From 0f69685b06cf2a51a7f099154df6327b7cd2b144 Mon Sep 17 00:00:00 2001 From: Automated Date: Wed, 30 Jul 2025 10:59:26 +0000 Subject: [PATCH] gcloud: Wed Jul 30 10:59:26 UTC 2025 --- gcloud/_version | 10 +- gcloud/ai/model-garden/models/deploy | 9 +- gcloud/alpha/ai/endpoints/create | 6 +- gcloud/alpha/ai/endpoints/deploy-model | 8 +- gcloud/alpha/ai/model-garden/models/deploy | 9 +- .../fetch-for-resource-type | 81 +++ .../backup-dr/backup-plan-associations/help | 4 + gcloud/alpha/backup-dr/backup-vaults/create | 17 +- .../backup-dr/data-source-references/describe | 70 ++ .../fetch-for-resource-type | 83 +++ .../backup-dr/data-source-references/help | 34 + gcloud/alpha/backup-dr/data-sources/list | 13 +- gcloud/alpha/backup-dr/help | 3 + gcloud/alpha/bms/instances/reimage | 4 + gcloud/alpha/bms/instances/update | 4 + gcloud/alpha/compute/forwarding-rules/create | 7 + gcloud/alpha/compute/forwarding-rules/update | 8 +- gcloud/alpha/container/fleet/mesh/update | 2 +- gcloud/alpha/container/hub/mesh/update | 2 +- gcloud/alpha/gemini-cloud-assist/help | 26 - .../investigations/add-iam-policy-binding | 87 --- .../investigations/get-iam-policy | 59 -- .../gemini-cloud-assist/investigations/help | 37 -- .../investigations/remove-iam-policy-binding | 87 --- .../investigations/set-iam-policy | 62 -- .../iam/workforce-pools/providers/create-oidc | 26 + .../alpha/iam/workforce-pools/providers/help | 3 + .../providers/scim-tenants/create | 119 ++++ .../providers/scim-tenants/delete | 94 +++ .../providers/scim-tenants/describe | 93 +++ .../providers/scim-tenants/help | 55 ++ .../providers/scim-tenants/list | 118 ++++ .../providers/scim-tenants/tokens/create | 113 ++++ .../providers/scim-tenants/tokens/delete | 104 +++ .../providers/scim-tenants/tokens/describe | 104 +++ .../providers/scim-tenants/tokens/help | 54 ++ .../providers/scim-tenants/tokens/list | 130 ++++ .../providers/scim-tenants/tokens/undelete | 104 +++ .../providers/scim-tenants/tokens/update | 110 ++++ .../providers/scim-tenants/undelete | 93 +++ .../providers/scim-tenants/update | 118 ++++ .../iam/workforce-pools/providers/update-oidc | 33 + gcloud/alpha/netapp/storage-pools/create | 4 +- gcloud/alpha/netapp/storage-pools/update | 4 +- .../dns-threat-detectors/create | 110 ++++ .../dns-threat-detectors/delete | 69 ++ .../dns-threat-detectors/describe | 69 ++ .../dns-threat-detectors/help | 42 ++ .../dns-threat-detectors/list | 89 +++ .../dns-threat-detectors/update | 175 +++++ gcloud/alpha/network-security/help | 3 + .../alpha/resource-manager/tags/values/create | 4 +- gcloud/alpha/run/deploy | 2 +- gcloud/alpha/run/jobs/create | 2 +- gcloud/alpha/run/jobs/deploy | 2 +- gcloud/alpha/run/jobs/update | 2 +- gcloud/alpha/run/multi-region-services/update | 2 +- gcloud/alpha/run/services/update | 2 +- gcloud/alpha/run/worker-pools/deploy | 2 +- gcloud/alpha/run/worker-pools/update | 2 +- gcloud/alpha/scc/findings/export-to-bigquery | 78 +++ gcloud/alpha/scc/findings/help | 3 + gcloud/alpha/sql/backups/restore | 6 +- gcloud/alpha/sql/instances/create | 10 +- gcloud/alpha/sql/instances/patch | 24 +- gcloud/alpha/transfer/agents/install | 7 +- gcloud/backup-dr/backup-vaults/create | 17 +- .../backup-dr/data-source-references/describe | 67 ++ .../fetch-for-resource-type | 80 +++ gcloud/backup-dr/data-source-references/help | 29 + gcloud/backup-dr/data-sources/list | 13 +- gcloud/backup-dr/help | 3 + gcloud/beta/ai/endpoints/create | 6 +- gcloud/beta/ai/endpoints/deploy-model | 8 +- gcloud/beta/ai/model-garden/models/deploy | 9 +- gcloud/beta/beyondcorp/help | 6 + gcloud/beta/beyondcorp/operations/help | 20 + .../security-gateways/applications/create | 149 +++++ .../security-gateways/applications/delete | 98 +++ .../security-gateways/applications/describe | 75 +++ .../security-gateways/applications/help | 37 ++ .../security-gateways/applications/list | 100 +++ .../security-gateways/applications/update | 304 +++++++++ .../beta/beyondcorp/security-gateways/create | 102 +++ .../beta/beyondcorp/security-gateways/delete | 89 +++ .../beyondcorp/security-gateways/describe | 66 ++ gcloud/beta/beyondcorp/security-gateways/help | 43 ++ gcloud/beta/beyondcorp/security-gateways/list | 85 +++ .../beta/beyondcorp/security-gateways/update | 159 +++++ gcloud/beta/eventarc/enrollments/create | 5 +- gcloud/beta/eventarc/enrollments/delete | 5 +- gcloud/beta/eventarc/enrollments/describe | 5 +- gcloud/beta/eventarc/enrollments/help | 5 +- gcloud/beta/eventarc/enrollments/list | 5 +- gcloud/beta/eventarc/enrollments/update | 5 +- .../beta/eventarc/google-api-sources/create | 5 +- .../beta/eventarc/google-api-sources/delete | 5 +- .../beta/eventarc/google-api-sources/describe | 5 +- gcloud/beta/eventarc/google-api-sources/help | 5 +- gcloud/beta/eventarc/google-api-sources/list | 5 +- .../beta/eventarc/google-api-sources/update | 5 +- gcloud/beta/eventarc/message-buses/create | 5 +- gcloud/beta/eventarc/message-buses/delete | 5 +- gcloud/beta/eventarc/message-buses/describe | 5 +- gcloud/beta/eventarc/message-buses/help | 5 +- gcloud/beta/eventarc/message-buses/list | 5 +- .../eventarc/message-buses/list-enrollments | 5 +- gcloud/beta/eventarc/message-buses/publish | 5 +- gcloud/beta/eventarc/message-buses/update | 5 +- gcloud/beta/eventarc/pipelines/create | 5 +- gcloud/beta/eventarc/pipelines/delete | 5 +- gcloud/beta/eventarc/pipelines/describe | 5 +- gcloud/beta/eventarc/pipelines/help | 5 +- gcloud/beta/eventarc/pipelines/list | 5 +- gcloud/beta/eventarc/pipelines/update | 5 +- .../iam/workforce-pools/providers/create-oidc | 26 + .../beta/iam/workforce-pools/providers/help | 3 + .../providers/scim-tenants/create | 117 ++++ .../providers/scim-tenants/delete | 92 +++ .../providers/scim-tenants/describe | 91 +++ .../providers/scim-tenants/help | 53 ++ .../providers/scim-tenants/list | 116 ++++ .../providers/scim-tenants/tokens/create | 111 ++++ .../providers/scim-tenants/tokens/delete | 102 +++ .../providers/scim-tenants/tokens/describe | 102 +++ .../providers/scim-tenants/tokens/help | 52 ++ .../providers/scim-tenants/tokens/list | 128 ++++ .../providers/scim-tenants/tokens/undelete | 102 +++ .../providers/scim-tenants/tokens/update | 108 +++ .../providers/scim-tenants/undelete | 91 +++ .../providers/scim-tenants/update | 116 ++++ .../iam/workforce-pools/providers/update-oidc | 33 + gcloud/beta/netapp/storage-pools/create | 4 +- gcloud/beta/netapp/storage-pools/update | 4 +- .../dns-threat-detectors/create | 108 +++ .../dns-threat-detectors/delete | 67 ++ .../dns-threat-detectors/describe | 67 ++ .../dns-threat-detectors/help | 40 ++ .../dns-threat-detectors/list | 87 +++ .../dns-threat-detectors/update | 173 +++++ gcloud/beta/network-security/help | 3 + gcloud/beta/run/deploy | 2 +- gcloud/beta/run/jobs/create | 2 +- gcloud/beta/run/jobs/deploy | 2 +- gcloud/beta/run/jobs/update | 2 +- gcloud/beta/run/multi-region-services/update | 2 +- gcloud/beta/run/services/update | 2 +- gcloud/beta/secrets/create | 10 +- gcloud/beta/sql/backups/restore | 6 +- gcloud/beta/sql/instances/create | 10 +- gcloud/beta/sql/instances/patch | 24 +- gcloud/beta/workbench/instances/create | 9 +- gcloud/bms/instances/update | 4 + gcloud/eventarc/enrollments/create | 129 ++++ gcloud/eventarc/enrollments/delete | 69 ++ gcloud/eventarc/enrollments/describe | 64 ++ gcloud/eventarc/enrollments/help | 37 ++ gcloud/eventarc/enrollments/list | 92 +++ gcloud/eventarc/enrollments/update | 113 ++++ gcloud/eventarc/google-api-sources/create | 129 ++++ gcloud/eventarc/google-api-sources/delete | 72 ++ gcloud/eventarc/google-api-sources/describe | 66 ++ gcloud/eventarc/google-api-sources/help | 37 ++ gcloud/eventarc/google-api-sources/list | 92 +++ gcloud/eventarc/google-api-sources/update | 169 +++++ gcloud/eventarc/help | 12 + gcloud/eventarc/message-buses/create | 87 +++ gcloud/eventarc/message-buses/delete | 69 ++ gcloud/eventarc/message-buses/describe | 64 ++ gcloud/eventarc/message-buses/help | 43 ++ gcloud/eventarc/message-buses/list | 92 +++ .../eventarc/message-buses/list-enrollments | 99 +++ gcloud/eventarc/message-buses/publish | 121 ++++ gcloud/eventarc/message-buses/update | 124 ++++ gcloud/eventarc/pipelines/create | 621 ++++++++++++++++++ gcloud/eventarc/pipelines/delete | 66 ++ gcloud/eventarc/pipelines/describe | 62 ++ gcloud/eventarc/pipelines/help | 37 ++ gcloud/eventarc/pipelines/list | 92 +++ gcloud/eventarc/pipelines/update | 482 ++++++++++++++ .../iam/workforce-pools/providers/create-oidc | 26 + .../iam/workforce-pools/providers/create-saml | 40 ++ gcloud/iam/workforce-pools/providers/help | 3 + .../providers/scim-tenants/create | 116 ++++ .../providers/scim-tenants/delete | 91 +++ .../providers/scim-tenants/describe | 90 +++ .../providers/scim-tenants/help | 52 ++ .../providers/scim-tenants/list | 115 ++++ .../providers/scim-tenants/tokens/create | 111 ++++ .../providers/scim-tenants/tokens/delete | 102 +++ .../providers/scim-tenants/tokens/describe | 102 +++ .../providers/scim-tenants/tokens/help | 45 ++ .../providers/scim-tenants/tokens/list | 127 ++++ .../providers/scim-tenants/tokens/undelete | 102 +++ .../providers/scim-tenants/tokens/update | 108 +++ .../providers/scim-tenants/undelete | 90 +++ .../providers/scim-tenants/update | 115 ++++ .../iam/workforce-pools/providers/update-oidc | 33 + .../iam/workforce-pools/providers/update-saml | 46 ++ .../autonomous-databases/create | 72 +- .../oracle-database/cloud-vm-clusters/create | 102 ++- .../cloud-vm-clusters/db-nodes/list | 6 +- gcloud/oracle-database/help | 3 + gcloud/oracle-database/odb-networks/create | 124 ++++ gcloud/oracle-database/odb-networks/delete | 77 +++ gcloud/oracle-database/odb-networks/describe | 60 ++ gcloud/oracle-database/odb-networks/help | 34 + gcloud/oracle-database/odb-networks/list | 79 +++ .../odb-networks/odb-subnets/create | 126 ++++ .../odb-networks/odb-subnets/delete | 85 +++ .../odb-networks/odb-subnets/describe | 70 ++ .../odb-networks/odb-subnets/help | 30 + .../odb-networks/odb-subnets/list | 95 +++ gcloud/run/deploy | 2 +- gcloud/run/services/update | 2 +- gcloud/scc/findings/export-to-bigquery | 75 +++ gcloud/scc/findings/help | 3 + gcloud/secrets/create | 10 +- gcloud/sql/backups/restore | 6 +- gcloud/sql/instances/create | 23 +- gcloud/sql/instances/patch | 37 +- 221 files changed, 11951 insertions(+), 506 deletions(-) create mode 100644 gcloud/alpha/backup-dr/backup-plan-associations/fetch-for-resource-type create mode 100644 gcloud/alpha/backup-dr/data-source-references/describe create mode 100644 gcloud/alpha/backup-dr/data-source-references/fetch-for-resource-type create mode 100644 gcloud/alpha/backup-dr/data-source-references/help delete mode 100644 gcloud/alpha/gemini-cloud-assist/help delete mode 100644 gcloud/alpha/gemini-cloud-assist/investigations/add-iam-policy-binding delete mode 100644 gcloud/alpha/gemini-cloud-assist/investigations/get-iam-policy delete mode 100644 gcloud/alpha/gemini-cloud-assist/investigations/help delete mode 100644 gcloud/alpha/gemini-cloud-assist/investigations/remove-iam-policy-binding delete mode 100644 gcloud/alpha/gemini-cloud-assist/investigations/set-iam-policy create mode 100644 gcloud/alpha/iam/workforce-pools/providers/scim-tenants/create create mode 100644 gcloud/alpha/iam/workforce-pools/providers/scim-tenants/delete create mode 100644 gcloud/alpha/iam/workforce-pools/providers/scim-tenants/describe create mode 100644 gcloud/alpha/iam/workforce-pools/providers/scim-tenants/help create mode 100644 gcloud/alpha/iam/workforce-pools/providers/scim-tenants/list create mode 100644 gcloud/alpha/iam/workforce-pools/providers/scim-tenants/tokens/create create mode 100644 gcloud/alpha/iam/workforce-pools/providers/scim-tenants/tokens/delete create mode 100644 gcloud/alpha/iam/workforce-pools/providers/scim-tenants/tokens/describe create mode 100644 gcloud/alpha/iam/workforce-pools/providers/scim-tenants/tokens/help create mode 100644 gcloud/alpha/iam/workforce-pools/providers/scim-tenants/tokens/list create mode 100644 gcloud/alpha/iam/workforce-pools/providers/scim-tenants/tokens/undelete create mode 100644 gcloud/alpha/iam/workforce-pools/providers/scim-tenants/tokens/update create mode 100644 gcloud/alpha/iam/workforce-pools/providers/scim-tenants/undelete create mode 100644 gcloud/alpha/iam/workforce-pools/providers/scim-tenants/update create mode 100644 gcloud/alpha/network-security/dns-threat-detectors/create create mode 100644 gcloud/alpha/network-security/dns-threat-detectors/delete create mode 100644 gcloud/alpha/network-security/dns-threat-detectors/describe create mode 100644 gcloud/alpha/network-security/dns-threat-detectors/help create mode 100644 gcloud/alpha/network-security/dns-threat-detectors/list create mode 100644 gcloud/alpha/network-security/dns-threat-detectors/update create mode 100644 gcloud/alpha/scc/findings/export-to-bigquery create mode 100644 gcloud/backup-dr/data-source-references/describe create mode 100644 gcloud/backup-dr/data-source-references/fetch-for-resource-type create mode 100644 gcloud/backup-dr/data-source-references/help create mode 100644 gcloud/beta/beyondcorp/operations/help create mode 100644 gcloud/beta/beyondcorp/security-gateways/applications/create create mode 100644 gcloud/beta/beyondcorp/security-gateways/applications/delete create mode 100644 gcloud/beta/beyondcorp/security-gateways/applications/describe create mode 100644 gcloud/beta/beyondcorp/security-gateways/applications/help create mode 100644 gcloud/beta/beyondcorp/security-gateways/applications/list create mode 100644 gcloud/beta/beyondcorp/security-gateways/applications/update create mode 100644 gcloud/beta/beyondcorp/security-gateways/create create mode 100644 gcloud/beta/beyondcorp/security-gateways/delete create mode 100644 gcloud/beta/beyondcorp/security-gateways/describe create mode 100644 gcloud/beta/beyondcorp/security-gateways/help create mode 100644 gcloud/beta/beyondcorp/security-gateways/list create mode 100644 gcloud/beta/beyondcorp/security-gateways/update create mode 100644 gcloud/beta/iam/workforce-pools/providers/scim-tenants/create create mode 100644 gcloud/beta/iam/workforce-pools/providers/scim-tenants/delete create mode 100644 gcloud/beta/iam/workforce-pools/providers/scim-tenants/describe create mode 100644 gcloud/beta/iam/workforce-pools/providers/scim-tenants/help create mode 100644 gcloud/beta/iam/workforce-pools/providers/scim-tenants/list create mode 100644 gcloud/beta/iam/workforce-pools/providers/scim-tenants/tokens/create create mode 100644 gcloud/beta/iam/workforce-pools/providers/scim-tenants/tokens/delete create mode 100644 gcloud/beta/iam/workforce-pools/providers/scim-tenants/tokens/describe create mode 100644 gcloud/beta/iam/workforce-pools/providers/scim-tenants/tokens/help create mode 100644 gcloud/beta/iam/workforce-pools/providers/scim-tenants/tokens/list create mode 100644 gcloud/beta/iam/workforce-pools/providers/scim-tenants/tokens/undelete create mode 100644 gcloud/beta/iam/workforce-pools/providers/scim-tenants/tokens/update create mode 100644 gcloud/beta/iam/workforce-pools/providers/scim-tenants/undelete create mode 100644 gcloud/beta/iam/workforce-pools/providers/scim-tenants/update create mode 100644 gcloud/beta/network-security/dns-threat-detectors/create create mode 100644 gcloud/beta/network-security/dns-threat-detectors/delete create mode 100644 gcloud/beta/network-security/dns-threat-detectors/describe create mode 100644 gcloud/beta/network-security/dns-threat-detectors/help create mode 100644 gcloud/beta/network-security/dns-threat-detectors/list create mode 100644 gcloud/beta/network-security/dns-threat-detectors/update create mode 100644 gcloud/eventarc/enrollments/create create mode 100644 gcloud/eventarc/enrollments/delete create mode 100644 gcloud/eventarc/enrollments/describe create mode 100644 gcloud/eventarc/enrollments/help create mode 100644 gcloud/eventarc/enrollments/list create mode 100644 gcloud/eventarc/enrollments/update create mode 100644 gcloud/eventarc/google-api-sources/create create mode 100644 gcloud/eventarc/google-api-sources/delete create mode 100644 gcloud/eventarc/google-api-sources/describe create mode 100644 gcloud/eventarc/google-api-sources/help create mode 100644 gcloud/eventarc/google-api-sources/list create mode 100644 gcloud/eventarc/google-api-sources/update create mode 100644 gcloud/eventarc/message-buses/create create mode 100644 gcloud/eventarc/message-buses/delete create mode 100644 gcloud/eventarc/message-buses/describe create mode 100644 gcloud/eventarc/message-buses/help create mode 100644 gcloud/eventarc/message-buses/list create mode 100644 gcloud/eventarc/message-buses/list-enrollments create mode 100644 gcloud/eventarc/message-buses/publish create mode 100644 gcloud/eventarc/message-buses/update create mode 100644 gcloud/eventarc/pipelines/create create mode 100644 gcloud/eventarc/pipelines/delete create mode 100644 gcloud/eventarc/pipelines/describe create mode 100644 gcloud/eventarc/pipelines/help create mode 100644 gcloud/eventarc/pipelines/list create mode 100644 gcloud/eventarc/pipelines/update create mode 100644 gcloud/iam/workforce-pools/providers/scim-tenants/create create mode 100644 gcloud/iam/workforce-pools/providers/scim-tenants/delete create mode 100644 gcloud/iam/workforce-pools/providers/scim-tenants/describe create mode 100644 gcloud/iam/workforce-pools/providers/scim-tenants/help create mode 100644 gcloud/iam/workforce-pools/providers/scim-tenants/list create mode 100644 gcloud/iam/workforce-pools/providers/scim-tenants/tokens/create create mode 100644 gcloud/iam/workforce-pools/providers/scim-tenants/tokens/delete create mode 100644 gcloud/iam/workforce-pools/providers/scim-tenants/tokens/describe create mode 100644 gcloud/iam/workforce-pools/providers/scim-tenants/tokens/help create mode 100644 gcloud/iam/workforce-pools/providers/scim-tenants/tokens/list create mode 100644 gcloud/iam/workforce-pools/providers/scim-tenants/tokens/undelete create mode 100644 gcloud/iam/workforce-pools/providers/scim-tenants/tokens/update create mode 100644 gcloud/iam/workforce-pools/providers/scim-tenants/undelete create mode 100644 gcloud/iam/workforce-pools/providers/scim-tenants/update create mode 100644 gcloud/oracle-database/odb-networks/create create mode 100644 gcloud/oracle-database/odb-networks/delete create mode 100644 gcloud/oracle-database/odb-networks/describe create mode 100644 gcloud/oracle-database/odb-networks/help create mode 100644 gcloud/oracle-database/odb-networks/list create mode 100644 gcloud/oracle-database/odb-networks/odb-subnets/create create mode 100644 gcloud/oracle-database/odb-networks/odb-subnets/delete create mode 100644 gcloud/oracle-database/odb-networks/odb-subnets/describe create mode 100644 gcloud/oracle-database/odb-networks/odb-subnets/help create mode 100644 gcloud/oracle-database/odb-networks/odb-subnets/list create mode 100644 gcloud/scc/findings/export-to-bigquery diff --git a/gcloud/_version b/gcloud/_version index a558378f1..434e8565a 100644 --- a/gcloud/_version +++ b/gcloud/_version @@ -1,8 +1,8 @@ -Google Cloud SDK 531.0.0 -alpha 2025.07.18 -beta 2025.07.18 -bq 2.1.20 +Google Cloud SDK 532.0.0 +alpha 2025.07.25 +beta 2025.07.25 +bq 2.1.21 bundled-python3-unix 3.12.9 -core 2025.07.18 +core 2025.07.25 gcloud-crc32c 1.0.0 gsutil 5.35 diff --git a/gcloud/ai/model-garden/models/deploy b/gcloud/ai/model-garden/models/deploy index 161764482..e34ed154d 100644 --- a/gcloud/ai/model-garden/models/deploy +++ b/gcloud/ai/model-garden/models/deploy @@ -4,6 +4,7 @@ NAME SYNOPSIS gcloud ai model-garden models deploy --model=MODEL + [--accelerator-count=ACCELERATOR_COUNT] [--accelerator-type=ACCELERATOR_TYPE] [--accept-eula] [--asynchronous] [--container-args=[ARG,...]] [--container-command=[COMMAND,...]] [--container-deployment-timeout-seconds=CONTAINER_DEPLOYMENT_TIMEOUT_SECONDS] @@ -50,9 +51,15 @@ REQUIRED FLAGS in the format of {publisher_name}/{model_name}@{model_version_name}, e.g. google/gemma2@gemma-2-2b. If it is a Hugging Face model, it should be in the convention of Hugging Face models, e.g. - meta-llama/Meta-Llama-3-8B. + meta-llama/Meta-Llama-3-8B. If it is a Custom Weights model, it should + be in the format of gs://{gcs_bucket_uri}, e.g. + gs://-model-garden-public-us/llama3.1/Meta-Llama-3.1-8B-Instruct. OPTIONAL FLAGS + --accelerator-count=ACCELERATOR_COUNT + The accelerator count to serve the model. Accelerator count should be + non-negative. + --accelerator-type=ACCELERATOR_TYPE The accelerator type to serve the model. It should be a supported accelerator type from the verified deployment configurations of the diff --git a/gcloud/alpha/ai/endpoints/create b/gcloud/alpha/ai/endpoints/create index 1632cc91c..34413de14 100644 --- a/gcloud/alpha/ai/endpoints/create +++ b/gcloud/alpha/ai/endpoints/create @@ -6,8 +6,7 @@ SYNOPSIS [--description=DESCRIPTION] [--encryption-kms-key-name=ENCRYPTION_KMS_KEY_NAME] [--endpoint-id=ENDPOINT_ID] [--gdc-zone=GDC_ZONE] - [--gdce-zone=GDCE_ZONE] [--labels=[KEY=VALUE,...]] [--network=NETWORK] - [--region=REGION] + [--labels=[KEY=VALUE,...]] [--network=NETWORK] [--region=REGION] [--request-response-logging-rate=REQUEST_RESPONSE_LOGGING_RATE --request-response-logging-table=REQUEST_RESPONSE_LOGGING_TABLE] [GCLOUD_WIDE_FLAG ...] @@ -40,9 +39,6 @@ OPTIONAL FLAGS --gdc-zone=GDC_ZONE The name of the GDC zone. If set, the endpoint is for GDCc. - --gdce-zone=GDCE_ZONE - The name of the GDCE zone. If set, the endpoint is in GDCE. - --labels=[KEY=VALUE,...] List of label KEY=VALUE pairs to add. diff --git a/gcloud/alpha/ai/endpoints/deploy-model b/gcloud/alpha/ai/endpoints/deploy-model index e41adff83..ef7411edb 100644 --- a/gcloud/alpha/ai/endpoints/deploy-model +++ b/gcloud/alpha/ai/endpoints/deploy-model @@ -77,10 +77,10 @@ OPTIONAL FLAGS type The type of the accelerator. Choices are 'nvidia-a100-80gb', - 'nvidia-b200', 'nvidia-h100-80gb', 'nvidia-h100-mega-80gb', - 'nvidia-h200-141gb', 'nvidia-l4', 'nvidia-tesla-a100', - 'nvidia-tesla-k80', 'nvidia-tesla-p100', 'nvidia-tesla-p4', - 'nvidia-tesla-t4', 'nvidia-tesla-v100'. + 'nvidia-b200', 'nvidia-gb200', 'nvidia-h100-80gb', + 'nvidia-h100-mega-80gb', 'nvidia-h200-141gb', 'nvidia-l4', + 'nvidia-tesla-a100', 'nvidia-tesla-k80', 'nvidia-tesla-p100', + 'nvidia-tesla-p4', 'nvidia-tesla-t4', 'nvidia-tesla-v100'. count The number of accelerators to attach to each machine running the diff --git a/gcloud/alpha/ai/model-garden/models/deploy b/gcloud/alpha/ai/model-garden/models/deploy index 5396926bb..d745b7adb 100644 --- a/gcloud/alpha/ai/model-garden/models/deploy +++ b/gcloud/alpha/ai/model-garden/models/deploy @@ -4,6 +4,7 @@ NAME SYNOPSIS gcloud alpha ai model-garden models deploy --model=MODEL + [--accelerator-count=ACCELERATOR_COUNT] [--accelerator-type=ACCELERATOR_TYPE] [--accept-eula] [--asynchronous] [--container-args=[ARG,...]] [--container-command=[COMMAND,...]] [--container-deployment-timeout-seconds=CONTAINER_DEPLOYMENT_TIMEOUT_SECONDS] @@ -50,9 +51,15 @@ REQUIRED FLAGS in the format of {publisher_name}/{model_name}@{model_version_name}, e.g. google/gemma2@gemma-2-2b. If it is a Hugging Face model, it should be in the convention of Hugging Face models, e.g. - meta-llama/Meta-Llama-3-8B. + meta-llama/Meta-Llama-3-8B. If it is a Custom Weights model, it should + be in the format of gs://{gcs_bucket_uri}, e.g. + gs://-model-garden-public-us/llama3.1/Meta-Llama-3.1-8B-Instruct. OPTIONAL FLAGS + --accelerator-count=ACCELERATOR_COUNT + The accelerator count to serve the model. Accelerator count should be + non-negative. + --accelerator-type=ACCELERATOR_TYPE The accelerator type to serve the model. It should be a supported accelerator type from the verified deployment configurations of the diff --git a/gcloud/alpha/backup-dr/backup-plan-associations/fetch-for-resource-type b/gcloud/alpha/backup-dr/backup-plan-associations/fetch-for-resource-type new file mode 100644 index 000000000..e30bdac02 --- /dev/null +++ b/gcloud/alpha/backup-dr/backup-plan-associations/fetch-for-resource-type @@ -0,0 +1,81 @@ +NAME + gcloud alpha backup-dr backup-plan-associations fetch-for-resource-type - + fetch Backup Plan Associations for a given resource type and location + +SYNOPSIS + gcloud alpha backup-dr backup-plan-associations fetch-for-resource-type + RESOURCE_TYPE --location=LOCATION [--filter=EXPRESSION] [--limit=LIMIT] + [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Fetch Backup Plan Associations for a given resource type and + location. List backup plan associations in a specified location and + resource type in a project. + +EXAMPLES + To list backup plan associations for Cloud SQL with location us-central1, + run: + + $ gcloud alpha backup-dr backup-plan-associations \ + fetch-for-resource-type sqladmin.googleapis.com/Instance \ + --location="us-central1" + +POSITIONAL ARGUMENTS + RESOURCE_TYPE + Resource type for which backup plan associations should be fetched. + +REQUIRED FLAGS + --location=LOCATION + Location for which backup plan associations should be fetched. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +BRIEF + List backup plan associations in a specified location and resource type in + a project. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/backup-dr/backup-plan-associations/help b/gcloud/alpha/backup-dr/backup-plan-associations/help index 66db109d9..f5a1171b1 100644 --- a/gcloud/alpha/backup-dr/backup-plan-associations/help +++ b/gcloud/alpha/backup-dr/backup-plan-associations/help @@ -26,6 +26,10 @@ COMMANDS describe (ALPHA) Show details of the backup plan association. + fetch-for-resource-type + (ALPHA) Fetch Backup Plan Associations for a given resource type and + location. + list (ALPHA) List Backup and DR backup plan associations. diff --git a/gcloud/alpha/backup-dr/backup-vaults/create b/gcloud/alpha/backup-dr/backup-vaults/create index f00001555..bba55de7b 100644 --- a/gcloud/alpha/backup-dr/backup-vaults/create +++ b/gcloud/alpha/backup-dr/backup-vaults/create @@ -7,9 +7,10 @@ SYNOPSIS (BACKUP_VAULT : --location=LOCATION) --backup-min-enforced-retention=BACKUP_MIN_ENFORCED_RETENTION [--access-restriction=ACCESS_RESTRICTION; default="within-org"] - [--no-async] [--description=DESCRIPTION] - [--effective-time=EFFECTIVE_TIME] [--labels=[KEY=VALUE,...]] - [GCLOUD_WIDE_FLAG ...] + [--no-async] + [--backup-retention-inheritance=BACKUP_RETENTION_INHERITANCE] + [--description=DESCRIPTION] [--effective-time=EFFECTIVE_TIME] + [--labels=[KEY=VALUE,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Create a Backup and DR backup vault. @@ -101,6 +102,16 @@ OPTIONAL FLAGS --no-async Wait for the operation in progress to complete. + --backup-retention-inheritance=BACKUP_RETENTION_INHERITANCE + The inheritance mode for enforced retention end time of the backup + within this backup vault. Once set, the inheritance mode cannot be + changed. Default is inherit-vault-retention. If set to + inherit-vault-retention, the backup retention period will be inherited + from the backup vault. If set to match-backup-expire-time, the backup + retention period will be the same as the backup expiration time. + BACKUP_RETENTION_INHERITANCE must be one of: inherit-vault-retention, + match-backup-expire-time. + --description=DESCRIPTION Optional description for the backup vault (2048 characters or less). diff --git a/gcloud/alpha/backup-dr/data-source-references/describe b/gcloud/alpha/backup-dr/data-source-references/describe new file mode 100644 index 000000000..eb7c8ab01 --- /dev/null +++ b/gcloud/alpha/backup-dr/data-source-references/describe @@ -0,0 +1,70 @@ +NAME + gcloud alpha backup-dr data-source-references describe - show details of + the data source reference + +SYNOPSIS + gcloud alpha backup-dr data-source-references describe + (DATA_SOURCE_REFERENCE : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Show all configuration data source associated with the specified + data source reference. + +EXAMPLES + To view details for data source 'DATA_SOURCE_REFERENCE', run: + + $ gcloud alpha backup-dr data-source-references describe \ + DATA_SOURCE_REFERENCE + +POSITIONAL ARGUMENTS + Data source reference resource - Name of the data source reference to + describe. The arguments in this group can be used to specify the + attributes of this resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument data_source_reference on the command line with a + fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + DATA_SOURCE_REFERENCE + ID of the data_source_reference or fully qualified identifier for the + data_source_reference. + + To set the data_source_reference attribute: + ▸ provide the argument data_source_reference on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Location ID of the resource. + + To set the location attribute: + ▸ provide the argument data_source_reference on the command line + with a fully specified name; + ▸ provide the argument --location on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the backupdr/v1 API. The full documentation for this API + can be found at: https://cloud.google.com/backup-disaster-recovery + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud backup-dr data-source-references describe + diff --git a/gcloud/alpha/backup-dr/data-source-references/fetch-for-resource-type b/gcloud/alpha/backup-dr/data-source-references/fetch-for-resource-type new file mode 100644 index 000000000..d9beb79c9 --- /dev/null +++ b/gcloud/alpha/backup-dr/data-source-references/fetch-for-resource-type @@ -0,0 +1,83 @@ +NAME + gcloud alpha backup-dr data-source-references fetch-for-resource-type - + fetch Data Source References for a given resource type and location + +SYNOPSIS + gcloud alpha backup-dr data-source-references fetch-for-resource-type + RESOURCE_TYPE --location=LOCATION [--filter=EXPRESSION] [--limit=LIMIT] + [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Fetch Data Source References for a given resource type and + location. Show all configuration data associated with the specified data + source reference. + +EXAMPLES + To list data source references for Cloud SQL with location us-central1 in + project test-project, run: + + $ gcloud alpha backup-dr data-source-references \ + fetch-for-resource-type sqladmin.googleapis.com/Instance \ + --location="us-central1" --project-id="test-project" + +POSITIONAL ARGUMENTS + RESOURCE_TYPE + Resource type for which data source references should be fetched. + +REQUIRED FLAGS + --location=LOCATION + Location for which data source references should be fetched. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +BRIEF + List data source references in a specified location and resource type in a + project. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud backup-dr data-source-references fetch-for-resource-type + diff --git a/gcloud/alpha/backup-dr/data-source-references/help b/gcloud/alpha/backup-dr/data-source-references/help new file mode 100644 index 000000000..01bada706 --- /dev/null +++ b/gcloud/alpha/backup-dr/data-source-references/help @@ -0,0 +1,34 @@ +NAME + gcloud alpha backup-dr data-source-references - command group for Backup + and DR Data Source References + +SYNOPSIS + gcloud alpha backup-dr data-source-references COMMAND + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Command group for Backup and DR Data Source References. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + describe + (ALPHA) Show details of the data source reference. + + fetch-for-resource-type + (ALPHA) Fetch Data Source References for a given resource type and + location. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud backup-dr data-source-references + diff --git a/gcloud/alpha/backup-dr/data-sources/list b/gcloud/alpha/backup-dr/data-sources/list index 403c891c6..4bcc3939d 100644 --- a/gcloud/alpha/backup-dr/data-sources/list +++ b/gcloud/alpha/backup-dr/data-sources/list @@ -11,10 +11,15 @@ DESCRIPTION (ALPHA) Displays all data sources in a project. EXAMPLES - To list data sources for all backup vaults and locations, run: $ gcloud alpha backup-dr data-sources list To list all data \ - sources for a backup vault `_my-vault_` in a location \ - `_my-location_`, run: $ gcloud alpha backup-dr data-sources \ - list --backup-vault=my-vault --location=my-location + To list data sources for all backup vaults and locations, run: + + $ gcloud alpha backup-dr data-sources list + + To list all data sources for a backup vault my-vault in a location + my-location, run: + + $ gcloud alpha backup-dr data-sources list --backup-vault=my-vault \ + --location=my-location FLAGS Backup vault resource - Backup vault to list data sources from. The diff --git a/gcloud/alpha/backup-dr/help b/gcloud/alpha/backup-dr/help index f626bd804..2be9ebc79 100644 --- a/gcloud/alpha/backup-dr/help +++ b/gcloud/alpha/backup-dr/help @@ -30,6 +30,9 @@ GROUPS backups (ALPHA) Manage Backup and DR backups. + data-source-references + (ALPHA) Command group for Backup and DR Data Source References. + data-sources (ALPHA) View Backup and DR data sources. diff --git a/gcloud/alpha/bms/instances/reimage b/gcloud/alpha/bms/instances/reimage index 4fe98daa1..cefb93645 100644 --- a/gcloud/alpha/bms/instances/reimage +++ b/gcloud/alpha/bms/instances/reimage @@ -63,6 +63,10 @@ REQUIRED FLAGS --os-image=OS_IMAGE OS image to install on the server. + To list all OS image codes supported by BMS, run: + + $ gcloud bms os-images list + OPTIONAL FLAGS --async Return immediately, without waiting for the operation in progress to diff --git a/gcloud/alpha/bms/instances/update b/gcloud/alpha/bms/instances/update index b1a294815..f9c5263e4 100644 --- a/gcloud/alpha/bms/instances/update +++ b/gcloud/alpha/bms/instances/update @@ -76,6 +76,10 @@ FLAGS --os-image=OS_IMAGE OS image to install on the server. + To list all OS image codes supported by BMS, run: + + $ gcloud bms os-images list + --update-labels=[KEY=VALUE,...] List of label KEY=VALUE pairs to update. If a label exists, its value is modified. Otherwise, a new label is created. diff --git a/gcloud/alpha/compute/forwarding-rules/create b/gcloud/alpha/compute/forwarding-rules/create index e874e238a..16d206fff 100644 --- a/gcloud/alpha/compute/forwarding-rules/create +++ b/gcloud/alpha/compute/forwarding-rules/create @@ -30,6 +30,7 @@ SYNOPSIS [--target-pool-region=TARGET_POOL_REGION] [--target-service-attachment-region=TARGET_SERVICE_ATTACHMENT_REGION] [--target-vpn-gateway-region=TARGET_VPN_GATEWAY_REGION] + [--traffic-disabled] [--address-region=ADDRESS_REGION | --global-address] [--backend-service-region=BACKEND_SERVICE_REGION | --global-backend-service] [--global | --region=REGION] @@ -355,6 +356,12 @@ OPTIONAL FLAGS is set to the region of the forwarding rule. Overrides the default compute/region property value for this command invocation. + --traffic-disabled + If set to true, disables traffic from flowing through Private Service + Connect forwarding rule from consumer to producer. This can only be + specified if the forwarding rule's target is a service attachment + (--target-service-attachment). + At most one of these can be specified: --address-region=ADDRESS_REGION diff --git a/gcloud/alpha/compute/forwarding-rules/update b/gcloud/alpha/compute/forwarding-rules/update index 7f4b53390..43f412fa1 100644 --- a/gcloud/alpha/compute/forwarding-rules/update +++ b/gcloud/alpha/compute/forwarding-rules/update @@ -8,7 +8,7 @@ SYNOPSIS [--external-managed-backend-bucket-migration-testing-percentage=EXTERNAL_MANAGED_BACKEND_BUCKET_MIGRATION_TESTING_PERCENTAGE] [--load-balancing-scheme=LOAD_BALANCING_SCHEME] [--network-tier=NETWORK_TIER] - [--source-ip-ranges=SOURCE_IP_RANGE,[...]] + [--source-ip-ranges=SOURCE_IP_RANGE,[...]] [--traffic-disabled] [--update-labels=[KEY=VALUE,...]] [--clear-external-managed-backend-bucket-migration-state | --external-managed-backend-bucket-migration-state=EXTERNAL_MANAGED_BACKEND_BUCKET_MIGRATION_STATE] @@ -80,6 +80,12 @@ FLAGS forwarding rule only forwards traffic when the packet's source IP address matches one of the IP ranges set here. + --traffic-disabled + If set to true, disables traffic from flowing through Private Service + Connect forwarding rule from consumer to producer. This can only be + specified if the forwarding rule's target is a service attachment + (--target-service-attachment). + --update-labels=[KEY=VALUE,...] List of label KEY=VALUE pairs to update. If a label exists, its value is modified. Otherwise, a new label is created. diff --git a/gcloud/alpha/container/fleet/mesh/update b/gcloud/alpha/container/fleet/mesh/update index 12e3e1291..2dccfcc45 100644 --- a/gcloud/alpha/container/fleet/mesh/update +++ b/gcloud/alpha/container/fleet/mesh/update @@ -58,7 +58,7 @@ REQUIRED FLAGS --management=MANAGEMENT The management mode to update to. MANAGEMENT must be one of: - automatic, manual. + automatic, manual, not_installed. At most one of these can be specified: diff --git a/gcloud/alpha/container/hub/mesh/update b/gcloud/alpha/container/hub/mesh/update index 5bbbb678d..1c9bfab3e 100644 --- a/gcloud/alpha/container/hub/mesh/update +++ b/gcloud/alpha/container/hub/mesh/update @@ -58,7 +58,7 @@ REQUIRED FLAGS --management=MANAGEMENT The management mode to update to. MANAGEMENT must be one of: - automatic, manual. + automatic, manual, not_installed. At most one of these can be specified: diff --git a/gcloud/alpha/gemini-cloud-assist/help b/gcloud/alpha/gemini-cloud-assist/help deleted file mode 100644 index e3a1a4aa2..000000000 --- a/gcloud/alpha/gemini-cloud-assist/help +++ /dev/null @@ -1,26 +0,0 @@ -NAME - gcloud alpha gemini-cloud-assist - create and manage Gemini Cloud Assist - -SYNOPSIS - gcloud alpha gemini-cloud-assist GROUP [GCLOUD_WIDE_FLAG ...] - -DESCRIPTION - (ALPHA) Create and manage Gemini Cloud Assist. - -GCLOUD WIDE FLAGS - These flags are available to all commands: --help. - - Run $ gcloud help for details. - -GROUPS - GROUP is one of the following: - - investigations - (ALPHA) Create and manage Gemini Cloud Assist investigations. - -NOTES - This command is currently in alpha and might change without notice. If this - command fails with API permission errors despite specifying the correct - project, you might be trying to access an API with an invitation-only early - access allowlist. - diff --git a/gcloud/alpha/gemini-cloud-assist/investigations/add-iam-policy-binding b/gcloud/alpha/gemini-cloud-assist/investigations/add-iam-policy-binding deleted file mode 100644 index 202302c63..000000000 --- a/gcloud/alpha/gemini-cloud-assist/investigations/add-iam-policy-binding +++ /dev/null @@ -1,87 +0,0 @@ -NAME - gcloud alpha gemini-cloud-assist investigations add-iam-policy-binding - - adds an IAM policy binding for an investigation - -SYNOPSIS - gcloud alpha gemini-cloud-assist investigations add-iam-policy-binding - INVESTIGATION --member=PRINCIPAL --role=ROLE [GCLOUD_WIDE_FLAG ...] - -DESCRIPTION - (ALPHA) Adds an IAM policy binding for an investigation. - -EXAMPLES - To add an IAM policy binding for the role of - 'roles/geminicloudassist.investigationViewer' for the user - 'test-user@gmail.com' on the investigation - 'project/my-project/locations/my-location/investigations/my-investigation', - run: - - $ gcloud alpha gemini-cloud-assist investigations \ - add-iam-policy-binding \ - project/my-project/locations/my-location/investigations/\ - my-investigation --member='user:test-user@gmail.com' \ - --role='roles/geminicloudassist.investigationViewer' - - See https://cloud.google.com/iam/docs/managing-policies for details of - policy role and member types. - -POSITIONAL ARGUMENTS - Investigation resource - The investigation name to add IAM policy binding - for. This represents a Cloud resource. (NOTE) Some attributes are not - given arguments in this group but can be set in other ways. - - To set the project attribute: - ◆ provide the argument investigation on the command line with a fully - specified name; - ◆ provide the argument --project on the command line; - ◆ set the property core/project. - - To set the location attribute: - ◆ provide the argument investigation on the command line with a fully - specified name; - ◆ The default is global. - - This must be specified. - - INVESTIGATION - ID of the investigation or fully qualified identifier for the - investigation. - - To set the investigation attribute: - ▸ provide the argument investigation on the command line. - -REQUIRED FLAGS - --member=PRINCIPAL - The principal to add the binding for. Should be of the form - user|group|serviceAccount:email or domain:domain. - - Examples: user:test-user@gmail.com, group:admins@example.com, - serviceAccount:test123@example.domain.com, or - domain:example.domain.com. - - Some resources also accept the following special values: - ◆ allUsers - Special identifier that represents anyone who is on the - internet, with or without a Google account. - ◆ allAuthenticatedUsers - Special identifier that represents anyone - who is authenticated with a Google account or a service account. - - --role=ROLE - Role name to assign to the principal. The role name is the complete - path of a predefined role, such as roles/logging.viewer, or the role ID - for a custom role, such as - organizations/{ORGANIZATION_ID}/roles/logging.viewer. - -GCLOUD WIDE FLAGS - These flags are available to all commands: --access-token-file, --account, - --billing-project, --configuration, --flags-file, --flatten, --format, - --help, --impersonate-service-account, --log-http, --project, --quiet, - --trace-token, --user-output-enabled, --verbosity. - - Run $ gcloud help for details. - -NOTES - This command is currently in alpha and might change without notice. If this - command fails with API permission errors despite specifying the correct - project, you might be trying to access an API with an invitation-only early - access allowlist. - diff --git a/gcloud/alpha/gemini-cloud-assist/investigations/get-iam-policy b/gcloud/alpha/gemini-cloud-assist/investigations/get-iam-policy deleted file mode 100644 index 3361437c0..000000000 --- a/gcloud/alpha/gemini-cloud-assist/investigations/get-iam-policy +++ /dev/null @@ -1,59 +0,0 @@ -NAME - gcloud alpha gemini-cloud-assist investigations get-iam-policy - get IAM - policy for an investigation - -SYNOPSIS - gcloud alpha gemini-cloud-assist investigations get-iam-policy - INVESTIGATION [GCLOUD_WIDE_FLAG ...] - -DESCRIPTION - (ALPHA) Get IAM policy for an investigation. - -EXAMPLES - To get the IAM policy a the investigation - 'project/my-project/locations/my-location/investigations/my-investigation', - run: - - $ gcloud alpha gemini-cloud-assist investigations get-iam-policy \ - project/my-project/locations/my-location/investigations/\ - my-investigation - -POSITIONAL ARGUMENTS - Investigation resource - The investigation name to get IAM policy for. - This represents a Cloud resource. (NOTE) Some attributes are not given - arguments in this group but can be set in other ways. - - To set the project attribute: - ◆ provide the argument investigation on the command line with a fully - specified name; - ◆ provide the argument --project on the command line; - ◆ set the property core/project. - - To set the location attribute: - ◆ provide the argument investigation on the command line with a fully - specified name; - ◆ The default is global. - - This must be specified. - - INVESTIGATION - ID of the investigation or fully qualified identifier for the - investigation. - - To set the investigation attribute: - ▸ provide the argument investigation on the command line. - -GCLOUD WIDE FLAGS - These flags are available to all commands: --access-token-file, --account, - --billing-project, --configuration, --flags-file, --flatten, --format, - --help, --impersonate-service-account, --log-http, --project, --quiet, - --trace-token, --user-output-enabled, --verbosity. - - Run $ gcloud help for details. - -NOTES - This command is currently in alpha and might change without notice. If this - command fails with API permission errors despite specifying the correct - project, you might be trying to access an API with an invitation-only early - access allowlist. - diff --git a/gcloud/alpha/gemini-cloud-assist/investigations/help b/gcloud/alpha/gemini-cloud-assist/investigations/help deleted file mode 100644 index 970163901..000000000 --- a/gcloud/alpha/gemini-cloud-assist/investigations/help +++ /dev/null @@ -1,37 +0,0 @@ -NAME - gcloud alpha gemini-cloud-assist investigations - create and manage Gemini - Cloud Assist investigations - -SYNOPSIS - gcloud alpha gemini-cloud-assist investigations COMMAND - [GCLOUD_WIDE_FLAG ...] - -DESCRIPTION - (ALPHA) Create and manage Gemini Cloud Assist investigations. - -GCLOUD WIDE FLAGS - These flags are available to all commands: --help. - - Run $ gcloud help for details. - -COMMANDS - COMMAND is one of the following: - - add-iam-policy-binding - (ALPHA) Adds an IAM policy binding for an investigation. - - get-iam-policy - (ALPHA) Get IAM policy for an investigation. - - remove-iam-policy-binding - (ALPHA) Removes an IAM policy binding from an investigation. - - set-iam-policy - (ALPHA) Sets IAM policy for an investigation. - -NOTES - This command is currently in alpha and might change without notice. If this - command fails with API permission errors despite specifying the correct - project, you might be trying to access an API with an invitation-only early - access allowlist. - diff --git a/gcloud/alpha/gemini-cloud-assist/investigations/remove-iam-policy-binding b/gcloud/alpha/gemini-cloud-assist/investigations/remove-iam-policy-binding deleted file mode 100644 index 1f21c0ec8..000000000 --- a/gcloud/alpha/gemini-cloud-assist/investigations/remove-iam-policy-binding +++ /dev/null @@ -1,87 +0,0 @@ -NAME - gcloud alpha gemini-cloud-assist investigations remove-iam-policy-binding - - removes an IAM policy binding from an investigation - -SYNOPSIS - gcloud alpha gemini-cloud-assist investigations remove-iam-policy-binding - INVESTIGATION --member=PRINCIPAL --role=ROLE [GCLOUD_WIDE_FLAG ...] - -DESCRIPTION - (ALPHA) Removes an IAM policy binding from an investigation. - -EXAMPLES - To remove an IAM policy binding for the role of - 'roles/geminicloudassist.investigationUser' for the user - 'test-user@gmail.com' from the investigation - 'project/my-project/locations/my-location/investigations/my-investigation', - run: - - $ gcloud alpha gemini-cloud-assist investigations \ - remove-iam-policy-binding \ - project/my-project/locations/my-location/investigations/\ - my-investigation --member='user:test-user@gmail.com' \ - --role='roles/geminicloudassist.investigations.user' - - See https://cloud.google.com/iam/docs/managing-policies for details of - policy role and member types. - -POSITIONAL ARGUMENTS - Investigation resource - The investigation name to remove IAM policy - binding from. This represents a Cloud resource. (NOTE) Some attributes are - not given arguments in this group but can be set in other ways. - - To set the project attribute: - ◆ provide the argument investigation on the command line with a fully - specified name; - ◆ provide the argument --project on the command line; - ◆ set the property core/project. - - To set the location attribute: - ◆ provide the argument investigation on the command line with a fully - specified name; - ◆ The default is global. - - This must be specified. - - INVESTIGATION - ID of the investigation or fully qualified identifier for the - investigation. - - To set the investigation attribute: - ▸ provide the argument investigation on the command line. - -REQUIRED FLAGS - --member=PRINCIPAL - The principal to add the binding for. Should be of the form - user|group|serviceAccount:email or domain:domain. - - Examples: user:test-user@gmail.com, group:admins@example.com, - serviceAccount:test123@example.domain.com, or - domain:example.domain.com. - - Some resources also accept the following special values: - ◆ allUsers - Special identifier that represents anyone who is on the - internet, with or without a Google account. - ◆ allAuthenticatedUsers - Special identifier that represents anyone - who is authenticated with a Google account or a service account. - - --role=ROLE - Role name to assign to the principal. The role name is the complete - path of a predefined role, such as roles/logging.viewer, or the role ID - for a custom role, such as - organizations/{ORGANIZATION_ID}/roles/logging.viewer. - -GCLOUD WIDE FLAGS - These flags are available to all commands: --access-token-file, --account, - --billing-project, --configuration, --flags-file, --flatten, --format, - --help, --impersonate-service-account, --log-http, --project, --quiet, - --trace-token, --user-output-enabled, --verbosity. - - Run $ gcloud help for details. - -NOTES - This command is currently in alpha and might change without notice. If this - command fails with API permission errors despite specifying the correct - project, you might be trying to access an API with an invitation-only early - access allowlist. - diff --git a/gcloud/alpha/gemini-cloud-assist/investigations/set-iam-policy b/gcloud/alpha/gemini-cloud-assist/investigations/set-iam-policy deleted file mode 100644 index 977b84e7f..000000000 --- a/gcloud/alpha/gemini-cloud-assist/investigations/set-iam-policy +++ /dev/null @@ -1,62 +0,0 @@ -NAME - gcloud alpha gemini-cloud-assist investigations set-iam-policy - sets IAM - policy for an investigation - -SYNOPSIS - gcloud alpha gemini-cloud-assist investigations set-iam-policy - INVESTIGATION POLICY_FILE [GCLOUD_WIDE_FLAG ...] - -DESCRIPTION - (ALPHA) Sets IAM policy for an investigation. - -EXAMPLES - To set IAM policy for theinvestigation - project/my-project/locations/my-location/investigations/my-investigation - defined in POLICY-FILE-1', run: - - $ gcloud alpha gemini-cloud-assist investigations set-iam-policy \ - project/my-project/locations/my-location/investigations/\ - my-investigation POLICY-FILE-1 - -POSITIONAL ARGUMENTS - Investigation resource - The investigation name to remove IAM policy - binding from. This represents a Cloud resource. (NOTE) Some attributes are - not given arguments in this group but can be set in other ways. - - To set the project attribute: - ◆ provide the argument investigation on the command line with a fully - specified name; - ◆ provide the argument --project on the command line; - ◆ set the property core/project. - - To set the location attribute: - ◆ provide the argument investigation on the command line with a fully - specified name; - ◆ The default is global. - - This must be specified. - - INVESTIGATION - ID of the investigation or fully qualified identifier for the - investigation. - - To set the investigation attribute: - ▸ provide the argument investigation on the command line. - - POLICY_FILE - Path to a local JSON or YAML formatted file containing a valid policy. - -GCLOUD WIDE FLAGS - These flags are available to all commands: --access-token-file, --account, - --billing-project, --configuration, --flags-file, --flatten, --format, - --help, --impersonate-service-account, --log-http, --project, --quiet, - --trace-token, --user-output-enabled, --verbosity. - - Run $ gcloud help for details. - -NOTES - This command is currently in alpha and might change without notice. If this - command fails with API permission errors despite specifying the correct - project, you might be trying to access an API with an invitation-only early - access allowlist. - diff --git a/gcloud/alpha/iam/workforce-pools/providers/create-oidc b/gcloud/alpha/iam/workforce-pools/providers/create-oidc index 5bb175507..9204e244e 100644 --- a/gcloud/alpha/iam/workforce-pools/providers/create-oidc +++ b/gcloud/alpha/iam/workforce-pools/providers/create-oidc @@ -14,6 +14,8 @@ SYNOPSIS [--client-secret-value=CLIENT_SECRET_VALUE] [--description=DESCRIPTION] [--detailed-audit-logging] [--disabled] [--display-name=DISPLAY_NAME] [--jwk-json-path=PATH_TO_FILE] + [--extended-attributes-client-id=EXTENDED_ATTRIBUTES_CLIENT_ID + --extended-attributes-client-secret-value=EXTENDED_ATTRIBUTES_CLIENT_SECRET_VALUE --extended-attributes-issuer-uri=EXTENDED_ATTRIBUTES_ISSUER_URI --extended-attributes-type=EXTENDED_ATTRIBUTES_TYPE : --extended-attributes-filter=EXTENDED_ATTRIBUTES_FILTER] [--extra-attributes-client-id=EXTRA_ATTRIBUTES_CLIENT_ID --extra-attributes-client-secret-value=EXTRA_ATTRIBUTES_CLIENT_SECRET_VALUE --extra-attributes-issuer-uri=EXTRA_ATTRIBUTES_ISSUER_URI --extra-attributes-type=EXTRA_ATTRIBUTES_TYPE : --extra-attributes-filter=EXTRA_ATTRIBUTES_FILTER] [GCLOUD_WIDE_FLAG ...] @@ -276,6 +278,30 @@ OPTIONAL FLAGS } ```. Use a full or relative path to a local file containing the value of jwk_json_path. + *--extended-attributes-client-id*=_EXTENDED_ATTRIBUTES_CLIENT_ID_:: + + The OAuth 2.0 client ID for retrieving extended attributes from the identity provider. Required to get extended group memberships for a subset of Google Cloud products. + + *--extended-attributes-client-secret-value*=_EXTENDED_ATTRIBUTES_CLIENT_SECRET_VALUE_:: + + The OAuth 2.0 client secret for retrieving extended attributes from the identity provider. Required to get extended group memberships for a subset of Google Cloud products. + + *--extended-attributes-issuer-uri*=_EXTENDED_ATTRIBUTES_ISSUER_URI_:: + + OIDC identity provider's issuer URI. Must be a valid URI using the `https` scheme. Required to get the OIDC discovery document. + + *--extended-attributes-type*=_EXTENDED_ATTRIBUTES_TYPE_:: + + Represents the identity provider and type of claims that should be fetched. _EXTENDED_ATTRIBUTES_TYPE_ must be (only one value is supported): *azure-ad-groups-id*. + + *--extended-attributes-filter*=_EXTENDED_ATTRIBUTES_FILTER_:: + + The filter used to request specific records from the IdP. By default, all of the groups that are associated with a user are fetched. For Microsoft Entra ID, you can add `$search` query parameters using [Keyword Query Language] (https://learn.microsoft.com/en-us/sharepoint/dev/general-development/keyword-query-language-kql-syntax-reference). To learn more about `$search` querying in Microsoft Entra ID, see [Use the `$search` query parameter] (https://learn.microsoft.com/en-us/graph/search-query-parameter). + + Additionally, Workforce Identity Federation automatically adds the following [`$filter` query parameters] (https://learn.microsoft.com/en-us/graph/filter-query-parameter), based on the value of `attributes_type`. Values passed to `filter` are converted to `$search` query parameters. Additional `$filter` query parameters cannot be added using this field. + + * `AZURE_AD_GROUPS_ID`: `securityEnabled` filter is applied. + *--extra-attributes-client-id*=_EXTRA_ATTRIBUTES_CLIENT_ID_:: The OAuth 2.0 client ID for retrieving extra attributes from the identity provider. Required to get the access token using client credentials grant flow. diff --git a/gcloud/alpha/iam/workforce-pools/providers/help b/gcloud/alpha/iam/workforce-pools/providers/help index d22364db6..556c388da 100644 --- a/gcloud/alpha/iam/workforce-pools/providers/help +++ b/gcloud/alpha/iam/workforce-pools/providers/help @@ -24,6 +24,9 @@ GROUPS operations (ALPHA) Manage IAM workforce pool provider long-running operations. + scim-tenants + (ALPHA) Manage IAM workforce identity pool provider SCIM tenants. + COMMANDS COMMAND is one of the following: diff --git a/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/create b/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/create new file mode 100644 index 000000000..1c708f03e --- /dev/null +++ b/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/create @@ -0,0 +1,119 @@ +NAME + gcloud alpha iam workforce-pools providers scim-tenants create - create an + IAM workforce identity pool provider SCIM tenant + +SYNOPSIS + gcloud alpha iam workforce-pools providers scim-tenants create + (SCIM_TENANT : --location=LOCATION + --provider=PROVIDER --workforce-pool=WORKFORCE_POOL) + [--claim-mapping=[KEY=VALUE,...]] [--description=DESCRIPTION] + [--display-name=DISPLAY_NAME] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Create a new SCIM tenant associated with a specific workforce + identity pool provider. + + Upon successful creation, the command returns the created SCIM tenant + resource. + +EXAMPLES + To create a SCIM tenant with ID my-tenant under provider my-okta-provider + in pool my-pool located in global: + + $ gcloud alpha iam workforce-pools providers scim-tenants create \ + my-tenant --location=global --workforce-pool=my-pool \ + --provider=my-okta-provider + + To create a SCIM tenant sales-tenant under provider salesforce in pool + partner-pool located in europe-west1 with specific claim mappings: + + $ gcloud alpha iam workforce-pools providers scim-tenants create \ + sales-tenant --location=europe-west1 \ + --workforce-pool=partner-pool --provider=salesforce \ + --claim-mapping="google.subject=salesforce_id,assertion.groups=m\ + emberOf" + +POSITIONAL ARGUMENTS + Workforce pool provider scim tenant resource - The ID of the SCIM tenant + to create. Must be 4-32 characters, alphanumeric ([a-z0-9-]), and cannot + start with gcp-. The arguments in this group can be used to specify the + attributes of this resource. + + This must be specified. + + SCIM_TENANT + ID of the workforce pool provider scim tenant or fully qualified + identifier for the workforce pool provider scim tenant. + + To set the scim_tenant attribute: + ▸ provide the argument scim_tenant on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the workforce pool. + + To set the location attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --provider=PROVIDER + The ID to use for the workforce pool provider, which becomes the + final component of the resource name. This value must be unique + within the workforce pool, 4-32 characters in length, and may contain + the characters [a-z0-9-]. The prefix gcp- is reserved for use by + Google, and may not be specified. + + To set the provider attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --provider on the command line. + + --workforce-pool=WORKFORCE_POOL + The ID to use for the workforce pool, which becomes the final + component of the resource name. This value must be a globally unique + string of 6 to 63 lowercase letters, digits, or hyphens. It must + start with a letter, and cannot have a trailing hyphen. The prefix + gcp- is reserved for use by Google, and may not be specified. + + To set the workforce-pool attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --workforce-pool on the command line. + +FLAGS + --claim-mapping=[KEY=VALUE,...] + A comma-separated list of KEY=VALUE pairs defining attribute mappings. + + --description=DESCRIPTION + Optional, user-specified description for the SCIM tenant (max 256 + characters). + + --display-name=DISPLAY_NAME + Optional, user-specified display name for the SCIM tenant (max 32 + characters). + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iam/ + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud iam workforce-pools providers scim-tenants create + + $ gcloud beta iam workforce-pools providers scim-tenants create + diff --git a/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/delete b/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/delete new file mode 100644 index 000000000..d31bba282 --- /dev/null +++ b/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/delete @@ -0,0 +1,94 @@ +NAME + gcloud alpha iam workforce-pools providers scim-tenants delete - delete an + IAM workforce identity pool provider SCIM tenant + +SYNOPSIS + gcloud alpha iam workforce-pools providers scim-tenants delete + (SCIM_TENANT : --location=LOCATION + --provider=PROVIDER --workforce-pool=WORKFORCE_POOL) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Delete an existing SCIM tenant associated with a specific workforce + identity pool provider. This operation marks the tenant for deletion, and + it may be recoverable using the undelete command for a period. + +EXAMPLES + To delete a SCIM tenant with ID my-tenant under provider my-okta-provider + in pool my-pool located in global: + + $ gcloud alpha iam workforce-pools providers scim-tenants delete \ + my-tenant --location=global --workforce-pool=my-pool \ + --provider=my-okta-provider + +POSITIONAL ARGUMENTS + Workforce pool provider scim tenant resource - The SCIM tenant to delete. + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + SCIM_TENANT + ID of the workforce pool provider scim tenant or fully qualified + identifier for the workforce pool provider scim tenant. + + To set the scim_tenant attribute: + ▸ provide the argument scim_tenant on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the workforce pool. + + To set the location attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --provider=PROVIDER + The ID to use for the workforce pool provider, which becomes the + final component of the resource name. This value must be unique + within the workforce pool, 4-32 characters in length, and may contain + the characters [a-z0-9-]. The prefix gcp- is reserved for use by + Google, and may not be specified. + + To set the provider attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --provider on the command line. + + --workforce-pool=WORKFORCE_POOL + The ID to use for the workforce pool, which becomes the final + component of the resource name. This value must be a globally unique + string of 6 to 63 lowercase letters, digits, or hyphens. It must + start with a letter, and cannot have a trailing hyphen. The prefix + gcp- is reserved for use by Google, and may not be specified. + + To set the workforce-pool attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --workforce-pool on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iam/ + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud iam workforce-pools providers scim-tenants delete + + $ gcloud beta iam workforce-pools providers scim-tenants delete + diff --git a/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/describe b/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/describe new file mode 100644 index 000000000..08e86ab18 --- /dev/null +++ b/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/describe @@ -0,0 +1,93 @@ +NAME + gcloud alpha iam workforce-pools providers scim-tenants describe - describe + an IAM workforce identity pool provider SCIM tenant + +SYNOPSIS + gcloud alpha iam workforce-pools providers scim-tenants describe + (SCIM_TENANT : --location=LOCATION + --provider=PROVIDER --workforce-pool=WORKFORCE_POOL) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Describe an existing SCIM tenant associated with a specific + workforce identity pool provider. + +EXAMPLES + To describe a SCIM tenant with ID my-tenant under provider my-provider in + pool my-pool located in global: + + $ gcloud alpha iam workforce-pools providers scim-tenants describe \ + my-tenant --location=global --workforce-pool=my-pool \ + --provider=my-provider + +POSITIONAL ARGUMENTS + Workforce pool provider scim tenant resource - The SCIM tenant to + describe. The arguments in this group can be used to specify the + attributes of this resource. + + This must be specified. + + SCIM_TENANT + ID of the workforce pool provider scim tenant or fully qualified + identifier for the workforce pool provider scim tenant. + + To set the scim_tenant attribute: + ▸ provide the argument scim_tenant on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the workforce pool. + + To set the location attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --provider=PROVIDER + The ID to use for the workforce pool provider, which becomes the + final component of the resource name. This value must be unique + within the workforce pool, 4-32 characters in length, and may contain + the characters [a-z0-9-]. The prefix gcp- is reserved for use by + Google, and may not be specified. + + To set the provider attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --provider on the command line. + + --workforce-pool=WORKFORCE_POOL + The ID to use for the workforce pool, which becomes the final + component of the resource name. This value must be a globally unique + string of 6 to 63 lowercase letters, digits, or hyphens. It must + start with a letter, and cannot have a trailing hyphen. The prefix + gcp- is reserved for use by Google, and may not be specified. + + To set the workforce-pool attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --workforce-pool on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iam/ + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud iam workforce-pools providers scim-tenants describe + + $ gcloud beta iam workforce-pools providers scim-tenants describe + diff --git a/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/help b/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/help new file mode 100644 index 000000000..8cbaf760b --- /dev/null +++ b/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/help @@ -0,0 +1,55 @@ +NAME + gcloud alpha iam workforce-pools providers scim-tenants - manage IAM + workforce identity pool provider SCIM tenants + +SYNOPSIS + gcloud alpha iam workforce-pools providers scim-tenants GROUP | COMMAND + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Commands for creating, describing, listing, updating, and deleting + SCIM tenants associated with IAM workforce identity pool providers. SCIM + tenants enable automated user and group provisioning. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +GROUPS + GROUP is one of the following: + + tokens + (ALPHA) Manage IAM workforce identity pool provider SCIM tenant tokens. + +COMMANDS + COMMAND is one of the following: + + create + (ALPHA) Create an IAM workforce identity pool provider SCIM tenant. + + delete + (ALPHA) Delete an IAM workforce identity pool provider SCIM tenant. + + describe + (ALPHA) Describe an IAM workforce identity pool provider SCIM tenant. + + list + (ALPHA) List IAM workforce identity pool provider SCIM tenants. + + undelete + (ALPHA) Undelete an IAM workforce identity pool provider SCIM tenant. + + update + (ALPHA) Update an IAM workforce identity pool provider SCIM tenant. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud iam workforce-pools providers scim-tenants + + $ gcloud beta iam workforce-pools providers scim-tenants + diff --git a/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/list b/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/list new file mode 100644 index 000000000..904ca28fd --- /dev/null +++ b/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/list @@ -0,0 +1,118 @@ +NAME + gcloud alpha iam workforce-pools providers scim-tenants list - list IAM + workforce identity pool provider SCIM tenants + +SYNOPSIS + gcloud alpha iam workforce-pools providers scim-tenants list + (--provider=PROVIDER + : --location=LOCATION --workforce-pool=WORKFORCE_POOL) + [--show-deleted] [--filter=EXPRESSION] [--limit=LIMIT] + [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) List all SCIM tenants associated with a specific workforce identity + pool provider. + +EXAMPLES + To list all SCIM tenants under provider my-okta-provider in pool my-pool + located in global: + + $ gcloud alpha iam workforce-pools providers scim-tenants list \ + --location=global --workforce-pool=my-pool \ + --provider=my-okta-provider + + To list deleted SCIM tenants as well: + + $ gcloud alpha iam workforce-pools providers scim-tenants list \ + --location=global --workforce-pool=my-pool \ + --provider=my-okta-provider --show-deleted + +REQUIRED FLAGS + Workforce pool provider resource - The workforce identity pool provider + under which to list SCIM tenants. The arguments in this group can be used + to specify the attributes of this resource. + + This must be specified. + + --provider=PROVIDER + ID of the workforce pool provider or fully qualified identifier for + the workforce pool provider. + + To set the provider attribute: + ▸ provide the argument --provider on the command line. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + The location for the workforce pool. + + To set the location attribute: + ▸ provide the argument --provider on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --workforce-pool=WORKFORCE_POOL + The ID to use for the workforce pool, which becomes the final + component of the resource name. This value must be a globally unique + string of 6 to 63 lowercase letters, digits, or hyphens. It must + start with a letter, and cannot have a trailing hyphen. The prefix + gcp- is reserved for use by Google, and may not be specified. + + To set the workforce-pool attribute: + ▸ provide the argument --provider on the command line with a fully + specified name; + ▸ provide the argument --workforce-pool on the command line. + +FLAGS + --show-deleted + Include SCIM tenants that have been deleted. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iam/ + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud iam workforce-pools providers scim-tenants list + + $ gcloud beta iam workforce-pools providers scim-tenants list + diff --git a/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/tokens/create b/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/tokens/create new file mode 100644 index 000000000..b58d130f6 --- /dev/null +++ b/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/tokens/create @@ -0,0 +1,113 @@ +NAME + gcloud alpha iam workforce-pools providers scim-tenants tokens create - + create an IAM workforce identity pool provider SCIM tenant token + +SYNOPSIS + gcloud alpha iam workforce-pools providers scim-tenants tokens create + (TOKEN : --location=LOCATION --provider=PROVIDER + --scim-tenant=SCIM_TENANT --workforce-pool=WORKFORCE_POOL) + [--display-name=DISPLAY_NAME] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Create a new SCIM token associated with a specific workforce + identity pool provider SCIM tenant. + + Upon successful creation, the command returns the created SCIM token + resource. + +EXAMPLES + To create a SCIM token with ID my-token under tenant my-tenant provider + my-provider in pool my-pool located in global: + + $ gcloud alpha iam workforce-pools providers scim-tenants tokens \ + create my-token --location=global --workforce-pool=my-pool \ + --provider=my-provider --scim-tenant=my-tenant + +POSITIONAL ARGUMENTS + Workforce pool provider scim token resource - The ID of the SCIM token to + create. Must be 4-32 characters, alphanumeric ([a-z0-9-]), and cannot + start with gcp-. The arguments in this group can be used to specify the + attributes of this resource. + + This must be specified. + + TOKEN + ID of the workforce pool provider scim token or fully qualified + identifier for the workforce pool provider scim token. + + To set the token attribute: + ▸ provide the argument token on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the workforce pool. + + To set the location attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --provider=PROVIDER + The ID to use for the workforce pool provider, which becomes the + final component of the resource name. This value must be unique + within the workforce pool, 4-32 characters in length, and may contain + the characters [a-z0-9-]. The prefix gcp- is reserved for use by + Google, and may not be specified. + + To set the provider attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --provider on the command line. + + --scim-tenant=SCIM_TENANT + The ID for the SCIM tenant, which becomes the final component of the + resource name. This value must be 4-32 characters, alphanumeric + ([a-z0-9-]), and cannot start with gcp-. + + To set the scim-tenant attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --scim-tenant on the command line. + + --workforce-pool=WORKFORCE_POOL + The ID to use for the workforce pool, which becomes the final + component of the resource name. This value must be a globally unique + string of 6 to 63 lowercase letters, digits, or hyphens. It must + start with a letter, and cannot have a trailing hyphen. The prefix + gcp- is reserved for use by Google, and may not be specified. + + To set the workforce-pool attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --workforce-pool on the command line. + +FLAGS + --display-name=DISPLAY_NAME + Optional, user-specified display name for the SCIM token (max 32 + characters). + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iam/ + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud iam workforce-pools providers scim-tenants tokens create + + $ gcloud beta iam workforce-pools providers scim-tenants tokens \ + create + diff --git a/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/tokens/delete b/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/tokens/delete new file mode 100644 index 000000000..8da4b1321 --- /dev/null +++ b/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/tokens/delete @@ -0,0 +1,104 @@ +NAME + gcloud alpha iam workforce-pools providers scim-tenants tokens delete - + delete an IAM workforce identity pool provider SCIM tenant token + +SYNOPSIS + gcloud alpha iam workforce-pools providers scim-tenants tokens delete + (TOKEN : --location=LOCATION --provider=PROVIDER + --scim-tenant=SCIM_TENANT --workforce-pool=WORKFORCE_POOL) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Delete a SCIM token associated with a specific workforce identity + pool provider SCIM tenant. + +EXAMPLES + To delete a SCIM token with ID my-token under tenant my-tenant provider + my-provider in pool my-pool located in global: + + $ gcloud alpha iam workforce-pools providers scim-tenants tokens \ + delete my-token --location=global --workforce-pool=my-pool \ + --provider=my-provider --scim-tenant=my-tenant + +POSITIONAL ARGUMENTS + Workforce pool provider scim token resource - The SCIM token to delete. + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + TOKEN + ID of the workforce pool provider scim token or fully qualified + identifier for the workforce pool provider scim token. + + To set the token attribute: + ▸ provide the argument token on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the workforce pool. + + To set the location attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --provider=PROVIDER + The ID to use for the workforce pool provider, which becomes the + final component of the resource name. This value must be unique + within the workforce pool, 4-32 characters in length, and may contain + the characters [a-z0-9-]. The prefix gcp- is reserved for use by + Google, and may not be specified. + + To set the provider attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --provider on the command line. + + --scim-tenant=SCIM_TENANT + The ID for the SCIM tenant, which becomes the final component of the + resource name. This value must be 4-32 characters, alphanumeric + ([a-z0-9-]), and cannot start with gcp-. + + To set the scim-tenant attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --scim-tenant on the command line. + + --workforce-pool=WORKFORCE_POOL + The ID to use for the workforce pool, which becomes the final + component of the resource name. This value must be a globally unique + string of 6 to 63 lowercase letters, digits, or hyphens. It must + start with a letter, and cannot have a trailing hyphen. The prefix + gcp- is reserved for use by Google, and may not be specified. + + To set the workforce-pool attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --workforce-pool on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iam/ + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud iam workforce-pools providers scim-tenants tokens delete + + $ gcloud beta iam workforce-pools providers scim-tenants tokens \ + delete + diff --git a/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/tokens/describe b/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/tokens/describe new file mode 100644 index 000000000..484042d0b --- /dev/null +++ b/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/tokens/describe @@ -0,0 +1,104 @@ +NAME + gcloud alpha iam workforce-pools providers scim-tenants tokens describe - + describe an IAM workforce identity pool provider SCIM tenant token + +SYNOPSIS + gcloud alpha iam workforce-pools providers scim-tenants tokens describe + (TOKEN : --location=LOCATION --provider=PROVIDER + --scim-tenant=SCIM_TENANT --workforce-pool=WORKFORCE_POOL) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Describe a SCIM token associated with a specific workforce identity + pool provider SCIM tenant. + +EXAMPLES + To describe a SCIM token with ID my-token under tenant my-tenant provider + my-provider in pool my-pool located in global: + + $ gcloud alpha iam workforce-pools providers scim-tenants tokens \ + describe my-token --location=global --workforce-pool=my-pool \ + --provider=my-provider --scim-tenant=my-tenant + +POSITIONAL ARGUMENTS + Workforce pool provider scim token resource - The SCIM token to describe. + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + TOKEN + ID of the workforce pool provider scim token or fully qualified + identifier for the workforce pool provider scim token. + + To set the token attribute: + ▸ provide the argument token on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the workforce pool. + + To set the location attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --provider=PROVIDER + The ID to use for the workforce pool provider, which becomes the + final component of the resource name. This value must be unique + within the workforce pool, 4-32 characters in length, and may contain + the characters [a-z0-9-]. The prefix gcp- is reserved for use by + Google, and may not be specified. + + To set the provider attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --provider on the command line. + + --scim-tenant=SCIM_TENANT + The ID for the SCIM tenant, which becomes the final component of the + resource name. This value must be 4-32 characters, alphanumeric + ([a-z0-9-]), and cannot start with gcp-. + + To set the scim-tenant attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --scim-tenant on the command line. + + --workforce-pool=WORKFORCE_POOL + The ID to use for the workforce pool, which becomes the final + component of the resource name. This value must be a globally unique + string of 6 to 63 lowercase letters, digits, or hyphens. It must + start with a letter, and cannot have a trailing hyphen. The prefix + gcp- is reserved for use by Google, and may not be specified. + + To set the workforce-pool attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --workforce-pool on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iam/ + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud iam workforce-pools providers scim-tenants tokens describe + + $ gcloud beta iam workforce-pools providers scim-tenants tokens \ + describe + diff --git a/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/tokens/help b/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/tokens/help new file mode 100644 index 000000000..aef8fc452 --- /dev/null +++ b/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/tokens/help @@ -0,0 +1,54 @@ +NAME + gcloud alpha iam workforce-pools providers scim-tenants tokens - manage IAM + workforce identity pool provider SCIM tenant tokens + +SYNOPSIS + gcloud alpha iam workforce-pools providers scim-tenants tokens COMMAND + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Commands for creating, describing, listing, updating, and deleting + SCIM tokens associated with IAM workforce identity pool provider SCIM + tenants. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + create + (ALPHA) Create an IAM workforce identity pool provider SCIM tenant + token. + + delete + (ALPHA) Delete an IAM workforce identity pool provider SCIM tenant + token. + + describe + (ALPHA) Describe an IAM workforce identity pool provider SCIM tenant + token. + + list + (ALPHA) List IAM workforce identity pool provider SCIM tenant tokens. + + undelete + (ALPHA) Undelete an IAM workforce identity pool provider SCIM tenant + token. + + update + (ALPHA) Update an IAM workforce identity pool provider SCIM tenant + token. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud iam workforce-pools providers scim-tenants tokens + + $ gcloud beta iam workforce-pools providers scim-tenants tokens + diff --git a/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/tokens/list b/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/tokens/list new file mode 100644 index 000000000..87f7d7de3 --- /dev/null +++ b/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/tokens/list @@ -0,0 +1,130 @@ +NAME + gcloud alpha iam workforce-pools providers scim-tenants tokens list - list + IAM workforce identity pool provider SCIM tenant tokens + +SYNOPSIS + gcloud alpha iam workforce-pools providers scim-tenants tokens list + (--scim-tenant=SCIM_TENANT : --location=LOCATION + --provider=PROVIDER --workforce-pool=WORKFORCE_POOL) [--show-deleted] + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) List all SCIM tokens associated with a specific workforce identity + pool provider SCIM tenant. + +EXAMPLES + To list all SCIM tokens under tenant my-tenant provider my-provider in pool + my-pool located in global: + + $ gcloud alpha iam workforce-pools providers scim-tenants tokens \ + list --location=global --workforce-pool=my-pool \ + --provider=my-provider --scim-tenant=my-tenant + + To list deleted SCIM tokens as well: + + $ gcloud alpha iam workforce-pools providers scim-tenants tokens \ + list --location=global --workforce-pool=my-pool \ + --provider=my-provider --scim-tenant=my-tenant --show-deleted + +REQUIRED FLAGS + Workforce pool provider scim tenant resource - The SCIM tenant to list + tokens for. The arguments in this group can be used to specify the + attributes of this resource. + + This must be specified. + + --scim-tenant=SCIM_TENANT + ID of the workforce pool provider scim tenant or fully qualified + identifier for the workforce pool provider scim tenant. + + To set the scim-tenant attribute: + ▸ provide the argument --scim-tenant on the command line. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + The location for the workforce pool. + + To set the location attribute: + ▸ provide the argument --scim-tenant on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + + --provider=PROVIDER + The ID to use for the workforce pool provider, which becomes the + final component of the resource name. This value must be unique + within the workforce pool, 4-32 characters in length, and may contain + the characters [a-z0-9-]. The prefix gcp- is reserved for use by + Google, and may not be specified. + + To set the provider attribute: + ▸ provide the argument --scim-tenant on the command line with a + fully specified name; + ▸ provide the argument --provider on the command line. + + --workforce-pool=WORKFORCE_POOL + The ID to use for the workforce pool, which becomes the final + component of the resource name. This value must be a globally unique + string of 6 to 63 lowercase letters, digits, or hyphens. It must + start with a letter, and cannot have a trailing hyphen. The prefix + gcp- is reserved for use by Google, and may not be specified. + + To set the workforce-pool attribute: + ▸ provide the argument --scim-tenant on the command line with a + fully specified name; + ▸ provide the argument --workforce-pool on the command line. + +FLAGS + --show-deleted + Include soft-deleted tokens in the results. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iam/ + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud iam workforce-pools providers scim-tenants tokens list + + $ gcloud beta iam workforce-pools providers scim-tenants tokens list + diff --git a/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/tokens/undelete b/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/tokens/undelete new file mode 100644 index 000000000..efe0265ab --- /dev/null +++ b/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/tokens/undelete @@ -0,0 +1,104 @@ +NAME + gcloud alpha iam workforce-pools providers scim-tenants tokens undelete - + undelete an IAM workforce identity pool provider SCIM tenant token + +SYNOPSIS + gcloud alpha iam workforce-pools providers scim-tenants tokens undelete + (TOKEN : --location=LOCATION --provider=PROVIDER + --scim-tenant=SCIM_TENANT --workforce-pool=WORKFORCE_POOL) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Undelete a SCIM token associated with a specific workforce identity + pool provider SCIM tenant. + +EXAMPLES + To undelete a SCIM token with ID my-token under tenant my-tenant provider + my-provider in pool my-pool located in global: + + $ gcloud alpha iam workforce-pools providers scim-tenants tokens \ + undelete my-token --location=global --workforce-pool=my-pool \ + --provider=my-provider --scim-tenant=my-tenant + +POSITIONAL ARGUMENTS + Workforce pool provider scim token resource - The SCIM token to undelete. + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + TOKEN + ID of the workforce pool provider scim token or fully qualified + identifier for the workforce pool provider scim token. + + To set the token attribute: + ▸ provide the argument token on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the workforce pool. + + To set the location attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --provider=PROVIDER + The ID to use for the workforce pool provider, which becomes the + final component of the resource name. This value must be unique + within the workforce pool, 4-32 characters in length, and may contain + the characters [a-z0-9-]. The prefix gcp- is reserved for use by + Google, and may not be specified. + + To set the provider attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --provider on the command line. + + --scim-tenant=SCIM_TENANT + The ID for the SCIM tenant, which becomes the final component of the + resource name. This value must be 4-32 characters, alphanumeric + ([a-z0-9-]), and cannot start with gcp-. + + To set the scim-tenant attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --scim-tenant on the command line. + + --workforce-pool=WORKFORCE_POOL + The ID to use for the workforce pool, which becomes the final + component of the resource name. This value must be a globally unique + string of 6 to 63 lowercase letters, digits, or hyphens. It must + start with a letter, and cannot have a trailing hyphen. The prefix + gcp- is reserved for use by Google, and may not be specified. + + To set the workforce-pool attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --workforce-pool on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iam/ + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud iam workforce-pools providers scim-tenants tokens undelete + + $ gcloud beta iam workforce-pools providers scim-tenants tokens \ + undelete + diff --git a/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/tokens/update b/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/tokens/update new file mode 100644 index 000000000..7d2ca3f3c --- /dev/null +++ b/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/tokens/update @@ -0,0 +1,110 @@ +NAME + gcloud alpha iam workforce-pools providers scim-tenants tokens update - + update an IAM workforce identity pool provider SCIM tenant token + +SYNOPSIS + gcloud alpha iam workforce-pools providers scim-tenants tokens update + (TOKEN : --location=LOCATION --provider=PROVIDER + --scim-tenant=SCIM_TENANT --workforce-pool=WORKFORCE_POOL) + --display-name=DISPLAY_NAME [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Update an existing SCIM token associated with a specific workforce + identity pool provider SCIM tenant. + +EXAMPLES + To update the display name of a SCIM token with ID my-token under tenant + my-tenant provider my-provider in pool my-pool located in global: + + $ gcloud alpha iam workforce-pools providers scim-tenants tokens \ + update my-token --location=global --workforce-pool=my-pool \ + --provider=my-provider --scim-tenant=my-tenant \ + --display-name="New display name" + +POSITIONAL ARGUMENTS + Workforce pool provider scim token resource - The SCIM token to update. + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + TOKEN + ID of the workforce pool provider scim token or fully qualified + identifier for the workforce pool provider scim token. + + To set the token attribute: + ▸ provide the argument token on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the workforce pool. + + To set the location attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --provider=PROVIDER + The ID to use for the workforce pool provider, which becomes the + final component of the resource name. This value must be unique + within the workforce pool, 4-32 characters in length, and may contain + the characters [a-z0-9-]. The prefix gcp- is reserved for use by + Google, and may not be specified. + + To set the provider attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --provider on the command line. + + --scim-tenant=SCIM_TENANT + The ID for the SCIM tenant, which becomes the final component of the + resource name. This value must be 4-32 characters, alphanumeric + ([a-z0-9-]), and cannot start with gcp-. + + To set the scim-tenant attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --scim-tenant on the command line. + + --workforce-pool=WORKFORCE_POOL + The ID to use for the workforce pool, which becomes the final + component of the resource name. This value must be a globally unique + string of 6 to 63 lowercase letters, digits, or hyphens. It must + start with a letter, and cannot have a trailing hyphen. The prefix + gcp- is reserved for use by Google, and may not be specified. + + To set the workforce-pool attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --workforce-pool on the command line. + +REQUIRED FLAGS + --display-name=DISPLAY_NAME + Optional, user-specified display name for the SCIM token (max 32 + characters). + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iam/ + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud iam workforce-pools providers scim-tenants tokens update + + $ gcloud beta iam workforce-pools providers scim-tenants tokens \ + update + diff --git a/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/undelete b/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/undelete new file mode 100644 index 000000000..25473b5db --- /dev/null +++ b/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/undelete @@ -0,0 +1,93 @@ +NAME + gcloud alpha iam workforce-pools providers scim-tenants undelete - undelete + an IAM workforce identity pool provider SCIM tenant + +SYNOPSIS + gcloud alpha iam workforce-pools providers scim-tenants undelete + (SCIM_TENANT : --location=LOCATION + --provider=PROVIDER --workforce-pool=WORKFORCE_POOL) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Undelete a previously deleted SCIM tenant associated with a + specific workforce identity pool provider, restoring it to an active state. + +EXAMPLES + To undelete a SCIM tenant with ID my-tenant under provider my-okta-provider + in pool my-pool located in global: + + $ gcloud alpha iam workforce-pools providers scim-tenants undelete \ + my-tenant --location=global --workforce-pool=my-pool \ + --provider=my-okta-provider + +POSITIONAL ARGUMENTS + Workforce pool provider scim tenant resource - The SCIM tenant to + undelete. The arguments in this group can be used to specify the + attributes of this resource. + + This must be specified. + + SCIM_TENANT + ID of the workforce pool provider scim tenant or fully qualified + identifier for the workforce pool provider scim tenant. + + To set the scim_tenant attribute: + ▸ provide the argument scim_tenant on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the workforce pool. + + To set the location attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --provider=PROVIDER + The ID to use for the workforce pool provider, which becomes the + final component of the resource name. This value must be unique + within the workforce pool, 4-32 characters in length, and may contain + the characters [a-z0-9-]. The prefix gcp- is reserved for use by + Google, and may not be specified. + + To set the provider attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --provider on the command line. + + --workforce-pool=WORKFORCE_POOL + The ID to use for the workforce pool, which becomes the final + component of the resource name. This value must be a globally unique + string of 6 to 63 lowercase letters, digits, or hyphens. It must + start with a letter, and cannot have a trailing hyphen. The prefix + gcp- is reserved for use by Google, and may not be specified. + + To set the workforce-pool attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --workforce-pool on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iam/ + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud iam workforce-pools providers scim-tenants undelete + + $ gcloud beta iam workforce-pools providers scim-tenants undelete + diff --git a/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/update b/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/update new file mode 100644 index 000000000..6f8faa261 --- /dev/null +++ b/gcloud/alpha/iam/workforce-pools/providers/scim-tenants/update @@ -0,0 +1,118 @@ +NAME + gcloud alpha iam workforce-pools providers scim-tenants update - update an + IAM workforce identity pool provider SCIM tenant + +SYNOPSIS + gcloud alpha iam workforce-pools providers scim-tenants update + (SCIM_TENANT : --location=LOCATION + --provider=PROVIDER --workforce-pool=WORKFORCE_POOL) + [--claim-mapping=[KEY=VALUE,...]] [--description=DESCRIPTION] + [--display-name=DISPLAY_NAME] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Update the configuration of an existing SCIM tenant associated with + a specific workforce identity pool provider. Only fields specified in the + command will be modified. + +EXAMPLES + To update the display name and description of a SCIM tenant with ID + my-tenant under provider my-okta-provider in pool my-pool located in + global: + + $ gcloud alpha iam workforce-pools providers scim-tenants update \ + my-tenant --location=global --workforce-pool=my-pool \ + --provider=my-okta-provider \ + --display-name="Updated Tenant Name" \ + --description="New description" + + To update the claim mapping for the same tenant: + + $ gcloud alpha iam workforce-pools providers scim-tenants update \ + my-tenant --location=global --workforce-pool=my-pool \ + --provider=my-okta-provider \ + --claim-mapping="google.subject=new_external_id,google.groups=al\ + l_groups" + +POSITIONAL ARGUMENTS + Workforce pool provider scim tenant resource - The SCIM tenant to update. + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + SCIM_TENANT + ID of the workforce pool provider scim tenant or fully qualified + identifier for the workforce pool provider scim tenant. + + To set the scim_tenant attribute: + ▸ provide the argument scim_tenant on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the workforce pool. + + To set the location attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --provider=PROVIDER + The ID to use for the workforce pool provider, which becomes the + final component of the resource name. This value must be unique + within the workforce pool, 4-32 characters in length, and may contain + the characters [a-z0-9-]. The prefix gcp- is reserved for use by + Google, and may not be specified. + + To set the provider attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --provider on the command line. + + --workforce-pool=WORKFORCE_POOL + The ID to use for the workforce pool, which becomes the final + component of the resource name. This value must be a globally unique + string of 6 to 63 lowercase letters, digits, or hyphens. It must + start with a letter, and cannot have a trailing hyphen. The prefix + gcp- is reserved for use by Google, and may not be specified. + + To set the workforce-pool attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --workforce-pool on the command line. + +FLAGS + --claim-mapping=[KEY=VALUE,...] + A comma-separated list of KEY=VALUE pairs defining attribute mappings. + + --description=DESCRIPTION + Optional, user-specified description for the SCIM tenant (max 256 + characters). + + --display-name=DISPLAY_NAME + Optional, user-specified display name for the SCIM tenant (max 32 + characters). + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iam/ + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud iam workforce-pools providers scim-tenants update + + $ gcloud beta iam workforce-pools providers scim-tenants update + diff --git a/gcloud/alpha/iam/workforce-pools/providers/update-oidc b/gcloud/alpha/iam/workforce-pools/providers/update-oidc index 29dc897d9..a4e1b295b 100644 --- a/gcloud/alpha/iam/workforce-pools/providers/update-oidc +++ b/gcloud/alpha/iam/workforce-pools/providers/update-oidc @@ -14,6 +14,9 @@ SYNOPSIS [--web-sso-assertion-claims-behavior=WEB_SSO_ASSERTION_CLAIMS_BEHAVIOR] [--web-sso-response-type=WEB_SSO_RESPONSE_TYPE] [--clear-client-secret | --client-secret-value=CLIENT_SECRET_VALUE] + [--clear-extended-attributes-config + | --extended-attributes-client-id=EXTENDED_ATTRIBUTES_CLIENT_ID + --extended-attributes-client-secret-value=EXTENDED_ATTRIBUTES_CLIENT_SECRET_VALUE --extended-attributes-filter=EXTENDED_ATTRIBUTES_FILTER --extended-attributes-issuer-uri=EXTENDED_ATTRIBUTES_ISSUER_URI --extended-attributes-type=EXTENDED_ATTRIBUTES_TYPE] [--clear-extra-attributes-config | --extra-attributes-client-id=EXTRA_ATTRIBUTES_CLIENT_ID --extra-attributes-client-secret-value=EXTRA_ATTRIBUTES_CLIENT_SECRET_VALUE --extra-attributes-filter=EXTRA_ATTRIBUTES_FILTER --extra-attributes-issuer-uri=EXTRA_ATTRIBUTES_ISSUER_URI --extra-attributes-type=EXTRA_ATTRIBUTES_TYPE] @@ -263,6 +266,36 @@ FLAGS :: At most one of these can be specified: + *--clear-extended-attributes-config*::: + + Clear the extended attributes configuration. + + *--extended-attributes-client-id*=_EXTENDED_ATTRIBUTES_CLIENT_ID_::: + + The OAuth 2.0 client ID for retrieving extended attributes from the identity provider. Required to get extended group memberships for a subset of Google Cloud products. + + *--extended-attributes-client-secret-value*=_EXTENDED_ATTRIBUTES_CLIENT_SECRET_VALUE_::: + + The OAuth 2.0 client secret for retrieving extended attributes from the identity provider. Required to get extended group memberships for a subset of Google Cloud products. + + *--extended-attributes-filter*=_EXTENDED_ATTRIBUTES_FILTER_::: + + The filter used to request specific records from the IdP. By default, all of the groups that are associated with a user are fetched. For Microsoft Entra ID, you can add `$search` query parameters using [Keyword Query Language] (https://learn.microsoft.com/en-us/sharepoint/dev/general-development/keyword-query-language-kql-syntax-reference). To learn more about `$search` querying in Microsoft Entra ID, see [Use the `$search` query parameter] (https://learn.microsoft.com/en-us/graph/search-query-parameter). + + Additionally, Workforce Identity Federation automatically adds the following [`$filter` query parameters] (https://learn.microsoft.com/en-us/graph/filter-query-parameter), based on the value of `attributes_type`. Values passed to `filter` are converted to `$search` query parameters. Additional `$filter` query parameters cannot be added using this field. + + * `AZURE_AD_GROUPS_ID`: `securityEnabled` filter is applied. + + *--extended-attributes-issuer-uri*=_EXTENDED_ATTRIBUTES_ISSUER_URI_::: + + OIDC identity provider's issuer URI. Must be a valid URI using the `https` scheme. Required to get the OIDC discovery document. + + *--extended-attributes-type*=_EXTENDED_ATTRIBUTES_TYPE_::: + + Represents the identity provider and type of claims that should be fetched. _EXTENDED_ATTRIBUTES_TYPE_ must be (only one value is supported): *azure-ad-groups-id*. + + :: At most one of these can be specified: + *--clear-extra-attributes-config*::: Clear the extra attributes configuration. diff --git a/gcloud/alpha/netapp/storage-pools/create b/gcloud/alpha/netapp/storage-pools/create index a6381b7b2..5d8581f16 100644 --- a/gcloud/alpha/netapp/storage-pools/create +++ b/gcloud/alpha/netapp/storage-pools/create @@ -166,8 +166,8 @@ OPTIONAL FLAGS or not --hot-tier-size=HOT_TIER_SIZE - The hot tier size of the Storage Pool in GiB/s units. If no throughput - unit is specified, GiB/s is assumed. + The hot tier size of the Storage Pool in GiB units. This is a required + field when --allow-auto-tiering is set for flex service level. Kms config resource - The KMS config to attach to the Storage Pool. This represents a Cloud resource. (NOTE) Some attributes are not given diff --git a/gcloud/alpha/netapp/storage-pools/update b/gcloud/alpha/netapp/storage-pools/update index cc56ea208..b75e26ccc 100644 --- a/gcloud/alpha/netapp/storage-pools/update +++ b/gcloud/alpha/netapp/storage-pools/update @@ -102,8 +102,8 @@ FLAGS auto resize --hot-tier-size=HOT_TIER_SIZE - The hot tier size of the Storage Pool in GiB/s units. If no throughput - unit is specified, GiB/s is assumed. + The hot tier size of the Storage Pool in GiB units. This is a required + field when --allow-auto-tiering is set for flex service level. --replica-zone=REPLICA_ZONE String indicating replica zone for the Storage Pool diff --git a/gcloud/alpha/network-security/dns-threat-detectors/create b/gcloud/alpha/network-security/dns-threat-detectors/create new file mode 100644 index 000000000..085e41892 --- /dev/null +++ b/gcloud/alpha/network-security/dns-threat-detectors/create @@ -0,0 +1,110 @@ +NAME + gcloud alpha network-security dns-threat-detectors create - create a + DnsThreatDetector resource + +SYNOPSIS + gcloud alpha network-security dns-threat-detectors create + (DNS_THREAT_DETECTOR : --location=LOCATION) --provider=PROVIDER + [--excluded-networks=[EXCLUDED_NETWORKS,...]] [--labels=[LABELS,...]] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Create a DnsThreatDetector resource. + +EXAMPLES + To create DnsThreatDetector resource my-dns-threat-detector, and using the + Infoblox threat detection engine, run: + + $ gcloud alpha network-security dns-threat-detectors create \ + --location=global --provider=infoblox my-dns-threat-detector + +POSITIONAL ARGUMENTS + DnsThreatDetector resource - Identifier. Name of the DnsThreatDetector + resource. The arguments in this group can be used to specify the + attributes of this resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument dns_threat_detector on the command line with a + fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + DNS_THREAT_DETECTOR + ID of the dnsThreatDetector or fully qualified identifier for the + dnsThreatDetector. + + To set the dns_threat_detector attribute: + ▸ provide the argument dns_threat_detector on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location id of the dnsThreatDetector resource. + + To set the location attribute: + ▸ provide the argument dns_threat_detector on the command line with + a fully specified name; + ▸ provide the argument --location on the command line. + +REQUIRED FLAGS + --provider=PROVIDER + The provider used for DNS threat analysis. PROVIDER must be (only one + value is supported): + + infoblox + The Infoblox DNS threat detecter. + +OPTIONAL FLAGS + --excluded-networks=[EXCLUDED_NETWORKS,...] + A list of Network resource names which are exempt from the + configuration in this DnsThreatDetector. + + Example: projects/PROJECT_ID/global/networks/NETWORK_NAME. + + --labels=[LABELS,...] + Labels as key value pairs. + + KEY + Keys must start with a lowercase character and contain only hyphens + (-), underscores (_), lowercase characters, and numbers. + + VALUE + Values must contain only hyphens (-), underscores (_), lowercase + characters, and numbers. + + Shorthand Example: + + --labels=string=string + + JSON Example: + + --labels='{"string": "string"}' + + File Example: + + --labels=path_to_file.(yaml|json) + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1alpha1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta network-security dns-threat-detectors create + diff --git a/gcloud/alpha/network-security/dns-threat-detectors/delete b/gcloud/alpha/network-security/dns-threat-detectors/delete new file mode 100644 index 000000000..430e6410c --- /dev/null +++ b/gcloud/alpha/network-security/dns-threat-detectors/delete @@ -0,0 +1,69 @@ +NAME + gcloud alpha network-security dns-threat-detectors delete - delete a + DnsThreatDetector resource + +SYNOPSIS + gcloud alpha network-security dns-threat-detectors delete + (DNS_THREAT_DETECTOR : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Delete a DnsThreatDetector resource. + +EXAMPLES + To delete DnsThreatDetector resource my-dns-threat-detector, run: + + $ gcloud alpha network-security dns-threat-detectors delete \ + --location=global my-dns-threat-detector + +POSITIONAL ARGUMENTS + DnsThreatDetector resource - Name of the DnsThreatDetector resource. