX_BYTES + --cloud-storage-max-duration=CLOUD_STORAGE_MAX_DURATION + --cloud-storage-output-format=OUTPUT_FORMAT; + default="text" --cloud-storage-write-metadata]] [--max-delivery-attempts=MAX_DELIVERY_ATTEMPTS [--dead-letter-topic=DEAD_LETTER_TOPIC : --dead-letter-topic-project=DEAD_LETTER_TOPIC_PROJECT]] @@ -169,6 +176,49 @@ OPTIONAL FLAGS Whether or not to write message metadata including message ID, publish timestamp, ordering key, and attributes to BigQuery. + Cloud Storage Config Options. The Cloud Pub/Sub service account + associated with the enclosing subscription's parent project (i.e., + service-{project_number}@gcp-sa-pubsub.iam.gserviceaccount.com) must + have permission to write to this Cloud Storage bucket and to read this + bucket's metadata. + + --cloud-storage-bucket=CLOUD_STORAGE_BUCKET + A Cloud Storage bucket to which to write messages for this + subscription. + + This flag argument must be specified if any of the other arguments + in this group are specified. + + --cloud-storage-file-prefix=CLOUD_STORAGE_FILE_PREFIX + The prefix for Cloud Storage filename. + + --cloud-storage-file-suffix=CLOUD_STORAGE_FILE_SUFFIX + The suffix for Cloud Storage filename. + + --cloud-storage-max-bytes=CLOUD_STORAGE_MAX_BYTES + The maximum bytes that can be written to a Cloud Storage file + before a new file is created. The value must be between 1KB to + 10GB. If the unit is omitted, KB is assumed. + + --cloud-storage-max-duration=CLOUD_STORAGE_MAX_DURATION + The maximum duration that can elapse before a new Cloud Storage + file is created. The value must be between 1m and 10m. Valid values + are strings of the form INTEGER[UNIT], where UNIT is one of "s", + "m", "h", and "d" for seconds, minutes, hours, and days, + respectively. If the unit is omitted, seconds is assumed. + + --cloud-storage-output-format=OUTPUT_FORMAT; default="text" + The output format for data written to Cloud Storage. Values: text + (messages will be written as raw text, separated by a newline) or + avro (messages will be written as an Avro binary). OUTPUT_FORMAT + must be one of: text, avro. + + --cloud-storage-write-metadata + Whether or not to write the subscription name, message_id, + publish_time, attributes, and ordering_key as additional fields in + the output. This has an effect only for subscriptions with + --cloud-storage-output-format=avro. + Dead Letter Queue Options. The Cloud Pub/Sub service account associated with the enclosing subscription's parent project (i.e., service-{project_number}@gcp-sa-pubsub.iam.gserviceaccount.com) must have diff --git a/gcloud/beta/pubsub/subscriptions/update b/gcloud/beta/pubsub/subscriptions/update index 8e3fe2005..dea183d30 100644 --- a/gcloud/beta/pubsub/subscriptions/update +++ b/gcloud/beta/pubsub/subscriptions/update @@ -12,7 +12,15 @@ SYNOPSIS [--push-endpoint=PUSH_ENDPOINT] [--retain-acked-messages] [--update-labels=[KEY=VALUE,...]] [--clear-bigquery-config | [--bigquery-table=BIGQUERY_TABLE - : --drop-unknown-fields --use-topic-schema --write-metadata]] + : --drop-unknown-fields --use-topic-schema --write-metadata] + | --clear-cloud-storage-config + | [--cloud-storage-bucket=CLOUD_STORAGE_BUCKET + : --cloud-storage-file-prefix=CLOUD_STORAGE_FILE_PREFIX + --cloud-storage-file-suffix=CLOUD_STORAGE_FILE_SUFFIX + --cloud-storage-max-bytes=CLOUD_STORAGE_MAX_BYTES + --cloud-storage-max-duration=CLOUD_STORAGE_MAX_DURATION + --cloud-storage-output-format=OUTPUT_FORMAT; + default="text" --cloud-storage-write-metadata]] [--clear-dead-letter-policy | --max-delivery-attempts=MAX_DELIVERY_ATTEMPTS [--dead-letter-topic=DEAD_LETTER_TOPIC @@ -138,6 +146,58 @@ FLAGS Whether or not to write message metadata including message ID, publish timestamp, ordering key, and attributes to BigQuery. + At most one of these can be specified: + + --clear-cloud-storage-config + If set, clear the Cloud Storage config from the subscription. + + Cloud Storage Config Options. The Cloud Pub/Sub service account + associated with the enclosing subscription's parent project (i.e., + service-{project_number}@gcp-sa-pubsub.iam.gserviceaccount.com) must + have permission to write to this Cloud Storage bucket and to read this + bucket's metadata. + + Note that an update to the Cloud Storage config will replace it with a + new config containing only the flags that are passed in the update + CLI. + + --cloud-storage-bucket=CLOUD_STORAGE_BUCKET + A Cloud Storage bucket to which to write messages for this + subscription. + + This flag argument must be specified if any of the other + arguments in this group are specified. + + --cloud-storage-file-prefix=CLOUD_STORAGE_FILE_PREFIX + The prefix for Cloud Storage filename. + + --cloud-storage-file-suffix=CLOUD_STORAGE_FILE_SUFFIX + The suffix for Cloud Storage filename. + + --cloud-storage-max-bytes=CLOUD_STORAGE_MAX_BYTES + The maximum bytes that can be written to a Cloud Storage file + before a new file is created. The value must be between 1KB to + 10GB. If the unit is omitted, KB is assumed. + + --cloud-storage-max-duration=CLOUD_STORAGE_MAX_DURATION + The maximum duration that can elapse before a new Cloud Storage + file is created. The value must be between 1m and 10m. Valid + values are strings of the form INTEGER[UNIT], where UNIT is one + of "s", "m", "h", and "d" for seconds, minutes, hours, and days, + respectively. If the unit is omitted, seconds is assumed. + + --cloud-storage-output-format=OUTPUT_FORMAT; default="text" + The output format for data written to Cloud Storage. Values: text + (messages will be written as raw text, separated by a newline) or + avro (messages will be written as an Avro binary). OUTPUT_FORMAT + must be one of: text, avro. + + --cloud-storage-write-metadata + Whether or not to write the subscription name, message_id, + publish_time, attributes, and ordering_key as additional fields + in the output. This has an effect only for subscriptions with + --cloud-storage-output-format=avro. + At most one of these can be specified: --clear-dead-letter-policy diff --git a/gcloud/beta/recommender/recommendations/list b/gcloud/beta/recommender/recommendations/list index 18f01ec30..8a52fd73e 100644 --- a/gcloud/beta/recommender/recommendations/list +++ b/gcloud/beta/recommender/recommendations/list @@ -27,8 +27,10 @@ REQUIRED FLAGS Location --recommender=RECOMMENDER - Recommender to list recommendations for. Supported recommenders can be - found here: https://cloud.google.com/recommender/docs/recommenders + Recommender to list recommendations for. If no recommender is + specified, recommendations for all supported recommenders is listed. + Supported recommenders can be found here: + https://cloud.google.com/recommender/docs/recommenders Resource that is associated with cloud entity type. Currently four mutually exclusive flags are supported, --project, --billing-account, diff --git a/gcloud/beta/redis/instances/create b/gcloud/beta/redis/instances/create index 2f0375c8d..258e11d9d 100644 --- a/gcloud/beta/redis/instances/create +++ b/gcloud/beta/redis/instances/create @@ -182,6 +182,8 @@ FLAGS Redis 5.0 compatibility redis_6_x Redis 6.x compatibility + redis_7_0 + Redis 7.0 compatibility --replica-count=REPLICA_COUNT The replica count of the instance. diff --git a/gcloud/beta/redis/instances/upgrade b/gcloud/beta/redis/instances/upgrade index d1fe8942f..0e8e6506c 100644 --- a/gcloud/beta/redis/instances/upgrade +++ b/gcloud/beta/redis/instances/upgrade @@ -63,6 +63,8 @@ REQUIRED FLAGS Redis 5.0 compatibility redis_6_x Redis 6.x compatibility + redis_7_0 + Redis 7.0 compatibility OPTIONAL FLAGS --async diff --git a/gcloud/beta/resource-manager/org-policies/set-policy b/gcloud/beta/resource-manager/org-policies/set-policy index 5134e0528..a0d8ba77d 100644 --- a/gcloud/beta/resource-manager/org-policies/set-policy +++ b/gcloud/beta/resource-manager/org-policies/set-policy @@ -12,6 +12,22 @@ DESCRIPTION from a file that contains the JSON or YAML encoded Organization Policy. EXAMPLES + Organization policy list constraint YAML file example: + + constraint: constraints/CONSTRAINT_NAME + listPolicy: + deniedValues: + - VALUE_A + + Organization policy list constraint JSON file example: + + { + "constraint": "constraints/CONSTRAINT_NAME", + "listPolicy": { + "deniedValues": ["VALUE_A"] + } + } + The following command sets an Organization Policy for a constraint on project foo-project from file /tmp/policy.yaml: diff --git a/gcloud/beta/sql/instances/help b/gcloud/beta/sql/instances/help index c520cf873..ef914c422 100644 --- a/gcloud/beta/sql/instances/help +++ b/gcloud/beta/sql/instances/help @@ -52,6 +52,9 @@ COMMANDS promote-replica (BETA) Promotes Cloud SQL read replica to a stand-alone instance. + reencrypt + (BETA) Reencrypts a Cloud SQL CMEK instance. + reset-ssl-config (BETA) Deletes all client certificates and generates a new server certificate. diff --git a/gcloud/beta/sql/instances/reencrypt b/gcloud/beta/sql/instances/reencrypt new file mode 100644 index 000000000..b025bd274 --- /dev/null +++ b/gcloud/beta/sql/instances/reencrypt @@ -0,0 +1,38 @@ +NAME + gcloud beta sql instances reencrypt - reencrypts a Cloud SQL CMEK instance + +SYNOPSIS + gcloud beta sql instances reencrypt INSTANCE [--async] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Reencrypt a Cloud SQL CMEK instance with the primary key version. + +EXAMPLES + To reencrypt a Cloud SQL CMEK instance with the primary key version: + + $ gcloud beta sql instances reencrypt instance-foo + +POSITIONAL ARGUMENTS + INSTANCE + Cloud SQL instance ID. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha sql instances reencrypt + diff --git a/gcloud/bigtable/backups/create b/gcloud/bigtable/backups/create index a8e6c4eb7..1c78efab9 100644 --- a/gcloud/bigtable/backups/create +++ b/gcloud/bigtable/backups/create @@ -73,13 +73,13 @@ REQUIRED FLAGS Exactly one of these must be specified: --expiration-date=EXPIRATION_DATE - Absolute expiration time of the backup, must be at least 6 hours and - at most 30 days from the time the request is received. See $ gcloud + Absolute expiration time of the backup; must be at least 6 hours and + at most 90 days from the time the request is received. See $ gcloud topic datetimes for information on date/time formats. --retention-period=RETENTION_PERIOD - Retention period of the backup relative from now, must be at least 6 - hours and at most 30 days. See $ gcloud topic datetimes for + Retention period of the backup relative from now; must be at least 6 + hours and at most 90 days. See $ gcloud topic datetimes for information on duration formats. OPTIONAL FLAGS diff --git a/gcloud/bigtable/backups/update b/gcloud/bigtable/backups/update index 4c983c854..c9c2d27f3 100644 --- a/gcloud/bigtable/backups/update +++ b/gcloud/bigtable/backups/update @@ -62,13 +62,13 @@ REQUIRED FLAGS Exactly one of these must be specified: --expiration-date=EXPIRATION_DATE - Absolute expiration time of the backup, must be at least 6 hours and - at most 30 days from the time the request is received. See $ gcloud + Absolute expiration time of the backup; must be at least 6 hours and + at most 90 days from the time the request is received. See $ gcloud topic datetimes for information on date/time formats. --retention-period=RETENTION_PERIOD - Retention period of the backup relative from now, must be at least 6 - hours and at most 30 days from backup creation time. See $ gcloud + Retention period of the backup relative from