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument dns_threat_detector on the command line with a + fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + DNS_THREAT_DETECTOR + ID of the dnsThreatDetector or fully qualified identifier for the + dnsThreatDetector. + + To set the dns_threat_detector attribute: + ▸ provide the argument dns_threat_detector on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location id of the dnsThreatDetector resource. + + To set the location attribute: + ▸ provide the argument dns_threat_detector on the command line with + a fully specified name; + ▸ provide the argument --location on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1alpha1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta network-security dns-threat-detectors delete + diff --git a/gcloud/alpha/network-security/dns-threat-detectors/describe b/gcloud/alpha/network-security/dns-threat-detectors/describe new file mode 100644 index 000000000..f44964144 --- /dev/null +++ b/gcloud/alpha/network-security/dns-threat-detectors/describe @@ -0,0 +1,69 @@ +NAME + gcloud alpha network-security dns-threat-detectors describe - describes a + DnsThreatDetector resource + +SYNOPSIS + gcloud alpha network-security dns-threat-detectors describe + (DNS_THREAT_DETECTOR : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Gets details of a DnsThreatDetector resource. + +EXAMPLES + To get details of DnsThreatDetector resource my-dns-threat-detector, run: + + $ gcloud alpha network-security dns-threat-detectors describe \ + --location=global my-dns-threat-detector + +POSITIONAL ARGUMENTS + DnsThreatDetector resource - Name of the DnsThreatDetector resource The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument dns_threat_detector on the command line with a + fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + DNS_THREAT_DETECTOR + ID of the dnsThreatDetector or fully qualified identifier for the + dnsThreatDetector. + + To set the dns_threat_detector attribute: + ▸ provide the argument dns_threat_detector on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location id of the dnsThreatDetector resource. + + To set the location attribute: + ▸ provide the argument dns_threat_detector on the command line with + a fully specified name; + ▸ provide the argument --location on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1alpha1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta network-security dns-threat-detectors describe + diff --git a/gcloud/alpha/network-security/dns-threat-detectors/help b/gcloud/alpha/network-security/dns-threat-detectors/help new file mode 100644 index 000000000..9bafe6fd4 --- /dev/null +++ b/gcloud/alpha/network-security/dns-threat-detectors/help @@ -0,0 +1,42 @@ +NAME + gcloud alpha network-security dns-threat-detectors - manage Dns Threat + Detector resources + +SYNOPSIS + gcloud alpha network-security dns-threat-detectors COMMAND + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Manage Dns Threat Detector resources. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + create + (ALPHA) Create a DnsThreatDetector resource. + + delete + (ALPHA) Delete a DnsThreatDetector resource. + + describe + (ALPHA) Describes a DnsThreatDetector resource. + + list + (ALPHA) Lists DnsThreatDetector resources. + + update + (ALPHA) Update a DnsThreatDetector resource. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta network-security dns-threat-detectors + diff --git a/gcloud/alpha/network-security/dns-threat-detectors/list b/gcloud/alpha/network-security/dns-threat-detectors/list new file mode 100644 index 000000000..81276bc98 --- /dev/null +++ b/gcloud/alpha/network-security/dns-threat-detectors/list @@ -0,0 +1,89 @@ +NAME + gcloud alpha network-security dns-threat-detectors list - lists + DnsThreatDetector resources + +SYNOPSIS + gcloud alpha network-security dns-threat-detectors list --location=LOCATION + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Lists all DnsThreatDetector resources. + +EXAMPLES + To list all DnsThreatDetector resources, run: + + $ gcloud alpha network-security dns-threat-detectors list \ + --location=global + +REQUIRED FLAGS + Location resource - Parent value for ListDnsThreatDetectorsRequest This + represents a Cloud resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. + + To set the location attribute: + ▸ provide the argument --location on the command line. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1alpha1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta network-security dns-threat-detectors list + diff --git a/gcloud/alpha/network-security/dns-threat-detectors/update b/gcloud/alpha/network-security/dns-threat-detectors/update new file mode 100644 index 000000000..5dfb017b7 --- /dev/null +++ b/gcloud/alpha/network-security/dns-threat-detectors/update @@ -0,0 +1,175 @@ +NAME + gcloud alpha network-security dns-threat-detectors update - update a + DnsThreatDetector resource + +SYNOPSIS + gcloud alpha network-security dns-threat-detectors update + (DNS_THREAT_DETECTOR : --location=LOCATION) [--provider=PROVIDER] + [--excluded-networks=[EXCLUDED_NETWORKS,...] + | --add-excluded-networks=[ADD_EXCLUDED_NETWORKS,...] + --clear-excluded-networks + | --remove-excluded-networks=[REMOVE_EXCLUDED_NETWORKS,...]] + [--labels=[LABELS,...] + | --update-labels=[UPDATE_LABELS,...] --clear-labels + | --remove-labels=REMOVE_LABELS] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Update a DnsThreatDetector resource. + +EXAMPLES + To update DnsThreatDetector resource my-dns-threat-detector with an + additional excluded network, run: + + $ gcloud alpha network-security dns-threat-detectors update \ + --location=global \ + --add-excluded-networks=projects/.../global/networks/\ + my-excluded-network my-dns-threat-detector + +POSITIONAL ARGUMENTS + DnsThreatDetector resource - Identifier. Name of the DnsThreatDetector + resource. The arguments in this group can be used to specify the + attributes of this resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument dns_threat_detector on the command line with a + fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + DNS_THREAT_DETECTOR + ID of the dnsThreatDetector or fully qualified identifier for the + dnsThreatDetector. + + To set the dns_threat_detector attribute: + ▸ provide the argument dns_threat_detector on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location id of the dnsThreatDetector resource. + + To set the location attribute: + ▸ provide the argument dns_threat_detector on the command line with + a fully specified name; + ▸ provide the argument --location on the command line. + +FLAGS + --provider=PROVIDER + The provider used for DNS threat analysis. PROVIDER must be (only one + value is supported): + + infoblox + The Infoblox DNS threat detecter. + + Update excluded_networks. + + At most one of these can be specified: + + --excluded-networks=[EXCLUDED_NETWORKS,...] + Set excluded_networks to new value. + + --add-excluded-networks=[ADD_EXCLUDED_NETWORKS,...] + Add new value to excluded_networks list. + + At most one of these can be specified: + + --clear-excluded-networks + Clear excluded_networks value and set to empty list. + + --remove-excluded-networks=[REMOVE_EXCLUDED_NETWORKS,...] + Remove existing value from excluded_networks list. + + Update labels. + + At most one of these can be specified: + + --labels=[LABELS,...] + Set labels to new value. Labels as key value pairs. + + KEY + Keys must start with a lowercase character and contain only + hyphens (-), underscores (_), lowercase characters, and numbers. + + VALUE + Values must contain only hyphens (-), underscores (_), lowercase + characters, and numbers. + + Shorthand Example: + + --labels=string=string + + JSON Example: + + --labels='{"string": "string"}' + + File Example: + + --labels=path_to_file.(yaml|json) + + --update-labels=[UPDATE_LABELS,...] + Update labels value or add key value pair. Labels as key value pairs. + + KEY + Keys must start with a lowercase character and contain only + hyphens (-), underscores (_), lowercase characters, and numbers. + + VALUE + Values must contain only hyphens (-), underscores (_), lowercase + characters, and numbers. + + Shorthand Example: + + --update-labels=string=string + + JSON Example: + + --update-labels='{"string": "string"}' + + File Example: + + --update-labels=path_to_file.(yaml|json) + + At most one of these can be specified: + + --clear-labels + Clear labels value and set to empty map. + + --remove-labels=REMOVE_LABELS + Remove existing value from map labels. Sets remove_labels value. + + Shorthand Example: + + --remove-labels=string,string + + JSON Example: + + --remove-labels=["string"] + + File Example: + + --remove-labels=path_to_file.(yaml|json) + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1alpha1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta network-security dns-threat-detectors update + diff --git a/gcloud/alpha/network-security/help b/gcloud/alpha/network-security/help index 0347832bc..2edb9746d 100644 --- a/gcloud/alpha/network-security/help +++ b/gcloud/alpha/network-security/help @@ -27,6 +27,9 @@ GROUPS client-tls-policies (ALPHA) Manage Network Security ClientTlsPolicies. + dns-threat-detectors + (ALPHA) Manage Dns Threat Detector resources. + firewall-endpoint-associations (ALPHA) Create and manage Firewall Plus endpoint associations. diff --git a/gcloud/alpha/resource-manager/tags/values/create b/gcloud/alpha/resource-manager/tags/values/create index 808a71819..e927b723d 100644 --- a/gcloud/alpha/resource-manager/tags/values/create +++ b/gcloud/alpha/resource-manager/tags/values/create @@ -10,8 +10,8 @@ SYNOPSIS DESCRIPTION (ALPHA) Creates a TagValue resource given the short_name and description (optional) as well as the parent, the of the TagValue. The parent of the - TagValue is always a TagKey and the TagKey's details can be passed as a - numeric id or the namespaced name. + TagValue can be a TagKey and TagValue the parent's details can be passed as + a numeric id or the namespaced name. EXAMPLES To create a TagValue with the short name 'test' and the description diff --git a/gcloud/alpha/run/deploy b/gcloud/alpha/run/deploy index 50cfe9093..606d19cab 100644 --- a/gcloud/alpha/run/deploy +++ b/gcloud/alpha/run/deploy @@ -468,7 +468,7 @@ FLAGS --gpu=GPU Cloud Run supports values 0 or 1. 1 gpu also requires a minimum 4 - --cpu value and a minimum 8Gi --memory value. + --cpu value and a minimum 16Gi --memory value. --liveness-probe=[KEY=VALUE,...] Comma separated settings for liveness probe in the form KEY=VALUE. diff --git a/gcloud/alpha/run/jobs/create b/gcloud/alpha/run/jobs/create index cd5ae3588..f5302dc91 100644 --- a/gcloud/alpha/run/jobs/create +++ b/gcloud/alpha/run/jobs/create @@ -251,7 +251,7 @@ FLAGS --gpu=GPU Cloud Run supports values 0 or 1. 1 gpu also requires a minimum 4 - --cpu value and a minimum 8Gi --memory value. + --cpu value and a minimum 16Gi --memory value. --image=IMAGE Name of the container image to deploy (e.g. diff --git a/gcloud/alpha/run/jobs/deploy b/gcloud/alpha/run/jobs/deploy index 65c2cfb1b..eb4bfd31e 100644 --- a/gcloud/alpha/run/jobs/deploy +++ b/gcloud/alpha/run/jobs/deploy @@ -257,7 +257,7 @@ FLAGS --gpu=GPU Cloud Run supports values 0 or 1. 1 gpu also requires a minimum 4 - --cpu value and a minimum 8Gi --memory value. + --cpu value and a minimum 16Gi --memory value. --memory=MEMORY Set a memory limit. Ex: 1024Mi, 4Gi. diff --git a/gcloud/alpha/run/jobs/update b/gcloud/alpha/run/jobs/update index e083b2945..ef125f2fb 100644 --- a/gcloud/alpha/run/jobs/update +++ b/gcloud/alpha/run/jobs/update @@ -267,7 +267,7 @@ FLAGS --gpu=GPU Cloud Run supports values 0 or 1. 1 gpu also requires a minimum 4 - --cpu value and a minimum 8Gi --memory value. + --cpu value and a minimum 16Gi --memory value. --image=IMAGE Name of the container image to deploy (e.g. diff --git a/gcloud/alpha/run/multi-region-services/update b/gcloud/alpha/run/multi-region-services/update index 6248bc767..2e851a9a1 100644 --- a/gcloud/alpha/run/multi-region-services/update +++ b/gcloud/alpha/run/multi-region-services/update @@ -386,7 +386,7 @@ FLAGS --gpu=GPU Cloud Run supports values 0 or 1. 1 gpu also requires a minimum 4 - --cpu value and a minimum 8Gi --memory value. + --cpu value and a minimum 16Gi --memory value. --image=IMAGE Name of the container image to deploy (e.g. diff --git a/gcloud/alpha/run/services/update b/gcloud/alpha/run/services/update index 623639278..6f849ff21 100644 --- a/gcloud/alpha/run/services/update +++ b/gcloud/alpha/run/services/update @@ -430,7 +430,7 @@ FLAGS --gpu=GPU Cloud Run supports values 0 or 1. 1 gpu also requires a minimum 4 - --cpu value and a minimum 8Gi --memory value. + --cpu value and a minimum 16Gi --memory value. --image=IMAGE Name of the container image to deploy (e.g. diff --git a/gcloud/alpha/run/worker-pools/deploy b/gcloud/alpha/run/worker-pools/deploy index 657d36769..f06253fa6 100644 --- a/gcloud/alpha/run/worker-pools/deploy +++ b/gcloud/alpha/run/worker-pools/deploy @@ -306,7 +306,7 @@ FLAGS --gpu=GPU Cloud Run supports values 0 or 1. 1 gpu also requires a minimum 4 - --cpu value and a minimum 8Gi --memory value. + --cpu value and a minimum 16Gi --memory value. --memory=MEMORY Set a memory limit. Ex: 1024Mi, 4Gi. diff --git a/gcloud/alpha/run/worker-pools/update b/gcloud/alpha/run/worker-pools/update index 9c23c4ed1..dc8743dec 100644 --- a/gcloud/alpha/run/worker-pools/update +++ b/gcloud/alpha/run/worker-pools/update @@ -302,7 +302,7 @@ FLAGS --gpu=GPU Cloud Run supports values 0 or 1. 1 gpu also requires a minimum 4 - --cpu value and a minimum 8Gi --memory value. + --cpu value and a minimum 16Gi --memory value. --image=IMAGE Name of the container image to deploy (e.g. diff --git a/gcloud/alpha/scc/findings/export-to-bigquery b/gcloud/alpha/scc/findings/export-to-bigquery new file mode 100644 index 000000000..2c5923789 --- /dev/null +++ b/gcloud/alpha/scc/findings/export-to-bigquery @@ -0,0 +1,78 @@ +NAME + gcloud alpha scc findings export-to-bigquery - export Security Command + Center findings to bigquery + +SYNOPSIS + gcloud alpha scc findings export-to-bigquery [PARENT] --dataset=DATASET + [--location=LOCATION; default="global"] [--source=SOURCE; default="-"] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Export Security Command Center findings to bigquery. + +EXAMPLES + To export findings for a given parent + ``organizations/123/sources/456/locations/global`` and dataset + ``projects/project_id/datasets/dataset_id`` run: + + $ gcloud alpha scc findings export-to-bigquery organizations/123 \ + --dataset=projects/project_id/datasets/dataset_id --source=456 \ + --location=global + +POSITIONAL ARGUMENTS + Parent resource - parent organization, folder, or project in the Google + Cloud resource hierarchy to be used for the gcloud scc command. Specify + the argument as either [RESOURCE_TYPE/RESOURCE_ID] or [RESOURCE_ID], as + shown in the preceding examples. This represents a Cloud resource. + + [PARENT] + ID of the parent or fully qualified identifier for the parent. + + To set the parent attribute: + ▸ provide the argument parent on the command line; + ▸ Set the parent property in configuration using gcloud config set + scc/parent if it is not specified in command line. + +REQUIRED FLAGS + --dataset=DATASET + BigQuery dataset to export findings to. + +OPTIONAL FLAGS + --location=LOCATION; default="global" + When data residency controls are enabled, this attribute specifies the + location in which the resource is located and applicable. The location + attribute can be provided as part of the fully specified resource name + or with the --location argument on the command line. The default + location is global. NOTE: If you override the endpoint to a regional + endpoint + (https://cloud.google.com/security-command-center/docs/reference/rest/index.html?rep_location=global#regional-service-endpoint) + you must specify the correct data location + (https://cloud.google.com/security-command-center/docs/data-residency-support#locations) + using this flag. The default location on this command is unrelated to + the default location that is specified when data residency controls are + enabled for Security Command Center. + + --source=SOURCE; default="-" + Source id. Defaults to all sources. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the Security Command Center API. For more information, + see Security Command Center API. + (https://cloud.google.com/security-command-center/docs/reference/rest) + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud scc findings export-to-bigquery + diff --git a/gcloud/alpha/scc/findings/help b/gcloud/alpha/scc/findings/help index 70cafaacb..dff33fb94 100644 --- a/gcloud/alpha/scc/findings/help +++ b/gcloud/alpha/scc/findings/help @@ -22,6 +22,9 @@ COMMANDS create (ALPHA) Create a Security Command Center finding. + export-to-bigquery + (ALPHA) Export Security Command Center findings to bigquery. + group (ALPHA) Filter an organization or source's findings and groups them by their specified properties. diff --git a/gcloud/alpha/sql/backups/restore b/gcloud/alpha/sql/backups/restore index 275789c84..87dfaad94 100644 --- a/gcloud/alpha/sql/backups/restore +++ b/gcloud/alpha/sql/backups/restore @@ -218,8 +218,10 @@ OPTIONAL FLAGS Allowed range: 0 to 20. --insights-config-query-string-length=INSIGHTS_CONFIG_QUERY_STRING_LENGTH - Query string length in bytes to be stored by the query insights - feature. Default length is 1024 bytes. Allowed range: 256 to 4500 + Sets the default query length limit. For Cloud SQL Enterprise edition, + the range is from 256 to 4500 (in bytes) and the default query length + is 1024 bytes. For Cloud SQL Enterprise Plus edition, the range is from + 1024 to 100,000 (in bytes) and the default query length is 10,000 bytes. --insights-config-record-application-tags diff --git a/gcloud/alpha/sql/instances/create b/gcloud/alpha/sql/instances/create index d5debcd92..85cdb13d0 100644 --- a/gcloud/alpha/sql/instances/create +++ b/gcloud/alpha/sql/instances/create @@ -318,8 +318,10 @@ FLAGS Allowed range: 0 to 20. --insights-config-query-string-length=INSIGHTS_CONFIG_QUERY_STRING_LENGTH - Query string length in bytes to be stored by the query insights - feature. Default length is 1024 bytes. Allowed range: 256 to 4500 + Sets the default query length limit. For Cloud SQL Enterprise edition, + the range is from 256 to 4500 (in bytes) and the default query length + is 1024 bytes. For Cloud SQL Enterprise Plus edition, the range is from + 1024 to 100,000 (in bytes) and the default query length is 10,000 bytes. --[no-]insights-config-record-application-tags @@ -340,9 +342,9 @@ FLAGS CLOUD_SQL_INSTANCE A primary instance. READ_POOL_INSTANCE - A read pool. + A read pool instance. READ_REPLICA_INSTANCE - A read replica. + A read replica instance. --labels=[KEY=VALUE,...] List of label KEY=VALUE pairs to add. diff --git a/gcloud/alpha/sql/instances/patch b/gcloud/alpha/sql/instances/patch index bfb05296d..a91e874ec 100644 --- a/gcloud/alpha/sql/instances/patch +++ b/gcloud/alpha/sql/instances/patch @@ -73,6 +73,8 @@ SYNOPSIS [--clear-labels | --remove-labels=[KEY,...]] [--clear-psc-auto-connections | --psc-auto-connections=[network=NETWORK],[project=PROJECT]] + [--clear-psc-network-attachment-uri + | --psc-network-attachment-uri=PSC_NETWORK_ATTACHMENT_URI] [--gce-zone=GCE_ZONE | --secondary-zone=SECONDARY_ZONE --zone=ZONE] [--no-backup | --backup-location=BACKUP_LOCATION --backup-start-time=BACKUP_START_TIME @@ -283,8 +285,10 @@ FLAGS Allowed range: 0 to 20. --insights-config-query-string-length=INSIGHTS_CONFIG_QUERY_STRING_LENGTH - Query string length in bytes to be stored by the query insights - feature. Default length is 1024 bytes. Allowed range: 256 to 4500 + Sets the default query length limit. For Cloud SQL Enterprise edition, + the range is from 256 to 4500 (in bytes) and the default query length + is 1024 bytes. For Cloud SQL Enterprise Plus edition, the range is from + 1024 to 100,000 (in bytes) and the default query length is 10,000 bytes. --[no-]insights-config-record-application-tags @@ -305,9 +309,9 @@ FLAGS CLOUD_SQL_INSTANCE A primary instance. READ_POOL_INSTANCE - A read pool. + A read pool instance. READ_REPLICA_INSTANCE - A read replica. + A read replica instance. --maintenance-release-channel=MAINTENANCE_RELEASE_CHANNEL Which channel's updates to apply during the maintenance window. If not @@ -646,6 +650,18 @@ FLAGS --psc-auto-connections=path_to_file.(yaml|json) + At most one of these can be specified: + + --clear-psc-network-attachment-uri + Disable outbound connectivity from a Cloud SQL instance which uses + Private Service Connect (PSC). + + --psc-network-attachment-uri=PSC_NETWORK_ATTACHMENT_URI + Full URI of the network attachment that is configured to support + outbound connectivity from a Cloud SQL instance which uses Private + Service Connect (PSC). For example, this would be of the + form:--psc-network-attachment-uri=projects/test-project/regions/us-central1/networkAttachments/my-na + At most one of these can be specified: --gce-zone=GCE_ZONE diff --git a/gcloud/alpha/transfer/agents/install b/gcloud/alpha/transfer/agents/install index 7d030dfb8..b5f3e4c0e 100644 --- a/gcloud/alpha/transfer/agents/install +++ b/gcloud/alpha/transfer/agents/install @@ -5,7 +5,7 @@ SYNOPSIS gcloud alpha transfer agents install --pool=POOL [--container-manager=CONTAINER_MANAGER; default="docker"] [--count=COUNT] [--creds-file=CREDS_FILE] [--[no-]enable-multipart] - [--id-prefix=ID_PREFIX] + [--gcs-api-endpoint=GCS_API_ENDPOINT] [--id-prefix=ID_PREFIX] [--logs-directory=LOGS_DIRECTORY; default="/tmp"] [--max-concurrent-small-file-uploads=MAX_CONCURRENT_SMALL_FILE_UPLOADS] [--memlock-limit=MEMLOCK_LIMIT; default=64000000] @@ -77,6 +77,11 @@ FLAGS factors. If unset, agent decides when to use the feature. Use --enable-multipart to enable and --no-enable-multipart to disable. + --gcs-api-endpoint=GCS_API_ENDPOINT + The API endpoint for Google Cloud Storage. Override to use a regional + endpoint, ensuring data remains within designated geographic + boundaries. + --id-prefix=ID_PREFIX An optional prefix to add to the agent ID to help identify the agent. diff --git a/gcloud/backup-dr/backup-vaults/create b/gcloud/backup-dr/backup-vaults/create index ff3e9eee9..63ce4c3d5 100644 --- a/gcloud/backup-dr/backup-vaults/create +++ b/gcloud/backup-dr/backup-vaults/create @@ -5,9 +5,10 @@ SYNOPSIS gcloud backup-dr backup-vaults create (BACKUP_VAULT : --location=LOCATION) --backup-min-enforced-retention=BACKUP_MIN_ENFORCED_RETENTION [--access-restriction=ACCESS_RESTRICTION; default="within-org"] - [--no-async] [--description=DESCRIPTION] - [--effective-time=EFFECTIVE_TIME] [--labels=[KEY=VALUE,...]] - [GCLOUD_WIDE_FLAG ...] + [--no-async] + [--backup-retention-inheritance=BACKUP_RETENTION_INHERITANCE] + [--description=DESCRIPTION] [--effective-time=EFFECTIVE_TIME] + [--labels=[KEY=VALUE,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION Create a Backup and DR backup vault. @@ -99,6 +100,16 @@ OPTIONAL FLAGS --no-async Wait for the operation in progress to complete. + --backup-retention-inheritance=BACKUP_RETENTION_INHERITANCE + The inheritance mode for enforced retention end time of the backup + within this backup vault. Once set, the inheritance mode cannot be + changed. Default is inherit-vault-retention. If set to + inherit-vault-retention, the backup retention period will be inherited + from the backup vault. If set to match-backup-expire-time, the backup + retention period will be the same as the backup expiration time. + BACKUP_RETENTION_INHERITANCE must be one of: inherit-vault-retention, + match-backup-expire-time. + --description=DESCRIPTION Optional description for the backup vault (2048 characters or less). diff --git a/gcloud/backup-dr/data-source-references/describe b/gcloud/backup-dr/data-source-references/describe new file mode 100644 index 000000000..d4bfc0cd2 --- /dev/null +++ b/gcloud/backup-dr/data-source-references/describe @@ -0,0 +1,67 @@ +NAME + gcloud backup-dr data-source-references describe - show details of the data + source reference + +SYNOPSIS + gcloud backup-dr data-source-references describe + (DATA_SOURCE_REFERENCE : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Show all configuration data source associated with the specified data + source reference. + +EXAMPLES + To view details for data source 'DATA_SOURCE_REFERENCE', run: + + $ gcloud backup-dr data-source-references describe \ + DATA_SOURCE_REFERENCE + +POSITIONAL ARGUMENTS + Data source reference resource - Name of the data source reference to + describe. The arguments in this group can be used to specify the + attributes of this resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument data_source_reference on the command line with a + fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + DATA_SOURCE_REFERENCE + ID of the data_source_reference or fully qualified identifier for the + data_source_reference. + + To set the data_source_reference attribute: + ▸ provide the argument data_source_reference on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Location ID of the resource. + + To set the location attribute: + ▸ provide the argument data_source_reference on the command line + with a fully specified name; + ▸ provide the argument --location on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the backupdr/v1 API. The full documentation for this API + can be found at: https://cloud.google.com/backup-disaster-recovery + +NOTES + This variant is also available: + + $ gcloud alpha backup-dr data-source-references describe + diff --git a/gcloud/backup-dr/data-source-references/fetch-for-resource-type b/gcloud/backup-dr/data-source-references/fetch-for-resource-type new file mode 100644 index 000000000..53201e034 --- /dev/null +++ b/gcloud/backup-dr/data-source-references/fetch-for-resource-type @@ -0,0 +1,80 @@ +NAME + gcloud backup-dr data-source-references fetch-for-resource-type - fetch + Data Source References for a given resource type and location + +SYNOPSIS + gcloud backup-dr data-source-references fetch-for-resource-type + RESOURCE_TYPE --location=LOCATION [--filter=EXPRESSION] [--limit=LIMIT] + [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Fetch Data Source References for a given resource type and location. Show + all configuration data associated with the specified data source reference. + +EXAMPLES + To list data source references for Cloud SQL with location us-central1 in + project test-project, run: + + $ gcloud backup-dr data-source-references fetch-for-resource-type \ + sqladmin.googleapis.com/Instance --location="us-central1" \ + --project-id="test-project" + +POSITIONAL ARGUMENTS + RESOURCE_TYPE + Resource type for which data source references should be fetched. + +REQUIRED FLAGS + --location=LOCATION + Location for which data source references should be fetched. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +BRIEF + List data source references in a specified location and resource type in a + project. + +NOTES + This variant is also available: + + $ gcloud alpha backup-dr data-source-references \ + fetch-for-resource-type + diff --git a/gcloud/backup-dr/data-source-references/help b/gcloud/backup-dr/data-source-references/help new file mode 100644 index 000000000..44c9882b7 --- /dev/null +++ b/gcloud/backup-dr/data-source-references/help @@ -0,0 +1,29 @@ +NAME + gcloud backup-dr data-source-references - command group for Backup and DR + Data Source References + +SYNOPSIS + gcloud backup-dr data-source-references COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Command group for Backup and DR Data Source References. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + describe + Show details of the data source reference. + + fetch-for-resource-type + Fetch Data Source References for a given resource type and location. + +NOTES + This variant is also available: + + $ gcloud alpha backup-dr data-source-references + diff --git a/gcloud/backup-dr/data-sources/list b/gcloud/backup-dr/data-sources/list index e3f4d14b7..d764d45ec 100644 --- a/gcloud/backup-dr/data-sources/list +++ b/gcloud/backup-dr/data-sources/list @@ -11,10 +11,15 @@ DESCRIPTION Displays all data sources in a project. EXAMPLES - To list data sources for all backup vaults and locations, run: $ gcloud backup-dr data-sources list To list all data sources for \ - a backup vault `_my-vault_` in a location `_my-location_`, \ - run: $ gcloud backup-dr data-sources list \ - --backup-vault=my-vault --location=my-location + To list data sources for all backup vaults and locations, run: + + $ gcloud backup-dr data-sources list + + To list all data sources for a backup vault my-vault in a location + my-location, run: + + $ gcloud backup-dr data-sources list --backup-vault=my-vault \ + --location=my-location FLAGS Backup vault resource - Backup vault to list data sources from. The diff --git a/gcloud/backup-dr/help b/gcloud/backup-dr/help index ab8cd697e..aff174158 100644 --- a/gcloud/backup-dr/help +++ b/gcloud/backup-dr/help @@ -27,6 +27,9 @@ GROUPS backups Manage Backup and DR backups. + data-source-references + Command group for Backup and DR Data Source References. + data-sources View Backup and DR data sources. diff --git a/gcloud/beta/ai/endpoints/create b/gcloud/beta/ai/endpoints/create index 5b6f4f08f..1f97a55d8 100644 --- a/gcloud/beta/ai/endpoints/create +++ b/gcloud/beta/ai/endpoints/create @@ -6,8 +6,7 @@ SYNOPSIS [--description=DESCRIPTION] [--encryption-kms-key-name=ENCRYPTION_KMS_KEY_NAME] [--endpoint-id=ENDPOINT_ID] [--gdc-zone=GDC_ZONE] - [--gdce-zone=GDCE_ZONE] [--labels=[KEY=VALUE,...]] [--network=NETWORK] - [--region=REGION] + [--labels=[KEY=VALUE,...]] [--network=NETWORK] [--region=REGION] [--request-response-logging-rate=REQUEST_RESPONSE_LOGGING_RATE --request-response-logging-table=REQUEST_RESPONSE_LOGGING_TABLE] [GCLOUD_WIDE_FLAG ...] @@ -40,9 +39,6 @@ OPTIONAL FLAGS --gdc-zone=GDC_ZONE The name of the GDC zone. If set, the endpoint is for GDCc. - --gdce-zone=GDCE_ZONE - The name of the GDCE zone. If set, the endpoint is in GDCE. - --labels=[KEY=VALUE,...] List of label KEY=VALUE pairs to add. diff --git a/gcloud/beta/ai/endpoints/deploy-model b/gcloud/beta/ai/endpoints/deploy-model index 4e50a86a4..617b68a61 100644 --- a/gcloud/beta/ai/endpoints/deploy-model +++ b/gcloud/beta/ai/endpoints/deploy-model @@ -77,10 +77,10 @@ OPTIONAL FLAGS type The type of the accelerator. Choices are 'nvidia-a100-80gb', - 'nvidia-b200', 'nvidia-h100-80gb', 'nvidia-h100-mega-80gb', - 'nvidia-h200-141gb', 'nvidia-l4', 'nvidia-tesla-a100', - 'nvidia-tesla-k80', 'nvidia-tesla-p100', 'nvidia-tesla-p4', - 'nvidia-tesla-t4', 'nvidia-tesla-v100'. + 'nvidia-b200', 'nvidia-gb200', 'nvidia-h100-80gb', + 'nvidia-h100-mega-80gb', 'nvidia-h200-141gb', 'nvidia-l4', + 'nvidia-tesla-a100', 'nvidia-tesla-k80', 'nvidia-tesla-p100', + 'nvidia-tesla-p4', 'nvidia-tesla-t4', 'nvidia-tesla-v100'. count The number of accelerators to attach to each machine running the diff --git a/gcloud/beta/ai/model-garden/models/deploy b/gcloud/beta/ai/model-garden/models/deploy index 23cfbf1c2..17bf235e1 100644 --- a/gcloud/beta/ai/model-garden/models/deploy +++ b/gcloud/beta/ai/model-garden/models/deploy @@ -4,6 +4,7 @@ NAME SYNOPSIS gcloud beta ai model-garden models deploy --model=MODEL + [--accelerator-count=ACCELERATOR_COUNT] [--accelerator-type=ACCELERATOR_TYPE] [--accept-eula] [--asynchronous] [--container-args=[ARG,...]] [--container-command=[COMMAND,...]] [--container-deployment-timeout-seconds=CONTAINER_DEPLOYMENT_TIMEOUT_SECONDS] @@ -50,9 +51,15 @@ REQUIRED FLAGS in the format of {publisher_name}/{model_name}@{model_version_name}, e.g. google/gemma2@gemma-2-2b. If it is a Hugging Face model, it should be in the convention of Hugging Face models, e.g. - meta-llama/Meta-Llama-3-8B. + meta-llama/Meta-Llama-3-8B. If it is a Custom Weights model, it should + be in the format of gs://{gcs_bucket_uri}, e.g. + gs://-model-garden-public-us/llama3.1/Meta-Llama-3.1-8B-Instruct. OPTIONAL FLAGS + --accelerator-count=ACCELERATOR_COUNT + The accelerator count to serve the model. Accelerator count should be + non-negative. + --accelerator-type=ACCELERATOR_TYPE The accelerator type to serve the model. It should be a supported accelerator type from the verified deployment configurations of the diff --git a/gcloud/beta/beyondcorp/help b/gcloud/beta/beyondcorp/help index 5f6483860..253870bb2 100644 --- a/gcloud/beta/beyondcorp/help +++ b/gcloud/beta/beyondcorp/help @@ -34,6 +34,12 @@ GROUPS (BETA) Provides context-aware access to non-web applications (Deprecated). + operations + (BETA) Manage Operation resources. + + security-gateways + (BETA) Manage Security Gateway resources. + NOTES This command is currently in beta and might change without notice. This variant is also available: diff --git a/gcloud/beta/beyondcorp/operations/help b/gcloud/beta/beyondcorp/operations/help new file mode 100644 index 000000000..78c51407a --- /dev/null +++ b/gcloud/beta/beyondcorp/operations/help @@ -0,0 +1,20 @@ +NAME + gcloud beta beyondcorp operations - manage Operation resources + +SYNOPSIS + gcloud beta beyondcorp operations [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Manage Operation resources. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in beta and might change without notice. + diff --git a/gcloud/beta/beyondcorp/security-gateways/applications/create b/gcloud/beta/beyondcorp/security-gateways/applications/create new file mode 100644 index 000000000..060c9a664 --- /dev/null +++ b/gcloud/beta/beyondcorp/security-gateways/applications/create @@ -0,0 +1,149 @@ +NAME + gcloud beta beyondcorp security-gateways applications create - create + applications + +SYNOPSIS + gcloud beta beyondcorp security-gateways applications create + (APPLICATION : --location=LOCATION --security-gateway=SECURITY_GATEWAY) + --endpoint-matchers=[hostname=HOSTNAME],[ports=PORTS] [--async] + [--display-name=DISPLAY_NAME] [--request-id=REQUEST_ID] + [--upstreams=[egressPolicy=EGRESSPOLICY],[network=NETWORK]] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Create an application + +EXAMPLES + To create the application, run: + + $ gcloud beta beyondcorp security-gateways applications create + +POSITIONAL ARGUMENTS + Application resource - Identifier. Name of the resource. The arguments in + this group can be used to specify the attributes of this resource. (NOTE) + Some attributes are not given arguments in this group but can be set in + other ways. + + To set the project attribute: + ◆ provide the argument application on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + APPLICATION + ID of the application or fully qualified identifier for the + application. + + To set the application attribute: + ▸ provide the argument application on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location id of the application resource. We support only global + location. + + To set the location attribute: + ▸ provide the argument application on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --security-gateway=SECURITY_GATEWAY + The securityGateway id of the application resource. + + To set the security-gateway attribute: + ▸ provide the argument application on the command line with a fully + specified name; + ▸ provide the argument --security-gateway on the command line. + +REQUIRED FLAGS + --endpoint-matchers=[hostname=HOSTNAME],[ports=PORTS] + Required, Endpoint matchers associated with an application. A + combination of hostname and ports as endpoint matchers is used to match + the application. Match conditions for OR logic. An array of match + conditions to allow for multiple matching criteria. The rule is + considered a match if one of the conditions is met. The conditions can + be one of the following combinations (Hostname), (Hostname & Ports) + + EXAMPLES: Hostname - (".example.com"), ("xyz.example.com") Hostname and + Ports - ("example.com" and "22"), ("example.com" and "22,33") etc. + + hostname + Hostname of the application. + + ports + Ports of the application. + + Shorthand Example: + + --endpoint-matchers=hostname=string,ports=[int] --endpoint-matchers=hostname=string,ports=[int] + + JSON Example: + + --endpoint-matchers='[{"hostname": "string", "ports": [int]}]' + + File Example: + + --endpoint-matchers=path_to_file.(yaml|json) + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --display-name=DISPLAY_NAME + An arbitrary user-provided name for the Application resource. Cannot + exceed 64 characters. + + --request-id=REQUEST_ID + An optional request ID to identify requests. Specify a unique request + ID so that if you must retry your request, the server will know to + ignore request if it has already been completed. The server will + guarantee that for at least 60 minutes since the first request. + + --upstreams=[egressPolicy=EGRESSPOLICY],[network=NETWORK] + Which upstream resources to forward traffic to. + + egressPolicy + Routing policy information. + + regions + List of the regions where the application sends traffic. + + network + Network to forward traffic to. + + name + Network name is of the format: + projects/{project}/global/networks/{network}. + + Shorthand Example: + + --upstreams=egressPolicy={regions=[string]},network={name=string} --upstreams=egressPolicy={regions=[string]},network={name=string} + + JSON Example: + + --upstreams='[{"egressPolicy": {"regions": ["string"]}, "network": {"name": "string"}}]' + + File Example: + + --upstreams=path_to_file.(yaml|json) + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the beyondcorp/v1 API. The full documentation for this + API can be found at: https://cloud.google.com/ + +NOTES + This command is currently in beta and might change without notice. + diff --git a/gcloud/beta/beyondcorp/security-gateways/applications/delete b/gcloud/beta/beyondcorp/security-gateways/applications/delete new file mode 100644 index 000000000..f55200fec --- /dev/null +++ b/gcloud/beta/beyondcorp/security-gateways/applications/delete @@ -0,0 +1,98 @@ +NAME + gcloud beta beyondcorp security-gateways applications delete - delete + applications + +SYNOPSIS + gcloud beta beyondcorp security-gateways applications delete + (APPLICATION : --location=LOCATION --security-gateway=SECURITY_GATEWAY) + [--async] [--request-id=REQUEST_ID] [--validate-only] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Delete an application + +EXAMPLES + To delete the application, run: + + $ gcloud beta beyondcorp security-gateways applications delete + +POSITIONAL ARGUMENTS + Application resource - Name of the resource. The arguments in this group + can be used to specify the attributes of this resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. + + To set the project attribute: + ◆ provide the argument application on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + APPLICATION + ID of the application or fully qualified identifier for the + application. + + To set the application attribute: + ▸ provide the argument application on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location id of the application resource. We support only global + location. + + To set the location attribute: + ▸ provide the argument application on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --security-gateway=SECURITY_GATEWAY + The securityGateway id of the application resource. + + To set the security-gateway attribute: + ▸ provide the argument application on the command line with a fully + specified name; + ▸ provide the argument --security-gateway on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --request-id=REQUEST_ID + An optional request ID to identify requests. Specify a unique request + ID so that if you must retry your request, the server will know to + ignore the request if it has already been completed. The server will + guarantee that for at least 60 minutes after the first request. + + For example, consider a situation where you make an initial request and + the request times out. If you make the request again with the same + request ID, the server can check if original operation with the same + request ID was received, and if so, will ignore the second request. + This prevents clients from accidentally creating duplicate commitments. + + The request ID must be a valid UUID with the exception that zero UUID + is not supported (00000000-0000-0000-0000-000000000000). + + --validate-only + If set, validates request by executing a dry-run which would not alter + the resource in any way. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the beyondcorp/v1 API. The full documentation for this + API can be found at: https://cloud.google.com/ + +NOTES + This command is currently in beta and might change without notice. + diff --git a/gcloud/beta/beyondcorp/security-gateways/applications/describe b/gcloud/beta/beyondcorp/security-gateways/applications/describe new file mode 100644 index 000000000..b09e95edb --- /dev/null +++ b/gcloud/beta/beyondcorp/security-gateways/applications/describe @@ -0,0 +1,75 @@ +NAME + gcloud beta beyondcorp security-gateways applications describe - describe + applications + +SYNOPSIS + gcloud beta beyondcorp security-gateways applications describe + (APPLICATION : --location=LOCATION --security-gateway=SECURITY_GATEWAY) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Describe an application + +EXAMPLES + To describe the application, run: + + $ gcloud beta beyondcorp security-gateways applications describe + +POSITIONAL ARGUMENTS + Application resource - The resource name of the Application using the + form: + projects/{project_id}/locations/global/securityGateway/{security_gateway_id}/applications/{application_id} + The arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument application on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + APPLICATION + ID of the application or fully qualified identifier for the + application. + + To set the application attribute: + ▸ provide the argument application on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location id of the application resource. We support only global + location. + + To set the location attribute: + ▸ provide the argument application on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --security-gateway=SECURITY_GATEWAY + The securityGateway id of the application resource. + + To set the security-gateway attribute: + ▸ provide the argument application on the command line with a fully + specified name; + ▸ provide the argument --security-gateway on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the beyondcorp/v1 API. The full documentation for this + API can be found at: https://cloud.google.com/ + +NOTES + This command is currently in beta and might change without notice. + diff --git a/gcloud/beta/beyondcorp/security-gateways/applications/help b/gcloud/beta/beyondcorp/security-gateways/applications/help new file mode 100644 index 000000000..f72778230 --- /dev/null +++ b/gcloud/beta/beyondcorp/security-gateways/applications/help @@ -0,0 +1,37 @@ +NAME + gcloud beta beyondcorp security-gateways applications - manage Application + resources + +SYNOPSIS + gcloud beta beyondcorp security-gateways applications COMMAND + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Manage Application resources. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + create + (BETA) Create applications. + + delete + (BETA) Delete applications. + + describe + (BETA) Describe applications. + + list + (BETA) List applications. + + update + (BETA) Update applications. + +NOTES + This command is currently in beta and might change without notice. + diff --git a/gcloud/beta/beyondcorp/security-gateways/applications/list b/gcloud/beta/beyondcorp/security-gateways/applications/list new file mode 100644 index 000000000..8a3ef6424 --- /dev/null +++ b/gcloud/beta/beyondcorp/security-gateways/applications/list @@ -0,0 +1,100 @@ +NAME + gcloud beta beyondcorp security-gateways applications list - list + applications + +SYNOPSIS + gcloud beta beyondcorp security-gateways applications list + (--security-gateway=SECURITY_GATEWAY : --location=LOCATION) + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) List applications + +EXAMPLES + To list all applications, run: + + $ gcloud beta beyondcorp security-gateways applications list + +REQUIRED FLAGS + SecurityGateway resource - The parent location to which the resources + belong. + projects/{project_id}/locations/global/securityGateways/{security_gateway_id} + The arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument --security-gateway on the command line with a + fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + --security-gateway=SECURITY_GATEWAY + ID of the securityGateway or fully qualified identifier for the + securityGateway. + + To set the security-gateway attribute: + ▸ provide the argument --security-gateway on the command line. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + The location id of the securityGateway resource. We support only + global location. + + To set the location attribute: + ▸ provide the argument --security-gateway on the command line with + a fully specified name; + ▸ provide the argument --location on the command line. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the beyondcorp/v1 API. The full documentation for this + API can be found at: https://cloud.google.com/ + +NOTES + This command is currently in beta and might change without notice. + diff --git a/gcloud/beta/beyondcorp/security-gateways/applications/update b/gcloud/beta/beyondcorp/security-gateways/applications/update new file mode 100644 index 000000000..d30ec7a54 --- /dev/null +++ b/gcloud/beta/beyondcorp/security-gateways/applications/update @@ -0,0 +1,304 @@ +NAME + gcloud beta beyondcorp security-gateways applications update - update + applications + +SYNOPSIS + gcloud beta beyondcorp security-gateways applications update + (APPLICATION : --location=LOCATION --security-gateway=SECURITY_GATEWAY) + [--async] [--display-name=DISPLAY_NAME] [--request-id=REQUEST_ID] + [--endpoint-matchers=[hostname=HOSTNAME],[ports=PORTS] + | --add-endpoint-matchers=[hostname=HOSTNAME],[ports=PORTS] + --clear-endpoint-matchers + | --remove-endpoint-matchers=[hostname=HOSTNAME],[ports=PORTS]] + [--upstreams=[egressPolicy=EGRESSPOLICY],[network=NETWORK] + | --add-upstreams=[egressPolicy=EGRESSPOLICY],[network=NETWORK] + --clear-upstreams + | --remove-upstreams=[egressPolicy=EGRESSPOLICY],[network=NETWORK]] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Update an application + +EXAMPLES + To update the application, run: + + $ gcloud beta beyondcorp security-gateways applications update + +POSITIONAL ARGUMENTS + Application resource - Identifier. Name of the resource. The arguments in + this group can be used to specify the attributes of this resource. (NOTE) + Some attributes are not given arguments in this group but can be set in + other ways. + + To set the project attribute: + ◆ provide the argument application on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + APPLICATION + ID of the application or fully qualified identifier for the + application. + + To set the application attribute: + ▸ provide the argument application on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location id of the application resource. We support only global + location. + + To set the location attribute: + ▸ provide the argument application on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --security-gateway=SECURITY_GATEWAY + The securityGateway id of the application resource. + + To set the security-gateway attribute: + ▸ provide the argument application on the command line with a fully + specified name; + ▸ provide the argument --security-gateway on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --display-name=DISPLAY_NAME + An arbitrary user-provided name for the Application resource. Cannot + exceed 64 characters. + + --request-id=REQUEST_ID + An optional request ID to identify requests. Specify a unique request + ID so that if you must retry your request, the server will know to + ignore the request if it has already been completed. The server will + guarantee that for at least 60 minutes after the first request. + + For example, consider a situation where you make an initial request and + the request timed out. If you make the request again with the same + request ID, the server can check if original operation with the same + request ID was received, and if so, will ignore the second request. + This prevents clients from accidentally creating duplicate commitments. + + The request ID must be a valid UUID with the exception that zero UUID + is not supported (00000000-0000-0000-0000-000000000000). + + Update endpoint_matchers. + + At most one of these can be specified: + + --endpoint-matchers=[hostname=HOSTNAME],[ports=PORTS] + Set endpoint_matchers to new value. Endpoint matchers associated with + an application. A combination of hostname and ports as endpoint + matchers is used to match the application. Match conditions for OR + logic. An array of match conditions to allow for multiple matching + criteria. The rule is considered a match if one of the conditions is + met. The conditions can be one of the following combinations + (Hostname), (Hostname & Ports) + + EXAMPLES: Hostname - (".example.com"), ("xyz.example.com") Hostname + and Ports - ("example.com" and "22"), ("example.com" and "22,33") + etc. + + hostname + Hostname of the application. + + ports + Ports of the application. + + Shorthand Example: + + --endpoint-matchers=hostname=string,ports=[int] --endpoint-matchers=hostname=string,ports=[int] + + JSON Example: + + --endpoint-matchers='[{"hostname": "string", "ports": [int]}]' + + File Example: + + --endpoint-matchers=path_to_file.(yaml|json) + + --add-endpoint-matchers=[hostname=HOSTNAME],[ports=PORTS] + Add new value to endpoint_matchers list. Endpoint matchers associated + with an application. A combination of hostname and ports as endpoint + matchers is used to match the application. Match conditions for OR + logic. An array of match conditions to allow for multiple matching + criteria. The rule is considered a match if one of the conditions is + met. The conditions can be one of the following combinations + (Hostname), (Hostname & Ports) + + EXAMPLES: Hostname - (".example.com"), ("xyz.example.com") Hostname + and Ports - ("example.com" and "22"), ("example.com" and "22,33") + etc. + + hostname + Hostname of the application. + + ports + Ports of the application. + + Shorthand Example: + + --add-endpoint-matchers=hostname=string,ports=[int] --add-endpoint-matchers=hostname=string,ports=[int] + + JSON Example: + + --add-endpoint-matchers='[{"hostname": "string", "ports": [int]}]' + + File Example: + + --add-endpoint-matchers=path_to_file.(yaml|json) + + At most one of these can be specified: + + --clear-endpoint-matchers + Clear endpoint_matchers value and set to empty list. + + --remove-endpoint-matchers=[hostname=HOSTNAME],[ports=PORTS] + Remove existing value from endpoint_matchers list. Endpoint + matchers associated with an application. A combination of hostname + and ports as endpoint matchers is used to match the application. + Match conditions for OR logic. An array of match conditions to + allow for multiple matching criteria. The rule is considered a + match if one of the conditions is met. The conditions can be one of + the following combinations (Hostname), (Hostname & Ports) + + EXAMPLES: Hostname - (".example.com"), ("xyz.example.com") Hostname + and Ports - ("example.com" and "22"), ("example.com" and "22,33") + etc. + + hostname + Hostname of the application. + + ports + Ports of the application. + + Shorthand Example: + + --remove-endpoint-matchers=hostname=string,ports=[int] --remove-endpoint-matchers=hostname=string,ports=[int] + + JSON Example: + + --remove-endpoint-matchers='[{"hostname": "string", "ports": [int]}]' + + File Example: + + --remove-endpoint-matchers=path_to_file.