now; must be at least 6 + hours and at most 90 days from backup creation time. See $ gcloud topic datetimes for information on duration formats. See $ gcloud bigtable backups describe for creation time. diff --git a/gcloud/compute/addresses/create b/gcloud/compute/addresses/create index 9703c1a2d..cf2117c7f 100644 --- a/gcloud/compute/addresses/create +++ b/gcloud/compute/addresses/create @@ -19,7 +19,7 @@ DESCRIPTION EXAMPLES To reserve three IP addresses in the 'us-central1' region, run: - $ gcloud compute addresses create ADDRESS-1 ADDRESS-2 ADDRESS-3 \ + $ gcloud compute addresses create address-1 address-2 address-3 \ --region=us-central1 To reserve ephemeral IP addresses '162.222.181.198' and '23.251.146.189' @@ -31,29 +31,29 @@ EXAMPLES In the above invocation, the two addresses will be assigned random names. - To reserve an IP address from the subnet 'default' in the 'us-central1' - region, run: + To reserve an IP address named subnet-address-1 from the subnet 'default' + in the 'us-central1' region, run: - $ gcloud compute addresses create SUBNET-ADDRESS-1 \ + $ gcloud compute addresses create subnet-address-1 \ --region=us-central1 --subnet=default To reserve an IP range '10.110.0.0/16' from the network 'default' for 'VPC_PEERING', run: - $ gcloud compute addresses create IP-RANGE-1 --global \ + $ gcloud compute addresses create ip-range-1 --global \ --addresses=10.110.0.0 --prefix-length=16 \ --purpose=VPC_PEERING --network=default To reserve any IP range with prefix length '16' from the network 'default' for 'VPC_PEERING', run: - $ gcloud compute addresses create IP-RANGE-1 --global \ + $ gcloud compute addresses create ip-range-1 --global \ --prefix-length=16 --purpose=VPC_PEERING --network=default To reserve an address from network 'default' for PRIVATE_SERVICE_CONNECT, run: - $ gcloud compute addresses create PSC-ADDRESS-1 --global \ + $ gcloud compute addresses create psc-address-1 --global \ --addresses=10.110.0.10 --purpose=PRIVATE_SERVICE_CONNECT \ --network=default diff --git a/gcloud/compute/addresses/delete b/gcloud/compute/addresses/delete index 9d8e7db37..6b588997e 100644 --- a/gcloud/compute/addresses/delete +++ b/gcloud/compute/addresses/delete @@ -17,7 +17,7 @@ EXAMPLES To release two addresses with the names 'address-name1' and 'address-name2', run: - $ gcloud compute addresses delete addressname1 address-name2 + $ gcloud compute addresses delete address-name1 address-name2 POSITIONAL ARGUMENTS NAME [NAME ...] diff --git a/gcloud/compute/addresses/describe b/gcloud/compute/addresses/describe index a082551ee..eca7fb218 100644 --- a/gcloud/compute/addresses/describe +++ b/gcloud/compute/addresses/describe @@ -13,11 +13,12 @@ DESCRIPTION EXAMPLES To get details about a global address, run: - $ gcloud compute addresses describe ADDRESS --global + $ gcloud compute addresses describe my-address-name --global To get details about a regional address, run: - $ gcloud compute addresses describe ADDRESS --region=us-central1 + $ gcloud compute addresses describe my-address-name \ + --region=us-central1 POSITIONAL ARGUMENTS NAME diff --git a/gcloud/filestore/instances/create b/gcloud/filestore/instances/create index 6a85f2799..069f6a719 100644 --- a/gcloud/filestore/instances/create +++ b/gcloud/filestore/instances/create @@ -166,8 +166,8 @@ REQUIRED FLAGS allocated IP address range is specified, it must be one of the ranges associated with the private service access connection. When specified as a direct CIDR value, it must be a /29 CIDR block for - Basic tier or a /24 CIDR block for High Scale or Enterprise tier in - one of the internal IP address ranges + Basic tier or a /24 CIDR block for High Scale, Zonal or Enterprise + tier in one of the internal IP address ranges (https://www.arin.net/knowledge/address_filters.html) that identifies the range of IP addresses reserved for this instance. For example, 10.0.0.0/29 or 192.168.0.0/24. The range you specify diff --git a/gcloud/org-policies/set-policy b/gcloud/org-policies/set-policy index c26166542..18b615bef 100644 --- a/gcloud/org-policies/set-policy +++ b/gcloud/org-policies/set-policy @@ -11,6 +11,30 @@ DESCRIPTION created if it does not exist, or updated if it already exists. EXAMPLES + Organization policy list constraint YAML file example: + + name: projects/PROJECT_ID/policies/CONSTRAINT_NAME + spec: + rules: + - values: + denied_values: + - VALUE_A + + Organization policy list constraint JSON file example: + + { + "name": "projects/PROJECT_ID/policies/CONSTRAINT_NAME", + "spec": { + "rules": [ + { + "values": { + "deniedValues": ["VALUE_A"] + } + } + ] + } + } + To set the policy from the file on the path './sample_path', run: $ gcloud org-policies set-policy ./sample_path diff --git a/gcloud/recommender/recommendations/list b/gcloud/recommender/recommendations/list index e053fa8a0..74127426e 100644 --- a/gcloud/recommender/recommendations/list +++ b/gcloud/recommender/recommendations/list @@ -27,8 +27,10 @@ REQUIRED FLAGS Location --recommender=RECOMMENDER - Recommender to list recommendations for. Supported recommenders can be - found here: https://cloud.google.com/recommender/docs/recommenders + Recommender to list recommendations for. If no recommender is + specified, recommendations for all supported recommenders is listed. + Supported recommenders can be found here: + https://cloud.google.com/recommender/docs/recommenders Resource that is associated with cloud entity type. Currently four mutually exclusive flags are supported, --project, --billing-account, diff --git a/gcloud/redis/instances/create b/gcloud/redis/instances/create index f76fb1051..222bad269 100644 --- a/gcloud/redis/instances/create +++ b/gcloud/redis/instances/create @@ -182,6 +182,8 @@ FLAGS Redis 5.0 compatibility redis_6_x Redis 6.x compatibility + redis_7_0 + Redis 7.0 compatibility --replica-count=REPLICA_COUNT The replica count of the instance. diff --git a/gcloud/redis/instances/upgrade b/gcloud/redis/instances/upgrade index d6edc18d3..7e782a8e8 100644 --- a/gcloud/redis/instances/upgrade +++ b/gcloud/redis/instances/upgrade @@ -62,6 +62,8 @@ REQUIRED FLAGS Redis 5.0 compatibility redis_6_x Redis 6.x compatibility + redis_7_0 + Redis 7.0 compatibility OPTIONAL FLAGS --async diff --git a/gcloud/resource-manager/org-policies/set-policy b/gcloud/resource-manager/org-policies/set-policy index 6637db1d3..ecd8c55c8 100644 --- a/gcloud/resource-manager/org-policies/set-policy +++ b/gcloud/resource-manager/org-policies/set-policy @@ -11,6 +11,22 @@ DESCRIPTION file that contains the JSON or YAML encoded Organization Policy. EXAMPLES + Organization policy list constraint YAML file example: + + constraint: constraints/CONSTRAINT_NAME + listPolicy: + deniedValues: + - VALUE_A + + Organization policy list constraint JSON file example: + + { + "constraint": "constraints/CONSTRAINT_NAME", + "listPolicy": { + "deniedValues": ["VALUE_A"] + } + } + The following command sets an Organization Policy for a constraint on project foo-project from file /tmp/policy.yaml: diff --git a/gcloud/storage/help b/gcloud/storage/help index a3de1a269..48bb00815 100644 --- a/gcloud/storage/help +++ b/gcloud/storage/help @@ -50,6 +50,9 @@ COMMANDS rm Delete objects and buckets. + rsync + Synchronize content of two buckets/directories. + service-agent Manage a project's Cloud Storage service agent, which is used to perform Cloud KMS operations. diff --git a/gcloud/storage/rsync b/gcloud/storage/rsync new file mode 100644 index 000000000..0320b5205 --- /dev/null +++ b/gcloud/storage/rsync @@ -0,0 +1,295 @@ +NAME + gcloud storage rsync - synchronize content of two buckets/directories + +SYNOPSIS + gcloud storage rsync SOURCE DESTINATION [--additional-headers=HEADER=VALUE] + [--canned-acl=PREDEFINED_ACL, + --predefined-acl=PREDEFINED_ACL, -a PREDEFINED_ACL] + [--checksums-only] [--no-clobber, -n] [--continue-on-error, -c] + [--delete-unmatched-destination-objects] [--dry-run] + [--exclude=[REGEX,...], -x [REGEX,...]] + [--gzip-in-flight=[FILE_EXTENSIONS,...], -j [FILE_EXTENSIONS,...]] + [--gzip-in-flight-all, -J] [--no-ignore-symlinks] + [--preserve-posix, -P] [--recursive, -R, -r] + [--skip-if-dest-has-newer-mtime, -u] [--skip-unsupported, -U] + [--decryption-keys=[DECRYPTION_KEY,...] + --encryption-key=ENCRYPTION_KEY] + [--cache-control=CACHE_CONTROL + --content-disposition=CONTENT_DISPOSITION + --content-encoding=CONTENT_ENCODING + --content-language=CONTENT_LANGUAGE --content-md5=MD5_DIGEST + --content-type=CONTENT_TYPE + --custom-time=CUSTOM_TIME --clear-custom-metadata + | --custom-metadata=[CUSTOM_METADATA_KEYS_AND_VALUES,...] + | --remove-custom-metadata=[METADATA_KEYS,...] + --update-custom-metadata=[CUSTOM_METADATA_KEYS_AND_VALUES,...]] + [--if-generation-match=GENERATION + --if-metageneration-match=METAGENERATION] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + gcloud storage rsync copies to and updates objects at DESTINATION to match + SOURCE. SOURCE must specify a directory, bucket, or bucket subdirectory. + gcloud storage rsync does not copy empty directory trees, since storage + providers use a flat namespace + (https://cloud.google.com/storage/docs/folders). + + Note, shells (like bash, zsh) sometimes attempt to expand wildcards in ways + that can be surprising. Also, attempting to copy files whose names contain + wildcard characters can result in problems. + + If synchronizing a large amount of data between clouds you might consider + setting up a Google Compute Engine account and running gcloud storage rsync + there. Since gcloud storage rsync cross-provider data transfers flow + through the machine where gcloud storage rsync is running, doing this can + make your transfer run significantly faster than on your local workstation. + +EXAMPLES + To sync the contents of the local directory data to the bucket + gs://my-bucket/data: + + $ gcloud storage rsync data gs://my-bucket/data + + To recurse into directories use --recursive: + + $ gcloud storage rsync data gs://my-bucket/data --recursive + + To make the local directory my-data the same as the contents of + gs://mybucket/data and delete objects in the local directory that are not + in gs://mybucket/data: + + $ gcloud storage rsync gs://mybucket/data my-data --recursive \ + --delete-unmatched-destination-objects + + To make the contents of gs://mybucket2 the same as gs://mybucket1 and + delete objects in gs://mybucket2 that are not in gs://mybucket1: + + $ gcloud storage rsync gs://mybucket1 gs://mybucket2 --recursive \ + --delete-unmatched-destination-objects + + To copy all objects from dir1 into dir2 and delete all objects in dir2 + which are not in dir1: + + $ gcloud storage rsync dir1 dir2 --recursive - \ + --delete-unmatched-destination-objects + + To mirror your content across cloud providers: + + $ gcloud storage rsync gs://my-gs-bucket s3://my-s3-bucket \ + --recursive --delete-unmatched-destination-objects + + To apply gzip compression to only uploaded image files in dir: + + $ gcloud storage rsync dir gs://my-bucket/data \ + --gzip-in-flight=jpeg,jpg,gif,png + + To skip the file dir/data1/a.txt: + + $ gcloud storage rsync dir gs://my-bucket --exclude="data./.*\.txt$" + + To skip all .txt and .jpg files: + + $ gcloud storage rsync dir gs://my-bucket \ + --exclude=".*\.txt$|.