(yaml|json) + + Update upstreams. + + At most one of these can be specified: + + --upstreams=[egressPolicy=EGRESSPOLICY],[network=NETWORK] + Set upstreams to new value. Which upstream resources to forward + traffic to. + + egressPolicy + Routing policy information. + + regions + List of the regions where the application sends traffic. + + network + Network to forward traffic to. + + name + Network name is of the format: + projects/{project}/global/networks/{network}. + + Shorthand Example: + + --upstreams=egressPolicy={regions=[string]},network={name=string} --upstreams=egressPolicy={regions=[string]},network={name=string} + + JSON Example: + + --upstreams='[{"egressPolicy": {"regions": ["string"]}, "network": {"name": "string"}}]' + + File Example: + + --upstreams=path_to_file.(yaml|json) + + --add-upstreams=[egressPolicy=EGRESSPOLICY],[network=NETWORK] + Add new value to upstreams list. Which upstream resources to forward + traffic to. + + egressPolicy + Routing policy information. + + regions + List of the regions where the application sends traffic. + + network + Network to forward traffic to. + + name + Network name is of the format: + projects/{project}/global/networks/{network}. + + Shorthand Example: + + --add-upstreams=egressPolicy={regions=[string]},network={name=string} --add-upstreams=egressPolicy={regions=[string]},network={name=string} + + JSON Example: + + --add-upstreams='[{"egressPolicy": {"regions": ["string"]}, "network": {"name": "string"}}]' + + File Example: + + --add-upstreams=path_to_file.(yaml|json) + + At most one of these can be specified: + + --clear-upstreams + Clear upstreams value and set to empty list. + + --remove-upstreams=[egressPolicy=EGRESSPOLICY],[network=NETWORK] + Remove existing value from upstreams list. Which upstream resources + to forward traffic to. + + egressPolicy + Routing policy information. + + regions + List of the regions where the application sends traffic. + + network + Network to forward traffic to. + + name + Network name is of the format: + projects/{project}/global/networks/{network}. + + Shorthand Example: + + --remove-upstreams=egressPolicy={regions=[string]},network={name=string} --remove-upstreams=egressPolicy={regions=[string]},network={name=string} + + JSON Example: + + --remove-upstreams='[{"egressPolicy": {"regions": ["string"]}, "network": {"name": "string"}}]' + + File Example: + + --remove-upstreams=path_to_file.(yaml|json) + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the beyondcorp/v1 API. The full documentation for this + API can be found at: https://cloud.google.com/ + +NOTES + This command is currently in beta and might change without notice. + diff --git a/gcloud/beta/beyondcorp/security-gateways/create b/gcloud/beta/beyondcorp/security-gateways/create new file mode 100644 index 000000000..a2cd3f0e3 --- /dev/null +++ b/gcloud/beta/beyondcorp/security-gateways/create @@ -0,0 +1,102 @@ +NAME + gcloud beta beyondcorp security-gateways create - create securityGateways + +SYNOPSIS + gcloud beta beyondcorp security-gateways create + (SECURITY_GATEWAY : --location=LOCATION) [--async] + [--display-name=DISPLAY_NAME] [--hubs=[HUBS,...]] + [--request-id=REQUEST_ID] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Create a securityGateway + +EXAMPLES + To create the securityGateway, run: + + $ gcloud beta beyondcorp security-gateways create + +POSITIONAL ARGUMENTS + SecurityGateway resource - Identifier. Name of the resource. The arguments + in this group can be used to specify the attributes of this resource. + (NOTE) Some attributes are not given arguments in this group but can be + set in other ways. + + To set the project attribute: + ◆ provide the argument security_gateway on the command line with a + fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + SECURITY_GATEWAY + ID of the securityGateway or fully qualified identifier for the + securityGateway. + + To set the security_gateway attribute: + ▸ provide the argument security_gateway on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location id of the securityGateway resource. We support only + global location. + + To set the location attribute: + ▸ provide the argument security_gateway on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --display-name=DISPLAY_NAME + An arbitrary user-provided name for the SecurityGateway. Cannot exceed + 64 characters. + + --hubs=[HUBS,...] + Map of Hubs that represents regional data path deployment with Google + Cloud Platform region as a key. + + KEY + Sets KEY value. + + VALUE + Sets VALUE value. + + Shorthand Example: + + --hubs=string + + JSON Example: + + --hubs='{"string": {}}' + + File Example: + + --hubs=path_to_file.(yaml|json) + + --request-id=REQUEST_ID + An optional request ID to identify requests. Specify a unique request + ID so that if you must retry your request, the server will know to + ignore request if it has already been completed. The server will + guarantee that for at least 60 minutes since the first request. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the beyondcorp/v1 API. The full documentation for this + API can be found at: https://cloud.google.com/ + +NOTES + This command is currently in beta and might change without notice. + diff --git a/gcloud/beta/beyondcorp/security-gateways/delete b/gcloud/beta/beyondcorp/security-gateways/delete new file mode 100644 index 000000000..21dcd7c98 --- /dev/null +++ b/gcloud/beta/beyondcorp/security-gateways/delete @@ -0,0 +1,89 @@ +NAME + gcloud beta beyondcorp security-gateways delete - delete securityGateways + +SYNOPSIS + gcloud beta beyondcorp security-gateways delete + (SECURITY_GATEWAY : --location=LOCATION) [--async] + [--request-id=REQUEST_ID] [--validate-only] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Delete a securityGateway + +EXAMPLES + To delete the securityGateway, run: + + $ gcloud beta beyondcorp security-gateways delete + +POSITIONAL ARGUMENTS + SecurityGateway resource - BeyondCorp SecurityGateway name using the form: + projects/{project_id}/locations/{location_id}/securityGateways/{security_gateway_id} + The arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument security_gateway on the command line with a + fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + SECURITY_GATEWAY + ID of the securityGateway or fully qualified identifier for the + securityGateway. + + To set the security_gateway attribute: + ▸ provide the argument security_gateway on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location id of the securityGateway resource. We support only + global location. + + To set the location attribute: + ▸ provide the argument security_gateway on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --request-id=REQUEST_ID + An optional request ID to identify requests. Specify a unique request + ID so that if you must retry your request, the server will know to + ignore the request if it has already been completed. The server will + guarantee that for at least 60 minutes after the first request. + + For example, consider a situation where you make an initial request and + the request times out. If you make the request again with the same + request ID, the server can check if original operation with the same + request ID was received, and if so, will ignore the second request. + This prevents clients from accidentally creating duplicate commitments. + + The request ID must be a valid UUID with the exception that zero UUID + is not supported (00000000-0000-0000-0000-000000000000). + + --validate-only + If set, validates request by executing a dry-run which would not alter + the resource in any way. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the beyondcorp/v1 API. The full documentation for this + API can be found at: https://cloud.google.com/ + +NOTES + This command is currently in beta and might change without notice. + diff --git a/gcloud/beta/beyondcorp/security-gateways/describe b/gcloud/beta/beyondcorp/security-gateways/describe new file mode 100644 index 000000000..4d8c86ad3 --- /dev/null +++ b/gcloud/beta/beyondcorp/security-gateways/describe @@ -0,0 +1,66 @@ +NAME + gcloud beta beyondcorp security-gateways describe - describe + securityGateways + +SYNOPSIS + gcloud beta beyondcorp security-gateways describe + (SECURITY_GATEWAY : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Describe a securityGateway + +EXAMPLES + To describe the securityGateway, run: + + $ gcloud beta beyondcorp security-gateways describe + +POSITIONAL ARGUMENTS + SecurityGateway resource - The resource name of the PartnerTenant using + the form: + projects/{project_id}/locations/{location_id}/securityGateway/{security_gateway_id} + The arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument security_gateway on the command line with a + fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + SECURITY_GATEWAY + ID of the securityGateway or fully qualified identifier for the + securityGateway. + + To set the security_gateway attribute: + ▸ provide the argument security_gateway on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location id of the securityGateway resource. We support only + global location. + + To set the location attribute: + ▸ provide the argument security_gateway on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the beyondcorp/v1 API. The full documentation for this + API can be found at: https://cloud.google.com/ + +NOTES + This command is currently in beta and might change without notice. + diff --git a/gcloud/beta/beyondcorp/security-gateways/help b/gcloud/beta/beyondcorp/security-gateways/help new file mode 100644 index 000000000..4a39ef4b9 --- /dev/null +++ b/gcloud/beta/beyondcorp/security-gateways/help @@ -0,0 +1,43 @@ +NAME + gcloud beta beyondcorp security-gateways - manage Security Gateway + resources + +SYNOPSIS + gcloud beta beyondcorp security-gateways GROUP | COMMAND + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Manage Security Gateway resources. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +GROUPS + GROUP is one of the following: + + applications + (BETA) Manage Application resources. + +COMMANDS + COMMAND is one of the following: + + create + (BETA) Create securityGateways. + + delete + (BETA) Delete securityGateways. + + describe + (BETA) Describe securityGateways. + + list + (BETA) List securityGateways. + + update + (BETA) Update securityGateways. + +NOTES + This command is currently in beta and might change without notice. + diff --git a/gcloud/beta/beyondcorp/security-gateways/list b/gcloud/beta/beyondcorp/security-gateways/list new file mode 100644 index 000000000..dd943006d --- /dev/null +++ b/gcloud/beta/beyondcorp/security-gateways/list @@ -0,0 +1,85 @@ +NAME + gcloud beta beyondcorp security-gateways list - list securityGateways + +SYNOPSIS + gcloud beta beyondcorp security-gateways list --location=LOCATION + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) List securityGateways + +EXAMPLES + To list all securityGateways, run: + + $ gcloud beta beyondcorp security-gateways list + +REQUIRED FLAGS + Location resource - The parent location to which the resources belong. We + support only global location. + + projects/{project_id}/locations/{location_id}/ This represents a Cloud + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. + + To set the location attribute: + ▸ provide the argument --location on the command line. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the beyondcorp/v1 API. The full documentation for this + API can be found at: https://cloud.google.com/ + +NOTES + This command is currently in beta and might change without notice. + diff --git a/gcloud/beta/beyondcorp/security-gateways/update b/gcloud/beta/beyondcorp/security-gateways/update new file mode 100644 index 000000000..4a7039feb --- /dev/null +++ b/gcloud/beta/beyondcorp/security-gateways/update @@ -0,0 +1,159 @@ +NAME + gcloud beta beyondcorp security-gateways update - update securityGateways + +SYNOPSIS + gcloud beta beyondcorp security-gateways update + (SECURITY_GATEWAY : --location=LOCATION) [--async] + [--display-name=DISPLAY_NAME] [--request-id=REQUEST_ID] + [--hubs=[HUBS,...] | --update-hubs=[UPDATE_HUBS,...] --clear-hubs + | --remove-hubs=REMOVE_HUBS] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Update a securityGateway + +EXAMPLES + To update the securityGateway, run: + + $ gcloud beta beyondcorp security-gateways update + +POSITIONAL ARGUMENTS + SecurityGateway resource - Identifier. Name of the resource. The arguments + in this group can be used to specify the attributes of this resource. + (NOTE) Some attributes are not given arguments in this group but can be + set in other ways. + + To set the project attribute: + ◆ provide the argument security_gateway on the command line with a + fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + SECURITY_GATEWAY + ID of the securityGateway or fully qualified identifier for the + securityGateway. + + To set the security_gateway attribute: + ▸ provide the argument security_gateway on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location id of the securityGateway resource. We support only + global location. + + To set the location attribute: + ▸ provide the argument security_gateway on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --display-name=DISPLAY_NAME + An arbitrary user-provided name for the SecurityGateway. Cannot exceed + 64 characters. + + --request-id=REQUEST_ID + An optional request ID to identify requests. Specify a unique request + ID so that if you must retry your request, the server will know to + ignore the request if it has already been completed. The server will + guarantee that for at least 60 minutes after the first request. + + For example, consider a situation where you make an initial request and + the request timed out. If you make the request again with the same + request ID, the server can check if original operation with the same + request ID was received, and if so, will ignore the second request. + This prevents clients from accidentally creating duplicate commitments. + + The request ID must be a valid UUID with the exception that zero UUID + is not supported (00000000-0000-0000-0000-000000000000). + + Update hubs. + + At most one of these can be specified: + + --hubs=[HUBS,...] + Set hubs to new value. Map of Hubs that represents regional data path + deployment with Google Cloud Platform region as a key. + + KEY + Sets KEY value. + + VALUE + Sets VALUE value. + + Shorthand Example: + + --hubs=string + + JSON Example: + + --hubs='{"string": {}}' + + File Example: + + --hubs=path_to_file.(yaml|json) + + --update-hubs=[UPDATE_HUBS,...] + Update hubs value or add key value pair. Map of Hubs that represents + regional data path deployment with Google Cloud Platform region as a + key. + + KEY + Sets KEY value. + + VALUE + Sets VALUE value. + + Shorthand Example: + + --update-hubs=string + + JSON Example: + + --update-hubs='{"string": {}}' + + File Example: + + --update-hubs=path_to_file.(yaml|json) + + At most one of these can be specified: + + --clear-hubs + Clear hubs value and set to empty map. + + --remove-hubs=REMOVE_HUBS + Remove existing value from map hubs. Sets remove_hubs value. + + Shorthand Example: + + --remove-hubs=string,string + + JSON Example: + + --remove-hubs=["string"] + + File Example: + + --remove-hubs=path_to_file.(yaml|json) + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the beyondcorp/v1 API. The full documentation for this + API can be found at: https://cloud.google.com/ + +NOTES + This command is currently in beta and might change without notice. + diff --git a/gcloud/beta/eventarc/enrollments/create b/gcloud/beta/eventarc/enrollments/create index e6d916207..43f2e38a0 100644 --- a/gcloud/beta/eventarc/enrollments/create +++ b/gcloud/beta/eventarc/enrollments/create @@ -123,5 +123,8 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud eventarc enrollments create diff --git a/gcloud/beta/eventarc/enrollments/delete b/gcloud/beta/eventarc/enrollments/delete index 930817aa2..7dc3871b3 100644 --- a/gcloud/beta/eventarc/enrollments/delete +++ b/gcloud/beta/eventarc/enrollments/delete @@ -63,5 +63,8 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud eventarc enrollments delete diff --git a/gcloud/beta/eventarc/enrollments/describe b/gcloud/beta/eventarc/enrollments/describe index 01ff11127..bbd415d6a 100644 --- a/gcloud/beta/eventarc/enrollments/describe +++ b/gcloud/beta/eventarc/enrollments/describe @@ -58,5 +58,8 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud eventarc enrollments describe diff --git a/gcloud/beta/eventarc/enrollments/help b/gcloud/beta/eventarc/enrollments/help index 27005873e..b8aa013a3 100644 --- a/gcloud/beta/eventarc/enrollments/help +++ b/gcloud/beta/eventarc/enrollments/help @@ -31,5 +31,8 @@ COMMANDS (BETA) Update an Eventarc enrollment. NOTES - This command is currently in beta and might change without notice. + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud eventarc enrollments diff --git a/gcloud/beta/eventarc/enrollments/list b/gcloud/beta/eventarc/enrollments/list index c4fca6880..9bec65f93 100644 --- a/gcloud/beta/eventarc/enrollments/list +++ b/gcloud/beta/eventarc/enrollments/list @@ -86,5 +86,8 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud eventarc enrollments list diff --git a/gcloud/beta/eventarc/enrollments/update b/gcloud/beta/eventarc/enrollments/update index e158bd892..6df9cc30d 100644 --- a/gcloud/beta/eventarc/enrollments/update +++ b/gcloud/beta/eventarc/enrollments/update @@ -107,5 +107,8 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud eventarc enrollments update diff --git a/gcloud/beta/eventarc/google-api-sources/create b/gcloud/beta/eventarc/google-api-sources/create index afe70b494..cfd792cc2 100644 --- a/gcloud/beta/eventarc/google-api-sources/create +++ b/gcloud/beta/eventarc/google-api-sources/create @@ -124,5 +124,8 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud eventarc google-api-sources create diff --git a/gcloud/beta/eventarc/google-api-sources/delete b/gcloud/beta/eventarc/google-api-sources/delete index 42536322f..524587d7c 100644 --- a/gcloud/beta/eventarc/google-api-sources/delete +++ b/gcloud/beta/eventarc/google-api-sources/delete @@ -66,5 +66,8 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud eventarc google-api-sources delete diff --git a/gcloud/beta/eventarc/google-api-sources/describe b/gcloud/beta/eventarc/google-api-sources/describe index aef57600a..28e9393c5 100644 --- a/gcloud/beta/eventarc/google-api-sources/describe +++ b/gcloud/beta/eventarc/google-api-sources/describe @@ -60,5 +60,8 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud eventarc google-api-sources describe diff --git a/gcloud/beta/eventarc/google-api-sources/help b/gcloud/beta/eventarc/google-api-sources/help index 33f09f175..227a06279 100644 --- a/gcloud/beta/eventarc/google-api-sources/help +++ b/gcloud/beta/eventarc/google-api-sources/help @@ -32,5 +32,8 @@ COMMANDS (BETA) Update an Eventarc Google API source. NOTES - This command is currently in beta and might change without notice. + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud eventarc google-api-sources diff --git a/gcloud/beta/eventarc/google-api-sources/list b/gcloud/beta/eventarc/google-api-sources/list index f677bf109..be7747487 100644 --- a/gcloud/beta/eventarc/google-api-sources/list +++ b/gcloud/beta/eventarc/google-api-sources/list @@ -87,5 +87,8 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud eventarc google-api-sources list diff --git a/gcloud/beta/eventarc/google-api-sources/update b/gcloud/beta/eventarc/google-api-sources/update index 6afe034a1..579193ec8 100644 --- a/gcloud/beta/eventarc/google-api-sources/update +++ b/gcloud/beta/eventarc/google-api-sources/update @@ -165,5 +165,8 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud eventarc google-api-sources update diff --git a/gcloud/beta/eventarc/message-buses/create b/gcloud/beta/eventarc/message-buses/create index 3f2af516c..db1edde4c 100644 --- a/gcloud/beta/eventarc/message-buses/create +++ b/gcloud/beta/eventarc/message-buses/create @@ -82,5 +82,8 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud eventarc message-buses create diff --git a/gcloud/beta/eventarc/message-buses/delete b/gcloud/beta/eventarc/message-buses/delete index 621210b7f..a88deaac3 100644 --- a/gcloud/beta/eventarc/message-buses/delete +++ b/gcloud/beta/eventarc/message-buses/delete @@ -63,5 +63,8 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud eventarc message-buses delete diff --git a/gcloud/beta/eventarc/message-buses/describe b/gcloud/beta/eventarc/message-buses/describe index 10387aaf2..f6c4c82ba 100644 --- a/gcloud/beta/eventarc/message-buses/describe +++ b/gcloud/beta/eventarc/message-buses/describe @@ -59,5 +59,8 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud eventarc message-buses describe diff --git a/gcloud/beta/eventarc/message-buses/help b/gcloud/beta/eventarc/message-buses/help index 96df4b7e6..ed656cd5b 100644 --- a/gcloud/beta/eventarc/message-buses/help +++ b/gcloud/beta/eventarc/message-buses/help @@ -37,5 +37,8 @@ COMMANDS (BETA) Update an Eventarc message bus. NOTES - This command is currently in beta and might change without notice. + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud eventarc message-buses diff --git a/gcloud/beta/eventarc/message-buses/list b/gcloud/beta/eventarc/message-buses/list index 6357af00e..ee0cf97ba 100644 --- a/gcloud/beta/eventarc/message-buses/list +++ b/gcloud/beta/eventarc/message-buses/list @@ -86,5 +86,8 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud eventarc message-buses list diff --git a/gcloud/beta/eventarc/message-buses/list-enrollments b/gcloud/beta/eventarc/message-buses/list-enrollments index 67e8832da..5dc1e94a0 100644 --- a/gcloud/beta/eventarc/message-buses/list-enrollments +++ b/gcloud/beta/eventarc/message-buses/list-enrollments @@ -93,5 +93,8 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud eventarc message-buses list-enrollments diff --git a/gcloud/beta/eventarc/message-buses/publish b/gcloud/beta/eventarc/message-buses/publish index 12322df33..ff14240b9 100644 --- a/gcloud/beta/eventarc/message-buses/publish +++ b/gcloud/beta/eventarc/message-buses/publish @@ -117,5 +117,8 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud eventarc message-buses publish diff --git a/gcloud/beta/eventarc/message-buses/update b/gcloud/beta/eventarc/message-buses/update index cb2ecf8cf..a2c965024 100644 --- a/gcloud/beta/eventarc/message-buses/update +++ b/gcloud/beta/eventarc/message-buses/update @@ -118,5 +118,8 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud eventarc message-buses update diff --git a/gcloud/beta/eventarc/pipelines/create b/gcloud/beta/eventarc/pipelines/create index 96b51ae78..24b853aba 100644 --- a/gcloud/beta/eventarc/pipelines/create +++ b/gcloud/beta/eventarc/pipelines/create @@ -615,5 +615,8 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud eventarc pipelines create diff --git a/gcloud/beta/eventarc/pipelines/delete b/gcloud/beta/eventarc/pipelines/delete index 3705b2cfa..1d450f543 100644 --- a/gcloud/beta/eventarc/pipelines/delete +++ b/gcloud/beta/eventarc/pipelines/delete @@ -61,5 +61,8 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud eventarc pipelines delete diff --git a/gcloud/beta/eventarc/pipelines/describe b/gcloud/beta/eventarc/pipelines/describe index fb9b04518..38eae72d0 100644 --- a/gcloud/beta/eventarc/pipelines/describe +++ b/gcloud/beta/eventarc/pipelines/describe @@ -56,5 +56,8 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud eventarc pipelines describe diff --git a/gcloud/beta/eventarc/pipelines/help b/gcloud/beta/eventarc/pipelines/help index a9ef1e9a7..deb9b89f5 100644 --- a/gcloud/beta/eventarc/pipelines/help +++ b/gcloud/beta/eventarc/pipelines/help @@ -31,5 +31,8 @@ COMMANDS (BETA) Update an Eventarc pipeline. NOTES - This command is currently in beta and might change without notice. + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud eventarc pipelines diff --git a/gcloud/beta/eventarc/pipelines/list b/gcloud/beta/eventarc/pipelines/list index 659282892..60b6dc15a 100644 --- a/gcloud/beta/eventarc/pipelines/list +++ b/gcloud/beta/eventarc/pipelines/list @@ -86,5 +86,8 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud eventarc pipelines list diff --git a/gcloud/beta/eventarc/pipelines/update b/gcloud/beta/eventarc/pipelines/update index b71f6998c..2d578e653 100644 --- a/gcloud/beta/eventarc/pipelines/update +++ b/gcloud/beta/eventarc/pipelines/update @@ -477,5 +477,8 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud eventarc pipelines update diff --git a/gcloud/beta/iam/workforce-pools/providers/create-oidc b/gcloud/beta/iam/workforce-pools/providers/create-oidc index 2175e7f66..43ac5d733 100644 --- a/gcloud/beta/iam/workforce-pools/providers/create-oidc +++ b/gcloud/beta/iam/workforce-pools/providers/create-oidc @@ -14,6 +14,8 @@ SYNOPSIS [--client-secret-value=CLIENT_SECRET_VALUE] [--description=DESCRIPTION] [--detailed-audit-logging] [--disabled] [--display-name=DISPLAY_NAME] [--jwk-json-path=PATH_TO_FILE] + [--extended-attributes-client-id=EXTENDED_ATTRIBUTES_CLIENT_ID + --extended-attributes-client-secret-value=EXTENDED_ATTRIBUTES_CLIENT_SECRET_VALUE --extended-attributes-issuer-uri=EXTENDED_ATTRIBUTES_ISSUER_URI --extended-attributes-type=EXTENDED_ATTRIBUTES_TYPE : --extended-attributes-filter=EXTENDED_ATTRIBUTES_FILTER] [--extra-attributes-client-id=EXTRA_ATTRIBUTES_CLIENT_ID --extra-attributes-client-secret-value=EXTRA_ATTRIBUTES_CLIENT_SECRET_VALUE --extra-attributes-issuer-uri=EXTRA_ATTRIBUTES_ISSUER_URI --extra-attributes-type=EXTRA_ATTRIBUTES_TYPE : --extra-attributes-filter=EXTRA_ATTRIBUTES_FILTER] [GCLOUD_WIDE_FLAG ...] @@ -276,6 +278,30 @@ OPTIONAL FLAGS } ```. Use a full or relative path to a local file containing the value of jwk_json_path. + *--extended-attributes-client-id*=_EXTENDED_ATTRIBUTES_CLIENT_ID_:: + + The OAuth 2.0 client ID for retrieving extended attributes from the identity provider. Required to get extended group memberships for a subset of Google Cloud products. + + *--extended-attributes-client-secret-value*=_EXTENDED_ATTRIBUTES_CLIENT_SECRET_VALUE_:: + + The OAuth 2.0 client secret for retrieving extended attributes from the identity provider. Required to get extended group memberships for a subset of Google Cloud products. + + *--extended-attributes-issuer-uri*=_EXTENDED_ATTRIBUTES_ISSUER_URI_:: + + OIDC identity provider's issuer URI. Must be a valid URI using the `https` scheme. Required to get the OIDC discovery document. + + *--extended-attributes-type*=_EXTENDED_ATTRIBUTES_TYPE_:: + + Represents the identity provider and type of claims that should be fetched. _EXTENDED_ATTRIBUTES_TYPE_ must be (only one value is supported): *azure-ad-groups-id*. + + *--extended-attributes-filter*=_EXTENDED_ATTRIBUTES_FILTER_:: + + The filter used to request specific records from the IdP. By default, all of the groups that are associated with a user are fetched. For Microsoft Entra ID, you can add `$search` query parameters using [Keyword Query Language] (https://learn.microsoft.com/en-us/sharepoint/dev/general-development/keyword-query-language-kql-syntax-reference). To learn more about `$search` querying in Microsoft Entra ID, see [Use the `$search` query parameter] (https://learn.microsoft.com/en-us/graph/search-query-parameter). + + Additionally, Workforce Identity Federation automatically adds the following [`$filter` query parameters] (https://learn.microsoft.com/en-us/graph/filter-query-parameter), based on the value of `attributes_type`. Values passed to `filter` are converted to `$search` query parameters. Additional `$filter` query parameters cannot be added using this field. + + * `AZURE_AD_GROUPS_ID`: `securityEnabled` filter is applied. + *--extra-attributes-client-id*=_EXTRA_ATTRIBUTES_CLIENT_ID_:: The OAuth 2.0 client ID for retrieving extra attributes from the identity provider. Required to get the access token using client credentials grant flow. diff --git a/gcloud/beta/iam/workforce-pools/providers/help b/gcloud/beta/iam/workforce-pools/providers/help index 10140ff9e..84a3ccefa 100644 --- a/gcloud/beta/iam/workforce-pools/providers/help +++ b/gcloud/beta/iam/workforce-pools/providers/help @@ -24,6 +24,9 @@ GROUPS operations (BETA) Manage IAM workforce pool provider long-running operations. + scim-tenants + (BETA) Manage IAM workforce identity pool provider SCIM tenants. + COMMANDS COMMAND is one of the following: diff --git a/gcloud/beta/iam/workforce-pools/providers/scim-tenants/create b/gcloud/beta/iam/workforce-pools/providers/scim-tenants/create new file mode 100644 index 000000000..4e28f631a --- /dev/null +++ b/gcloud/beta/iam/workforce-pools/providers/scim-tenants/create @@ -0,0 +1,117 @@ +NAME + gcloud beta iam workforce-pools providers scim-tenants create - create an + IAM workforce identity pool provider SCIM tenant + +SYNOPSIS + gcloud beta iam workforce-pools providers scim-tenants create + (SCIM_TENANT : --location=LOCATION + --provider=PROVIDER --workforce-pool=WORKFORCE_POOL) + [--claim-mapping=[KEY=VALUE,...]] [--description=DESCRIPTION] + [--display-name=DISPLAY_NAME] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Create a new SCIM tenant associated with a specific workforce + identity pool provider. + + Upon successful creation, the command returns the created SCIM tenant + resource. + +EXAMPLES + To create a SCIM tenant with ID my-tenant under provider my-okta-provider + in pool my-pool located in global: + + $ gcloud beta iam workforce-pools providers scim-tenants create \ + my-tenant --location=global --workforce-pool=my-pool \ + --provider=my-okta-provider + + To create a SCIM tenant sales-tenant under provider salesforce in pool + partner-pool located in europe-west1 with specific claim mappings: + + $ gcloud beta iam workforce-pools providers scim-tenants create \ + sales-tenant --location=europe-west1 \ + --workforce-pool=partner-pool --provider=salesforce \ + --claim-mapping="google.subject=salesforce_id,assertion.groups=m\ + emberOf" + +POSITIONAL ARGUMENTS + Workforce pool provider scim tenant resource - The ID of the SCIM tenant + to create. Must be 4-32 characters, alphanumeric ([a-z0-9-]), and cannot + start with gcp-. The arguments in this group can be used to specify the + attributes of this resource. + + This must be specified. + + SCIM_TENANT + ID of the workforce pool provider scim tenant or fully qualified + identifier for the workforce pool provider scim tenant. + + To set the scim_tenant attribute: + ▸ provide the argument scim_tenant on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the workforce pool. + + To set the location attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --provider=PROVIDER + The ID to use for the workforce pool provider, which becomes the + final component of the resource name. This value must be unique + within the workforce pool, 4-32 characters in length, and may contain + the characters [a-z0-9-]. The prefix gcp- is reserved for use by + Google, and may not be specified. + + To set the provider attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --provider on the command line. + + --workforce-pool=WORKFORCE_POOL + The ID to use for the workforce pool, which becomes the final + component of the resource name. This value must be a globally unique + string of 6 to 63 lowercase letters, digits, or hyphens. It must + start with a letter, and cannot have a trailing hyphen. The prefix + gcp- is reserved for use by Google, and may not be specified. + + To set the workforce-pool attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --workforce-pool on the command line. + +FLAGS + --claim-mapping=[KEY=VALUE,...] + A comma-separated list of KEY=VALUE pairs defining attribute mappings. + + --description=DESCRIPTION + Optional, user-specified description for the SCIM tenant (max 256 + characters). + + --display-name=DISPLAY_NAME + Optional, user-specified display name for the SCIM tenant (max 32 + characters). + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iam/ + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud iam workforce-pools providers scim-tenants create + + $ gcloud alpha iam workforce-pools providers scim-tenants create + diff --git a/gcloud/beta/iam/workforce-pools/providers/scim-tenants/delete b/gcloud/beta/iam/workforce-pools/providers/scim-tenants/delete new file mode 100644 index 000000000..1a66e1f58 --- /dev/null +++ b/gcloud/beta/iam/workforce-pools/providers/scim-tenants/delete @@ -0,0 +1,92 @@ +NAME + gcloud beta iam workforce-pools providers scim-tenants delete - delete an + IAM workforce identity pool provider SCIM tenant + +SYNOPSIS + gcloud beta iam workforce-pools providers scim-tenants delete + (SCIM_TENANT : --location=LOCATION + --provider=PROVIDER --workforce-pool=WORKFORCE_POOL) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Delete an existing SCIM tenant associated with a specific workforce + identity pool provider. This operation marks the tenant for deletion, and + it may be recoverable using the undelete command for a period. + +EXAMPLES + To delete a SCIM tenant with ID my-tenant under provider my-okta-provider + in pool my-pool located in global: + + $ gcloud beta iam workforce-pools providers scim-tenants delete \ + my-tenant --location=global --workforce-pool=my-pool \ + --provider=my-okta-provider + +POSITIONAL ARGUMENTS + Workforce pool provider scim tenant resource - The SCIM tenant to delete. + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + SCIM_TENANT + ID of the workforce pool provider scim tenant or fully qualified + identifier for the workforce pool provider scim tenant. + + To set the scim_tenant attribute: + ▸ provide the argument scim_tenant on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the workforce pool. + + To set the location attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --provider=PROVIDER + The ID to use for the workforce pool provider, which becomes the + final component of the resource name. This value must be unique + within the workforce pool, 4-32 characters in length, and may contain + the characters [a-z0-9-]. The prefix gcp- is reserved for use by + Google, and may not be specified. + + To set the provider attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --provider on the command line. + + --workforce-pool=WORKFORCE_POOL + The ID to use for the workforce pool, which becomes the final + component of the resource name. This value must be a globally unique + string of 6 to 63 lowercase letters, digits, or hyphens. It must + start with a letter, and cannot have a trailing hyphen. The prefix + gcp- is reserved for use by Google, and may not be specified. + + To set the workforce-pool attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --workforce-pool on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iam/ + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud iam workforce-pools providers scim-tenants delete + + $ gcloud alpha iam workforce-pools providers scim-tenants delete + diff --git a/gcloud/beta/iam/workforce-pools/providers/scim-tenants/describe b/gcloud/beta/iam/workforce-pools/providers/scim-tenants/describe new file mode 100644 index 000000000..d052d60a4 --- /dev/null +++ b/gcloud/beta/iam/workforce-pools/providers/scim-tenants/describe @@ -0,0 +1,91 @@ +NAME + gcloud beta iam workforce-pools providers scim-tenants describe - describe + an IAM workforce identity pool provider SCIM tenant + +SYNOPSIS + gcloud beta iam workforce-pools providers scim-tenants describe + (SCIM_TENANT : --location=LOCATION + --provider=PROVIDER --workforce-pool=WORKFORCE_POOL) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Describe an existing SCIM tenant associated with a specific + workforce identity pool provider. + +EXAMPLES + To describe a SCIM tenant with ID my-tenant under provider my-provider in + pool my-pool located in global: + + $ gcloud beta iam workforce-pools providers scim-tenants describe \ + my-tenant --location=global --workforce-pool=my-pool \ + --provider=my-provider + +POSITIONAL ARGUMENTS + Workforce pool provider scim tenant resource - The SCIM tenant to + describe. The arguments in this group can be used to specify the + attributes of this resource. + + This must be specified. + + SCIM_TENANT + ID of the workforce pool provider scim tenant or fully qualified + identifier for the workforce pool provider scim tenant. + + To set the scim_tenant attribute: + ▸ provide the argument scim_tenant on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the workforce pool. + + To set the location attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --provider=PROVIDER + The ID to use for the workforce pool provider, which becomes the + final component of the resource name. This value must be unique + within the workforce pool, 4-32 characters in length, and may contain + the characters [a-z0-9-]. The prefix gcp- is reserved for use by + Google, and may not be specified. + + To set the provider attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --provider on the command line. + + --workforce-pool=WORKFORCE_POOL + The ID to use for the workforce pool, which becomes the final + component of the resource name. This value must be a globally unique + string of 6 to 63 lowercase letters, digits, or hyphens. It must + start with a letter, and cannot have a trailing hyphen. The prefix + gcp- is reserved for use by Google, and may not be specified. + + To set the workforce-pool attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --workforce-pool on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iam/ + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud iam workforce-pools providers scim-tenants describe + + $ gcloud alpha iam workforce-pools providers scim-tenants describe + diff --git a/gcloud/beta/iam/workforce-pools/providers/scim-tenants/help b/gcloud/beta/iam/workforce-pools/providers/scim-tenants/help new file mode 100644 index 000000000..32bd244cb --- /dev/null +++ b/gcloud/beta/iam/workforce-pools/providers/scim-tenants/help @@ -0,0 +1,53 @@ +NAME + gcloud beta iam workforce-pools providers scim-tenants - manage IAM + workforce identity pool provider SCIM tenants + +SYNOPSIS + gcloud beta iam workforce-pools providers scim-tenants GROUP | COMMAND + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Commands for creating, describing, listing, updating, and deleting + SCIM tenants associated with IAM workforce identity pool providers. SCIM + tenants enable automated user and group provisioning. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +GROUPS + GROUP is one of the following: + + tokens + (BETA) Manage IAM workforce identity pool provider SCIM tenant tokens. + +COMMANDS + COMMAND is one of the following: + + create + (BETA) Create an IAM workforce identity pool provider SCIM tenant. + + delete + (BETA) Delete an IAM workforce identity pool provider SCIM tenant. + + describe + (BETA) Describe an IAM workforce identity pool provider SCIM tenant. + + list + (BETA) List IAM workforce identity pool provider SCIM tenants. + + undelete + (BETA) Undelete an IAM workforce identity pool provider SCIM tenant. + + update + (BETA) Update an IAM workforce identity pool provider SCIM tenant. + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud iam workforce-pools providers scim-tenants + + $ gcloud alpha iam workforce-pools providers scim-tenants + diff --git a/gcloud/beta/iam/workforce-pools/providers/scim-tenants/list b/gcloud/beta/iam/workforce-pools/providers/scim-tenants/list new file mode 100644 index 000000000..b57084090 --- /dev/null +++ b/gcloud/beta/iam/workforce-pools/providers/scim-tenants/list @@ -0,0 +1,116 @@ +NAME + gcloud beta iam workforce-pools providers scim-tenants list - list IAM + workforce identity pool provider SCIM tenants + +SYNOPSIS + gcloud beta iam workforce-pools providers scim-tenants list + (--provider=PROVIDER + : --location=LOCATION --workforce-pool=WORKFORCE_POOL) + [--show-deleted] [--filter=EXPRESSION] [--limit=LIMIT] + [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) List all SCIM tenants associated with a specific workforce identity + pool provider. + +EXAMPLES + To list all SCIM tenants under provider my-okta-provider in pool my-pool + located in global: + + $ gcloud beta iam workforce-pools providers scim-tenants list \ + --location=global --workforce-pool=my-pool \ + --provider=my-okta-provider + + To list deleted SCIM tenants as well: + + $ gcloud beta iam workforce-pools providers scim-tenants list \ + --location=global --workforce-pool=my-pool \ + --provider=my-okta-provider --show-deleted + +REQUIRED FLAGS + Workforce pool provider resource - The workforce identity pool provider + under which to list SCIM tenants. The arguments in this group can be used + to specify the attributes of this resource. + + This must be specified. + + --provider=PROVIDER + ID of the workforce pool provider or fully qualified identifier for + the workforce pool provider. + + To set the provider attribute: + ▸ provide the argument --provider on the command line. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + The location for the workforce pool. + + To set the location attribute: + ▸ provide the argument --provider on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --workforce-pool=WORKFORCE_POOL + The ID to use for the workforce pool, which becomes the final + component of the resource name. This value must be a globally unique + string of 6 to 63 lowercase letters, digits, or hyphens. It must + start with a letter, and cannot have a trailing hyphen. The prefix + gcp- is reserved for use by Google, and may not be specified. + + To set the workforce-pool attribute: + ▸ provide the argument --provider on the command line with a fully + specified name; + ▸ provide the argument --workforce-pool on the command line. + +FLAGS + --show-deleted + Include SCIM tenants that have been deleted. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iam/ + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud iam workforce-pools providers scim-tenants list + + $ gcloud alpha iam workforce-pools providers scim-tenants list + diff --git a/gcloud/beta/iam/workforce-pools/providers/scim-tenants/tokens/create b/gcloud/beta/iam/workforce-pools/providers/scim-tenants/tokens/create new file mode 100644 index 000000000..9cca7590a --- /dev/null +++ b/gcloud/beta/iam/workforce-pools/providers/scim-tenants/tokens/create @@ -0,0 +1,111 @@ +NAME + gcloud beta iam workforce-pools providers scim-tenants tokens create - + create an IAM workforce identity pool provider SCIM tenant token + +SYNOPSIS + gcloud beta iam workforce-pools providers scim-tenants tokens create + (TOKEN : --location=LOCATION --provider=PROVIDER + --scim-tenant=SCIM_TENANT --workforce-pool=WORKFORCE_POOL) + [--display-name=DISPLAY_NAME] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Create a new SCIM token associated with a specific workforce + identity pool provider SCIM tenant. + + Upon successful creation, the command returns the created SCIM token + resource. + +EXAMPLES + To create a SCIM token with ID my-token under tenant my-tenant provider + my-provider in pool my-pool located in global: + + $ gcloud beta iam workforce-pools providers scim-tenants tokens \ + create my-token --location=global --workforce-pool=my-pool \ + --provider=my-provider --scim-tenant=my-tenant + +POSITIONAL ARGUMENTS + Workforce pool provider scim token resource - The ID of the SCIM token to + create. Must be 4-32 characters, alphanumeric ([a-z0-9-]), and cannot + start with gcp-. The arguments in this group can be used to specify the + attributes of this resource. + + This must be specified. + + TOKEN + ID of the workforce pool provider scim token or fully qualified + identifier for the workforce pool provider scim token. + + To set the token attribute: + ▸ provide the argument token on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the workforce pool. + + To set the location attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --provider=PROVIDER + The ID to use for the workforce pool provider, which becomes the + final component of the resource name. This value must be unique + within the workforce pool, 4-32 characters in length, and may contain + the characters [a-z0-9-]. The prefix gcp- is reserved for use by + Google, and may not be specified. + + To set the provider attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --provider on the command line. + + --scim-tenant=SCIM_TENANT + The ID for the SCIM tenant, which becomes the final component of the + resource name. This value must be 4-32 characters, alphanumeric + ([a-z0-9-]), and cannot start with gcp-. + + To set the scim-tenant attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --scim-tenant on the command line. + + --workforce-pool=WORKFORCE_POOL + The ID to use for the workforce pool, which becomes the final + component of the resource name. This value must be a globally unique + string of 6 to 63 lowercase letters, digits, or hyphens. It must + start with a letter, and cannot have a trailing hyphen. The prefix + gcp- is reserved for use by Google, and may not be specified. + + To set the workforce-pool attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --workforce-pool on the command line. + +FLAGS + --display-name=DISPLAY_NAME + Optional, user-specified display name for the SCIM token (max 32 + characters). + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iam/ + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud iam workforce-pools providers scim-tenants tokens create + + $ gcloud alpha iam workforce-pools providers scim-tenants tokens \ + create + diff --git a/gcloud/beta/iam/workforce-pools/providers/scim-tenants/tokens/delete b/gcloud/beta/iam/workforce-pools/providers/scim-tenants/tokens/delete new file mode 100644 index 000000000..60e706d76 --- /dev/null +++ b/gcloud/beta/iam/workforce-pools/providers/scim-tenants/tokens/delete @@ -0,0 +1,102 @@ +NAME + gcloud beta iam workforce-pools providers scim-tenants tokens delete - + delete an IAM workforce identity pool provider SCIM tenant token + +SYNOPSIS + gcloud beta iam workforce-pools providers scim-tenants tokens delete + (TOKEN : --location=LOCATION --provider=PROVIDER + --scim-tenant=SCIM_TENANT --workforce-pool=WORKFORCE_POOL) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Delete a SCIM token associated with a specific workforce identity + pool provider SCIM tenant. + +EXAMPLES + To delete a SCIM token with ID my-token under tenant my-tenant provider + my-provider in pool my-pool located in global: + + $ gcloud beta iam workforce-pools providers scim-tenants tokens \ + delete my-token --location=global --workforce-pool=my-pool \ + --provider=my-provider --scim-tenant=my-tenant + +POSITIONAL ARGUMENTS + Workforce pool provider scim token resource - The SCIM token to delete. + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + TOKEN + ID of the workforce pool provider scim token or fully qualified + identifier for the workforce pool provider scim token. + + To set the token attribute: + ▸ provide the argument token on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the workforce pool. + + To set the location attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --provider=PROVIDER + The ID to use for the workforce pool provider, which becomes the + final component of the resource name. This value must be unique + within the workforce pool, 4-32 characters in length, and may contain + the characters [a-z0-9-]. The prefix gcp- is reserved for use by + Google, and may not be specified. + + To set the provider attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --provider on the command line. + + --scim-tenant=SCIM_TENANT + The ID for the SCIM tenant, which becomes the final component of the + resource name. This value must be 4-32 characters, alphanumeric + ([a-z0-9-]), and cannot start with gcp-. + + To set the scim-tenant attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --scim-tenant on the command line. + + --workforce-pool=WORKFORCE_POOL + The ID to use for the workforce pool, which becomes the final + component of the resource name. This value must be a globally unique + string of 6 to 63 lowercase letters, digits, or hyphens. It must + start with a letter, and cannot have a trailing hyphen. The prefix + gcp- is reserved for use by Google, and may not be specified. + + To set the workforce-pool attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --workforce-pool on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iam/ + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud iam workforce-pools providers scim-tenants tokens delete + + $ gcloud alpha iam workforce-pools providers scim-tenants tokens \ + delete + diff --git a/gcloud/beta/iam/workforce-pools/providers/scim-tenants/tokens/describe b/gcloud/beta/iam/workforce-pools/providers/scim-tenants/tokens/describe new file mode 100644 index 000000000..ad7f631e5 --- /dev/null +++ b/gcloud/beta/iam/workforce-pools/providers/scim-tenants/tokens/describe @@ -0,0 +1,102 @@ +NAME + gcloud beta iam workforce-pools providers scim-tenants tokens describe - + describe an IAM workforce identity pool provider SCIM tenant token + +SYNOPSIS + gcloud beta iam workforce-pools providers scim-tenants tokens describe + (TOKEN : --location=LOCATION --provider=PROVIDER + --scim-tenant=SCIM_TENANT --workforce-pool=WORKFORCE_POOL) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Describe a SCIM token associated with a specific workforce identity + pool provider SCIM tenant. + +EXAMPLES + To describe a SCIM token with ID my-token under tenant my-tenant provider + my-provider in pool my-pool located in global: + + $ gcloud beta iam workforce-pools providers scim-tenants tokens \ + describe my-token --location=global --workforce-pool=my-pool \ + --provider=my-provider --scim-tenant=my-tenant + +POSITIONAL ARGUMENTS + Workforce pool provider scim token resource - The SCIM token to describe. + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + TOKEN + ID of the workforce pool provider scim token or fully qualified + identifier for the workforce pool provider scim token. + + To set the token attribute: + ▸ provide the argument token on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the workforce pool. + + To set the location attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --provider=PROVIDER + The ID to use for the workforce pool provider, which becomes the + final component of the resource name. This value must be unique + within the workforce pool, 4-32 characters in length, and may contain + the characters [a-z0-9-]. The prefix gcp- is reserved for use by + Google, and may not be specified. + + To set the provider attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --provider on the command line. + + --scim-tenant=SCIM_TENANT + The ID for the SCIM tenant, which becomes the final component of the + resource name. This value must be 4-32 characters, alphanumeric + ([a-z0-9-]), and cannot start with gcp-. + + To set the scim-tenant attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --scim-tenant on the command line. + + --workforce-pool=WORKFORCE_POOL + The ID to use for the workforce pool, which becomes the final + component of the resource name. This value must be a globally unique + string of 6 to 63 lowercase letters, digits, or hyphens. It must + start with a letter, and cannot have a trailing hyphen. The prefix + gcp- is reserved for use by Google, and may not be specified. + + To set the workforce-pool attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --workforce-pool on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iam/ + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud iam workforce-pools providers scim-tenants tokens describe + + $ gcloud alpha iam workforce-pools providers scim-tenants tokens \ + describe + diff --git a/gcloud/beta/iam/workforce-pools/providers/scim-tenants/tokens/help b/gcloud/beta/iam/workforce-pools/providers/scim-tenants/tokens/help new file mode 100644 index 000000000..26ef8d45c --- /dev/null +++ b/gcloud/beta/iam/workforce-pools/providers/scim-tenants/tokens/help @@ -0,0 +1,52 @@ +NAME + gcloud beta iam workforce-pools providers scim-tenants tokens - manage IAM + workforce identity pool provider SCIM tenant tokens + +SYNOPSIS + gcloud beta iam workforce-pools providers scim-tenants tokens COMMAND + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Commands for creating, describing, listing, updating, and deleting + SCIM tokens associated with IAM workforce identity pool provider SCIM + tenants. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + create + (BETA) Create an IAM workforce identity pool provider SCIM tenant + token. + + delete + (BETA) Delete an IAM workforce identity pool provider SCIM tenant + token. + + describe + (BETA) Describe an IAM workforce identity pool provider SCIM tenant + token. + + list + (BETA) List IAM workforce identity pool provider SCIM tenant tokens. + + undelete + (BETA) Undelete an IAM workforce identity pool provider SCIM tenant + token. + + update + (BETA) Update an IAM workforce identity pool provider SCIM tenant + token. + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud iam workforce-pools providers scim-tenants tokens + + $ gcloud alpha iam workforce-pools providers scim-tenants tokens + diff --git a/gcloud/beta/iam/workforce-pools/providers/scim-tenants/tokens/list b/gcloud/beta/iam/workforce-pools/providers/scim-tenants/tokens/list new file mode 100644 index 000000000..b7f750aa7 --- /dev/null +++ b/gcloud/beta/iam/workforce-pools/providers/scim-tenants/tokens/list @@ -0,0 +1,128 @@ +NAME + gcloud beta iam workforce-pools providers scim-tenants tokens list - list + IAM workforce identity pool provider SCIM tenant tokens + +SYNOPSIS + gcloud beta iam workforce-pools providers scim-tenants tokens list + (--scim-tenant=SCIM_TENANT : --location=LOCATION + --provider=PROVIDER --workforce-pool=WORKFORCE_POOL) [--show-deleted] + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) List all SCIM tokens associated with a specific workforce identity + pool provider SCIM tenant. + +EXAMPLES + To list all SCIM tokens under tenant my-tenant provider my-provider in pool + my-pool located in global: + + $ gcloud beta iam workforce-pools providers scim-tenants tokens \ + list --location=global --workforce-pool=my-pool \ + --provider=my-provider --scim-tenant=my-tenant + + To list deleted SCIM tokens as well: + + $ gcloud beta iam workforce-pools providers scim-tenants tokens \ + list --location=global --workforce-pool=my-pool \ + --provider=my-provider --scim-tenant=my-tenant --show-deleted + +REQUIRED FLAGS + Workforce pool provider scim tenant resource - The SCIM tenant to list + tokens for. The arguments in this group can be used to specify the + attributes of this resource. + + This must be specified. + + --scim-tenant=SCIM_TENANT + ID of the workforce pool provider scim tenant or fully qualified + identifier for the workforce pool provider scim tenant. + + To set the scim-tenant attribute: + ▸ provide the argument --scim-tenant on the command line. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + The location for the workforce pool. + + To set the location attribute: + ▸ provide the argument --scim-tenant on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + + --provider=PROVIDER + The ID to use for the workforce pool provider, which becomes the + final component of the resource name. This value must be unique + within the workforce pool, 4-32 characters in length, and may contain + the characters [a-z0-9-]. The prefix gcp- is reserved for use by + Google, and may not be specified. + + To set the provider attribute: + ▸ provide the argument --scim-tenant on the command line with a + fully specified name; + ▸ provide the argument --provider on the command line. + + --workforce-pool=WORKFORCE_POOL + The ID to use for the workforce pool, which becomes the final + component of the resource name. This value must be a globally unique + string of 6 to 63 lowercase letters, digits, or hyphens. It must + start with a letter, and cannot have a trailing hyphen. The prefix + gcp- is reserved for use by Google, and may not be specified. + + To set the workforce-pool attribute: + ▸ provide the argument --scim-tenant on the command line with a + fully specified name; + ▸ provide the argument --workforce-pool on the command line. + +FLAGS + --show-deleted + Include soft-deleted tokens in the results. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iam/ + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud iam workforce-pools providers scim-tenants tokens list + + $ gcloud alpha iam workforce-pools providers scim-tenants tokens list + diff --git a/gcloud/beta/iam/workforce-pools/providers/scim-tenants/tokens/undelete b/gcloud/beta/iam/workforce-pools/providers/scim-tenants/tokens/undelete new file mode 100644 index 000000000..95f9de9f3 --- /dev/null +++ b/gcloud/beta/iam/workforce-pools/providers/scim-tenants/tokens/undelete @@ -0,0 +1,102 @@ +NAME + gcloud beta iam workforce-pools providers scim-tenants tokens undelete - + undelete an IAM workforce identity pool provider SCIM tenant token + +SYNOPSIS + gcloud beta iam workforce-pools providers scim-tenants tokens undelete + (TOKEN : --location=LOCATION --provider=PROVIDER + --scim-tenant=SCIM_TENANT --workforce-pool=WORKFORCE_POOL) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Undelete a SCIM token associated with a specific workforce identity + pool provider SCIM tenant. + +EXAMPLES + To undelete a SCIM token with ID my-token under tenant my-tenant provider + my-provider in pool my-pool located in global: + + $ gcloud beta iam workforce-pools providers scim-tenants tokens \ + undelete my-token --location=global --workforce-pool=my-pool \ + --provider=my-provider --scim-tenant=my-tenant + +POSITIONAL ARGUMENTS + Workforce pool provider scim token resource - The SCIM token to undelete. + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + TOKEN + ID of the workforce pool provider scim token or fully qualified + identifier for the workforce pool provider scim token. + + To set the token attribute: + ▸ provide the argument token on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the workforce pool. + + To set the location attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --provider=PROVIDER + The ID to use for the workforce pool provider, which becomes the + final component of the resource name. This value must be unique + within the workforce pool, 4-32 characters in length, and may contain + the characters [a-z0-9-]. The prefix gcp- is reserved for use by + Google, and may not be specified. + + To set the provider attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --provider on the command line. + + --scim-tenant=SCIM_TENANT + The ID for the SCIM tenant, which becomes the final component of the + resource name. This value must be 4-32 characters, alphanumeric + ([a-z0-9-]), and cannot start with gcp-. + + To set the scim-tenant attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --scim-tenant on the command line. + + --workforce-pool=WORKFORCE_POOL + The ID to use for the workforce pool, which becomes the final + component of the resource name. This value must be a globally unique + string of 6 to 63 lowercase letters, digits, or hyphens. It must + start with a letter, and cannot have a trailing hyphen. The prefix + gcp- is reserved for use by Google, and may not be specified. + + To set the workforce-pool attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --workforce-pool on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iam/ + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud iam workforce-pools providers scim-tenants tokens undelete + + $ gcloud alpha iam workforce-pools providers scim-tenants tokens \ + undelete + diff --git a/gcloud/beta/iam/workforce-pools/providers/scim-tenants/tokens/update b/gcloud/beta/iam/workforce-pools/providers/scim-tenants/tokens/update new file mode 100644 index 000000000..67d19fba8 --- /dev/null +++ b/gcloud/beta/iam/workforce-pools/providers/scim-tenants/tokens/update @@ -0,0 +1,108 @@ +NAME + gcloud beta iam workforce-pools providers scim-tenants tokens update - + update an IAM workforce identity pool provider SCIM tenant token + +SYNOPSIS + gcloud beta iam workforce-pools providers scim-tenants tokens update + (TOKEN : --location=LOCATION --provider=PROVIDER + --scim-tenant=SCIM_TENANT --workforce-pool=WORKFORCE_POOL) + --display-name=DISPLAY_NAME [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Update an existing SCIM token associated with a specific workforce + identity pool provider SCIM tenant. + +EXAMPLES + To update the display name of a SCIM token with ID my-token under tenant + my-tenant provider my-provider in pool my-pool located in global: + + $ gcloud beta iam workforce-pools providers scim-tenants tokens \ + update my-token --location=global --workforce-pool=my-pool \ + --provider=my-provider --scim-tenant=my-tenant \ + --display-name="New display name" + +POSITIONAL ARGUMENTS + Workforce pool provider scim token resource - The SCIM token to update. + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + TOKEN + ID of the workforce pool provider scim token or fully qualified + identifier for the workforce pool provider scim token. + + To set the token attribute: + ▸ provide the argument token on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the workforce pool. + + To set the location attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --provider=PROVIDER + The ID to use for the workforce pool provider, which becomes the + final component of the resource name. This value must be unique + within the workforce pool, 4-32 characters in length, and may contain + the characters [a-z0-9-]. The prefix gcp- is reserved for use by + Google, and may not be specified. + + To set the provider attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --provider on the command line. + + --scim-tenant=SCIM_TENANT + The ID for the SCIM tenant, which becomes the final component of the + resource name. This value must be 4-32 characters, alphanumeric + ([a-z0-9-]), and cannot start with gcp-. + + To set the scim-tenant attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --scim-tenant on the command line. + + --workforce-pool=WORKFORCE_POOL + The ID to use for the workforce pool, which becomes the final + component of the resource name. This value must be a globally unique + string of 6 to 63 lowercase letters, digits, or hyphens. It must + start with a letter, and cannot have a trailing hyphen. The prefix + gcp- is reserved for use by Google, and may not be specified. + + To set the workforce-pool attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --workforce-pool on the command line. + +REQUIRED FLAGS + --display-name=DISPLAY_NAME + Optional, user-specified display name for the SCIM token (max 32 + characters). + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iam/ + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud iam workforce-pools providers scim-tenants tokens update + + $ gcloud alpha iam workforce-pools providers scim-tenants tokens \ + update + diff --git a/gcloud/beta/iam/workforce-pools/providers/scim-tenants/undelete b/gcloud/beta/iam/workforce-pools/providers/scim-tenants/undelete new file mode 100644 index 000000000..02f7c90e4 --- /dev/null +++ b/gcloud/beta/iam/workforce-pools/providers/scim-tenants/undelete @@ -0,0 +1,91 @@ +NAME + gcloud beta iam workforce-pools providers scim-tenants undelete - undelete + an IAM workforce identity pool provider SCIM tenant + +SYNOPSIS + gcloud beta iam workforce-pools providers scim-tenants undelete + (SCIM_TENANT : --location=LOCATION + --provider=PROVIDER --workforce-pool=WORKFORCE_POOL) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Undelete a previously deleted SCIM tenant associated with a specific + workforce identity pool provider, restoring it to an active state. + +EXAMPLES + To undelete a SCIM tenant with ID my-tenant under provider my-okta-provider + in pool my-pool located in global: + + $ gcloud beta iam workforce-pools providers scim-tenants undelete \ + my-tenant --location=global --workforce-pool=my-pool \ + --provider=my-okta-provider + +POSITIONAL ARGUMENTS + Workforce pool provider scim tenant resource - The SCIM tenant to + undelete. The arguments in this group can be used to specify the + attributes of this resource. + + This must be specified. + + SCIM_TENANT + ID of the workforce pool provider scim tenant or fully qualified + identifier for the workforce pool provider scim tenant. + + To set the scim_tenant attribute: + ▸ provide the argument scim_tenant on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the workforce pool. + + To set the location attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --provider=PROVIDER + The ID to use for the workforce pool provider, which becomes the + final component of the resource name. This value must be unique + within the workforce pool, 4-32 characters in length, and may contain + the characters [a-z0-9-]. The prefix gcp- is reserved for use by + Google, and may not be specified. + + To set the provider attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --provider on the command line. + + --workforce-pool=WORKFORCE_POOL + The ID to use for the workforce pool, which becomes the final + component of the resource name. This value must be a globally unique + string of 6 to 63 lowercase letters, digits, or hyphens. It must + start with a letter, and cannot have a trailing hyphen. The prefix + gcp- is reserved for use by Google, and may not be specified. + + To set the workforce-pool attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --workforce-pool on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iam/ + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud iam workforce-pools providers scim-tenants undelete + + $ gcloud alpha iam workforce-pools providers scim-tenants undelete + diff --git a/gcloud/beta/iam/workforce-pools/providers/scim-tenants/update b/gcloud/beta/iam/workforce-pools/providers/scim-tenants/update new file mode 100644 index 000000000..06c172a49 --- /dev/null +++ b/gcloud/beta/iam/workforce-pools/providers/scim-tenants/update @@ -0,0 +1,116 @@ +NAME + gcloud beta iam workforce-pools providers scim-tenants update - update an + IAM workforce identity pool provider SCIM tenant + +SYNOPSIS + gcloud beta iam workforce-pools providers scim-tenants update + (SCIM_TENANT : --location=LOCATION + --provider=PROVIDER --workforce-pool=WORKFORCE_POOL) + [--claim-mapping=[KEY=VALUE,...]] [--description=DESCRIPTION] + [--display-name=DISPLAY_NAME] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Update the configuration of an existing SCIM tenant associated with + a specific workforce identity pool provider. Only fields specified in the + command will be modified. + +EXAMPLES + To update the display name and description of a SCIM tenant with ID + my-tenant under provider my-okta-provider in pool my-pool located in + global: + + $ gcloud beta iam workforce-pools providers scim-tenants update \ + my-tenant --location=global --workforce-pool=my-pool \ + --provider=my-okta-provider \ + --display-name="Updated Tenant Name" \ + --description="New description" + + To update the claim mapping for the same tenant: + + $ gcloud beta iam workforce-pools providers scim-tenants update \ + my-tenant --location=global --workforce-pool=my-pool \ + --provider=my-okta-provider \ + --claim-mapping="google.subject=new_external_id,google.groups=al\ + l_groups" + +POSITIONAL ARGUMENTS + Workforce pool provider scim tenant resource - The SCIM tenant to update. + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + SCIM_TENANT + ID of the workforce pool provider scim tenant or fully qualified + identifier for the workforce pool provider scim tenant. + + To set the scim_tenant attribute: + ▸ provide the argument scim_tenant on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the workforce pool. + + To set the location attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --provider=PROVIDER + The ID to use for the workforce pool provider, which becomes the + final component of the resource name. This value must be unique + within the workforce pool, 4-32 characters in length, and may contain + the characters [a-z0-9-]. The prefix gcp- is reserved for use by + Google, and may not be specified. + + To set the provider attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --provider on the command line. + + --workforce-pool=WORKFORCE_POOL + The ID to use for the workforce pool, which becomes the final + component of the resource name. This value must be a globally unique + string of 6 to 63 lowercase letters, digits, or hyphens. It must + start with a letter, and cannot have a trailing hyphen. The prefix + gcp- is reserved for use by Google, and may not be specified. + + To set the workforce-pool attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --workforce-pool on the command line. + +FLAGS + --claim-mapping=[KEY=VALUE,...] + A comma-separated list of KEY=VALUE pairs defining attribute mappings. + + --description=DESCRIPTION + Optional, user-specified description for the SCIM tenant (max 256 + characters). + + --display-name=DISPLAY_NAME + Optional, user-specified display name for the SCIM tenant (max 32 + characters). + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iam/ + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud iam workforce-pools providers scim-tenants update + + $ gcloud alpha iam workforce-pools providers scim-tenants update + diff --git a/gcloud/beta/iam/workforce-pools/providers/update-oidc b/gcloud/beta/iam/workforce-pools/providers/update-oidc index 0d676347f..404fd60eb 100644 --- a/gcloud/beta/iam/workforce-pools/providers/update-oidc +++ b/gcloud/beta/iam/workforce-pools/providers/update-oidc @@ -14,6 +14,9 @@ SYNOPSIS [--web-sso-assertion-claims-behavior=WEB_SSO_ASSERTION_CLAIMS_BEHAVIOR] [--web-sso-response-type=WEB_SSO_RESPONSE_TYPE] [--clear-client-secret | --client-secret-value=CLIENT_SECRET_VALUE] + [--clear-extended-attributes-config + | --extended-attributes-client-id=EXTENDED_ATTRIBUTES_CLIENT_ID + --extended-attributes-client-secret-value=EXTENDED_ATTRIBUTES_CLIENT_SECRET_VALUE --extended-attributes-filter=EXTENDED_ATTRIBUTES_FILTER --extended-attributes-issuer-uri=EXTENDED_ATTRIBUTES_ISSUER_URI --extended-attributes-type=EXTENDED_ATTRIBUTES_TYPE] [--clear-extra-attributes-config | --extra-attributes-client-id=EXTRA_ATTRIBUTES_CLIENT_ID --extra-attributes-client-secret-value=EXTRA_ATTRIBUTES_CLIENT_SECRET_VALUE --extra-attributes-filter=EXTRA_ATTRIBUTES_FILTER --extra-attributes-issuer-uri=EXTRA_ATTRIBUTES_ISSUER_URI --extra-attributes-type=EXTRA_ATTRIBUTES_TYPE] @@ -263,6 +266,36 @@ FLAGS :: At most one of these can be specified: + *--clear-extended-attributes-config*::: + + Clear the extended attributes configuration. + + *--extended-attributes-client-id*=_EXTENDED_ATTRIBUTES_CLIENT_ID_::: + + The OAuth 2.0 client ID for retrieving extended attributes from the identity provider. Required to get extended group memberships for a subset of Google Cloud products. + + *--extended-attributes-client-secret-value*=_EXTENDED_ATTRIBUTES_CLIENT_SECRET_VALUE_::: + + The OAuth 2.0 client secret for retrieving extended attributes from the identity provider. Required to get extended group memberships for a subset of Google Cloud products. + + *--extended-attributes-filter*=_EXTENDED_ATTRIBUTES_FILTER_::: + + The filter used to request specific records from the IdP. By default, all of the groups that are associated with a user are fetched. For Microsoft Entra ID, you can add `$search` query parameters using [Keyword Query Language] (https://learn.microsoft.com/en-us/sharepoint/dev/general-development/keyword-query-language-kql-syntax-reference). To learn more about `$search` querying in Microsoft Entra ID, see [Use the `$search` query parameter] (https://learn.microsoft.com/en-us/graph/search-query-parameter). + + Additionally, Workforce Identity Federation automatically adds the following [`$filter` query parameters] (https://learn.microsoft.com/en-us/graph/filter-query-parameter), based on the value of `attributes_type`. Values passed to `filter` are converted to `$search` query parameters. Additional `$filter` query parameters cannot be added using this field. + + * `AZURE_AD_GROUPS_ID`: `securityEnabled` filter is applied. + + *--extended-attributes-issuer-uri*=_EXTENDED_ATTRIBUTES_ISSUER_URI_::: + + OIDC identity provider's issuer URI. Must be a valid URI using the `https` scheme. Required to get the OIDC discovery document. + + *--extended-attributes-type*=_EXTENDED_ATTRIBUTES_TYPE_::: + + Represents the identity provider and type of claims that should be fetched. _EXTENDED_ATTRIBUTES_TYPE_ must be (only one value is supported): *azure-ad-groups-id*. + + :: At most one of these can be specified: + *--clear-extra-attributes-config*::: Clear the extra attributes configuration. diff --git a/gcloud/beta/netapp/storage-pools/create b/gcloud/beta/netapp/storage-pools/create index ff379ac78..a5014340d 100644 --- a/gcloud/beta/netapp/storage-pools/create +++ b/gcloud/beta/netapp/storage-pools/create @@ -166,8 +166,8 @@ OPTIONAL FLAGS or not --hot-tier-size=HOT_TIER_SIZE - The hot tier size of the Storage Pool in GiB/s units. If no throughput - unit is specified, GiB/s is assumed. + The hot tier size of the Storage Pool in GiB units. This is a required + field when --allow-auto-tiering is set for flex service level. Kms config resource - The KMS config to attach to the Storage Pool. This represents a Cloud resource. (NOTE) Some attributes are not given diff --git a/gcloud/beta/netapp/storage-pools/update b/gcloud/beta/netapp/storage-pools/update index b77e30118..3e4efaec8 100644 --- a/gcloud/beta/netapp/storage-pools/update +++ b/gcloud/beta/netapp/storage-pools/update @@ -102,8 +102,8 @@ FLAGS auto resize --hot-tier-size=HOT_TIER_SIZE - The hot tier size of the Storage Pool in GiB/s units. If no throughput - unit is specified, GiB/s is assumed. + The hot tier size of the Storage Pool in GiB units. This is a required + field when --allow-auto-tiering is set for flex service level. --replica-zone=REPLICA_ZONE String indicating replica zone for the Storage Pool diff --git a/gcloud/beta/network-security/dns-threat-detectors/create b/gcloud/beta/network-security/dns-threat-detectors/create new file mode 100644 index 000000000..347ed3539 --- /dev/null +++ b/gcloud/beta/network-security/dns-threat-detectors/create @@ -0,0 +1,108 @@ +NAME + gcloud beta network-security dns-threat-detectors create - create a + DnsThreatDetector resource + +SYNOPSIS + gcloud beta network-security dns-threat-detectors create + (DNS_THREAT_DETECTOR : --location=LOCATION) --provider=PROVIDER + [--excluded-networks=[EXCLUDED_NETWORKS,...]] [--labels=[LABELS,...]] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Create a DnsThreatDetector resource. + +EXAMPLES + To create DnsThreatDetector resource my-dns-threat-detector, and using the + Infoblox threat detection engine, run: + + $ gcloud beta network-security dns-threat-detectors create \ + --location=global --provider=infoblox my-dns-threat-detector + +POSITIONAL ARGUMENTS + DnsThreatDetector resource - Identifier. Name of the DnsThreatDetector + resource. The arguments in this group can be used to specify the + attributes of this resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument dns_threat_detector on the command line with a + fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + DNS_THREAT_DETECTOR + ID of the dnsThreatDetector or fully qualified identifier for the + dnsThreatDetector. + + To set the dns_threat_detector attribute: + ▸ provide the argument dns_threat_detector on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location id of the dnsThreatDetector resource. + + To set the location attribute: + ▸ provide the argument dns_threat_detector on the command line with + a fully specified name; + ▸ provide the argument --location on the command line. + +REQUIRED FLAGS + --provider=PROVIDER + The provider used for DNS threat analysis. PROVIDER must be (only one + value is supported): + + infoblox + The Infoblox DNS threat detecter. + +OPTIONAL FLAGS + --excluded-networks=[EXCLUDED_NETWORKS,...] + A list of Network resource names which are exempt from the + configuration in this DnsThreatDetector. + + Example: projects/PROJECT_ID/global/networks/NETWORK_NAME. + + --labels=[LABELS,...] + Labels as key value pairs. + + KEY + Keys must start with a lowercase character and contain only hyphens + (-), underscores (_), lowercase characters, and numbers. + + VALUE + Values must contain only hyphens (-), underscores (_), lowercase + characters, and numbers. + + Shorthand Example: + + --labels=string=string + + JSON Example: + + --labels='{"string": "string"}' + + File Example: + + --labels=path_to_file.(yaml|json) + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1beta1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha network-security dns-threat-detectors create + diff --git a/gcloud/beta/network-security/dns-threat-detectors/delete b/gcloud/beta/network-security/dns-threat-detectors/delete new file mode 100644 index 000000000..a0ee924e9 --- /dev/null +++ b/gcloud/beta/network-security/dns-threat-detectors/delete @@ -0,0 +1,67 @@ +NAME + gcloud beta network-security dns-threat-detectors delete - delete a + DnsThreatDetector resource + +SYNOPSIS + gcloud beta network-security dns-threat-detectors delete + (DNS_THREAT_DETECTOR : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Delete a DnsThreatDetector resource. + +EXAMPLES + To delete DnsThreatDetector resource my-dns-threat-detector, run: + + $ gcloud beta network-security dns-threat-detectors delete \ + --location=global my-dns-threat-detector + +POSITIONAL ARGUMENTS + DnsThreatDetector resource - Name of the DnsThreatDetector resource. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument dns_threat_detector on the command line with a + fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + DNS_THREAT_DETECTOR + ID of the dnsThreatDetector or fully qualified identifier for the + dnsThreatDetector. + + To set the dns_threat_detector attribute: + ▸ provide the argument dns_threat_detector on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location id of the dnsThreatDetector resource. + + To set the location attribute: + ▸ provide the argument dns_threat_detector on the command line with + a fully specified name; + ▸ provide the argument --location on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1beta1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha network-security dns-threat-detectors delete + diff --git a/gcloud/beta/network-security/dns-threat-detectors/describe b/gcloud/beta/network-security/dns-threat-detectors/describe new file mode 100644 index 000000000..abb41926c --- /dev/null +++ b/gcloud/beta/network-security/dns-threat-detectors/describe @@ -0,0 +1,67 @@ +NAME + gcloud beta network-security dns-threat-detectors describe - describes a + DnsThreatDetector resource + +SYNOPSIS + gcloud beta network-security dns-threat-detectors describe + (DNS_THREAT_DETECTOR : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Gets details of a DnsThreatDetector resource. + +EXAMPLES + To get details of DnsThreatDetector resource my-dns-threat-detector, run: + + $ gcloud beta network-security dns-threat-detectors describe \ + --location=global my-dns-threat-detector + +POSITIONAL ARGUMENTS + DnsThreatDetector resource - Name of the DnsThreatDetector resource The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument dns_threat_detector on the command line with a + fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + DNS_THREAT_DETECTOR + ID of the dnsThreatDetector or fully qualified identifier for the + dnsThreatDetector. + + To set the dns_threat_detector attribute: + ▸ provide the argument dns_threat_detector on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location id of the dnsThreatDetector resource. + + To set the location attribute: + ▸ provide the argument dns_threat_detector on the command line with + a fully specified name; + ▸ provide the argument --location on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1beta1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha network-security dns-threat-detectors describe + diff --git a/gcloud/beta/network-security/dns-threat-detectors/help b/gcloud/beta/network-security/dns-threat-detectors/help new file mode 100644 index 000000000..1d4f41215 --- /dev/null +++ b/gcloud/beta/network-security/dns-threat-detectors/help @@ -0,0 +1,40 @@ +NAME + gcloud beta network-security dns-threat-detectors - manage Dns Threat + Detector resources + +SYNOPSIS + gcloud beta network-security dns-threat-detectors COMMAND + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Manage Dns Threat Detector resources. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + create + (BETA) Create a DnsThreatDetector resource. + + delete + (BETA) Delete a DnsThreatDetector resource. + + describe + (BETA) Describes a DnsThreatDetector resource. + + list + (BETA) Lists DnsThreatDetector resources. + + update + (BETA) Update a DnsThreatDetector resource. + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha network-security dns-threat-detectors + diff --git a/gcloud/beta/network-security/dns-threat-detectors/list b/gcloud/beta/network-security/dns-threat-detectors/list new file mode 100644 index 000000000..2ff005ba0 --- /dev/null +++ b/gcloud/beta/network-security/dns-threat-detectors/list @@ -0,0 +1,87 @@ +NAME + gcloud beta network-security dns-threat-detectors list - lists + DnsThreatDetector resources + +SYNOPSIS + gcloud beta network-security dns-threat-detectors list --location=LOCATION + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Lists all DnsThreatDetector resources. + +EXAMPLES + To list all DnsThreatDetector resources, run: + + $ gcloud beta network-security dns-threat-detectors list \ + --location=global + +REQUIRED FLAGS + Location resource - Parent value for ListDnsThreatDetectorsRequest This + represents a Cloud resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. + + To set the location attribute: + ▸ provide the argument --location on the command line. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1beta1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha network-security dns-threat-detectors list + diff --git a/gcloud/beta/network-security/dns-threat-detectors/update b/gcloud/beta/network-security/dns-threat-detectors/update new file mode 100644 index 000000000..e46cdfa0d --- /dev/null +++ b/gcloud/beta/network-security/dns-threat-detectors/update @@ -0,0 +1,173 @@ +NAME + gcloud beta network-security dns-threat-detectors update - update a + DnsThreatDetector resource + +SYNOPSIS + gcloud beta network-security dns-threat-detectors update + (DNS_THREAT_DETECTOR : --location=LOCATION) [--provider=PROVIDER] + [--excluded-networks=[EXCLUDED_NETWORKS,...] + | --add-excluded-networks=[ADD_EXCLUDED_NETWORKS,...] + --clear-excluded-networks + | --remove-excluded-networks=[REMOVE_EXCLUDED_NETWORKS,...]] + [--labels=[LABELS,...] + | --update-labels=[UPDATE_LABELS,...] --clear-labels + | --remove-labels=REMOVE_LABELS] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Update a DnsThreatDetector resource. + +EXAMPLES + To update DnsThreatDetector resource my-dns-threat-detector with an + additional excluded network, run: + + $ gcloud beta network-security dns-threat-detectors update \ + --location=global \ + --add-excluded-networks=projects/.../global/networks/\ + my-excluded-network my-dns-threat-detector + +POSITIONAL ARGUMENTS + DnsThreatDetector resource - Identifier. Name of the DnsThreatDetector + resource. The arguments in this group can be used to specify the + attributes of this resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument dns_threat_detector on the command line with a + fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + DNS_THREAT_DETECTOR + ID of the dnsThreatDetector or fully qualified identifier for the + dnsThreatDetector. + + To set the dns_threat_detector attribute: + ▸ provide the argument dns_threat_detector on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location id of the dnsThreatDetector resource. + + To set the location attribute: + ▸ provide the argument dns_threat_detector on the command line with + a fully specified name; + ▸ provide the argument --location on the command line. + +FLAGS + --provider=PROVIDER + The provider used for DNS threat analysis. PROVIDER must be (only one + value is supported): + + infoblox + The Infoblox DNS threat detecter. + + Update excluded_networks. + + At most one of these can be specified: + + --excluded-networks=[EXCLUDED_NETWORKS,...] + Set excluded_networks to new value. + + --add-excluded-networks=[ADD_EXCLUDED_NETWORKS,...] + Add new value to excluded_networks list. + + At most one of these can be specified: + + --clear-excluded-networks + Clear excluded_networks value and set to empty list. + + --remove-excluded-networks=[REMOVE_EXCLUDED_NETWORKS,...] + Remove existing value from excluded_networks list. + + Update labels. + + At most one of these can be specified: + + --labels=[LABELS,...] + Set labels to new value. Labels as key value pairs. + + KEY + Keys must start with a lowercase character and contain only + hyphens (-), underscores (_), lowercase characters, and numbers. + + VALUE + Values must contain only hyphens (-), underscores (_), lowercase + characters, and numbers. + + Shorthand Example: + + --labels=string=string + + JSON Example: + + --labels='{"string": "string"}' + + File Example: + + --labels=path_to_file.(yaml|json) + + --update-labels=[UPDATE_LABELS,...] + Update labels value or add key value pair. Labels as key value pairs. + + KEY + Keys must start with a lowercase character and contain only + hyphens (-), underscores (_), lowercase characters, and numbers. + + VALUE + Values must contain only hyphens (-), underscores (_), lowercase + characters, and numbers. + + Shorthand Example: + + --update-labels=string=string + + JSON Example: + + --update-labels='{"string": "string"}' + + File Example: + + --update-labels=path_to_file.(yaml|json) + + At most one of these can be specified: + + --clear-labels + Clear labels value and set to empty map. + + --remove-labels=REMOVE_LABELS + Remove existing value from map labels. Sets remove_labels value. + + Shorthand Example: + + --remove-labels=string,string + + JSON Example: + + --remove-labels=["string"] + + File Example: + + --remove-labels=path_to_file.(yaml|json) + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networksecurity/v1beta1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha network-security dns-threat-detectors update + diff --git a/gcloud/beta/network-security/help b/gcloud/beta/network-security/help index cb7bbc624..7d2ca65f9 100644 --- a/gcloud/beta/network-security/help +++ b/gcloud/beta/network-security/help @@ -30,6 +30,9 @@ GROUPS client-tls-policies (BETA) Manage Network Security ClientTlsPolicies. + dns-threat-detectors + (BETA) Manage Dns Threat Detector resources. + firewall-endpoint-associations (BETA) Create and manage Firewall Plus endpoint associations. diff --git a/gcloud/beta/run/deploy b/gcloud/beta/run/deploy index 597ac7cbc..c422fe7ba 100644 --- a/gcloud/beta/run/deploy +++ b/gcloud/beta/run/deploy @@ -445,7 +445,7 @@ FLAGS --gpu=GPU Cloud Run supports values 0 or 1. 1 gpu also requires a minimum 4 - --cpu value and a minimum 8Gi --memory value. + --cpu value and a minimum 16Gi --memory value. --liveness-probe=[KEY=VALUE,...] Comma separated settings for liveness probe in the form KEY=VALUE. diff --git a/gcloud/beta/run/jobs/create b/gcloud/beta/run/jobs/create index 3beefafdd..68ae6ae08 100644 --- a/gcloud/beta/run/jobs/create +++ b/gcloud/beta/run/jobs/create @@ -232,7 +232,7 @@ FLAGS --gpu=GPU Cloud Run supports values 0 or 1. 1 gpu also requires a minimum 4 - --cpu value and a minimum 8Gi --memory value. + --cpu value and a minimum 16Gi --memory value. --image=IMAGE Name of the container image to deploy (e.g. diff --git a/gcloud/beta/run/jobs/deploy b/gcloud/beta/run/jobs/deploy index 7f89b6dc4..6dcdb7149 100644 --- a/gcloud/beta/run/jobs/deploy +++ b/gcloud/beta/run/jobs/deploy @@ -238,7 +238,7 @@ FLAGS --gpu=GPU Cloud Run supports values 0 or 1. 1 gpu also requires a minimum 4 - --cpu value and a minimum 8Gi --memory value. + --cpu value and a minimum 16Gi --memory value. --memory=MEMORY Set a memory limit. Ex: 1024Mi, 4Gi. diff --git a/gcloud/beta/run/jobs/update b/gcloud/beta/run/jobs/update index 028072c16..51e100d90 100644 --- a/gcloud/beta/run/jobs/update +++ b/gcloud/beta/run/jobs/update @@ -249,7 +249,7 @@ FLAGS --gpu=GPU Cloud Run supports values 0 or 1. 1 gpu also requires a minimum 4 - --cpu value and a minimum 8Gi --memory value. + --cpu value and a minimum 16Gi --memory value. --image=IMAGE Name of the container image to deploy (e.g. diff --git a/gcloud/beta/run/multi-region-services/update b/gcloud/beta/run/multi-region-services/update index 801436edc..fc4377019 100644 --- a/gcloud/beta/run/multi-region-services/update +++ b/gcloud/beta/run/multi-region-services/update @@ -382,7 +382,7 @@ FLAGS --gpu=GPU Cloud Run supports values 0 or 1. 1 gpu also requires a minimum 4 - --cpu value and a minimum 8Gi --memory value. + --cpu value and a minimum 16Gi --memory value. --image=IMAGE Name of the container image to deploy (e.g. diff --git a/gcloud/beta/run/services/update b/gcloud/beta/run/services/update index a0e5ed453..051a568cd 100644 --- a/gcloud/beta/run/services/update +++ b/gcloud/beta/run/services/update @@ -408,7 +408,7 @@ FLAGS --gpu=GPU Cloud Run supports values 0 or 1. 1 gpu also requires a minimum 4 - --cpu value and a minimum 8Gi --memory value. + --cpu value and a minimum 16Gi --memory value. --image=IMAGE Name of the container image to deploy (e.g. diff --git a/gcloud/beta/secrets/create b/gcloud/beta/secrets/create index 9b0898dbf..4d5a7a02b 100644 --- a/gcloud/beta/secrets/create +++ b/gcloud/beta/secrets/create @@ -5,8 +5,8 @@ SYNOPSIS gcloud beta secrets create SECRET [--data-file=PATH] [--labels=[KEY=VALUE,...]] [--location=LOCATION] [--regional-kms-key-name=KMS-KEY-NAME] - [--set-annotations=[KEY=VALUE,...]] [--topics=[TOPICS,...]] - [--version-destroy-ttl=VERSION-DESTROY-TTL] + [--set-annotations=[KEY=VALUE,...]] [--tags=[KEY=VALUE,...]] + [--topics=[TOPICS,...]] [--version-destroy-ttl=VERSION-DESTROY-TTL] [--expire-time=EXPIRE-TIME | --ttl=TTL] [--next-rotation-time=NEXT_ROTATION_TIME --rotation-period=ROTATION_PERIOD] @@ -137,6 +137,12 @@ FLAGS List of key-value pairs to set as Annotations. All existing Annotations will be removed first. + --tags=[KEY=VALUE,...] + List of tags KEY=VALUE pairs to bind. Each item must be expressed as + =. + + Example: 123/environment=production,123/costCenter=marketing + --topics=[TOPICS,...] List of Pub/Sub topics to configure on the secret. diff --git a/gcloud/beta/sql/backups/restore b/gcloud/beta/sql/backups/restore index 1274061ae..81449bfac 100644 --- a/gcloud/beta/sql/backups/restore +++ b/gcloud/beta/sql/backups/restore @@ -217,8 +217,10 @@ OPTIONAL FLAGS Allowed range: 0 to 20. --insights-config-query-string-length=INSIGHTS_CONFIG_QUERY_STRING_LENGTH - Query string length in bytes to be stored by the query insights - feature. Default length is 1024 bytes. Allowed range: 256 to 4500 + Sets the default query length limit. For Cloud SQL Enterprise edition, + the range is from 256 to 4500 (in bytes) and the default query length + is 1024 bytes. For Cloud SQL Enterprise Plus edition, the range is from + 1024 to 100,000 (in bytes) and the default query length is 10,000 bytes. --insights-config-record-application-tags diff --git a/gcloud/beta/sql/instances/create b/gcloud/beta/sql/instances/create index d8548705f..744e2abe4 100644 --- a/gcloud/beta/sql/instances/create +++ b/gcloud/beta/sql/instances/create @@ -318,8 +318,10 @@ FLAGS Allowed range: 0 to 20. --insights-config-query-string-length=INSIGHTS_CONFIG_QUERY_STRING_LENGTH - Query string length in bytes to be stored by the query insights - feature. Default length is 1024 bytes. Allowed range: 256 to 4500 + Sets the default query length limit. For Cloud SQL Enterprise edition, + the range is from 256 to 4500 (in bytes) and the default query length + is 1024 bytes. For Cloud SQL Enterprise Plus edition, the range is from + 1024 to 100,000 (in bytes) and the default query length is 10,000 bytes. --[no-]insights-config-record-application-tags @@ -340,9 +342,9 @@ FLAGS CLOUD_SQL_INSTANCE A primary instance. READ_POOL_INSTANCE - A read pool. + A read pool instance. READ_REPLICA_INSTANCE - A read replica. + A read replica instance. --labels=[KEY=VALUE,...] List of label KEY=VALUE pairs to add. diff --git a/gcloud/beta/sql/instances/patch b/gcloud/beta/sql/instances/patch index a2ec7e569..049dcf475 100644 --- a/gcloud/beta/sql/instances/patch +++ b/gcloud/beta/sql/instances/patch @@ -73,6 +73,8 @@ SYNOPSIS [--clear-labels | --remove-labels=[KEY,...]] [--clear-psc-auto-connections | --psc-auto-connections=[network=NETWORK],[project=PROJECT]] + [--clear-psc-network-attachment-uri + | --psc-network-attachment-uri=PSC_NETWORK_ATTACHMENT_URI] [--gce-zone=GCE_ZONE | --secondary-zone=SECONDARY_ZONE --zone=ZONE] [--no-backup | --backup-location=BACKUP_LOCATION --backup-start-time=BACKUP_START_TIME @@ -283,8 +285,10 @@ FLAGS Allowed range: 0 to 20. --insights-config-query-string-length=INSIGHTS_CONFIG_QUERY_STRING_LENGTH - Query string length in bytes to be stored by the query insights - feature. Default length is 1024 bytes. Allowed range: 256 to 4500 + Sets the default query length limit. For Cloud SQL Enterprise edition, + the range is from 256 to 4500 (in bytes) and the default query length + is 1024 bytes. For Cloud SQL Enterprise Plus edition, the range is from + 1024 to 100,000 (in bytes) and the default query length is 10,000 bytes. --[no-]insights-config-record-application-tags @@ -305,9 +309,9 @@ FLAGS CLOUD_SQL_INSTANCE A primary instance. READ_POOL_INSTANCE - A read pool. + A read pool instance. READ_REPLICA_INSTANCE - A read replica. + A read replica instance. --maintenance-release-channel=MAINTENANCE_RELEASE_CHANNEL Which channel's updates to apply during the maintenance window. If not @@ -646,6 +650,18 @@ FLAGS --psc-auto-connections=path_to_file.(yaml|json) + At most one of these can be specified: + + --clear-psc-network-attachment-uri + Disable outbound connectivity from a Cloud SQL instance which uses + Private Service Connect (PSC). + + --psc-network-attachment-uri=PSC_NETWORK_ATTACHMENT_URI + Full URI of the network attachment that is configured to support + outbound connectivity from a Cloud SQL instance which uses Private + Service Connect (PSC). For example, this would be of the + form:--psc-network-attachment-uri=projects/test-project/regions/us-central1/networkAttachments/my-na + At most one of these can be specified: --gce-zone=GCE_ZONE diff --git a/gcloud/beta/workbench/instances/create b/gcloud/beta/workbench/instances/create index d27eef00b..160481b02 100644 --- a/gcloud/beta/workbench/instances/create +++ b/gcloud/beta/workbench/instances/create @@ -3,8 +3,9 @@ NAME SYNOPSIS gcloud beta workbench instances create (INSTANCE : --location=LOCATION) - [--async] [--disable-proxy-access] [--enable-third-party-identity] - [--instance-owners=INSTANCE_OWNERS] [--labels=[KEY=VALUE,...]] + [--async] [--disable-proxy-access] [--enable-managed-euc] + [--enable-third-party-identity] [--instance-owners=INSTANCE_OWNERS] + [--labels=[KEY=VALUE,...]] [--confidential-compute-type=CONFIDENTIAL_COMPUTE_TYPE --disable-public-ip --enable-ip-forwarding --machine-type=MACHINE_TYPE; default="n1-standard-4" @@ -116,6 +117,10 @@ FLAGS --disable-proxy-access If true, the notebook instance will not register with the proxy. + --enable-managed-euc + If true, the notebook instance will be created with managed end user + credentials enabled. + --enable-third-party-identity If true, the notebook instance provide a proxy endpoint which allows for third party identity. diff --git a/gcloud/bms/instances/update b/gcloud/bms/instances/update index 726d372f4..58f9291a3 100644 --- a/gcloud/bms/instances/update +++ b/gcloud/bms/instances/update @@ -68,6 +68,10 @@ FLAGS --os-image=OS_IMAGE OS image to install on the server. + To list all OS image codes supported by BMS, run: + + $ gcloud bms os-images list + --update-labels=[KEY=VALUE,...] List of label KEY=VALUE pairs to update. If a label exists, its value is modified. Otherwise, a new label is created. diff --git a/gcloud/eventarc/enrollments/create b/gcloud/eventarc/enrollments/create new file mode 100644 index 000000000..dbc7d4bef --- /dev/null +++ b/gcloud/eventarc/enrollments/create @@ -0,0 +1,129 @@ +NAME + gcloud eventarc enrollments create - create an Eventarc enrollment + +SYNOPSIS + gcloud eventarc enrollments create (ENROLLMENT : --location=LOCATION) + --cel-match=CEL_MATCH --destination-pipeline=DESTINATION_PIPELINE + (--message-bus=MESSAGE_BUS : --message-bus-project=MESSAGE_BUS_PROJECT) + [--async] [--labels=[KEY=VALUE,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Create an Eventarc enrollment. + +EXAMPLES + To create a new enrollment my-enrollment in location us-central1 for + message-bus my-message-bus with cel matching expression message.type == + "google.cloud.pubsub.topic.v1.messagePublished" and destination pipeline + my-pipeline, run: + + $ gcloud eventarc enrollments create my-enrollment \ + --location=us-central1 --message-bus=my-message-bus \ + --cel-match="message.type == \ + 'google.cloud.pubsub.topic.v1.messagePublished'" \ + --destination-pipeline=my-pipeline + +POSITIONAL ARGUMENTS + Enrollment resource - The enrollment to create. The arguments in this + group can be used to specify the attributes of this resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. + + To set the project attribute: + ◆ provide the argument enrollment on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + ENROLLMENT + ID of the enrollment or fully qualified identifier for the + enrollment. + + To set the enrollment attribute: + ▸ provide the argument enrollment on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the Eventarc enrollment, which should be one of the + supported regions. Alternatively, set the [eventarc/location] + property. + + To set the location attribute: + ▸ provide the argument enrollment on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property eventarc/location. + +REQUIRED FLAGS + --cel-match=CEL_MATCH + The cel match expression for the enrollment. + + --destination-pipeline=DESTINATION_PIPELINE + ID of the destination pipeline or fully qualified identifier for the + destination pipeline. + + To set the pipeline attribute: + ◆ provide the argument --destination-pipeline on the command line. + + Message bus resource - The message bus to which the enrollment attaches. + The arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the location attribute: + ◆ provide the argument --message-bus on the command line with a fully + specified name; + ◆ provide the argument --location on the command line; + ◆ set the property eventarc/location. + + This must be specified. + + --message-bus=MESSAGE_BUS + ID of the message bus or fully qualified identifier for the message + bus. + + To set the message-bus attribute: + ▸ provide the argument --message-bus on the command line. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --message-bus-project=MESSAGE_BUS_PROJECT + Project ID of the Google Cloud project for the message bus. + + To set the project attribute: + ▸ provide the argument --message-bus on the command line with a + fully specified name; + ▸ provide the argument --message-bus-project on the command line; + ▸ provide the argument --project on the command line; + ▸ set the property core/project. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --labels=[KEY=VALUE,...] + List of label KEY=VALUE pairs to add. + + Keys must start with a lowercase character and contain only hyphens + (-), underscores (_), lowercase characters, and numbers. Values must + contain only hyphens (-), underscores (_), lowercase characters, and + numbers. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This variant is also available: + + $ gcloud beta eventarc enrollments create + diff --git a/gcloud/eventarc/enrollments/delete b/gcloud/eventarc/enrollments/delete new file mode 100644 index 000000000..22638c05e --- /dev/null +++ b/gcloud/eventarc/enrollments/delete @@ -0,0 +1,69 @@ +NAME + gcloud eventarc enrollments delete - delete an Eventarc enrollment + +SYNOPSIS + gcloud eventarc enrollments delete (ENROLLMENT : --location=LOCATION) + [--async] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Delete an Eventarc enrollment. + +EXAMPLES + To delete the enrollment my-enrollment in location us-central1, run: + + $ gcloud eventarc enrollments delete my-enrollment \ + --location=us-central1 + +POSITIONAL ARGUMENTS + Enrollment resource - Enrollment to delete. The arguments in this group + can be used to specify the attributes of this resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. + + To set the project attribute: + ◆ provide the argument enrollment on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + ENROLLMENT + ID of the enrollment or fully qualified identifier for the + enrollment. + + To set the enrollment attribute: + ▸ provide the argument enrollment on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the Eventarc enrollment, which should be one of the + supported regions. Alternatively, set the [eventarc/location] + property. + + To set the location attribute: + ▸ provide the argument enrollment on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property eventarc/location. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This variant is also available: + + $ gcloud beta eventarc enrollments delete + diff --git a/gcloud/eventarc/enrollments/describe b/gcloud/eventarc/enrollments/describe new file mode 100644 index 000000000..dc0ce2417 --- /dev/null +++ b/gcloud/eventarc/enrollments/describe @@ -0,0 +1,64 @@ +NAME + gcloud eventarc enrollments describe - describe an Eventarc enrollment + +SYNOPSIS + gcloud eventarc enrollments describe (ENROLLMENT : --location=LOCATION) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Describe an Eventarc enrollment. + +EXAMPLES + To describe the enrollment my-enrollment in location us-central1, run: + + $ gcloud eventarc enrollments describe my-enrollment \ + --location=us-central1 + +POSITIONAL ARGUMENTS + Enrollment resource - Enrollment to describe. The arguments in this group + can be used to specify the attributes of this resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. + + To set the project attribute: + ◆ provide the argument enrollment on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + ENROLLMENT + ID of the enrollment or fully qualified identifier for the + enrollment. + + To set the enrollment attribute: + ▸ provide the argument enrollment on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the Eventarc enrollment, which should be one of the + supported regions. Alternatively, set the [eventarc/location] + property. + + To set the location attribute: + ▸ provide the argument enrollment on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property eventarc/location. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This variant is also available: + + $ gcloud beta eventarc enrollments describe + diff --git a/gcloud/eventarc/enrollments/help b/gcloud/eventarc/enrollments/help new file mode 100644 index 000000000..4a9612a16 --- /dev/null +++ b/gcloud/eventarc/enrollments/help @@ -0,0 +1,37 @@ +NAME + gcloud eventarc enrollments - manage Eventarc enrollments + +SYNOPSIS + gcloud eventarc enrollments COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Manage Eventarc enrollments. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + create + Create an Eventarc enrollment. + + delete + Delete an Eventarc enrollment. + + describe + Describe an Eventarc enrollment. + + list + List Eventarc enrollments. + + update + Update an Eventarc enrollment. + +NOTES + This variant is also available: + + $ gcloud beta eventarc enrollments + diff --git a/gcloud/eventarc/enrollments/list b/gcloud/eventarc/enrollments/list new file mode 100644 index 000000000..35da38c3a --- /dev/null +++ b/gcloud/eventarc/enrollments/list @@ -0,0 +1,92 @@ +NAME + gcloud eventarc enrollments list - list Eventarc enrollments + +SYNOPSIS + gcloud eventarc enrollments list [--location=LOCATION] + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + List Eventarc enrollments. + +EXAMPLES + To list all enrollments in location us-central1, run: + + $ gcloud eventarc enrollments list --location=us-central1 + + To list all enrollments in all locations, run: + + $ gcloud eventarc enrollments list --location=- + + or + + $ gcloud eventarc enrollments list + +FLAGS + Location resource - The location for which to list enrollments. This + should be one of the supported regions. This represents a Cloud resource. + (NOTE) Some attributes are not given arguments in this group but can be + set in other ways. + + To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ set the property eventarc/location with a fully specified name; + ◆ use '-' location to aggregate results for all Eventarc locations with + a fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. + + To set the location attribute: + ▸ provide the argument --location on the command line; + ▸ set the property eventarc/location; + ▸ use '-' location to aggregate results for all Eventarc locations. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This variant is also available: + + $ gcloud beta eventarc enrollments list + diff --git a/gcloud/eventarc/enrollments/update b/gcloud/eventarc/enrollments/update new file mode 100644 index 000000000..3afd09422 --- /dev/null +++ b/gcloud/eventarc/enrollments/update @@ -0,0 +1,113 @@ +NAME + gcloud eventarc enrollments update - update an Eventarc enrollment + +SYNOPSIS + gcloud eventarc enrollments update (ENROLLMENT : --location=LOCATION) + [--async] [--cel-match=CEL_MATCH] + [--destination-pipeline=DESTINATION_PIPELINE] + [--update-labels=[KEY=VALUE,...]] + [--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Update an Eventarc enrollment. + +EXAMPLES + To update the enrollment my-enrollment with a new CEL expression + message.type == 'google.cloud.pubsub.topic.v1.messagePublished', run: + + $ gcloud eventarc enrollments update my-enrollment \ + --location=us-central1 \ + --cel-match="message.type == \ + 'google.cloud.pubsub.topic.v1.messagePublished'" + +POSITIONAL ARGUMENTS + Enrollment resource - The enrollment to update. The arguments in this + group can be used to specify the attributes of this resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. + + To set the project attribute: + ◆ provide the argument enrollment on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + ENROLLMENT + ID of the enrollment or fully qualified identifier for the + enrollment. + + To set the enrollment attribute: + ▸ provide the argument enrollment on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the Eventarc enrollment, which should be one of the + supported regions. Alternatively, set the [eventarc/location] + property. + + To set the location attribute: + ▸ provide the argument enrollment on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property eventarc/location. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --cel-match=CEL_MATCH + The cel match expression for the enrollment. + + --destination-pipeline=DESTINATION_PIPELINE + ID of the pipeline or fully qualified identifier for the pipeline. + + To set the pipeline attribute: + ◆ provide the argument --destination-pipeline on the command line. + + --update-labels=[KEY=VALUE,...] + List of label KEY=VALUE pairs to update. If a label exists, its value + is modified. Otherwise, a new label is created. + + Keys must start with a lowercase character and contain only hyphens + (-), underscores (_), lowercase characters, and numbers. Values must + contain only hyphens (-), underscores (_), lowercase characters, and + numbers. + + At most one of these can be specified: + + --clear-labels + Remove all labels. If --update-labels is also specified then + --clear-labels is applied first. + + For example, to remove all labels: + + $ gcloud eventarc enrollments update --clear-labels + + To remove all existing labels and create two new labels, foo and baz: + + $ gcloud eventarc enrollments update --clear-labels \ + --update-labels foo=bar,baz=qux + + --remove-labels=[KEY,...] + List of label keys to remove. If a label does not exist it is + silently ignored. If --update-labels is also specified then + --update-labels is applied first. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This variant is also available: + + $ gcloud beta eventarc enrollments update + diff --git a/gcloud/eventarc/google-api-sources/create b/gcloud/eventarc/google-api-sources/create new file mode 100644 index 000000000..a744521c5 --- /dev/null +++ b/gcloud/eventarc/google-api-sources/create @@ -0,0 +1,129 @@ +NAME + gcloud eventarc google-api-sources create - create an Eventarc Google API + source + +SYNOPSIS + gcloud eventarc google-api-sources create + (GOOGLE_API_SOURCE : --location=LOCATION) + (--destination-message-bus=DESTINATION_MESSAGE_BUS + : --destination-message-bus-project=DESTINATION_MESSAGE_BUS_PROJECT) + [--async] [--crypto-key=CRYPTO_KEY] [--labels=[KEY=VALUE,...]] + [--logging-config=LOGGING_CONFIG] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Create an Eventarc Google API source. + +EXAMPLES + To create a new Google API source my-google-api-source in location + us-central1 with a destination message bus my-message-bus, run: + + $ gcloud eventarc google-api-sources create my-google-api-source \ + --location=us-central1 --destination-message-bus=my-message-bus + +POSITIONAL ARGUMENTS + Google API source resource - The Google API source to create. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument google_api_source on the command line with a + fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + GOOGLE_API_SOURCE + ID of the Google API source or fully qualified identifier for the + Google API source. + + To set the google-api-source attribute: + ▸ provide the argument google_api_source on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the Eventarc Google API source, which should be one + of the supported regions. Alternatively, set the [eventarc/location] + property. + + To set the location attribute: + ▸ provide the argument google_api_source on the command line with a + fully specified name; + ▸ provide the argument --location on the command line; + ▸ set the property eventarc/location. + +REQUIRED FLAGS + Message bus resource - The destination message bus of the Google API + source. The arguments in this group can be used to specify the attributes + of this resource. (NOTE) Some attributes are not given arguments in this + group but can be set in other ways. + + To set the location attribute: + ◆ provide the argument --destination-message-bus on the command line + with a fully specified name; + ◆ provide the argument --location on the command line; + ◆ set the property eventarc/location. + + This must be specified. + + --destination-message-bus=DESTINATION_MESSAGE_BUS + ID of the message bus or fully qualified identifier for the message + bus. + + To set the message-bus attribute: + ▸ provide the argument --destination-message-bus on the command + line. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --destination-message-bus-project=DESTINATION_MESSAGE_BUS_PROJECT + Project ID of the Google Cloud project for the message bus. + + To set the project attribute: + ▸ provide the argument --destination-message-bus on the command + line with a fully specified name; + ▸ provide the argument --destination-message-bus-project on the + command line; + ▸ provide the argument --project on the command line; + ▸ set the property core/project. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --crypto-key=CRYPTO_KEY + Fully qualified name of the crypto key to use for customer-managed + encryption. If this is unspecified, Google-managed keys will be used + for encryption. + + --labels=[KEY=VALUE,...] + List of label KEY=VALUE pairs to add. + + Keys must start with a lowercase character and contain only hyphens + (-), underscores (_), lowercase characters, and numbers. Values must + contain only hyphens (-), underscores (_), lowercase characters, and + numbers. + + --logging-config=LOGGING_CONFIG + The logging config for the Google API source. LOGGING_CONFIG must be + one of: NONE, DEBUG, INFO, NOTICE, WARNING, ERROR, CRITICAL, ALERT, + EMERGENCY. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This variant is also available: + + $ gcloud beta eventarc google-api-sources create + diff --git a/gcloud/eventarc/google-api-sources/delete b/gcloud/eventarc/google-api-sources/delete new file mode 100644 index 000000000..f0b94806c --- /dev/null +++ b/gcloud/eventarc/google-api-sources/delete @@ -0,0 +1,72 @@ +NAME + gcloud eventarc google-api-sources delete - delete an Eventarc Google API + source + +SYNOPSIS + gcloud eventarc google-api-sources delete + (GOOGLE_API_SOURCE : --location=LOCATION) [--async] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Delete an Eventarc Google API source. + +EXAMPLES + To delete the Google API source my-google-api-source in location + us-central1, run: + + $ gcloud eventarc google-api-sources delete my-google-api-source \ + --location=us-central1 + +POSITIONAL ARGUMENTS + Google API source resource - Google API source to delete. The arguments in + this group can be used to specify the attributes of this resource. (NOTE) + Some attributes are not given arguments in this group but can be set in + other ways. + + To set the project attribute: + ◆ provide the argument google_api_source on the command line with a + fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + GOOGLE_API_SOURCE + ID of the Google API source or fully qualified identifier for the + Google API source. + + To set the google-api-source attribute: + ▸ provide the argument google_api_source on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the Eventarc Google API source, which should be one + of the supported regions. Alternatively, set the [eventarc/location] + property. + + To set the location attribute: + ▸ provide the argument google_api_source on the command line with a + fully specified name; + ▸ provide the argument --location on the command line; + ▸ set the property eventarc/location. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This variant is also available: + + $ gcloud beta eventarc google-api-sources delete + diff --git a/gcloud/eventarc/google-api-sources/describe b/gcloud/eventarc/google-api-sources/describe new file mode 100644 index 000000000..26358a978 --- /dev/null +++ b/gcloud/eventarc/google-api-sources/describe @@ -0,0 +1,66 @@ +NAME + gcloud eventarc google-api-sources describe - describe an Eventarc Google + API source + +SYNOPSIS + gcloud eventarc google-api-sources describe + (GOOGLE_API_SOURCE : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Describe an Eventarc Google API source. + +EXAMPLES + To describe the google API source my-google-api-source in location + us-central1, run: + + $ gcloud eventarc google-api-sources describe my-google-api-source \ + --location=us-central1 + +POSITIONAL ARGUMENTS + Google API source resource - Google API source to describe. The arguments + in this group can be used to specify the attributes of this resource. + (NOTE) Some attributes are not given arguments in this group but can be + set in other ways. + + To set the project attribute: + ◆ provide the argument google_api_source on the command line with a + fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + GOOGLE_API_SOURCE + ID of the Google API source or fully qualified identifier for the + Google API source. + + To set the google-api-source attribute: + ▸ provide the argument google_api_source on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the Eventarc Google API source, which should be one + of the supported regions. Alternatively, set the [eventarc/location] + property. + + To set the location attribute: + ▸ provide the argument google_api_source on the command line with a + fully specified name; + ▸ provide the argument --location on the command line; + ▸ set the property eventarc/location. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This variant is also available: + + $ gcloud beta eventarc google-api-sources describe + diff --git a/gcloud/eventarc/google-api-sources/help b/gcloud/eventarc/google-api-sources/help new file mode 100644 index 000000000..aab4bcaab --- /dev/null +++ b/gcloud/eventarc/google-api-sources/help @@ -0,0 +1,37 @@ +NAME + gcloud eventarc google-api-sources - manage Eventarc Google API sources + +SYNOPSIS + gcloud eventarc google-api-sources COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Manage Eventarc Google API sources. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + create + Create an Eventarc Google API source. + + delete + Delete an Eventarc Google API source. + + describe + Describe an Eventarc Google API source. + + list + List Eventarc Google API sources. + + update + Update an Eventarc Google API source. + +NOTES + This variant is also available: + + $ gcloud beta eventarc google-api-sources + diff --git a/gcloud/eventarc/google-api-sources/list b/gcloud/eventarc/google-api-sources/list new file mode 100644 index 000000000..d27ad17a2 --- /dev/null +++ b/gcloud/eventarc/google-api-sources/list @@ -0,0 +1,92 @@ +NAME + gcloud eventarc google-api-sources list - list Eventarc Google API sources + +SYNOPSIS + gcloud eventarc google-api-sources list [--location=LOCATION] + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + List Eventarc Google API sources. + +EXAMPLES + To list all Google API sources in location us-central1, run: + + $ gcloud eventarc google-api-sources list --location=us-central1 + + To list all Google API sources in all locations, run: + + $ gcloud eventarc google-api-sources list --location=- + + or + + $ gcloud eventarc google-api-sources list + +FLAGS + Location resource - The location for which to list Google API sources. + This should be one of the supported regions. This represents a Cloud + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ set the property eventarc/location with a fully specified name; + ◆ use '-' location to aggregate results for all Eventarc locations with + a fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. + + To set the location attribute: + ▸ provide the argument --location on the command line; + ▸ set the property eventarc/location; + ▸ use '-' location to aggregate results for all Eventarc locations. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This variant is also available: + + $ gcloud beta eventarc google-api-sources list + diff --git a/gcloud/eventarc/google-api-sources/update b/gcloud/eventarc/google-api-sources/update new file mode 100644 index 000000000..85853471b --- /dev/null +++ b/gcloud/eventarc/google-api-sources/update @@ -0,0 +1,169 @@ +NAME + gcloud eventarc google-api-sources update - update an Eventarc Google API + source + +SYNOPSIS + gcloud eventarc google-api-sources update + (GOOGLE_API_SOURCE : --location=LOCATION) [--async] + [--logging-config=LOGGING_CONFIG] [--update-labels=[KEY=VALUE,...]] + [--clear-crypto-key | --crypto-key=CRYPTO_KEY] + [--clear-labels | --remove-labels=[KEY,...]] + [--destination-message-bus=DESTINATION_MESSAGE_BUS + : --destination-message-bus-project=DESTINATION_MESSAGE_BUS_PROJECT] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Update an Eventarc Google API source. + +EXAMPLES + To update the Google API source my-google-api-source in location + us-central1 with destination message bus my-message-bus, run: + + $ gcloud eventarc google-api-sources update my-google-api-source \ + --location=us-central1 --destination-message-bus=my-message-bus + + To update the Google API source my-google-api-source in location + us-central1 with INFO level logging, run: + + $ gcloud eventarc google-api-sources update my-google-api-source \ + --location=us-central1 --logging-config=INFO + + To update the Google API source my-google-api-source in location + us-central1 with a Cloud KMS CryptoKey, run: + + $ gcloud eventarc google-api-sources update my-google-api-source \ + --location=us-central1 \ + --crypto-key=projects/PROJECT_ID/locations/KMS_LOCATION/\ + keyRings/KEYRING/cryptoKeys/KEY + +POSITIONAL ARGUMENTS + Google API source resource - The Google API source to update. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument google_api_source on the command line with a + fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + GOOGLE_API_SOURCE + ID of the Google API source or fully qualified identifier for the + Google API source. + + To set the google-api-source attribute: + ▸ provide the argument google_api_source on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the Eventarc Google API source, which should be one + of the supported regions. Alternatively, set the [eventarc/location] + property. + + To set the location attribute: + ▸ provide the argument google_api_source on the command line with a + fully specified name; + ▸ provide the argument --location on the command line; + ▸ set the property eventarc/location. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --logging-config=LOGGING_CONFIG + The logging config of the Google API source. LOGGING_CONFIG must be one + of: NONE, DEBUG, INFO, NOTICE, WARNING, ERROR, CRITICAL, ALERT, + EMERGENCY. + + --update-labels=[KEY=VALUE,...] + List of label KEY=VALUE pairs to update. If a label exists, its value + is modified. Otherwise, a new label is created. + + Keys must start with a lowercase character and contain only hyphens + (-), underscores (_), lowercase characters, and numbers. Values must + contain only hyphens (-), underscores (_), lowercase characters, and + numbers. + + At most one of these can be specified: + + --clear-crypto-key + Remove the previously configured crypto key. The channel will + continue to be encrypted using Google-managed keys. + + --crypto-key=CRYPTO_KEY + Fully qualified name of the crypto key to use for customer-managed + encryption. If this is unspecified, Google-managed keys will be used + for encryption. + + At most one of these can be specified: + + --clear-labels + Remove all labels. If --update-labels is also specified then + --clear-labels is applied first. + + For example, to remove all labels: + + $ gcloud eventarc google-api-sources update --clear-labels + + To remove all existing labels and create two new labels, foo and baz: + + $ gcloud eventarc google-api-sources update --clear-labels \ + --update-labels foo=bar,baz=qux + + --remove-labels=[KEY,...] + List of label keys to remove. If a label does not exist it is + silently ignored. If --update-labels is also specified then + --update-labels is applied first. + + Message bus resource - The destination message bus of the Google API + source. The arguments in this group can be used to specify the attributes + of this resource. (NOTE) Some attributes are not given arguments in this + group but can be set in other ways. + + To set the location attribute: + ◆ provide the argument --destination-message-bus on the command line + with a fully specified name; + ◆ provide the argument --location on the command line; + ◆ set the property eventarc/location. + + --destination-message-bus=DESTINATION_MESSAGE_BUS + ID of the message bus or fully qualified identifier for the message + bus. + + To set the message-bus attribute: + ▸ provide the argument --destination-message-bus on the command + line. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --destination-message-bus-project=DESTINATION_MESSAGE_BUS_PROJECT + Project ID of the Google Cloud project for the message bus. + + To set the project attribute: + ▸ provide the argument --destination-message-bus on the command + line with a fully specified name; + ▸ provide the argument --destination-message-bus-project on the + command line; + ▸ provide the argument --project on the command line; + ▸ set the property core/project. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This variant is also available: + + $ gcloud beta eventarc google-api-sources update + diff --git a/gcloud/eventarc/help b/gcloud/eventarc/help index 0f2909079..c2196bb63 100644 --- a/gcloud/eventarc/help +++ b/gcloud/eventarc/help @@ -25,12 +25,24 @@ GROUPS channels Manage Eventarc channels. + enrollments + Manage Eventarc enrollments. + + google-api-sources + Manage Eventarc Google API sources. + google-channels Manage Eventarc Google channels. locations Explore locations available for Eventarc. + message-buses + Manage Eventarc message buses. + + pipelines + Manage Eventarc pipelines. + providers Explore event providers available in Eventarc. diff --git a/gcloud/eventarc/message-buses/create b/gcloud/eventarc/message-buses/create new file mode 100644 index 000000000..ca8a6f0df --- /dev/null +++ b/gcloud/eventarc/message-buses/create @@ -0,0 +1,87 @@ +NAME + gcloud eventarc message-buses create - create an Eventarc message bus + +SYNOPSIS + gcloud eventarc message-buses create (MESSAGE_BUS : --location=LOCATION) + [--async] [--crypto-key=CRYPTO_KEY] [--labels=[KEY=VALUE,...]] + [--logging-config=LOGGING_CONFIG] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Create an Eventarc message bus. + +EXAMPLES + To create a new message bus my-message-bus in location us-central1, run: + + $ gcloud eventarc message-buses create my-message-bus \ + --location=us-central1 + +POSITIONAL ARGUMENTS + Message bus resource - The message bus to create. The arguments in this + group can be used to specify the attributes of this resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. + + To set the project attribute: + ◆ provide the argument message_bus on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + MESSAGE_BUS + ID of the message bus or fully qualified identifier for the message + bus. + + To set the message-bus attribute: + ▸ provide the argument message_bus on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the Eventarc message bus, which should be one of the + supported regions. Alternatively, set the [eventarc/location] + property. + + To set the location attribute: + ▸ provide the argument message_bus on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property eventarc/location. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --crypto-key=CRYPTO_KEY + Fully qualified name of the crypto key to use for customer-managed + encryption. If this is unspecified, Google-managed keys will be used + for encryption. + + --labels=[KEY=VALUE,...] + List of label KEY=VALUE pairs to add. + + Keys must start with a lowercase character and contain only hyphens + (-), underscores (_), lowercase characters, and numbers. Values must + contain only hyphens (-), underscores (_), lowercase characters, and + numbers. + + --logging-config=LOGGING_CONFIG + The logging config of the message bus. LOGGING_CONFIG must be one of: + NONE, DEBUG, INFO, NOTICE, WARNING, ERROR, CRITICAL, ALERT, EMERGENCY. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This variant is also available: + + $ gcloud beta eventarc message-buses create + diff --git a/gcloud/eventarc/message-buses/delete b/gcloud/eventarc/message-buses/delete new file mode 100644 index 000000000..7c48a804e --- /dev/null +++ b/gcloud/eventarc/message-buses/delete @@ -0,0 +1,69 @@ +NAME + gcloud eventarc message-buses delete - delete an Eventarc message bus + +SYNOPSIS + gcloud eventarc message-buses delete (MESSAGE_BUS : --location=LOCATION) + [--async] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Delete an Eventarc message bus. + +EXAMPLES + To delete the message bus my-message-bus in location us-central1, run: + + $ gcloud eventarc message-buses delete my-message-bus \ + --location=us-central1 + +POSITIONAL ARGUMENTS + Message bus resource - Message bus to delete. The arguments in this group + can be used to specify the attributes of this resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. + + To set the project attribute: + ◆ provide the argument message_bus on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + MESSAGE_BUS + ID of the message bus or fully qualified identifier for the message + bus. + + To set the message-bus attribute: + ▸ provide the argument message_bus on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the Eventarc message bus, which should be one of the + supported regions. Alternatively, set the [eventarc/location] + property. + + To set the location attribute: + ▸ provide the argument message_bus on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property eventarc/location. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This variant is also available: + + $ gcloud beta eventarc message-buses delete + diff --git a/gcloud/eventarc/message-buses/describe b/gcloud/eventarc/message-buses/describe new file mode 100644 index 000000000..6ec5eecb9 --- /dev/null +++ b/gcloud/eventarc/message-buses/describe @@ -0,0 +1,64 @@ +NAME + gcloud eventarc message-buses describe - describe an Eventarc message bus + +SYNOPSIS + gcloud eventarc message-buses describe (MESSAGE_BUS : --location=LOCATION) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Describe an Eventarc message bus. + +EXAMPLES + To describe the message bus my-message-bus in location us-central1, run: + + $ gcloud eventarc message-buses describe my-message-bus \ + --location=us-central1 + +POSITIONAL ARGUMENTS + Message bus resource - Message bus to describe. The arguments in this + group can be used to specify the attributes of this resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. + + To set the project attribute: + ◆ provide the argument message_bus on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + MESSAGE_BUS + ID of the message bus or fully qualified identifier for the message + bus. + + To set the message-bus attribute: + ▸ provide the argument message_bus on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the Eventarc message bus, which should be one of the + supported regions. Alternatively, set the [eventarc/location] + property. + + To set the location attribute: + ▸ provide the argument message_bus on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property eventarc/location. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This variant is also available: + + $ gcloud beta eventarc message-buses describe + diff --git a/gcloud/eventarc/message-buses/help b/gcloud/eventarc/message-buses/help new file mode 100644 index 000000000..32995dfe7 --- /dev/null +++ b/gcloud/eventarc/message-buses/help @@ -0,0 +1,43 @@ +NAME + gcloud eventarc message-buses - manage Eventarc message buses + +SYNOPSIS + gcloud eventarc message-buses COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Manage Eventarc message buses. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + create + Create an Eventarc message bus. + + delete + Delete an Eventarc message bus. + + describe + Describe an Eventarc message bus. + + list + List Eventarc message buses. + + list-enrollments + List Eventarc enrollments attached to an Eventarc message bus. + + publish + Publish to an Eventarc message bus. + + update + Update an Eventarc message bus. + +NOTES + This variant is also available: + + $ gcloud beta eventarc message-buses + diff --git a/gcloud/eventarc/message-buses/list b/gcloud/eventarc/message-buses/list new file mode 100644 index 000000000..09cff0189 --- /dev/null +++ b/gcloud/eventarc/message-buses/list @@ -0,0 +1,92 @@ +NAME + gcloud eventarc message-buses list - list Eventarc message buses + +SYNOPSIS + gcloud eventarc message-buses list [--location=LOCATION] + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + List Eventarc message buses. + +EXAMPLES + To list all message buses in location us-central1, run: + + $ gcloud eventarc message-buses list --location=us-central1 + + To list all message buses in all locations, run: + + $ gcloud eventarc message-buses list --location=- + + or + + $ gcloud eventarc message-buses list + +FLAGS + Location resource - The location for which to list message buses. This + should be one of the supported regions. This represents a Cloud resource. + (NOTE) Some attributes are not given arguments in this group but can be + set in other ways. + + To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ set the property eventarc/location with a fully specified name; + ◆ use '-' location to aggregate results for all Eventarc locations with + a fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. + + To set the location attribute: + ▸ provide the argument --location on the command line; + ▸ set the property eventarc/location; + ▸ use '-' location to aggregate results for all Eventarc locations. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This variant is also available: + + $ gcloud beta eventarc message-buses list + diff --git a/gcloud/eventarc/message-buses/list-enrollments b/gcloud/eventarc/message-buses/list-enrollments new file mode 100644 index 000000000..fafbfc1d1 --- /dev/null +++ b/gcloud/eventarc/message-buses/list-enrollments @@ -0,0 +1,99 @@ +NAME + gcloud eventarc message-buses list-enrollments - list Eventarc enrollments + attached to an Eventarc message bus + +SYNOPSIS + gcloud eventarc message-buses list-enrollments + (MESSAGE_BUS : --location=LOCATION) [--filter=EXPRESSION] + [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + List Eventarc enrollments attached to an Eventarc message bus. + +EXAMPLES + To list all enrollments in message-bus my-message-bus in us-central1, run: + + $ gcloud eventarc message-buses list-enrollments my-message-bus \ + --location=us-central1 + +POSITIONAL ARGUMENTS + Message bus resource - The message bus on which to list enrollments. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument message_bus on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + MESSAGE_BUS + ID of the message bus or fully qualified identifier for the message + bus. + + To set the message-bus attribute: + ▸ provide the argument message_bus on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the Eventarc message bus, which should be one of the + supported regions. Alternatively, set the [eventarc/location] + property. + + To set the location attribute: + ▸ provide the argument message_bus on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property eventarc/location. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This variant is also available: + + $ gcloud beta eventarc message-buses list-enrollments + diff --git a/gcloud/eventarc/message-buses/publish b/gcloud/eventarc/message-buses/publish new file mode 100644 index 000000000..233056027 --- /dev/null +++ b/gcloud/eventarc/message-buses/publish @@ -0,0 +1,121 @@ +NAME + gcloud eventarc message-buses publish - publish to an Eventarc message bus + +SYNOPSIS + gcloud eventarc message-buses publish (MESSAGE_BUS : --location=LOCATION) + (--avro-message=AVRO_MESSAGE | --json-message=JSON_MESSAGE + | [--event-data=EVENT_DATA --event-id=EVENT_ID + --event-source=EVENT_SOURCE --event-type=EVENT_TYPE + : --event-attributes=[ATTRIBUTE=VALUE,...]]) [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Publish to an Eventarc message bus. + +EXAMPLES + To publish an event to the message bus my-message-bus with event id 1234, + event type event-provider.event.v1.eventType, event source + //event-provider/event/source, event data { "key": "value" } and event + attributes of attribute1=value, run: + + $ gcloud eventarc message-buses publish my-message-bus \ + --location=us-central1 --event-id=1234 \ + --event-type=event-provider.event.v1.eventType \ + --event-source="//event-provider/event/source" \ + --event-data='{"key": "value"}' \ + --event-attributes=attribute1=value + + To publish an event to the message bus my-message-bus with a json message, + run: + + $ gcloud eventarc message-buses publish my-message-bus \ + --location=us-central1 \ + --json-message='{"id": 1234, "type": + "event-provider.event.v1.eventType", "source": + "//event-provider/event/source", "specversion": "1.0", "data": + {"key": "value"}}' + +POSITIONAL ARGUMENTS + Message bus resource - Message bus to publish to. The arguments in this + group can be used to specify the attributes of this resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. + + To set the project attribute: + ◆ provide the argument message_bus on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + MESSAGE_BUS + ID of the message bus or fully qualified identifier for the message + bus. + + To set the message-bus attribute: + ▸ provide the argument message_bus on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the Eventarc message bus, which should be one of the + supported regions. Alternatively, set the [eventarc/location] + property. + + To set the location attribute: + ▸ provide the argument message_bus on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property eventarc/location. + +REQUIRED FLAGS + Exactly one of these must be specified: + + --avro-message=AVRO_MESSAGE + An Avro message to publish to the message bus. + + --json-message=JSON_MESSAGE + A JSON message to publish to the message bus. + + --event-data=EVENT_DATA + An event data. The event data of a published event. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --event-id=EVENT_ID + An event id. The id of a published event. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --event-source=EVENT_SOURCE + An event source. The event source of a published event. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --event-type=EVENT_TYPE + An event type. The event type of a published event. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --event-attributes=[ATTRIBUTE=VALUE,...] + Event attributes. The event attributes of a published event.This flag + can be repeated to add more attributes. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This variant is also available: + + $ gcloud beta eventarc message-buses publish + diff --git a/gcloud/eventarc/message-buses/update b/gcloud/eventarc/message-buses/update new file mode 100644 index 000000000..c50003367 --- /dev/null +++ b/gcloud/eventarc/message-buses/update @@ -0,0 +1,124 @@ +NAME + gcloud eventarc message-buses update - update an Eventarc message bus + +SYNOPSIS + gcloud eventarc message-buses update (MESSAGE_BUS : --location=LOCATION) + [--async] [--logging-config=LOGGING_CONFIG] + [--update-labels=[KEY=VALUE,...]] + [--clear-crypto-key | --crypto-key=CRYPTO_KEY] + [--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Update an Eventarc message bus. + +EXAMPLES + To update the message bus my-message-bus in location us-central1, run: + + $ gcloud eventarc message-buses update my-message-bus \ + --location=us-central1 + + To configure the message bus my-message-bus in location us-central1 with a + Cloud KMS CryptoKey, run: + + $ gcloud eventarc message-buses update my-message-bus \ + --location=us-central1 \ + --crypto-key=projects/PROJECT_ID/locations/KMS_LOCATION/\ + keyRings/KEYRING/cryptoKeys/KEY + +POSITIONAL ARGUMENTS + Message bus resource - Message bus to update. The arguments in this group + can be used to specify the attributes of this resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. + + To set the project attribute: + ◆ provide the argument message_bus on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + MESSAGE_BUS + ID of the message bus or fully qualified identifier for the message + bus. + + To set the message-bus attribute: + ▸ provide the argument message_bus on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the Eventarc message bus, which should be one of the + supported regions. Alternatively, set the [eventarc/location] + property. + + To set the location attribute: + ▸ provide the argument message_bus on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property eventarc/location. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --logging-config=LOGGING_CONFIG + The logging config of the message bus. LOGGING_CONFIG must be one of: + NONE, DEBUG, INFO, NOTICE, WARNING, ERROR, CRITICAL, ALERT, EMERGENCY. + + --update-labels=[KEY=VALUE,...] + List of label KEY=VALUE pairs to update. If a label exists, its value + is modified. Otherwise, a new label is created. + + Keys must start with a lowercase character and contain only hyphens + (-), underscores (_), lowercase characters, and numbers. Values must + contain only hyphens (-), underscores (_), lowercase characters, and + numbers. + + At most one of these can be specified: + + --clear-crypto-key + Remove the previously configured crypto key. The channel will + continue to be encrypted using Google-managed keys. + + --crypto-key=CRYPTO_KEY + Fully qualified name of the crypto key to use for customer-managed + encryption. If this is unspecified, Google-managed keys will be used + for encryption. + + At most one of these can be specified: + + --clear-labels + Remove all labels. If --update-labels is also specified then + --clear-labels is applied first. + + For example, to remove all labels: + + $ gcloud eventarc message-buses update --clear-labels + + To remove all existing labels and create two new labels, foo and baz: + + $ gcloud eventarc message-buses update --clear-labels \ + --update-labels foo=bar,baz=qux + + --remove-labels=[KEY,...] + List of label keys to remove. If a label does not exist it is + silently ignored. If --update-labels is also specified then + --update-labels is applied first. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This variant is also available: + + $ gcloud beta eventarc message-buses update + diff --git a/gcloud/eventarc/pipelines/create b/gcloud/eventarc/pipelines/create new file mode 100644 index 000000000..df9572804 --- /dev/null +++ b/gcloud/eventarc/pipelines/create @@ -0,0 +1,621 @@ +NAME + gcloud eventarc pipelines create - create an Eventarc pipeline + +SYNOPSIS + gcloud eventarc pipelines create (PIPELINE : --location=LOCATION) + --destinations=[http_endpoint_uri=URI], + [http_endpoint_message_binding_template=HTTP_ENDPOINT_MESSAGE_BINDING_TEMPLATE], + [workflow=WORKFLOW],[message_bus=MESSAGE_BUS], + [pubsub_topic=PUBSUB_TOPIC],[project=PROJECT],[location=LOCATION], + [network_attachment=NETWORK_ATTACHMENT], + [google_oidc_authentication_service_account=GOOGLE_OIDC_AUTHENTICATION_SERVICE_ACCOUNT], + [google_oidc_authentication_audience=GOOGLE_OIDC_AUTHENTICATION_AUDIENCE], + [oauth_token_authentication_service_account=OAUTH_TOKEN_AUTHENTICATION_SERVICE_ACCOUNT], + [oauth_token_authentication_scope=OAUTH_TOKEN_AUTHENTICATION_SCOPE], + [output_payload_format_json=OUTPUT_PAYLOAD_FORMAT_JSON], + [output_payload_format_avro_schema_definition=OUTPUT_PAYLOAD_FORMAT_AVRO_SCHEMA_DEFINITION], + [output_payload_format_protobuf_schema_definition=OUTPUT_PAYLOAD_FORMAT_PROTOBUF_SCHEMA_DEFINITION]|[...] + [--async] [--crypto-key=CRYPTO_KEY] [--labels=[KEY=VALUE,...]] + [--logging-config=LOGGING_CONFIG] + [--mediations=[transformation_template=TRANSFORMATION_TEMPLATE|...]] + [--input-payload-format-avro-schema-definition=INPUT_PAYLOAD_FORMAT_AVRO_SCHEMA_DEFINITION | --input-payload-format-json=INPUT_PAYLOAD_FORMAT_JSON | --input-payload-format-protobuf-schema-definition=INPUT_PAYLOAD_FORMAT_PROTOBUF_SCHEMA_DEFINITION] + [--max-retry-attempts=MAX_RETRY_ATTEMPTS + --max-retry-delay=MAX_RETRY_DELAY --min-retry-delay=MIN_RETRY_DELAY] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Create an Eventarc pipeline. + +EXAMPLES + To create a new pipeline my-pipeline in location us-central1 with its + destination targeting HTTP endpoint URI 'https://example-endpoint.com' and + network attachment 'my-network-attachment', run: + + $ gcloud eventarc pipelines create my-pipeline \ + --location=us-central1 \ + --destinations=http_endpoint_uri='https://example-endpoint.com',\ + network_attachment=my-network-attachment + + To create a new pipeline my-pipeline in location us-central1 with an HTTP + endpoint URI destination and a message binding template, run: + + $ gcloud eventarc pipelines create my-pipeline \ + --location=us-central1 \ + --destinations=http_endpoint_uri='https://example-endpoint.com',\ + http_endpoint_message_binding_template='{"headers": + {"new-header-key": + "new-header-value"}}',network_attachment=my-network-attachment + + To create a new pipeline my-pipeline in location us-central1 with a Cloud + Workflow destination my-workflow, run: + + $ gcloud eventarc pipelines create my-pipeline \ + --location=us-central1 --destinations=workflow=my-workflow + + To create a new pipeline my-pipeline in location us-central1 with a message + bus destination my-message-bus, run: + + $ gcloud eventarc pipelines create my-pipeline \ + --location=us-central1 --destinations=message_bus=my-message-bus + + To create a new pipeline my-pipeline in location us-central1 with a Cloud + Pub/Sub Topic destination my-topic, run: + + $ gcloud eventarc pipelines create my-pipeline \ + --location=us-central1 --destinations=pubsub_topic=my-topic + + To create a new pipeline my-pipeline in location us-central1 with a Cloud + Workflow in project example-project and location us-east1, run: + + $ gcloud eventarc pipelines create my-pipeline \ + --location=us-central1 \ + --destinations=workflow=my-workflow,project=example-project,\ + location=us-east1 + + To create a new pipeline my-pipeline in location us-central1 with an HTTP + endpoint URI destination https://example-endpoint.com and a service account + example-service-account@example-project.gserviceaccount.iam.com for OIDC + authentication, run: + + $ gcloud eventarc pipelines create my-pipeline \ + --location=us-central1 \ + --destinations=http_endpoint_uri='https://example-endpoint.com',\ + network_attachment=my-network-attachment,\ + google_oidc_authentication_service_account=example-service-account@e\ + xample-project.gserviceaccount.iam.com + + To create a new pipeline my-pipeline in location us-central1 with an HTTP + endpoint URI destination https://example-endpoint.com and a service account + example-service-account@example-project.gserviceaccount.iam.com for OIDC + authentication with audience https://example.com, run: + + $ gcloud eventarc pipelines create my-pipeline \ + --location=us-central1 \ + --destinations=http_endpoint_uri='https://example-endpoint.com',\ + network_attachment=my-network-attachment,\ + google_oidc_authentication_service_account=example-service-account@e\ + xample-project.gserviceaccount.iam.com,\ + google_oidc_authentication_audience='https://example.com' + + To create a new pipeline my-pipeline in location us-central1 with an HTTP + endpoint URI destination https://example-endpoint.com and a service account + example-service-account@example-project.gserviceaccount.iam.com for OAuth + token authentication, run: + + $ gcloud eventarc pipelines create my-pipeline \ + --location=us-central1 \ + --destinations=http_endpoint_uri='https://example-endpoint.com',\ + network_attachment=my-network-attachment,\ + oauth_token_authentication_service_account=example-service-account@e\ + xample-project.gserviceaccount.iam.com + + To create a new pipeline my-pipeline in location us-central1 with an HTTP + endpoint URI destination https://example-endpoint.com and a service account + example-service-account@example-project.gserviceaccount.iam.com for OAuth + token authentication with scope + https://www.googleapis.com/auth/cloud-platform, run: + + $ gcloud eventarc pipelines create my-pipeline \ + --location=us-central1 \ + --destinations=http_endpoint_uri='https://example-endpoint.com',\ + network_attachment=my-network-attachment,\ + oauth_token_authentication_service_account=example-service-account@e\ + xample-project.gserviceaccount.iam.com,\ + oauth_token_authentication_scope='https://www.googleapis.com/auth/cl\ + oud-platform' + + To create a new pipeline my-pipeline in location us-central1 with an HTTP + endpoint URI destination https://example-endpoint.com and the JSON input + and output payload formats, run: + + $ gcloud eventarc pipelines create my-pipeline \ + --location=us-central1 \ + --destinations=http_endpoint_uri='https://example-endpoint.com',\ + network_attachment=my-network-attachment,\ + output_payload_format_json= --input-payload-format-json= + + To create a new pipeline my-pipeline in location us-central1 with an HTTP + endpoint URI destination https://example-endpoint.com and the Avro input + and output payload formats, run: + + $ gcloud eventarc pipelines create my-pipeline \ + --location=us-central1 \ + --destinations=http_endpoint_uri='https://example-endpoint.com',\ + network_attachment=my-network-attachment,\ + output_payload_format_avro_schema_definition='{"type": "record", + "name": "my_record", "fields": [{"name": "my_field", "type": + "string"}]}' \ + --input-payload-format-avro-schema-definition='{"type": + "record", "name": "my_record", "fields": [{"name": "my_field", + "type": "string"}]}' + + To create a new pipeline my-pipeline in location us-central1 with an HTTP + endpoint URI destination https://example-endpoint.com and the Protobuf + input and output payload formats, run: + + $ gcloud eventarc pipelines create my-pipeline \ + --location=us-central1 \ + --destinations=http_endpoint_uri='https://example-endpoint.com',\ + network_attachment=my-network-attachment,\ + output_payload_format_protobuf_schema_definition='syntax = + "proto3"; message Location { string home_address = 1; }' \ + --input-payload-format-protobuf-schema-definition='syntax = + "proto3"; message Location { string home_address = 1; }' + + To create a new pipeline my-pipeline in location us-central1 with an HTTP + endpoint URI destination https://example-endpoint.com and a transformation + mediation, run: + + $ gcloud eventarc pipelines create my-pipeline \ + --location=us-central1 \ + --destinations=http_endpoint_uri='https://example-endpoint.com',\ + network_attachment=my-network-attachment \ + --mediations=transformation_template='message.removeFields(["dat\ + a.credit_card_number","data.ssn"])' + + To create a new pipeline my-pipeline in location us-central1 with an HTTP + endpoint URI destination https://example-endpoint.com and a INFO level + logging configuration, run: + + $ gcloud eventarc pipelines create my-pipeline \ + --location=us-central1 \ + --destinations=http_endpoint_uri='https://example-endpoint.com',\ + network_attachment=my-network-attachment --logging_config=INFO + + To create a new pipeline my-pipeline in location us-central1 with an HTTP + endpoint URI destination https://example-endpoint.com and a custom retry + policy, run: + + $ gcloud eventarc pipelines create my-pipeline \ + --location=us-central1 \ + --destinations=http_endpoint_uri='https://example-endpoint.com',\ + network_attachment=my-network-attachment --max-retry-attempts=10 \ + --min-retry-delay=2s --max-retry-delay=64s + + To create a new pipeline my-pipeline in location us-central1 with an HTTP + endpoint URI destination https://example-endpoint.com and a Cloud KMS + CryptoKey, run: + + $ gcloud eventarc pipelines create my-pipeline \ + --location=us-central1 \ + --destinations=http_endpoint_uri='https://example-endpoint.com',\ + network_attachment=my-network-attachment \ + --crypto-key=projects/PROJECT_ID/locations/KMS_LOCATION/\ + keyRings/KEYRING/cryptoKeys/KEY + +POSITIONAL ARGUMENTS + Pipeline resource - The pipeline to create. The arguments in this group + can be used to specify the attributes of this resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. + + To set the project attribute: + ◆ provide the argument pipeline on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + PIPELINE + ID of the pipeline or fully qualified identifier for the pipeline. + + To set the pipeline attribute: + ▸ provide the argument pipeline on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the Eventarc pipeline, which should be one of the + supported regions. Alternatively, set the [eventarc/location] + property. + + To set the location attribute: + ▸ provide the argument pipeline on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property eventarc/location. + +REQUIRED FLAGS + --destinations=[http_endpoint_uri=URI],[http_endpoint_message_binding_template=HTTP_ENDPOINT_MESSAGE_BINDING_TEMPLATE],[workflow=WORKFLOW],[message_bus=MESSAGE_BUS],[pubsub_topic=PUBSUB_TOPIC],[project=PROJECT],[location=LOCATION],[network_attachment=NETWORK_ATTACHMENT],[google_oidc_authentication_service_account=GOOGLE_OIDC_AUTHENTICATION_SERVICE_ACCOUNT],[google_oidc_authentication_audience=GOOGLE_OIDC_AUTHENTICATION_AUDIENCE],[oauth_token_authentication_service_account=OAUTH_TOKEN_AUTHENTICATION_SERVICE_ACCOUNT],[oauth_token_authentication_scope=OAUTH_TOKEN_AUTHENTICATION_SCOPE],[output_payload_format_json=OUTPUT_PAYLOAD_FORMAT_JSON],[output_payload_format_avro_schema_definition=OUTPUT_PAYLOAD_FORMAT_AVRO_SCHEMA_DEFINITION],[output_payload_format_protobuf_schema_definition=OUTPUT_PAYLOAD_FORMAT_PROTOBUF_SCHEMA_DEFINITION]|[...] + The pipeline's destinations. This flag can be repeated to add more + destinations to the list. Currently, only one destination is supported + per pipeline. A destination is specified in a dict format. For more + information, see Create an enrollment to receive events + (https://cloud.google.com/eventarc/advanced/docs/receive-events/create-enrollment). + + Note: Exactly one of the http_endpoint_uri, workflow, message_bus, or + pubsub_topic keys must be set. + + Valid keys are: + + http_endpoint_uri + The URI of the HTTP endpoint. The value must be a RFC2396 URI + string. Only HTTPS protocol is supported. The host can be either a + static IP addressable from the VPC specified by the network config, + or an internal DNS hostname of the service resolvable via Cloud + DNS. For example: + + $ gcloud eventarc pipelines create example-pipeline \ + --destinations=http_endpoint_uri='https://example.com' + + http_endpoint_message_binding_template + The CEL expression used to construct a new HTTP request to be sent + to the final destination. It can be optionally specified alongside + with http_endpoint_uri. It represents a configuration used to bind + a message to the final HTTP request that will be sent to the + destination. If a binding is not specified, by default the message + is treated as a CloudEvent and is mapped to the HTTP request + according to the CloudEvent HTTP Protocol Binding Binary Content + Mode. The pipeline converts the data field of the message to the + format provided in output_payload_format and maps it to the body + field of the result. It also sets the corresponding Content-Type + header to the output_payload_format type. If the + output_payload_format is unspecified, then the pipeline will treat + the data field of the message as opaque binary data and attach it + to the request body as bytes. In this case, the Content-Type header + will be set to the value of the datacontenttype attribute set on + the incoming CloudEvent message if present, or the + application/octet-stream MIME type otherwise. The pipeline expects + that the content of the message will adhere to the standard + CloudEvent format. If not then the outgoing message request may + fail with a persistent error. + + Note: When http_endpoint_uri is not set, + http_endpoint_message_binding_template can't be set. + + The result of the CEL expression must be a map of key-value pairs + such that: + + 1. If a map named headers exists on the result of the expression, + then its key-value pairs are directly mapped to the HTTP request + headers. The headers values are constructed from the corresponding + value type's canonical representation. If the headers field does + not exist, then the resulting HTTP request