*\.jpg$" + +POSITIONAL ARGUMENTS + SOURCE + The source container path. + + DESTINATION + The destination container path. + +FLAGS + --additional-headers=HEADER=VALUE + Includes arbitrary headers in storage API calls. Accepts a comma + separated list of key=value pairs, e.g. header1=value1,header2=value2. + Overrides the default storage/additional_headers property value for + this command invocation. + + --canned-acl=PREDEFINED_ACL, --predefined-acl=PREDEFINED_ACL, -a PREDEFINED_ACL + Applies predefined, or "canned," ACLs to a resource. See docs for a + list of predefined ACL constants: + https://cloud.google.com/storage/docs/access-control/lists#predefined-acl + + --checksums-only + When comparing objects with matching names at the source and + destination, skip modification time check and compare object hashes. + Normally, hashes are only compared if modification times are not + available. + + --no-clobber, -n + Do not overwrite existing files or objects at the destination. Skipped + items will be printed. This option may perform an additional GET + request for cloud objects before attempting an upload. + + --continue-on-error, -c + If any operations are unsuccessful, the command will exit with a + non-zero exit status after completing the remaining operations. This + flag takes effect only in sequential execution mode (i.e. processor and + thread count are set to 1). Parallelism is default. + + --delete-unmatched-destination-objects + Delete extra files under DESTINATION not found under SOURCE. By default + extra files are not deleted. + + Note: this option can delete data quickly if you specify the wrong + source and destination combination. + + --dry-run + Print what operations rsync would perform without actually executing + them. + + --exclude=[REGEX,...], -x [REGEX,...] + Exclude objects matching regex pattern from rsync. + + Note that this is a Python regular expression, not a pure wildcard + pattern. For example, matching a string ending in "abc" is .*abc$ + rather than *abc. Also note that the exclude path is relative, as + opposed to absolute (similar to Linux rsync and tar exclude options). + + For the Windows cmd.exe command line interpreter, use ^ as an escape + character instead of \ and escape the | character. When using Windows + PowerShell, use ' instead of " and surround the | character with ". + + --gzip-in-flight=[FILE_EXTENSIONS,...], -j [FILE_EXTENSIONS,...] + Applies gzip transport encoding to any file upload whose extension + matches the input extension list. This is useful when uploading files + with compressible content such as .js, .css, or .html files. This also + saves network bandwidth while leaving the data uncompressed in Cloud + Storage. + + When you specify the --gzip-in-flight option, files being uploaded are + compressed in-memory and on-the-wire only. Both the local files and + Cloud Storage objects remain uncompressed. The uploaded objects retain + the Content-Type and name of the original files. + + --gzip-in-flight-all, -J + Applies gzip transport encoding to file uploads. This option works like + the --gzip-in-flight option described above, but it applies to all + uploaded files, regardless of extension. + + CAUTION: If some of the source files don't compress well, such as + binary data, using this option may result in longer uploads. + + --ignore-symlinks + Ignore file symlinks instead of copying what they point to. Symlinks + pointing to directories will always be ignored. Enabled by default, use + --no-ignore-symlinks to disable. + + --preserve-posix, -P + Causes POSIX attributes to be preserved when objects are copied. With + this feature enabled, gcloud storage will copy several fields provided + by the stat command: access time, modification time, owner UID, owner + group GID, and the mode (permissions) of the file. + + For uploads, these attributes are read off of local files and stored in + the cloud as custom metadata. For downloads, custom cloud metadata is + set as POSIX attributes on files after they are downloaded. + + On Windows, this flag will only set and restore access time and + modification time because Windows doesn't have a notion of POSIX UID, + GID, and mode. + + --recursive, -R, -r + Recursively copy the contents of any directories that match the source + path expression. + + --skip-if-dest-has-newer-mtime, -u + Skip operating on destination object if it has a newer modification + time than the source. + + --skip-unsupported, -U + Skip objects with unsupported object types. + +ENCRYPTION FLAGS + --decryption-keys=[DECRYPTION_KEY,...] + A comma-separated list of customer-supplied encryption keys (RFC 4648 + section 4 base64-encoded AES256 strings) that will be used to decrypt + Google Cloud Storage objects. Data encrypted with a customer-managed + encryption key (CMEK) is decrypted automatically, so CMEKs do not need + to be listed here. + + --encryption-key=ENCRYPTION_KEY + The encryption key to use for encrypting target objects. The specified + encryption key can be a customer-supplied encryption key (An RFC 4648 + section 4 base64-encoded AES256 string), or a customer-managed + encryption key of the form + projects/{project}/locations/{location}/keyRings/ + {key-ring}/cryptoKeys/{crypto-key}. The specified key also acts as a + decryption key, which is useful when copying or moving encryted data to + a new location. Using this flag in an objects update command triggers a + rewrite of target objects. + +OBJECT METADATA FLAGS + --cache-control=CACHE_CONTROL + How caches should handle requests and responses. + + --content-disposition=CONTENT_DISPOSITION + How content should be displayed. + + --content-encoding=CONTENT_ENCODING + How content is encoded (e.g. gzip). + + --content-language=CONTENT_LANGUAGE + Content's language (e.g. en signifies "English"). + + --content-md5=MD5_DIGEST + Manually specified MD5 hash digest for the contents of an uploaded + file. This flag cannot be used when uploading multiple files. The + custom digest is used by the cloud provider for validation. + + --content-type=CONTENT_TYPE + Type of data contained in the object (e.g. text/html). + + --custom-time=CUSTOM_TIME + Custom time for Google Cloud Storage objects in RFC 3339 format. + + At most one of these can be specified: + + --clear-custom-metadata + Clears all custom metadata on objects. When used with + --preserve-posix, POSIX attributes will still be stored in custom + metadata. + + --custom-metadata=[CUSTOM_METADATA_KEYS_AND_VALUES,...] + Sets custom metadata on objects. When used with --preserve-posix, + POSIX attributes are also stored in custom metadata. + + Flags that preserve unspecified existing metadata cannot be used with + --custom-metadata or --clear-custom-metadata, but can be specified + together: + + --remove-custom-metadata=[METADATA_KEYS,...] + Removes individual custom metadata keys from objects. This flag can + be used with --update-custom-metadata. When used with + --preserve-posix, POSIX attributes specified by this flag are not + preserved. + + --update-custom-metadata=[CUSTOM_METADATA_KEYS_AND_VALUES,...] + Adds or sets individual custom metadata key value pairs on objects. + Existing custom metadata not specified with this flag is not + changed. This flag can be used with --remove-custom-metadata. When + keys overlap with those provided by --preserve-posix, values + specified by this flag are used. + +PRECONDITION FLAGS + --if-generation-match=GENERATION + Execute only if the generation matches the generation of the requested + object. + + --if-metageneration-match=METAGENERATION + Execute only if the metageneration matches the metageneration of the + requested object. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This variant is also available: + + $ gcloud alpha storage rsync +