will not contain + headers. + + 2. If a field named body exists on the result of the expression, + then its value is directly mapped to the body of the request. If + the value of the body field is of type bytes or string, then it is + used as the HTTP request body as-is withouth any conversion. If the + body field is of any other type, then it is converted to a JSON + string. If the body field does not exist, then the resulting HTTP + request will not contain a body. + + 3. Any other fields in the resulting expression will be ignored. + + The CEL expression may access the incoming CloudEvent message in + its definition, as follows: + + 1. The data field of the incoming CloudEvent message can be + accessed using the message.data value. + + 2. Each attribute of the incoming CloudEvent message can be + accessed using the message. value, where is the name of + the attribute. + + Headers added to the request by previous filters in the chain can + be accessed in the CEL expression using the headers variable. The + headers variable defines a map of key-value pairs corresponding to + the HTTP headers added by previous mediation steps and not the + headers present on the original incoming request. For example, the + following CEL expression can be used to construct a headers-only + HTTP request by adding an additional header to the headers added by + previous mediations in the pipeline: + + {"headers": headers.merge({"new-header-key": "new-header-value"})} + + Additionally, the following CEL extension functions can be used in + this CEL expression: + + ▸ toBase64Url: map.toBase64Url() -> string + ▫ Converts a CelValue to a base64url encoded string. + + ▸ toJsonString: map.toJsonString() -> string + ▫ Converts a CelValue to a JSON string. + + ▸ merge: map1.merge(map2) -> map3 + ▫ Merges the passed CEL map with the existing CEL map the + function is applied to. If the same key exists in both maps, or + if the key's value is type map, then both maps are merged; + Otherwise, the value from the passed map is used. + + ▸ toMap: list(map).toMap() -> map + ▫ Converts a CEL list of CEL maps to a single CEL map. + + ▸ toDestinationPayloadFormat: + message.data.toDestinationPayloadFormat() -> string or bytes + ▫ Converts the message data to the destination payload format + specified in output_payload_format. This function is meant to + be applied to the message.data field. If the destination + payload format is not set, the function will return the message + data unchanged. + + ▸ toCloudEventJsonWithPayloadFormat: + message.toCloudEventJsonWithPayloadFormat() -> map + ▫ Converts a message to the corresponding structure of JSON + format for CloudEvents. This function applies + toDestinationPayloadFormat() to the message data. It also sets + the corresponding datacontenttype of the CloudEvent, as + indicated by the output_payload_format field. If + output_payload_format is not set, it will use the existing + datacontenttype on the CloudEvent if present; Otherwise, it + leaves the datacontenttype unset. This function expects that + the content of the message will adhere to the standard + CloudEvent format. If it doesn't then this function will fail. + The result is a CEL map that corresponds to the JSON + representation of the CloudEvent. To convert that data to a + JSON string it can be chained with the toJsonString() function. + + For example: + + $ gcloud eventarc pipelines create example-pipeline \ + --destinations=http_endpoint_uri='https://example.com',\ + http_endpoint_message_binding_template='{"headers": + headers.merge({"new-header-key": "new-header-value"}),"body": + "new-body"}' + + workflow + The destination Workflow ID. For example: + + $ gcloud eventarc pipelines create example-pipeline \ + --destinations=workflow=my-workflow + + message_bus + The destination Message Bus ID. For example: + + $ gcloud eventarc pipelines create example-pipeline \ + --destinations=message_bus=my-message-bus + + pubsub_topic + The destination Pub/Sub topic ID. For example: + + $ gcloud eventarc pipelines create example-pipeline \ + --destinations=pubsub_topic=my-topic + + project + The project ID of the destination resource. If project is not set, + then the project ID of the pipeline is used. For example: + + $ gcloud eventarc pipelines create example-pipeline \ + --destinations=project=example-project,workflow=my-workflow + + Note: When http_endpoint_uri is set, project can't be set. + + location + The location of the destination resource. If location is not set, + then the location of the pipeline is used. For example: + + $ gcloud eventarc pipelines create example-pipeline \ + --destinations=location=us-east1,workflow=my-workflow + + Note: When http_endpoint_uri is set, location can't be set. + + network_attachment + The ID of the network attachment that allows access to the consumer + VPC. For example: + + $ gcloud eventarc pipelines create example-pipeline \ + --destinations=network_attachment=my-network-attachment,\ + http_endpoint_uri='https://example.com' + + Note: network_attachment can only be set when http_endpoint_uri is + set as well. + + google_oidc_authentication_service_account + The service account email used to generate the OIDC token. The + token can be used to invoke Cloud Run and Cloud Run functions + destinations or HTTP endpoints that support Google OIDC. Note that + the principal who calls this API must have + iam.serviceAccounts.actAs permission on the service account. For + more information, see Service accounts overview + (https://cloud.google.com/iam/docs/understanding-service-accounts). + For example: + + $ gcloud eventarc pipelines create example-pipeline \ + --destinations=http_endpoint_uri='https://example.com',\ + google_oidc_authentication_service_account=example-service-account@e\ + xample-project.gserviceaccount.iam.com + + google_oidc_authentication_audience + The audience claim which identifies the recipient that the JWT is + intended for. If unspecified, the destination URI will be used. For + example: + + $ gcloud eventarc pipelines create example-pipeline \ + --destinations=http_endpoint_uri='https://example.com',\ + google_oidc_authentication_service_account=example-service-account@e\ + xample-project.gserviceaccount.iam.com,\ + google_oidc_authentication_audience='https://example.com' + + Note: google_oidc_authentication_audience can only be set if + google_oidc_authentication_service_account is set. + + oauth_token_authentication_service_account + The service account email used to generate the OAuth token. OAuth + authorization should generally only be used when calling Google + APIs hosted on *.googleapis.com. Note that the principal who calls + this API must have iam.serviceAccounts.actAs permission in the + service account. For more information, see Service accounts + overview + (https://cloud.google.com/iam/docs/understanding-service-accounts). + For example: + + $ gcloud eventarc pipelines create example-pipeline \ + --destinations=http_endpoint_uri='https://example.com',\ + oauth_token_authentication_service_account=example-service-account@e\ + xample-project.gserviceaccount.iam.com + + oauth_token_authentication_scope + The scope used to generate the OAuth token. If unspecified, + "https://www.googleapis.com/auth/cloud-platform" will be used. For + example: + + $ gcloud eventarc pipelines create example-pipeline \ + --destinations=http_endpoint_uri='https://example.com',\ + oauth_token_authentication_service_account=example-service-account@e\ + xample-project.gserviceaccount.iam.com,\ + oauth_token_authentication_scope=https://www.googleapis.com/auth/\ + cloud-platform + + Note: At most one of google_oidc_authentication_service_account or + oauth_token_authentication_service_account can be set; and + oauth_token_authentication_scope can only be set if + oauth_token_authentication_service_account is set. + + output_payload_format_json + Indicates that the output payload format is JSON. For example: + + $ gcloud eventarc pipelines create example-pipeline \ + --destinations=http_endpoint_uri='https://example.com',\ + output_payload_format_json= --input-payload-format-json= + + Note: JSON schemas are not supported. Any value specified by this + key is ignored. + + output_payload_format_avro_schema_definition + The schema definition of the Avro output payload format. For + example: + + $ gcloud eventarc pipelines create example-pipeline \ + --destinations=http_endpoint_uri='https://example.com',\ + output_payload_format_avro_schema_definition='{"type": "record", + "name": "my_record", "fields": [{"name": "field1", "type": + "string"}]}' \ + --input-payload-format-avro-schema-definition='{"type": + "record", "name": "my_record", "fields": [{"name": "field1", + "type": "string"}]}' + + output_payload_format_protobuf_schema_definition + The schema definition of the Protobuf output payload format. For + example: + + $ gcloud eventarc pipelines create example-pipeline \ + --destinations=http_endpoint_uri='https://example.com',\ + output_payload_format_protobuf_schema_definition='syntax = + "proto3"; message Location { string home_address = 1; }' \ + --input-payload-format-protobuf-schema-definition='syntax = + "proto3"; message Location { string home_address = 1; }' + + Note: If none of the input_payload_format_json, + input_payload_format_avro_schema_definition, or + input_payload_format_protobuf_schema_definition is set, then the + message data is treated as an opaque binary and no output format + can be set on the pipeline through the output_payload_format_json, + output_payload_format_avro_schema_definition, or + output_payload_format_protobuf_schema_definition field. Any + mediations on the pipeline that involve access to the data field + will fail as persistent errors. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --crypto-key=CRYPTO_KEY + Fully qualified name of the crypto key to use for customer-managed + encryption. If this is unspecified, Google-managed keys will be used + for encryption. + + --labels=[KEY=VALUE,...] + List of label KEY=VALUE pairs to add. + + Keys must start with a lowercase character and contain only hyphens + (-), underscores (_), lowercase characters, and numbers. Values must + contain only hyphens (-), underscores (_), lowercase characters, and + numbers. + + --logging-config=LOGGING_CONFIG + The logging config of the pipeline. LOGGING_CONFIG must be one of: + NONE, DEBUG, INFO, NOTICE, WARNING, ERROR, CRITICAL, ALERT, EMERGENCY. + + --mediations=[transformation_template=TRANSFORMATION_TEMPLATE|...] + The different ways to modify the pipeline. Currently, only one + mediation is supported per pipeline. + + A mediation is specified in a dict format. Currently, the only valid + choice is transformation_template. + + This is the template to apply to transform messages. + + For complex transformations, shell parameter processing may fail to + parse the CEL expressions. Please see gcloud topic flags-file for how + to use https://cloud.google.com/sdk/gcloud/reference/topic/flags-file + feature of gcloud to pass in CEL expressions. + + Examples: + + $ gcloud eventarc pipelines create example-pipeline \ + --mediations=transformation_template='message.removeFields(["dat\ + a.credit_card_number","data.ssn"])' + + At most one of these can be specified: + + --input-payload-format-avro-schema-definition=INPUT_PAYLOAD_FORMAT_AVRO_SCHEMA_DEFINITION + The pipeline's input payload Avro schema definition. If this is set, + then any messages not matching this format will be treated as + persistent errors. + + --input-payload-format-json=INPUT_PAYLOAD_FORMAT_JSON + The pipeline's input payload format is JSON. If this is set, then any + messages not matching this format will be treated as persistent + errors. + + --input-payload-format-protobuf-schema-definition=INPUT_PAYLOAD_FORMAT_PROTOBUF_SCHEMA_DEFINITION + The pipeline's input payload Protobuf schema definition. If this is + set, then any messages not matching this format will be treated as + persistent errors. + + The retry policy configuration for the pipeline. The pipeline exponentially + backs off if the destination is non-responsive or returns a retryable error + code. The backoff starts with a 1 second delay and doubles the delay after + each failed attempt. The delay is capped at 60 seconds. If the + max-retry-delay and min-retry-delay are set to the same value, then the + duration between retries is constant. + + --max-retry-attempts=MAX_RETRY_ATTEMPTS + The maximum number of retry attempts. If not set, the default value + is 5. + + --max-retry-delay=MAX_RETRY_DELAY + The maximum retry delay in seconds. If not set, the default value + is 60. + + --min-retry-delay=MIN_RETRY_DELAY + The minimum retry delay in seconds. If not set, the default value + is 1. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This variant is also available: + + $ gcloud beta eventarc pipelines create + diff --git a/gcloud/eventarc/pipelines/delete b/gcloud/eventarc/pipelines/delete new file mode 100644 index 000000000..7f6cb970a --- /dev/null +++ b/gcloud/eventarc/pipelines/delete @@ -0,0 +1,66 @@ +NAME + gcloud eventarc pipelines delete - delete an Eventarc pipeline + +SYNOPSIS + gcloud eventarc pipelines delete (PIPELINE : --location=LOCATION) [--async] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Delete an Eventarc pipeline. + +EXAMPLES + To delete the pipeline my-pipeline in location us-central1, run: + + $ gcloud eventarc pipelines delete my-pipeline --location=us-central1 + +POSITIONAL ARGUMENTS + Pipeline resource - Pipeline to delete. The arguments in this group can be + used to specify the attributes of this resource. (NOTE) Some attributes + are not given arguments in this group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument pipeline on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + PIPELINE + ID of the pipeline or fully qualified identifier for the pipeline. + + To set the pipeline attribute: + ▸ provide the argument pipeline on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the Eventarc pipeline, which should be one of the + supported regions. Alternatively, set the [eventarc/location] + property. + + To set the location attribute: + ▸ provide the argument pipeline on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property eventarc/location. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This variant is also available: + + $ gcloud beta eventarc pipelines delete + diff --git a/gcloud/eventarc/pipelines/describe b/gcloud/eventarc/pipelines/describe new file mode 100644 index 000000000..32ce7d93b --- /dev/null +++ b/gcloud/eventarc/pipelines/describe @@ -0,0 +1,62 @@ +NAME + gcloud eventarc pipelines describe - describe an Eventarc pipeline + +SYNOPSIS + gcloud eventarc pipelines describe (PIPELINE : --location=LOCATION) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Describe an Eventarc pipeline. + +EXAMPLES + To describe the pipeline my-pipeline in location us-central1, run: + + $ gcloud eventarc pipelines describe my-pipeline \ + --location=us-central1 + +POSITIONAL ARGUMENTS + Pipeline resource - Pipeline to describe. The arguments in this group can + be used to specify the attributes of this resource. (NOTE) Some attributes + are not given arguments in this group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument pipeline on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + PIPELINE + ID of the pipeline or fully qualified identifier for the pipeline. + + To set the pipeline attribute: + ▸ provide the argument pipeline on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the Eventarc pipeline, which should be one of the + supported regions. Alternatively, set the [eventarc/location] + property. + + To set the location attribute: + ▸ provide the argument pipeline on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property eventarc/location. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This variant is also available: + + $ gcloud beta eventarc pipelines describe + diff --git a/gcloud/eventarc/pipelines/help b/gcloud/eventarc/pipelines/help new file mode 100644 index 000000000..e28b9a270 --- /dev/null +++ b/gcloud/eventarc/pipelines/help @@ -0,0 +1,37 @@ +NAME + gcloud eventarc pipelines - manage Eventarc pipelines + +SYNOPSIS + gcloud eventarc pipelines COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Manage Eventarc pipelines. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + create + Create an Eventarc pipeline. + + delete + Delete an Eventarc pipeline. + + describe + Describe an Eventarc pipeline. + + list + List Eventarc pipelines. + + update + Update an Eventarc pipeline. + +NOTES + This variant is also available: + + $ gcloud beta eventarc pipelines + diff --git a/gcloud/eventarc/pipelines/list b/gcloud/eventarc/pipelines/list new file mode 100644 index 000000000..3eb65a8c7 --- /dev/null +++ b/gcloud/eventarc/pipelines/list @@ -0,0 +1,92 @@ +NAME + gcloud eventarc pipelines list - list Eventarc pipelines + +SYNOPSIS + gcloud eventarc pipelines list [--location=LOCATION] [--filter=EXPRESSION] + [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + List Eventarc pipelines. + +EXAMPLES + To list all pipelines in location us-central1, run: + + $ gcloud eventarc pipelines list --location=us-central1 + + To list all pipelines in all locations, run: + + $ gcloud eventarc pipelines list --location=- + + or + + $ gcloud eventarc pipelines list + +FLAGS + Location resource - Location for which to list pipelines. This should be + one of the supported regions. This represents a Cloud resource. (NOTE) + Some attributes are not given arguments in this group but can be set in + other ways. + + To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ set the property eventarc/location with a fully specified name; + ◆ use '-' location to aggregate results for all Eventarc locations with + a fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. + + To set the location attribute: + ▸ provide the argument --location on the command line; + ▸ set the property eventarc/location; + ▸ use '-' location to aggregate results for all Eventarc locations. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This variant is also available: + + $ gcloud beta eventarc pipelines list + diff --git a/gcloud/eventarc/pipelines/update b/gcloud/eventarc/pipelines/update new file mode 100644 index 000000000..a9ac19ca0 --- /dev/null +++ b/gcloud/eventarc/pipelines/update @@ -0,0 +1,482 @@ +NAME + gcloud eventarc pipelines update - update an Eventarc pipeline + +SYNOPSIS + gcloud eventarc pipelines update (PIPELINE : --location=LOCATION) [--async] + [--destinations=[http_endpoint_uri=URI], + [http_endpoint_message_binding_template=HTTP_ENDPOINT_MESSAGE_BINDING_TEMPLATE], + [workflow=WORKFLOW],[message_bus=MESSAGE_BUS], + [pubsub_topic=PUBSUB_TOPIC],[project=PROJECT],[location=LOCATION], + [network_attachment=NETWORK_ATTACHMENT], + [google_oidc_authentication_service_account=GOOGLE_OIDC_AUTHENTICATION_SERVICE_ACCOUNT], + [google_oidc_authentication_audience=GOOGLE_OIDC_AUTHENTICATION_AUDIENCE], + [oauth_token_authentication_service_account=OAUTH_TOKEN_AUTHENTICATION_SERVICE_ACCOUNT], + [oauth_token_authentication_scope=OAUTH_TOKEN_AUTHENTICATION_SCOPE], + [output_payload_format_json=OUTPUT_PAYLOAD_FORMAT_JSON], + [output_payload_format_avro_schema_definition=OUTPUT_PAYLOAD_FORMAT_AVRO_SCHEMA_DEFINITION], + [output_payload_format_protobuf_schema_definition=OUTPUT_PAYLOAD_FORMAT_PROTOBUF_SCHEMA_DEFINITION]|[...]] + [--logging-config=LOGGING_CONFIG] + [--mediations=[transformation_template=TRANSFORMATION_TEMPLATE|...]] + [--update-labels=[KEY=VALUE,...]] + [--clear-crypto-key | --crypto-key=CRYPTO_KEY] + [--clear-labels | --remove-labels=[KEY,...]] + [--input-payload-format-avro-schema-definition=INPUT_PAYLOAD_FORMAT_AVRO_SCHEMA_DEFINITION | --input-payload-format-json=INPUT_PAYLOAD_FORMAT_JSON | --input-payload-format-protobuf-schema-definition=INPUT_PAYLOAD_FORMAT_PROTOBUF_SCHEMA_DEFINITION] + [--max-retry-attempts=MAX_RETRY_ATTEMPTS + --max-retry-delay=MAX_RETRY_DELAY --min-retry-delay=MIN_RETRY_DELAY] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Update an Eventarc pipeline. + +EXAMPLES + To update the pipeline my-pipeline with its destination targeting HTTP + endpoint URI 'https://example-endpoint.com' and network attachment + 'my-network-attachment', run: + + $ gcloud eventarc pipelines update my-pipeline \ + --location=us-central1 \ + --destinations=http_endpoint_uri='https://example-endpoint.com',\ + network_attachment=my-network-attachment + +POSITIONAL ARGUMENTS + Pipeline resource - The pipeline to update. The arguments in this group + can be used to specify the attributes of this resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. + + To set the project attribute: + ◆ provide the argument pipeline on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + PIPELINE + ID of the pipeline or fully qualified identifier for the pipeline. + + To set the pipeline attribute: + ▸ provide the argument pipeline on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the Eventarc pipeline, which should be one of the + supported regions. Alternatively, set the [eventarc/location] + property. + + To set the location attribute: + ▸ provide the argument pipeline on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property eventarc/location. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --destinations=[http_endpoint_uri=URI],[http_endpoint_message_binding_template=HTTP_ENDPOINT_MESSAGE_BINDING_TEMPLATE],[workflow=WORKFLOW],[message_bus=MESSAGE_BUS],[pubsub_topic=PUBSUB_TOPIC],[project=PROJECT],[location=LOCATION],[network_attachment=NETWORK_ATTACHMENT],[google_oidc_authentication_service_account=GOOGLE_OIDC_AUTHENTICATION_SERVICE_ACCOUNT],[google_oidc_authentication_audience=GOOGLE_OIDC_AUTHENTICATION_AUDIENCE],[oauth_token_authentication_service_account=OAUTH_TOKEN_AUTHENTICATION_SERVICE_ACCOUNT],[oauth_token_authentication_scope=OAUTH_TOKEN_AUTHENTICATION_SCOPE],[output_payload_format_json=OUTPUT_PAYLOAD_FORMAT_JSON],[output_payload_format_avro_schema_definition=OUTPUT_PAYLOAD_FORMAT_AVRO_SCHEMA_DEFINITION],[output_payload_format_protobuf_schema_definition=OUTPUT_PAYLOAD_FORMAT_PROTOBUF_SCHEMA_DEFINITION]|[...] + The pipeline's destinations. This flag can be repeated to add more + destinations to the list. Currently, only one destination is supported + per pipeline. A destination is specified in a dict format. For more + information, see Create an enrollment to receive events + (https://cloud.google.com/eventarc/advanced/docs/receive-events/create-enrollment). + + Note: Exactly one of the http_endpoint_uri, workflow, message_bus, or + pubsub_topic keys must be set. + + Valid keys are: + + http_endpoint_uri + The URI of the HTTP endpoint. The value must be a RFC2396 URI + string. Only HTTPS protocol is supported. The host can be either a + static IP addressable from the VPC specified by the network config, + or an internal DNS hostname of the service resolvable via Cloud + DNS. For example: + + $ gcloud eventarc pipelines create example-pipeline \ + --destinations=http_endpoint_uri='https://example.com' + + http_endpoint_message_binding_template + The CEL expression used to construct a new HTTP request to be sent + to the final destination. It can be optionally specified alongside + with http_endpoint_uri. It represents a configuration used to bind + a message to the final HTTP request that will be sent to the + destination. If a binding is not specified, by default the message + is treated as a CloudEvent and is mapped to the HTTP request + according to the CloudEvent HTTP Protocol Binding Binary Content + Mode. The pipeline converts the data field of the message to the + format provided in output_payload_format and maps it to the body + field of the result. It also sets the corresponding Content-Type + header to the output_payload_format type. If the + output_payload_format is unspecified, then the pipeline will treat + the data field of the message as opaque binary data and attach it + to the request body as bytes. In this case, the Content-Type header + will be set to the value of the datacontenttype attribute set on + the incoming CloudEvent message if present, or the + application/octet-stream MIME type otherwise. The pipeline expects + that the content of the message will adhere to the standard + CloudEvent format. If not then the outgoing message request may + fail with a persistent error. + + Note: When http_endpoint_uri is not set, + http_endpoint_message_binding_template can't be set. + + The result of the CEL expression must be a map of key-value pairs + such that: + + 1. If a map named headers exists on the result of the expression, + then its key-value pairs are directly mapped to the HTTP request + headers. The headers values are constructed from the corresponding + value type's canonical representation. If the headers field does + not exist, then the resulting HTTP request will not contain + headers. + + 2. If a field named body exists on the result of the expression, + then its value is directly mapped to the body of the request. If + the value of the body field is of type bytes or string, then it is + used as the HTTP request body as-is withouth any conversion. If the + body field is of any other type, then it is converted to a JSON + string. If the body field does not exist, then the resulting HTTP + request will not contain a body. + + 3. Any other fields in the resulting expression will be ignored. + + The CEL expression may access the incoming CloudEvent message in + its definition, as follows: + + 1. The data field of the incoming CloudEvent message can be + accessed using the message.data value. + + 2. Each attribute of the incoming CloudEvent message can be + accessed using the message. value, where is the name of + the attribute. + + Headers added to the request by previous filters in the chain can + be accessed in the CEL expression using the headers variable. The + headers variable defines a map of key-value pairs corresponding to + the HTTP headers added by previous mediation steps and not the + headers present on the original incoming request. For example, the + following CEL expression can be used to construct a headers-only + HTTP request by adding an additional header to the headers added by + previous mediations in the pipeline: + + {"headers": headers.merge({"new-header-key": "new-header-value"})} + + Additionally, the following CEL extension functions can be used in + this CEL expression: + + ▸ toBase64Url: map.toBase64Url() -> string + ▫ Converts a CelValue to a base64url encoded string. + + ▸ toJsonString: map.toJsonString() -> string + ▫ Converts a CelValue to a JSON string. + + ▸ merge: map1.merge(map2) -> map3 + ▫ Merges the passed CEL map with the existing CEL map the + function is applied to. If the same key exists in both maps, or + if the key's value is type map, then both maps are merged; + Otherwise, the value from the passed map is used. + + ▸ toMap: list(map).toMap() -> map + ▫ Converts a CEL list of CEL maps to a single CEL map. + + ▸ toDestinationPayloadFormat: + message.data.toDestinationPayloadFormat() -> string or bytes + ▫ Converts the message data to the destination payload format + specified in output_payload_format. This function is meant to + be applied to the message.data field. If the destination + payload format is not set, the function will return the message + data unchanged. + + ▸ toCloudEventJsonWithPayloadFormat: + message.toCloudEventJsonWithPayloadFormat() -> map + ▫ Converts a message to the corresponding structure of JSON + format for CloudEvents. This function applies + toDestinationPayloadFormat() to the message data. It also sets + the corresponding datacontenttype of the CloudEvent, as + indicated by the output_payload_format field. If + output_payload_format is not set, it will use the existing + datacontenttype on the CloudEvent if present; Otherwise, it + leaves the datacontenttype unset. This function expects that + the content of the message will adhere to the standard + CloudEvent format. If it doesn't then this function will fail. + The result is a CEL map that corresponds to the JSON + representation of the CloudEvent. To convert that data to a + JSON string it can be chained with the toJsonString() function. + + For example: + + $ gcloud eventarc pipelines create example-pipeline \ + --destinations=http_endpoint_uri='https://example.com',\ + http_endpoint_message_binding_template='{"headers": + headers.merge({"new-header-key": "new-header-value"}),"body": + "new-body"}' + + workflow + The destination Workflow ID. For example: + + $ gcloud eventarc pipelines create example-pipeline \ + --destinations=workflow=my-workflow + + message_bus + The destination Message Bus ID. For example: + + $ gcloud eventarc pipelines create example-pipeline \ + --destinations=message_bus=my-message-bus + + pubsub_topic + The destination Pub/Sub topic ID. For example: + + $ gcloud eventarc pipelines create example-pipeline \ + --destinations=pubsub_topic=my-topic + + project + The project ID of the destination resource. If project is not set, + then the project ID of the pipeline is used. For example: + + $ gcloud eventarc pipelines create example-pipeline \ + --destinations=project=example-project,workflow=my-workflow + + Note: When http_endpoint_uri is set, project can't be set. + + location + The location of the destination resource. If location is not set, + then the location of the pipeline is used. For example: + + $ gcloud eventarc pipelines create example-pipeline \ + --destinations=location=us-east1,workflow=my-workflow + + Note: When http_endpoint_uri is set, location can't be set. + + network_attachment + The ID of the network attachment that allows access to the consumer + VPC. For example: + + $ gcloud eventarc pipelines create example-pipeline \ + --destinations=network_attachment=my-network-attachment,\ + http_endpoint_uri='https://example.com' + + Note: network_attachment can only be set when http_endpoint_uri is + set as well. + + google_oidc_authentication_service_account + The service account email used to generate the OIDC token. The + token can be used to invoke Cloud Run and Cloud Run functions + destinations or HTTP endpoints that support Google OIDC. Note that + the principal who calls this API must have + iam.serviceAccounts.actAs permission on the service account. For + more information, see Service accounts overview + (https://cloud.google.com/iam/docs/understanding-service-accounts). + For example: + + $ gcloud eventarc pipelines create example-pipeline \ + --destinations=http_endpoint_uri='https://example.com',\ + google_oidc_authentication_service_account=example-service-account@e\ + xample-project.gserviceaccount.iam.com + + google_oidc_authentication_audience + The audience claim which identifies the recipient that the JWT is + intended for. If unspecified, the destination URI will be used. For + example: + + $ gcloud eventarc pipelines create example-pipeline \ + --destinations=http_endpoint_uri='https://example.com',\ + google_oidc_authentication_service_account=example-service-account@e\ + xample-project.gserviceaccount.iam.com,\ + google_oidc_authentication_audience='https://example.com' + + Note: google_oidc_authentication_audience can only be set if + google_oidc_authentication_service_account is set. + + oauth_token_authentication_service_account + The service account email used to generate the OAuth token. OAuth + authorization should generally only be used when calling Google + APIs hosted on *.googleapis.com. Note that the principal who calls + this API must have iam.serviceAccounts.actAs permission in the + service account. For more information, see Service accounts + overview + (https://cloud.google.com/iam/docs/understanding-service-accounts). + For example: + + $ gcloud eventarc pipelines create example-pipeline \ + --destinations=http_endpoint_uri='https://example.com',\ + oauth_token_authentication_service_account=example-service-account@e\ + xample-project.gserviceaccount.iam.com + + oauth_token_authentication_scope + The scope used to generate the OAuth token. If unspecified, + "https://www.googleapis.com/auth/cloud-platform" will be used. For + example: + + $ gcloud eventarc pipelines create example-pipeline \ + --destinations=http_endpoint_uri='https://example.com',\ + oauth_token_authentication_service_account=example-service-account@e\ + xample-project.gserviceaccount.iam.com,\ + oauth_token_authentication_scope=https://www.googleapis.com/auth/\ + cloud-platform + + Note: At most one of google_oidc_authentication_service_account or + oauth_token_authentication_service_account can be set; and + oauth_token_authentication_scope can only be set if + oauth_token_authentication_service_account is set. + + output_payload_format_json + Indicates that the output payload format is JSON. For example: + + $ gcloud eventarc pipelines create example-pipeline \ + --destinations=http_endpoint_uri='https://example.com',\ + output_payload_format_json= --input-payload-format-json= + + Note: JSON schemas are not supported. Any value specified by this + key is ignored. + + output_payload_format_avro_schema_definition + The schema definition of the Avro output payload format. For + example: + + $ gcloud eventarc pipelines create example-pipeline \ + --destinations=http_endpoint_uri='https://example.com',\ + output_payload_format_avro_schema_definition='{"type": "record", + "name": "my_record", "fields": [{"name": "field1", "type": + "string"}]}' \ + --input-payload-format-avro-schema-definition='{"type": + "record", "name": "my_record", "fields": [{"name": "field1", + "type": "string"}]}' + + output_payload_format_protobuf_schema_definition + The schema definition of the Protobuf output payload format. For + example: + + $ gcloud eventarc pipelines create example-pipeline \ + --destinations=http_endpoint_uri='https://example.com',\ + output_payload_format_protobuf_schema_definition='syntax = + "proto3"; message Location { string home_address = 1; }' \ + --input-payload-format-protobuf-schema-definition='syntax = + "proto3"; message Location { string home_address = 1; }' + + Note: If none of the input_payload_format_json, + input_payload_format_avro_schema_definition, or + input_payload_format_protobuf_schema_definition is set, then the + message data is treated as an opaque binary and no output format + can be set on the pipeline through the output_payload_format_json, + output_payload_format_avro_schema_definition, or + output_payload_format_protobuf_schema_definition field. Any + mediations on the pipeline that involve access to the data field + will fail as persistent errors. + + --logging-config=LOGGING_CONFIG + The logging config of the pipeline. LOGGING_CONFIG must be one of: + NONE, DEBUG, INFO, NOTICE, WARNING, ERROR, CRITICAL, ALERT, EMERGENCY. + + --mediations=[transformation_template=TRANSFORMATION_TEMPLATE|...] + The different ways to modify the pipeline. Currently, only one + mediation is supported per pipeline. + + A mediation is specified in a dict format. Currently, the only valid + choice is transformation_template. + + This is the template to apply to transform messages. + + For complex transformations, shell parameter processing may fail to + parse the CEL expressions. Please see gcloud topic flags-file for how + to use https://cloud.google.com/sdk/gcloud/reference/topic/flags-file + feature of gcloud to pass in CEL expressions. + + Examples: + + $ gcloud eventarc pipelines create example-pipeline \ + --mediations=transformation_template='message.removeFields(["dat\ + a.credit_card_number","data.ssn"])' + + --update-labels=[KEY=VALUE,...] + List of label KEY=VALUE pairs to update. If a label exists, its value + is modified. Otherwise, a new label is created. + + Keys must start with a lowercase character and contain only hyphens + (-), underscores (_), lowercase characters, and numbers. Values must + contain only hyphens (-), underscores (_), lowercase characters, and + numbers. + + At most one of these can be specified: + + --clear-crypto-key + Remove the previously configured crypto key. The channel will + continue to be encrypted using Google-managed keys. + + --crypto-key=CRYPTO_KEY + Fully qualified name of the crypto key to use for customer-managed + encryption. If this is unspecified, Google-managed keys will be used + for encryption. + + At most one of these can be specified: + + --clear-labels + Remove all labels. If --update-labels is also specified then + --clear-labels is applied first. + + For example, to remove all labels: + + $ gcloud eventarc pipelines update --clear-labels + + To remove all existing labels and create two new labels, foo and baz: + + $ gcloud eventarc pipelines update --clear-labels \ + --update-labels foo=bar,baz=qux + + --remove-labels=[KEY,...] + List of label keys to remove. If a label does not exist it is + silently ignored. If --update-labels is also specified then + --update-labels is applied first. + + At most one of these can be specified: + + --input-payload-format-avro-schema-definition=INPUT_PAYLOAD_FORMAT_AVRO_SCHEMA_DEFINITION + The pipeline's input payload Avro schema definition. If this is set, + then any messages not matching this format will be treated as + persistent errors. + + --input-payload-format-json=INPUT_PAYLOAD_FORMAT_JSON + The pipeline's input payload format is JSON. If this is set, then any + messages not matching this format will be treated as persistent + errors. + + --input-payload-format-protobuf-schema-definition=INPUT_PAYLOAD_FORMAT_PROTOBUF_SCHEMA_DEFINITION + The pipeline's input payload Protobuf schema definition. If this is + set, then any messages not matching this format will be treated as + persistent errors. + + The retry policy configuration for the pipeline. The pipeline exponentially + backs off if the destination is non-responsive or returns a retryable error + code. The backoff starts with a 1 second delay and doubles the delay after + each failed attempt. The delay is capped at 60 seconds. If the + max-retry-delay and min-retry-delay are set to the same value, then the + duration between retries is constant. + + --max-retry-attempts=MAX_RETRY_ATTEMPTS + The maximum number of retry attempts. If not set, the default value + is 5. + + --max-retry-delay=MAX_RETRY_DELAY + The maximum retry delay in seconds. If not set, the default value + is 60. + + --min-retry-delay=MIN_RETRY_DELAY + The minimum retry delay in seconds. If not set, the default value + is 1. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This variant is also available: + + $ gcloud beta eventarc pipelines update + diff --git a/gcloud/iam/workforce-pools/providers/create-oidc b/gcloud/iam/workforce-pools/providers/create-oidc index 081a4b472..abb616797 100644 --- a/gcloud/iam/workforce-pools/providers/create-oidc +++ b/gcloud/iam/workforce-pools/providers/create-oidc @@ -14,6 +14,8 @@ SYNOPSIS [--client-secret-value=CLIENT_SECRET_VALUE] [--description=DESCRIPTION] [--detailed-audit-logging] [--disabled] [--display-name=DISPLAY_NAME] [--jwk-json-path=PATH_TO_FILE] + [--extended-attributes-client-id=EXTENDED_ATTRIBUTES_CLIENT_ID + --extended-attributes-client-secret-value=EXTENDED_ATTRIBUTES_CLIENT_SECRET_VALUE --extended-attributes-issuer-uri=EXTENDED_ATTRIBUTES_ISSUER_URI --extended-attributes-type=EXTENDED_ATTRIBUTES_TYPE : --extended-attributes-filter=EXTENDED_ATTRIBUTES_FILTER] [--extra-attributes-client-id=EXTRA_ATTRIBUTES_CLIENT_ID --extra-attributes-client-secret-value=EXTRA_ATTRIBUTES_CLIENT_SECRET_VALUE --extra-attributes-issuer-uri=EXTRA_ATTRIBUTES_ISSUER_URI --extra-attributes-type=EXTRA_ATTRIBUTES_TYPE : --extra-attributes-filter=EXTRA_ATTRIBUTES_FILTER] [GCLOUD_WIDE_FLAG ...] @@ -276,6 +278,30 @@ OPTIONAL FLAGS } ```. Use a full or relative path to a local file containing the value of jwk_json_path. + *--extended-attributes-client-id*=_EXTENDED_ATTRIBUTES_CLIENT_ID_:: + + The OAuth 2.0 client ID for retrieving extended attributes from the identity provider. Required to get extended group memberships for a subset of Google Cloud products. + + *--extended-attributes-client-secret-value*=_EXTENDED_ATTRIBUTES_CLIENT_SECRET_VALUE_:: + + The OAuth 2.0 client secret for retrieving extended attributes from the identity provider. Required to get extended group memberships for a subset of Google Cloud products. + + *--extended-attributes-issuer-uri*=_EXTENDED_ATTRIBUTES_ISSUER_URI_:: + + OIDC identity provider's issuer URI. Must be a valid URI using the `https` scheme. Required to get the OIDC discovery document. + + *--extended-attributes-type*=_EXTENDED_ATTRIBUTES_TYPE_:: + + Represents the identity provider and type of claims that should be fetched. _EXTENDED_ATTRIBUTES_TYPE_ must be (only one value is supported): *azure-ad-groups-id*. + + *--extended-attributes-filter*=_EXTENDED_ATTRIBUTES_FILTER_:: + + The filter used to request specific records from the IdP. By default, all of the groups that are associated with a user are fetched. For Microsoft Entra ID, you can add `$search` query parameters using [Keyword Query Language] (https://learn.microsoft.com/en-us/sharepoint/dev/general-development/keyword-query-language-kql-syntax-reference). To learn more about `$search` querying in Microsoft Entra ID, see [Use the `$search` query parameter] (https://learn.microsoft.com/en-us/graph/search-query-parameter). + + Additionally, Workforce Identity Federation automatically adds the following [`$filter` query parameters] (https://learn.microsoft.com/en-us/graph/filter-query-parameter), based on the value of `attributes_type`. Values passed to `filter` are converted to `$search` query parameters. Additional `$filter` query parameters cannot be added using this field. + + * `AZURE_AD_GROUPS_ID`: `securityEnabled` filter is applied. + *--extra-attributes-client-id*=_EXTRA_ATTRIBUTES_CLIENT_ID_:: The OAuth 2.0 client ID for retrieving extra attributes from the identity provider. Required to get the access token using client credentials grant flow. diff --git a/gcloud/iam/workforce-pools/providers/create-saml b/gcloud/iam/workforce-pools/providers/create-saml index 41a4b8823..c2640c85c 100644 --- a/gcloud/iam/workforce-pools/providers/create-saml +++ b/gcloud/iam/workforce-pools/providers/create-saml @@ -9,6 +9,8 @@ SYNOPSIS [--async] [--attribute-condition=ATTRIBUTE_CONDITION] [--description=DESCRIPTION] [--detailed-audit-logging] [--disabled] [--display-name=DISPLAY_NAME] + [--extended-attributes-client-id=EXTENDED_ATTRIBUTES_CLIENT_ID + --extended-attributes-client-secret-value=EXTENDED_ATTRIBUTES_CLIENT_SECRET_VALUE --extended-attributes-issuer-uri=EXTENDED_ATTRIBUTES_ISSUER_URI --extended-attributes-type=EXTENDED_ATTRIBUTES_TYPE : --extended-attributes-filter=EXTENDED_ATTRIBUTES_FILTER] [--extra-attributes-client-id=EXTRA_ATTRIBUTES_CLIENT_ID --extra-attributes-client-secret-value=EXTRA_ATTRIBUTES_CLIENT_SECRET_VALUE --extra-attributes-issuer-uri=EXTRA_ATTRIBUTES_ISSUER_URI --extra-attributes-type=EXTRA_ATTRIBUTES_TYPE : --extra-attributes-filter=EXTRA_ATTRIBUTES_FILTER] [GCLOUD_WIDE_FLAG ...] @@ -196,6 +198,44 @@ OPTIONAL FLAGS A display name for the workforce pool provider. Cannot exceed 32 characters in length. + --extended-attributes-client-id=EXTENDED_ATTRIBUTES_CLIENT_ID + The OAuth 2.0 client ID for retrieving extended attributes from the + identity provider. Required to get extended group memberships for a + subset of Google Cloud products. + + --extended-attributes-client-secret-value=EXTENDED_ATTRIBUTES_CLIENT_SECRET_VALUE + The OAuth 2.0 client secret for retrieving extended attributes from the + identity provider. Required to get extended group memberships for a + subset of Google Cloud products. + + --extended-attributes-issuer-uri=EXTENDED_ATTRIBUTES_ISSUER_URI + OIDC identity provider's issuer URI. Must be a valid URI using the + https scheme. Required to get the OIDC discovery document. + + --extended-attributes-type=EXTENDED_ATTRIBUTES_TYPE + Represents the identity provider and type of claims that should be + fetched. EXTENDED_ATTRIBUTES_TYPE must be (only one value is + supported): azure-ad-groups-id. + + --extended-attributes-filter=EXTENDED_ATTRIBUTES_FILTER + The filter used to request specific records from the IdP. By default, + all of the groups that are associated with a user are fetched. For + Microsoft Entra ID, you can add $search query parameters using [Keyword + Query Language] + (https://learn.microsoft.com/en-us/sharepoint/dev/general-development/keyword-query-language-kql-syntax-reference). + To learn more about $search querying in Microsoft Entra ID, see [Use + the $search query parameter] + (https://learn.microsoft.com/en-us/graph/search-query-parameter). + + Additionally, Workforce Identity Federation automatically adds the + following [$filter query parameters] + (https://learn.microsoft.com/en-us/graph/filter-query-parameter), based + on the value of attributes_type. Values passed to filter are converted + to $search query parameters. Additional $filter query parameters cannot + be added using this field. + + ◆ AZURE_AD_GROUPS_ID: securityEnabled filter is applied. + --extra-attributes-client-id=EXTRA_ATTRIBUTES_CLIENT_ID The OAuth 2.0 client ID for retrieving extra attributes from the identity provider. Required to get the access token using client diff --git a/gcloud/iam/workforce-pools/providers/help b/gcloud/iam/workforce-pools/providers/help index d6ee3f161..7f1dbd273 100644 --- a/gcloud/iam/workforce-pools/providers/help +++ b/gcloud/iam/workforce-pools/providers/help @@ -23,6 +23,9 @@ GROUPS operations Manage IAM workforce pool provider long-running operations. + scim-tenants + Manage IAM workforce identity pool provider SCIM tenants. + COMMANDS COMMAND is one of the following: diff --git a/gcloud/iam/workforce-pools/providers/scim-tenants/create b/gcloud/iam/workforce-pools/providers/scim-tenants/create new file mode 100644 index 000000000..d4e3ee38f --- /dev/null +++ b/gcloud/iam/workforce-pools/providers/scim-tenants/create @@ -0,0 +1,116 @@ +NAME + gcloud iam workforce-pools providers scim-tenants create - create an IAM + workforce identity pool provider SCIM tenant + +SYNOPSIS + gcloud iam workforce-pools providers scim-tenants create + (SCIM_TENANT : --location=LOCATION + --provider=PROVIDER --workforce-pool=WORKFORCE_POOL) + [--claim-mapping=[KEY=VALUE,...]] [--description=DESCRIPTION] + [--display-name=DISPLAY_NAME] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Create a new SCIM tenant associated with a specific workforce identity pool + provider. + + Upon successful creation, the command returns the created SCIM tenant + resource. + +EXAMPLES + To create a SCIM tenant with ID my-tenant under provider my-okta-provider + in pool my-pool located in global: + + $ gcloud iam workforce-pools providers scim-tenants create \ + my-tenant --location=global --workforce-pool=my-pool \ + --provider=my-okta-provider + + To create a SCIM tenant sales-tenant under provider salesforce in pool + partner-pool located in europe-west1 with specific claim mappings: + + $ gcloud iam workforce-pools providers scim-tenants create \ + sales-tenant --location=europe-west1 \ + --workforce-pool=partner-pool --provider=salesforce \ + --claim-mapping="google.subject=salesforce_id,assertion.groups=m\ + emberOf" + +POSITIONAL ARGUMENTS + Workforce pool provider scim tenant resource - The ID of the SCIM tenant + to create. Must be 4-32 characters, alphanumeric ([a-z0-9-]), and cannot + start with gcp-. The arguments in this group can be used to specify the + attributes of this resource. + + This must be specified. + + SCIM_TENANT + ID of the workforce pool provider scim tenant or fully qualified + identifier for the workforce pool provider scim tenant. + + To set the scim_tenant attribute: + ▸ provide the argument scim_tenant on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the workforce pool. + + To set the location attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --provider=PROVIDER + The ID to use for the workforce pool provider, which becomes the + final component of the resource name. This value must be unique + within the workforce pool, 4-32 characters in length, and may contain + the characters [a-z0-9-]. The prefix gcp- is reserved for use by + Google, and may not be specified. + + To set the provider attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --provider on the command line. + + --workforce-pool=WORKFORCE_POOL + The ID to use for the workforce pool, which becomes the final + component of the resource name. This value must be a globally unique + string of 6 to 63 lowercase letters, digits, or hyphens. It must + start with a letter, and cannot have a trailing hyphen. The prefix + gcp- is reserved for use by Google, and may not be specified. + + To set the workforce-pool attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --workforce-pool on the command line. + +FLAGS + --claim-mapping=[KEY=VALUE,...] + A comma-separated list of KEY=VALUE pairs defining attribute mappings. + + --description=DESCRIPTION + Optional, user-specified description for the SCIM tenant (max 256 + characters). + + --display-name=DISPLAY_NAME + Optional, user-specified display name for the SCIM tenant (max 32 + characters). + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iam/ + +NOTES + These variants are also available: + + $ gcloud alpha iam workforce-pools providers scim-tenants create + + $ gcloud beta iam workforce-pools providers scim-tenants create + diff --git a/gcloud/iam/workforce-pools/providers/scim-tenants/delete b/gcloud/iam/workforce-pools/providers/scim-tenants/delete new file mode 100644 index 000000000..aead2d0e0 --- /dev/null +++ b/gcloud/iam/workforce-pools/providers/scim-tenants/delete @@ -0,0 +1,91 @@ +NAME + gcloud iam workforce-pools providers scim-tenants delete - delete an IAM + workforce identity pool provider SCIM tenant + +SYNOPSIS + gcloud iam workforce-pools providers scim-tenants delete + (SCIM_TENANT : --location=LOCATION + --provider=PROVIDER --workforce-pool=WORKFORCE_POOL) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Delete an existing SCIM tenant associated with a specific workforce + identity pool provider. This operation marks the tenant for deletion, and + it may be recoverable using the undelete command for a period. + +EXAMPLES + To delete a SCIM tenant with ID my-tenant under provider my-okta-provider + in pool my-pool located in global: + + $ gcloud iam workforce-pools providers scim-tenants delete \ + my-tenant --location=global --workforce-pool=my-pool \ + --provider=my-okta-provider + +POSITIONAL ARGUMENTS + Workforce pool provider scim tenant resource - The SCIM tenant to delete. + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + SCIM_TENANT + ID of the workforce pool provider scim tenant or fully qualified + identifier for the workforce pool provider scim tenant. + + To set the scim_tenant attribute: + ▸ provide the argument scim_tenant on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the workforce pool. + + To set the location attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --provider=PROVIDER + The ID to use for the workforce pool provider, which becomes the + final component of the resource name. This value must be unique + within the workforce pool, 4-32 characters in length, and may contain + the characters [a-z0-9-]. The prefix gcp- is reserved for use by + Google, and may not be specified. + + To set the provider attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --provider on the command line. + + --workforce-pool=WORKFORCE_POOL + The ID to use for the workforce pool, which becomes the final + component of the resource name. This value must be a globally unique + string of 6 to 63 lowercase letters, digits, or hyphens. It must + start with a letter, and cannot have a trailing hyphen. The prefix + gcp- is reserved for use by Google, and may not be specified. + + To set the workforce-pool attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --workforce-pool on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iam/ + +NOTES + These variants are also available: + + $ gcloud alpha iam workforce-pools providers scim-tenants delete + + $ gcloud beta iam workforce-pools providers scim-tenants delete + diff --git a/gcloud/iam/workforce-pools/providers/scim-tenants/describe b/gcloud/iam/workforce-pools/providers/scim-tenants/describe new file mode 100644 index 000000000..d493de7c1 --- /dev/null +++ b/gcloud/iam/workforce-pools/providers/scim-tenants/describe @@ -0,0 +1,90 @@ +NAME + gcloud iam workforce-pools providers scim-tenants describe - describe an + IAM workforce identity pool provider SCIM tenant + +SYNOPSIS + gcloud iam workforce-pools providers scim-tenants describe + (SCIM_TENANT : --location=LOCATION + --provider=PROVIDER --workforce-pool=WORKFORCE_POOL) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Describe an existing SCIM tenant associated with a specific workforce + identity pool provider. + +EXAMPLES + To describe a SCIM tenant with ID my-tenant under provider my-provider in + pool my-pool located in global: + + $ gcloud iam workforce-pools providers scim-tenants describe \ + my-tenant --location=global --workforce-pool=my-pool \ + --provider=my-provider + +POSITIONAL ARGUMENTS + Workforce pool provider scim tenant resource - The SCIM tenant to + describe. The arguments in this group can be used to specify the + attributes of this resource. + + This must be specified. + + SCIM_TENANT + ID of the workforce pool provider scim tenant or fully qualified + identifier for the workforce pool provider scim tenant. + + To set the scim_tenant attribute: + ▸ provide the argument scim_tenant on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the workforce pool. + + To set the location attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --provider=PROVIDER + The ID to use for the workforce pool provider, which becomes the + final component of the resource name. This value must be unique + within the workforce pool, 4-32 characters in length, and may contain + the characters [a-z0-9-]. The prefix gcp- is reserved for use by + Google, and may not be specified. + + To set the provider attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --provider on the command line. + + --workforce-pool=WORKFORCE_POOL + The ID to use for the workforce pool, which becomes the final + component of the resource name. This value must be a globally unique + string of 6 to 63 lowercase letters, digits, or hyphens. It must + start with a letter, and cannot have a trailing hyphen. The prefix + gcp- is reserved for use by Google, and may not be specified. + + To set the workforce-pool attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --workforce-pool on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iam/ + +NOTES + These variants are also available: + + $ gcloud alpha iam workforce-pools providers scim-tenants describe + + $ gcloud beta iam workforce-pools providers scim-tenants describe + diff --git a/gcloud/iam/workforce-pools/providers/scim-tenants/help b/gcloud/iam/workforce-pools/providers/scim-tenants/help new file mode 100644 index 000000000..60649a0a4 --- /dev/null +++ b/gcloud/iam/workforce-pools/providers/scim-tenants/help @@ -0,0 +1,52 @@ +NAME + gcloud iam workforce-pools providers scim-tenants - manage IAM workforce + identity pool provider SCIM tenants + +SYNOPSIS + gcloud iam workforce-pools providers scim-tenants GROUP | COMMAND + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Commands for creating, describing, listing, updating, and deleting SCIM + tenants associated with IAM workforce identity pool providers. SCIM tenants + enable automated user and group provisioning. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +GROUPS + GROUP is one of the following: + + tokens + Manage IAM workforce identity pool provider SCIM tenant tokens. + +COMMANDS + COMMAND is one of the following: + + create + Create an IAM workforce identity pool provider SCIM tenant. + + delete + Delete an IAM workforce identity pool provider SCIM tenant. + + describe + Describe an IAM workforce identity pool provider SCIM tenant. + + list + List IAM workforce identity pool provider SCIM tenants. + + undelete + Undelete an IAM workforce identity pool provider SCIM tenant. + + update + Update an IAM workforce identity pool provider SCIM tenant. + +NOTES + These variants are also available: + + $ gcloud alpha iam workforce-pools providers scim-tenants + + $ gcloud beta iam workforce-pools providers scim-tenants + diff --git a/gcloud/iam/workforce-pools/providers/scim-tenants/list b/gcloud/iam/workforce-pools/providers/scim-tenants/list new file mode 100644 index 000000000..c57df5c56 --- /dev/null +++ b/gcloud/iam/workforce-pools/providers/scim-tenants/list @@ -0,0 +1,115 @@ +NAME + gcloud iam workforce-pools providers scim-tenants list - list IAM workforce + identity pool provider SCIM tenants + +SYNOPSIS + gcloud iam workforce-pools providers scim-tenants list + (--provider=PROVIDER + : --location=LOCATION --workforce-pool=WORKFORCE_POOL) + [--show-deleted] [--filter=EXPRESSION] [--limit=LIMIT] + [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + List all SCIM tenants associated with a specific workforce identity pool + provider. + +EXAMPLES + To list all SCIM tenants under provider my-okta-provider in pool my-pool + located in global: + + $ gcloud iam workforce-pools providers scim-tenants list \ + --location=global --workforce-pool=my-pool \ + --provider=my-okta-provider + + To list deleted SCIM tenants as well: + + $ gcloud iam workforce-pools providers scim-tenants list \ + --location=global --workforce-pool=my-pool \ + --provider=my-okta-provider --show-deleted + +REQUIRED FLAGS + Workforce pool provider resource - The workforce identity pool provider + under which to list SCIM tenants. The arguments in this group can be used + to specify the attributes of this resource. + + This must be specified. + + --provider=PROVIDER + ID of the workforce pool provider or fully qualified identifier for + the workforce pool provider. + + To set the provider attribute: + ▸ provide the argument --provider on the command line. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + The location for the workforce pool. + + To set the location attribute: + ▸ provide the argument --provider on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --workforce-pool=WORKFORCE_POOL + The ID to use for the workforce pool, which becomes the final + component of the resource name. This value must be a globally unique + string of 6 to 63 lowercase letters, digits, or hyphens. It must + start with a letter, and cannot have a trailing hyphen. The prefix + gcp- is reserved for use by Google, and may not be specified. + + To set the workforce-pool attribute: + ▸ provide the argument --provider on the command line with a fully + specified name; + ▸ provide the argument --workforce-pool on the command line. + +FLAGS + --show-deleted + Include SCIM tenants that have been deleted. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iam/ + +NOTES + These variants are also available: + + $ gcloud alpha iam workforce-pools providers scim-tenants list + + $ gcloud beta iam workforce-pools providers scim-tenants list + diff --git a/gcloud/iam/workforce-pools/providers/scim-tenants/tokens/create b/gcloud/iam/workforce-pools/providers/scim-tenants/tokens/create new file mode 100644 index 000000000..2de276dd8 --- /dev/null +++ b/gcloud/iam/workforce-pools/providers/scim-tenants/tokens/create @@ -0,0 +1,111 @@ +NAME + gcloud iam workforce-pools providers scim-tenants tokens create - create an + IAM workforce identity pool provider SCIM tenant token + +SYNOPSIS + gcloud iam workforce-pools providers scim-tenants tokens create + (TOKEN : --location=LOCATION --provider=PROVIDER + --scim-tenant=SCIM_TENANT --workforce-pool=WORKFORCE_POOL) + [--display-name=DISPLAY_NAME] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Create a new SCIM token associated with a specific workforce identity pool + provider SCIM tenant. + + Upon successful creation, the command returns the created SCIM token + resource. + +EXAMPLES + To create a SCIM token with ID my-token under tenant my-tenant provider + my-provider in pool my-pool located in global: + + $ gcloud iam workforce-pools providers scim-tenants tokens create \ + my-token --location=global --workforce-pool=my-pool \ + --provider=my-provider --scim-tenant=my-tenant + +POSITIONAL ARGUMENTS + Workforce pool provider scim token resource - The ID of the SCIM token to + create. Must be 4-32 characters, alphanumeric ([a-z0-9-]), and cannot + start with gcp-. The arguments in this group can be used to specify the + attributes of this resource. + + This must be specified. + + TOKEN + ID of the workforce pool provider scim token or fully qualified + identifier for the workforce pool provider scim token. + + To set the token attribute: + ▸ provide the argument token on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the workforce pool. + + To set the location attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --provider=PROVIDER + The ID to use for the workforce pool provider, which becomes the + final component of the resource name. This value must be unique + within the workforce pool, 4-32 characters in length, and may contain + the characters [a-z0-9-]. The prefix gcp- is reserved for use by + Google, and may not be specified. + + To set the provider attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --provider on the command line. + + --scim-tenant=SCIM_TENANT + The ID for the SCIM tenant, which becomes the final component of the + resource name. This value must be 4-32 characters, alphanumeric + ([a-z0-9-]), and cannot start with gcp-. + + To set the scim-tenant attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --scim-tenant on the command line. + + --workforce-pool=WORKFORCE_POOL + The ID to use for the workforce pool, which becomes the final + component of the resource name. This value must be a globally unique + string of 6 to 63 lowercase letters, digits, or hyphens. It must + start with a letter, and cannot have a trailing hyphen. The prefix + gcp- is reserved for use by Google, and may not be specified. + + To set the workforce-pool attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --workforce-pool on the command line. + +FLAGS + --display-name=DISPLAY_NAME + Optional, user-specified display name for the SCIM token (max 32 + characters). + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iam/ + +NOTES + These variants are also available: + + $ gcloud alpha iam workforce-pools providers scim-tenants tokens \ + create + + $ gcloud beta iam workforce-pools providers scim-tenants tokens \ + create + diff --git a/gcloud/iam/workforce-pools/providers/scim-tenants/tokens/delete b/gcloud/iam/workforce-pools/providers/scim-tenants/tokens/delete new file mode 100644 index 000000000..3ded0263e --- /dev/null +++ b/gcloud/iam/workforce-pools/providers/scim-tenants/tokens/delete @@ -0,0 +1,102 @@ +NAME + gcloud iam workforce-pools providers scim-tenants tokens delete - delete an + IAM workforce identity pool provider SCIM tenant token + +SYNOPSIS + gcloud iam workforce-pools providers scim-tenants tokens delete + (TOKEN : --location=LOCATION --provider=PROVIDER + --scim-tenant=SCIM_TENANT --workforce-pool=WORKFORCE_POOL) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Delete a SCIM token associated with a specific workforce identity pool + provider SCIM tenant. + +EXAMPLES + To delete a SCIM token with ID my-token under tenant my-tenant provider + my-provider in pool my-pool located in global: + + $ gcloud iam workforce-pools providers scim-tenants tokens delete \ + my-token --location=global --workforce-pool=my-pool \ + --provider=my-provider --scim-tenant=my-tenant + +POSITIONAL ARGUMENTS + Workforce pool provider scim token resource - The SCIM token to delete. + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + TOKEN + ID of the workforce pool provider scim token or fully qualified + identifier for the workforce pool provider scim token. + + To set the token attribute: + ▸ provide the argument token on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the workforce pool. + + To set the location attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --provider=PROVIDER + The ID to use for the workforce pool provider, which becomes the + final component of the resource name. This value must be unique + within the workforce pool, 4-32 characters in length, and may contain + the characters [a-z0-9-]. The prefix gcp- is reserved for use by + Google, and may not be specified. + + To set the provider attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --provider on the command line. + + --scim-tenant=SCIM_TENANT + The ID for the SCIM tenant, which becomes the final component of the + resource name. This value must be 4-32 characters, alphanumeric + ([a-z0-9-]), and cannot start with gcp-. + + To set the scim-tenant attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --scim-tenant on the command line. + + --workforce-pool=WORKFORCE_POOL + The ID to use for the workforce pool, which becomes the final + component of the resource name. This value must be a globally unique + string of 6 to 63 lowercase letters, digits, or hyphens. It must + start with a letter, and cannot have a trailing hyphen. The prefix + gcp- is reserved for use by Google, and may not be specified. + + To set the workforce-pool attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --workforce-pool on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iam/ + +NOTES + These variants are also available: + + $ gcloud alpha iam workforce-pools providers scim-tenants tokens \ + delete + + $ gcloud beta iam workforce-pools providers scim-tenants tokens \ + delete + diff --git a/gcloud/iam/workforce-pools/providers/scim-tenants/tokens/describe b/gcloud/iam/workforce-pools/providers/scim-tenants/tokens/describe new file mode 100644 index 000000000..30e8a9f18 --- /dev/null +++ b/gcloud/iam/workforce-pools/providers/scim-tenants/tokens/describe @@ -0,0 +1,102 @@ +NAME + gcloud iam workforce-pools providers scim-tenants tokens describe - + describe an IAM workforce identity pool provider SCIM tenant token + +SYNOPSIS + gcloud iam workforce-pools providers scim-tenants tokens describe + (TOKEN : --location=LOCATION --provider=PROVIDER + --scim-tenant=SCIM_TENANT --workforce-pool=WORKFORCE_POOL) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Describe a SCIM token associated with a specific workforce identity pool + provider SCIM tenant. + +EXAMPLES + To describe a SCIM token with ID my-token under tenant my-tenant provider + my-provider in pool my-pool located in global: + + $ gcloud iam workforce-pools providers scim-tenants tokens \ + describe my-token --location=global --workforce-pool=my-pool \ + --provider=my-provider --scim-tenant=my-tenant + +POSITIONAL ARGUMENTS + Workforce pool provider scim token resource - The SCIM token to describe. + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + TOKEN + ID of the workforce pool provider scim token or fully qualified + identifier for the workforce pool provider scim token. + + To set the token attribute: + ▸ provide the argument token on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the workforce pool. + + To set the location attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --provider=PROVIDER + The ID to use for the workforce pool provider, which becomes the + final component of the resource name. This value must be unique + within the workforce pool, 4-32 characters in length, and may contain + the characters [a-z0-9-]. The prefix gcp- is reserved for use by + Google, and may not be specified. + + To set the provider attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --provider on the command line. + + --scim-tenant=SCIM_TENANT + The ID for the SCIM tenant, which becomes the final component of the + resource name. This value must be 4-32 characters, alphanumeric + ([a-z0-9-]), and cannot start with gcp-. + + To set the scim-tenant attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --scim-tenant on the command line. + + --workforce-pool=WORKFORCE_POOL + The ID to use for the workforce pool, which becomes the final + component of the resource name. This value must be a globally unique + string of 6 to 63 lowercase letters, digits, or hyphens. It must + start with a letter, and cannot have a trailing hyphen. The prefix + gcp- is reserved for use by Google, and may not be specified. + + To set the workforce-pool attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --workforce-pool on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iam/ + +NOTES + These variants are also available: + + $ gcloud alpha iam workforce-pools providers scim-tenants tokens \ + describe + + $ gcloud beta iam workforce-pools providers scim-tenants tokens \ + describe + diff --git a/gcloud/iam/workforce-pools/providers/scim-tenants/tokens/help b/gcloud/iam/workforce-pools/providers/scim-tenants/tokens/help new file mode 100644 index 000000000..3b6e135e1 --- /dev/null +++ b/gcloud/iam/workforce-pools/providers/scim-tenants/tokens/help @@ -0,0 +1,45 @@ +NAME + gcloud iam workforce-pools providers scim-tenants tokens - manage IAM + workforce identity pool provider SCIM tenant tokens + +SYNOPSIS + gcloud iam workforce-pools providers scim-tenants tokens COMMAND + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Commands for creating, describing, listing, updating, and deleting SCIM + tokens associated with IAM workforce identity pool provider SCIM tenants. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + create + Create an IAM workforce identity pool provider SCIM tenant token. + + delete + Delete an IAM workforce identity pool provider SCIM tenant token. + + describe + Describe an IAM workforce identity pool provider SCIM tenant token. + + list + List IAM workforce identity pool provider SCIM tenant tokens. + + undelete + Undelete an IAM workforce identity pool provider SCIM tenant token. + + update + Update an IAM workforce identity pool provider SCIM tenant token. + +NOTES + These variants are also available: + + $ gcloud alpha iam workforce-pools providers scim-tenants tokens + + $ gcloud beta iam workforce-pools providers scim-tenants tokens + diff --git a/gcloud/iam/workforce-pools/providers/scim-tenants/tokens/list b/gcloud/iam/workforce-pools/providers/scim-tenants/tokens/list new file mode 100644 index 000000000..d54f6e87c --- /dev/null +++ b/gcloud/iam/workforce-pools/providers/scim-tenants/tokens/list @@ -0,0 +1,127 @@ +NAME + gcloud iam workforce-pools providers scim-tenants tokens list - list IAM + workforce identity pool provider SCIM tenant tokens + +SYNOPSIS + gcloud iam workforce-pools providers scim-tenants tokens list + (--scim-tenant=SCIM_TENANT : --location=LOCATION + --provider=PROVIDER --workforce-pool=WORKFORCE_POOL) [--show-deleted] + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + List all SCIM tokens associated with a specific workforce identity pool + provider SCIM tenant. + +EXAMPLES + To list all SCIM tokens under tenant my-tenant provider my-provider in pool + my-pool located in global: + + $ gcloud iam workforce-pools providers scim-tenants tokens list \ + --location=global --workforce-pool=my-pool \ + --provider=my-provider --scim-tenant=my-tenant + + To list deleted SCIM tokens as well: + + $ gcloud iam workforce-pools providers scim-tenants tokens list \ + --location=global --workforce-pool=my-pool \ + --provider=my-provider --scim-tenant=my-tenant --show-deleted + +REQUIRED FLAGS + Workforce pool provider scim tenant resource - The SCIM tenant to list + tokens for. The arguments in this group can be used to specify the + attributes of this resource. + + This must be specified. + + --scim-tenant=SCIM_TENANT + ID of the workforce pool provider scim tenant or fully qualified + identifier for the workforce pool provider scim tenant. + + To set the scim-tenant attribute: + ▸ provide the argument --scim-tenant on the command line. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + The location for the workforce pool. + + To set the location attribute: + ▸ provide the argument --scim-tenant on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + + --provider=PROVIDER + The ID to use for the workforce pool provider, which becomes the + final component of the resource name. This value must be unique + within the workforce pool, 4-32 characters in length, and may contain + the characters [a-z0-9-]. The prefix gcp- is reserved for use by + Google, and may not be specified. + + To set the provider attribute: + ▸ provide the argument --scim-tenant on the command line with a + fully specified name; + ▸ provide the argument --provider on the command line. + + --workforce-pool=WORKFORCE_POOL + The ID to use for the workforce pool, which becomes the final + component of the resource name. This value must be a globally unique + string of 6 to 63 lowercase letters, digits, or hyphens. It must + start with a letter, and cannot have a trailing hyphen. The prefix + gcp- is reserved for use by Google, and may not be specified. + + To set the workforce-pool attribute: + ▸ provide the argument --scim-tenant on the command line with a + fully specified name; + ▸ provide the argument --workforce-pool on the command line. + +FLAGS + --show-deleted + Include soft-deleted tokens in the results. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iam/ + +NOTES + These variants are also available: + + $ gcloud alpha iam workforce-pools providers scim-tenants tokens list + + $ gcloud beta iam workforce-pools providers scim-tenants tokens list + diff --git a/gcloud/iam/workforce-pools/providers/scim-tenants/tokens/undelete b/gcloud/iam/workforce-pools/providers/scim-tenants/tokens/undelete new file mode 100644 index 000000000..305ae9ae6 --- /dev/null +++ b/gcloud/iam/workforce-pools/providers/scim-tenants/tokens/undelete @@ -0,0 +1,102 @@ +NAME + gcloud iam workforce-pools providers scim-tenants tokens undelete - + undelete an IAM workforce identity pool provider SCIM tenant token + +SYNOPSIS + gcloud iam workforce-pools providers scim-tenants tokens undelete + (TOKEN : --location=LOCATION --provider=PROVIDER + --scim-tenant=SCIM_TENANT --workforce-pool=WORKFORCE_POOL) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Undelete a SCIM token associated with a specific workforce identity pool + provider SCIM tenant. + +EXAMPLES + To undelete a SCIM token with ID my-token under tenant my-tenant provider + my-provider in pool my-pool located in global: + + $ gcloud iam workforce-pools providers scim-tenants tokens \ + undelete my-token --location=global --workforce-pool=my-pool \ + --provider=my-provider --scim-tenant=my-tenant + +POSITIONAL ARGUMENTS + Workforce pool provider scim token resource - The SCIM token to undelete. + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + TOKEN + ID of the workforce pool provider scim token or fully qualified + identifier for the workforce pool provider scim token. + + To set the token attribute: + ▸ provide the argument token on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the workforce pool. + + To set the location attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --provider=PROVIDER + The ID to use for the workforce pool provider, which becomes the + final component of the resource name. This value must be unique + within the workforce pool, 4-32 characters in length, and may contain + the characters [a-z0-9-]. The prefix gcp- is reserved for use by + Google, and may not be specified. + + To set the provider attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --provider on the command line. + + --scim-tenant=SCIM_TENANT + The ID for the SCIM tenant, which becomes the final component of the + resource name. This value must be 4-32 characters, alphanumeric + ([a-z0-9-]), and cannot start with gcp-. + + To set the scim-tenant attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --scim-tenant on the command line. + + --workforce-pool=WORKFORCE_POOL + The ID to use for the workforce pool, which becomes the final + component of the resource name. This value must be a globally unique + string of 6 to 63 lowercase letters, digits, or hyphens. It must + start with a letter, and cannot have a trailing hyphen. The prefix + gcp- is reserved for use by Google, and may not be specified. + + To set the workforce-pool attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --workforce-pool on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iam/ + +NOTES + These variants are also available: + + $ gcloud alpha iam workforce-pools providers scim-tenants tokens \ + undelete + + $ gcloud beta iam workforce-pools providers scim-tenants tokens \ + undelete + diff --git a/gcloud/iam/workforce-pools/providers/scim-tenants/tokens/update b/gcloud/iam/workforce-pools/providers/scim-tenants/tokens/update new file mode 100644 index 000000000..742b23b8c --- /dev/null +++ b/gcloud/iam/workforce-pools/providers/scim-tenants/tokens/update @@ -0,0 +1,108 @@ +NAME + gcloud iam workforce-pools providers scim-tenants tokens update - update an + IAM workforce identity pool provider SCIM tenant token + +SYNOPSIS + gcloud iam workforce-pools providers scim-tenants tokens update + (TOKEN : --location=LOCATION --provider=PROVIDER + --scim-tenant=SCIM_TENANT --workforce-pool=WORKFORCE_POOL) + --display-name=DISPLAY_NAME [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Update an existing SCIM token associated with a specific workforce identity + pool provider SCIM tenant. + +EXAMPLES + To update the display name of a SCIM token with ID my-token under tenant + my-tenant provider my-provider in pool my-pool located in global: + + $ gcloud iam workforce-pools providers scim-tenants tokens update \ + my-token --location=global --workforce-pool=my-pool \ + --provider=my-provider --scim-tenant=my-tenant \ + --display-name="New display name" + +POSITIONAL ARGUMENTS + Workforce pool provider scim token resource - The SCIM token to update. + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + TOKEN + ID of the workforce pool provider scim token or fully qualified + identifier for the workforce pool provider scim token. + + To set the token attribute: + ▸ provide the argument token on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the workforce pool. + + To set the location attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --provider=PROVIDER + The ID to use for the workforce pool provider, which becomes the + final component of the resource name. This value must be unique + within the workforce pool, 4-32 characters in length, and may contain + the characters [a-z0-9-]. The prefix gcp- is reserved for use by + Google, and may not be specified. + + To set the provider attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --provider on the command line. + + --scim-tenant=SCIM_TENANT + The ID for the SCIM tenant, which becomes the final component of the + resource name. This value must be 4-32 characters, alphanumeric + ([a-z0-9-]), and cannot start with gcp-. + + To set the scim-tenant attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --scim-tenant on the command line. + + --workforce-pool=WORKFORCE_POOL + The ID to use for the workforce pool, which becomes the final + component of the resource name. This value must be a globally unique + string of 6 to 63 lowercase letters, digits, or hyphens. It must + start with a letter, and cannot have a trailing hyphen. The prefix + gcp- is reserved for use by Google, and may not be specified. + + To set the workforce-pool attribute: + ▸ provide the argument token on the command line with a fully + specified name; + ▸ provide the argument --workforce-pool on the command line. + +REQUIRED FLAGS + --display-name=DISPLAY_NAME + Optional, user-specified display name for the SCIM token (max 32 + characters). + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iam/ + +NOTES + These variants are also available: + + $ gcloud alpha iam workforce-pools providers scim-tenants tokens \ + update + + $ gcloud beta iam workforce-pools providers scim-tenants tokens \ + update + diff --git a/gcloud/iam/workforce-pools/providers/scim-tenants/undelete b/gcloud/iam/workforce-pools/providers/scim-tenants/undelete new file mode 100644 index 000000000..a1fc433ee --- /dev/null +++ b/gcloud/iam/workforce-pools/providers/scim-tenants/undelete @@ -0,0 +1,90 @@ +NAME + gcloud iam workforce-pools providers scim-tenants undelete - undelete an + IAM workforce identity pool provider SCIM tenant + +SYNOPSIS + gcloud iam workforce-pools providers scim-tenants undelete + (SCIM_TENANT : --location=LOCATION + --provider=PROVIDER --workforce-pool=WORKFORCE_POOL) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Undelete a previously deleted SCIM tenant associated with a specific + workforce identity pool provider, restoring it to an active state. + +EXAMPLES + To undelete a SCIM tenant with ID my-tenant under provider my-okta-provider + in pool my-pool located in global: + + $ gcloud iam workforce-pools providers scim-tenants undelete \ + my-tenant --location=global --workforce-pool=my-pool \ + --provider=my-okta-provider + +POSITIONAL ARGUMENTS + Workforce pool provider scim tenant resource - The SCIM tenant to + undelete. The arguments in this group can be used to specify the + attributes of this resource. + + This must be specified. + + SCIM_TENANT + ID of the workforce pool provider scim tenant or fully qualified + identifier for the workforce pool provider scim tenant. + + To set the scim_tenant attribute: + ▸ provide the argument scim_tenant on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the workforce pool. + + To set the location attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --provider=PROVIDER + The ID to use for the workforce pool provider, which becomes the + final component of the resource name. This value must be unique + within the workforce pool, 4-32 characters in length, and may contain + the characters [a-z0-9-]. The prefix gcp- is reserved for use by + Google, and may not be specified. + + To set the provider attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --provider on the command line. + + --workforce-pool=WORKFORCE_POOL + The ID to use for the workforce pool, which becomes the final + component of the resource name. This value must be a globally unique + string of 6 to 63 lowercase letters, digits, or hyphens. It must + start with a letter, and cannot have a trailing hyphen. The prefix + gcp- is reserved for use by Google, and may not be specified. + + To set the workforce-pool attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --workforce-pool on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iam/ + +NOTES + These variants are also available: + + $ gcloud alpha iam workforce-pools providers scim-tenants undelete + + $ gcloud beta iam workforce-pools providers scim-tenants undelete + diff --git a/gcloud/iam/workforce-pools/providers/scim-tenants/update b/gcloud/iam/workforce-pools/providers/scim-tenants/update new file mode 100644 index 000000000..1e10590af --- /dev/null +++ b/gcloud/iam/workforce-pools/providers/scim-tenants/update @@ -0,0 +1,115 @@ +NAME + gcloud iam workforce-pools providers scim-tenants update - update an IAM + workforce identity pool provider SCIM tenant + +SYNOPSIS + gcloud iam workforce-pools providers scim-tenants update + (SCIM_TENANT : --location=LOCATION + --provider=PROVIDER --workforce-pool=WORKFORCE_POOL) + [--claim-mapping=[KEY=VALUE,...]] [--description=DESCRIPTION] + [--display-name=DISPLAY_NAME] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Update the configuration of an existing SCIM tenant associated with a + specific workforce identity pool provider. Only fields specified in the + command will be modified. + +EXAMPLES + To update the display name and description of a SCIM tenant with ID + my-tenant under provider my-okta-provider in pool my-pool located in + global: + + $ gcloud iam workforce-pools providers scim-tenants update \ + my-tenant --location=global --workforce-pool=my-pool \ + --provider=my-okta-provider \ + --display-name="Updated Tenant Name" \ + --description="New description" + + To update the claim mapping for the same tenant: + + $ gcloud iam workforce-pools providers scim-tenants update \ + my-tenant --location=global --workforce-pool=my-pool \ + --provider=my-okta-provider \ + --claim-mapping="google.subject=new_external_id,google.groups=al\ + l_groups" + +POSITIONAL ARGUMENTS + Workforce pool provider scim tenant resource - The SCIM tenant to update. + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + SCIM_TENANT + ID of the workforce pool provider scim tenant or fully qualified + identifier for the workforce pool provider scim tenant. + + To set the scim_tenant attribute: + ▸ provide the argument scim_tenant on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location for the workforce pool. + + To set the location attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --provider=PROVIDER + The ID to use for the workforce pool provider, which becomes the + final component of the resource name. This value must be unique + within the workforce pool, 4-32 characters in length, and may contain + the characters [a-z0-9-]. The prefix gcp- is reserved for use by + Google, and may not be specified. + + To set the provider attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --provider on the command line. + + --workforce-pool=WORKFORCE_POOL + The ID to use for the workforce pool, which becomes the final + component of the resource name. This value must be a globally unique + string of 6 to 63 lowercase letters, digits, or hyphens. It must + start with a letter, and cannot have a trailing hyphen. The prefix + gcp- is reserved for use by Google, and may not be specified. + + To set the workforce-pool attribute: + ▸ provide the argument scim_tenant on the command line with a fully + specified name; + ▸ provide the argument --workforce-pool on the command line. + +FLAGS + --claim-mapping=[KEY=VALUE,...] + A comma-separated list of KEY=VALUE pairs defining attribute mappings. + + --description=DESCRIPTION + Optional, user-specified description for the SCIM tenant (max 256 + characters). + + --display-name=DISPLAY_NAME + Optional, user-specified display name for the SCIM tenant (max 32 + characters). + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iam/ + +NOTES + These variants are also available: + + $ gcloud alpha iam workforce-pools providers scim-tenants update + + $ gcloud beta iam workforce-pools providers scim-tenants update + diff --git a/gcloud/iam/workforce-pools/providers/update-oidc b/gcloud/iam/workforce-pools/providers/update-oidc index 7fed9d25d..0e22b677a 100644 --- a/gcloud/iam/workforce-pools/providers/update-oidc +++ b/gcloud/iam/workforce-pools/providers/update-oidc @@ -14,6 +14,9 @@ SYNOPSIS [--web-sso-assertion-claims-behavior=WEB_SSO_ASSERTION_CLAIMS_BEHAVIOR] [--web-sso-response-type=WEB_SSO_RESPONSE_TYPE] [--clear-client-secret | --client-secret-value=CLIENT_SECRET_VALUE] + [--clear-extended-attributes-config + | --extended-attributes-client-id=EXTENDED_ATTRIBUTES_CLIENT_ID + --extended-attributes-client-secret-value=EXTENDED_ATTRIBUTES_CLIENT_SECRET_VALUE --extended-attributes-filter=EXTENDED_ATTRIBUTES_FILTER --extended-attributes-issuer-uri=EXTENDED_ATTRIBUTES_ISSUER_URI --extended-attributes-type=EXTENDED_ATTRIBUTES_TYPE] [--clear-extra-attributes-config | --extra-attributes-client-id=EXTRA_ATTRIBUTES_CLIENT_ID --extra-attributes-client-secret-value=EXTRA_ATTRIBUTES_CLIENT_SECRET_VALUE --extra-attributes-filter=EXTRA_ATTRIBUTES_FILTER --extra-attributes-issuer-uri=EXTRA_ATTRIBUTES_ISSUER_URI --extra-attributes-type=EXTRA_ATTRIBUTES_TYPE] @@ -263,6 +266,36 @@ FLAGS :: At most one of these can be specified: + *--clear-extended-attributes-config*::: + + Clear the extended attributes configuration. + + *--extended-attributes-client-id*=_EXTENDED_ATTRIBUTES_CLIENT_ID_::: + + The OAuth 2.0 client ID for retrieving extended attributes from the identity provider. Required to get extended group memberships for a subset of Google Cloud products. + + *--extended-attributes-client-secret-value*=_EXTENDED_ATTRIBUTES_CLIENT_SECRET_VALUE_::: + + The OAuth 2.0 client secret for retrieving extended attributes from the identity provider. Required to get extended group memberships for a subset of Google Cloud products. + + *--extended-attributes-filter*=_EXTENDED_ATTRIBUTES_FILTER_::: + + The filter used to request specific records from the IdP. By default, all of the groups that are associated with a user are fetched. For Microsoft Entra ID, you can add `$search` query parameters using [Keyword Query Language] (https://learn.microsoft.com/en-us/sharepoint/dev/general-development/keyword-query-language-kql-syntax-reference). To learn more about `$search` querying in Microsoft Entra ID, see [Use the `$search` query parameter] (https://learn.microsoft.com/en-us/graph/search-query-parameter). + + Additionally, Workforce Identity Federation automatically adds the following [`$filter` query parameters] (https://learn.microsoft.com/en-us/graph/filter-query-parameter), based on the value of `attributes_type`. Values passed to `filter` are converted to `$search` query parameters. Additional `$filter` query parameters cannot be added using this field. + + * `AZURE_AD_GROUPS_ID`: `securityEnabled` filter is applied. + + *--extended-attributes-issuer-uri*=_EXTENDED_ATTRIBUTES_ISSUER_URI_::: + + OIDC identity provider's issuer URI. Must be a valid URI using the `https` scheme. Required to get the OIDC discovery document. + + *--extended-attributes-type*=_EXTENDED_ATTRIBUTES_TYPE_::: + + Represents the identity provider and type of claims that should be fetched. _EXTENDED_ATTRIBUTES_TYPE_ must be (only one value is supported): *azure-ad-groups-id*. + + :: At most one of these can be specified: + *--clear-extra-attributes-config*::: Clear the extra attributes configuration. diff --git a/gcloud/iam/workforce-pools/providers/update-saml b/gcloud/iam/workforce-pools/providers/update-saml index e73d3fa8b..52ced8a51 100644 --- a/gcloud/iam/workforce-pools/providers/update-saml +++ b/gcloud/iam/workforce-pools/providers/update-saml @@ -9,6 +9,9 @@ SYNOPSIS [--attribute-mapping=[KEY=VALUE,...]] [--description=DESCRIPTION] [--detailed-audit-logging] [--disabled] [--display-name=DISPLAY_NAME] [--idp-metadata-path=PATH_TO_FILE] + [--clear-extended-attributes-config + | --extended-attributes-client-id=EXTENDED_ATTRIBUTES_CLIENT_ID + --extended-attributes-client-secret-value=EXTENDED_ATTRIBUTES_CLIENT_SECRET_VALUE --extended-attributes-filter=EXTENDED_ATTRIBUTES_FILTER --extended-attributes-issuer-uri=EXTENDED_ATTRIBUTES_ISSUER_URI --extended-attributes-type=EXTENDED_ATTRIBUTES_TYPE] [--clear-extra-attributes-config | --extra-attributes-client-id=EXTRA_ATTRIBUTES_CLIENT_ID --extra-attributes-client-secret-value=EXTRA_ATTRIBUTES_CLIENT_SECRET_VALUE --extra-attributes-filter=EXTRA_ATTRIBUTES_FILTER --extra-attributes-issuer-uri=EXTRA_ATTRIBUTES_ISSUER_URI --extra-attributes-type=EXTRA_ATTRIBUTES_TYPE] @@ -196,6 +199,49 @@ FLAGS Use a full or relative path to a local file containing the value of idp_metadata_path. + At most one of these can be specified: + + --clear-extended-attributes-config + Clear the extended attributes configuration. + + --extended-attributes-client-id=EXTENDED_ATTRIBUTES_CLIENT_ID + The OAuth 2.0 client ID for retrieving extended attributes from the + identity provider. Required to get extended group memberships for a + subset of Google Cloud products. + + --extended-attributes-client-secret-value=EXTENDED_ATTRIBUTES_CLIENT_SECRET_VALUE + The OAuth 2.0 client secret for retrieving extended attributes from + the identity provider. Required to get extended group memberships for + a subset of Google Cloud products. + + --extended-attributes-filter=EXTENDED_ATTRIBUTES_FILTER + The filter used to request specific records from the IdP. By default, + all of the groups that are associated with a user are fetched. For + Microsoft Entra ID, you can add $search query parameters using + [Keyword Query Language] + (https://learn.microsoft.com/en-us/sharepoint/dev/general-development/keyword-query-language-kql-syntax-reference). + To learn more about $search querying in Microsoft Entra ID, see [Use + the $search query parameter] + (https://learn.microsoft.com/en-us/graph/search-query-parameter). + + Additionally, Workforce Identity Federation automatically adds the + following [$filter query parameters] + (https://learn.microsoft.com/en-us/graph/filter-query-parameter), + based on the value of attributes_type. Values passed to filter are + converted to $search query parameters. Additional $filter query + parameters cannot be added using this field. + + ▸ AZURE_AD_GROUPS_ID: securityEnabled filter is applied. + + --extended-attributes-issuer-uri=EXTENDED_ATTRIBUTES_ISSUER_URI + OIDC identity provider's issuer URI. Must be a valid URI using the + https scheme. Required to get the OIDC discovery document. + + --extended-attributes-type=EXTENDED_ATTRIBUTES_TYPE + Represents the identity provider and type of claims that should be + fetched. EXTENDED_ATTRIBUTES_TYPE must be (only one value is + supported): azure-ad-groups-id. + At most one of these can be specified: --clear-extra-attributes-config diff --git a/gcloud/oracle-database/autonomous-databases/create b/gcloud/oracle-database/autonomous-databases/create index e6efd6e42..4d8fc7e13 100644 --- a/gcloud/oracle-database/autonomous-databases/create +++ b/gcloud/oracle-database/autonomous-databases/create @@ -7,6 +7,7 @@ SYNOPSIS [--admin-password=ADMIN_PASSWORD] [--async] [--cidr=CIDR] [--database=DATABASE] [--display-name=DISPLAY_NAME] [--labels=[LABELS,...]] [--location=LOCATION] [--network=NETWORK] + [--odb-network=ODB_NETWORK] [--odb-subnet=ODB_SUBNET] [--request-id=REQUEST_ID] [[--properties-db-workload=PROPERTIES_DB_WORKLOAD --properties-license-type=PROPERTIES_LICENSE_TYPE @@ -21,11 +22,31 @@ DESCRIPTION EXAMPLES To create AutonomousDatabase with id my-instance in the location us-east4 - with display-name my instance, network - projects/my-project/locations/global/networks/default, location us-east4, - database testadb, admin-password 123Abpassdord, cidr 12.2.0.0/24, + with display-name my instance, odb-network + projects/network-project/locations/us-east4/odbNetworks/my-odbnetwork, + odb-subnet + projects/network-project/locations/us-east4/odbNetworks/my-odbnetwork/odbSubnets/my-odbsubnet, + network projects/my-project/locations/global/networks/default, location + us-east4, database testadb, admin-password 123Abpassdord, cidr 12.2.0.0/24, properties-compute-count 2, properties-db-version 19c, properties-license-type LICENSE_INCLUDED, properties-db-workload DW. run: + To set the network configuration use one of the following options: + + ODBNetwork based configuration(This is the recommended way): + + $ gcloud oracle-database autonomous-databases create my-instance \ + --location=us-east4 --display-name="my instance" \ + --location=us-east4 --database=testadb \ + --admin-password=123Abpassdord --properties-compute-count=2 \ + --properties-db-version=19c \ + --properties-license-type=LICENSE_INCLUDED \ + --properties-db-workload=DW \ + --odb-network=projects/network-project/locations/us-east4/\ + odbNetworks/my-odbnetwork \ + --odb-subnet=projects/network-project/locations/us-east4/\ + odbNetworks/my-odbnetwork/odbSubnets/my-odbsubnet + + Network and CIDR based configuration: $ gcloud oracle-database autonomous-databases create my-instance \ --location=us-east4 --display-name="my instance" \ @@ -72,7 +93,7 @@ FLAGS complete. --cidr=CIDR - The subnet CIDR range for the Autonmous Database. + The subnet CIDR range for the Autonomous Database. --database=DATABASE The name of the Autonomous Database. The database name must be unique @@ -107,10 +128,10 @@ FLAGS --labels=path_to_file.(yaml|json) --location=LOCATION - For resources [autonomous_database, source-config-autonomous-database], - provides fallback value for resource location attribute. When the - resource's full URI path is not provided, location will fallback to - this flag value. + For resources [autonomous_database, odb-network, odb-subnet, + source-config-autonomous-database], provides fallback value for + resource location attribute. When the resource's full URI path is not + provided, location will fallback to this flag value. Network resource - The name of the VPC network used by the Autonomous Database in the following format: @@ -130,6 +151,39 @@ FLAGS To set the network attribute: ▸ provide the argument --network on the command line. + --odb-network=ODB_NETWORK + For resources [odb-network, odb-subnet], provides fallback value for + resource odb-network attribute. When the resource's full URI path is + not provided, odb-network will fallback to this flag value. + + OdbSubnet resource - The name of the OdbSubnet associated with the + Autonomous Database. Format: + projects/{project}/locations/{location}/odbNetworks/{odb_network}/odbSubnets/{odb_subnet} + This represents a Cloud resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument --odb-subnet on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + To set the location attribute: + ◆ provide the argument --odb-subnet on the command line with a fully + specified name; + ◆ provide the argument --location on the command line. + + To set the odb-network attribute: + ◆ provide the argument --odb-subnet on the command line with a fully + specified name; + ◆ provide the argument --odb-network on the command line. + + --odb-subnet=ODB_SUBNET + ID of the odbSubnet or fully qualified identifier for the odbSubnet. + + To set the odb-subnet attribute: + ▸ provide the argument --odb-subnet on the command line. + --request-id=REQUEST_ID An optional ID to identify the request. This value is used to identify duplicate requests. If you make a request with the same request ID and @@ -265,7 +319,7 @@ FLAGS --properties-vault-id=PROPERTIES_VAULT_ID The ID of the Oracle Cloud Infrastructure vault. - The source configuration for the standby Autonomnous Database. + The source configuration for the standby Autonomous Database. --source-config-automatic-backups-replication-enabled This field specifies if the replication of automatic backups is diff --git a/gcloud/oracle-database/cloud-vm-clusters/create b/gcloud/oracle-database/cloud-vm-clusters/create index ccd51b399..f09cd3bc2 100644 --- a/gcloud/oracle-database/cloud-vm-clusters/create +++ b/gcloud/oracle-database/cloud-vm-clusters/create @@ -5,9 +5,11 @@ NAME SYNOPSIS gcloud oracle-database cloud-vm-clusters create CLOUD_VM_CLUSTER --exadata-infrastructure=EXADATA_INFRASTRUCTURE [--async] + [--backup-odb-subnet=BACKUP_ODB_SUBNET] [--backup-subnet-cidr=BACKUP_SUBNET_CIDR] [--cidr=CIDR] [--display-name=DISPLAY_NAME] [--labels=[LABELS,...]] - [--location=LOCATION] [--network=NETWORK] [--request-id=REQUEST_ID] + [--location=LOCATION] [--network=NETWORK] [--odb-network=ODB_NETWORK] + [--odb-subnet=ODB_SUBNET] [--request-id=REQUEST_ID] [[--properties-cpu-core-count=PROPERTIES_CPU_CORE_COUNT --properties-license-type=PROPERTIES_LICENSE_TYPE : --properties-cluster-name=PROPERTIES_CLUSTER_NAME @@ -36,12 +38,38 @@ EXAMPLES Choose an available gi-versions in your location by running gcloud oracle-database db-system-shapes list --location=us-east4. To create CloudVmCluster instance with id my-instance in the location us-east4 with - display-name my instance, cidr 10.1.0.0/24, network + display-name my instance, odb-network + projects/network-project/locations/us-east4/odbNetworks/my-odbnetwork, + odb-subnet + projects/network-project/locations/us-east4/odbNetworks/my-odbnetwork/odbSubnets/my-odbsubnet, + backup-odb-subnet + projects/network-project/locations/us-east4/odbNetworks/my-odbnetwork/odbSubnets/my-backup-odbsubnet, + cidr 10.1.0.0/24, network projects/my-project/locations/global/networks/default, backup-subnet-cidr 10.2.0.0/24, license-type LICENSE_INCLUDED, ssh-public-keys VtTxzlPJtIivthmLOmWdRDFy5l27pKUTwLp02, hostname-prefix hostname1, cpu-core-count 4 and choosen gi-version xx.0.0.0, run: + To set the network configuration use one of the following options: + + ODBNetwork based configuration(This is the recommended way): + + $ gcloud oracle-database cloud-vm-clusters create my-instance \ + --location=us-east4 --display-name="my instance" \ + --odb-network=projects/network-project/locations/us-east4/\ + odbNetworks/my-odbnetwork \ + --odb-subnet=projects/network-project/locations/us-east4/\ + odbNetworks/my-odbnetwork/odbSubnets/my-odbsubnet \ + --backup-odb-subnet=projects/network-project/locations/\ + us-east4/odbNetworks/my-odbnetwork/odbSubnets/my-backup-odbsubnet \ + --properties-license-type=LICENSE_INCLUDED \ + --properties-ssh-public-keys="VtTxzlPJtIivthmLOmWdRDFy5l27pKUTwL\ + p02" --properties-gi-version=xx.0.0.0 \ + --properties-hostname-prefix=hostname1 \ + --properties-cpu-core-count=4 + + Network and CIDR based configuration: + $ gcloud oracle-database cloud-vm-clusters create my-instance \ --location=us-east4 --display-name="my instance" \ --cidr=10.1.0.0/24 \ @@ -114,6 +142,34 @@ OPTIONAL FLAGS Return immediately, without waiting for the operation in progress to complete. + OdbSubnet resource - The name of the backup OdbSubnet associated with the + VM Cluster. Format: + projects/{project}/locations/{location}/odbNetworks/{odb_network}/odbSubnets/{odb_subnet} + This represents a Cloud resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument --backup-odb-subnet on the command line with a + fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + To set the location attribute: + ◆ provide the argument --backup-odb-subnet on the command line with a + fully specified name; + ◆ provide the argument --location on the command line. + + To set the odb-network attribute: + ◆ provide the argument --backup-odb-subnet on the command line with a + fully specified name; + ◆ provide the argument --odb-network on the command line. + + --backup-odb-subnet=BACKUP_ODB_SUBNET + ID of the odbSubnet or fully qualified identifier for the odbSubnet. + + To set the odb-subnet attribute: + ▸ provide the argument --backup-odb-subnet on the command line. + --backup-subnet-cidr=BACKUP_SUBNET_CIDR CIDR range of the backup subnet. @@ -147,10 +203,10 @@ OPTIONAL FLAGS --labels=path_to_file.(yaml|json) --location=LOCATION - For resources [cloud_vm_cluster, exadata-infrastructure], provides - fallback value for resource location attribute. When the resource's - full URI path is not provided, location will fallback to this flag - value. + For resources [backup-odb-subnet, cloud_vm_cluster, + exadata-infrastructure, odb-network, odb-subnet], provides fallback + value for resource location attribute. When the resource's full URI + path is not provided, location will fallback to this flag value. Network resource - The name of the VPC network. Format: projects/{project}/global/networks/{network} This represents a Cloud @@ -169,6 +225,40 @@ OPTIONAL FLAGS To set the network attribute: ▸ provide the argument --network on the command line. + --odb-network=ODB_NETWORK + For resources [backup-odb-subnet, odb-network, odb-subnet], provides + fallback value for resource odb-network attribute. When the resource's + full URI path is not provided, odb-network will fallback to this flag + value. + + OdbSubnet resource - The name of the OdbSubnet associated with the VM + Cluster for IP allocation. Format: + projects/{project}/locations/{location}/odbNetworks/{odb_network}/odbSubnets/{odb_subnet} + This represents a Cloud resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument --odb-subnet on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + To set the location attribute: + ◆ provide the argument --odb-subnet on the command line with a fully + specified name; + ◆ provide the argument --location on the command line. + + To set the odb-network attribute: + ◆ provide the argument --odb-subnet on the command line with a fully + specified name; + ◆ provide the argument --odb-network on the command line. + + --odb-subnet=ODB_SUBNET + ID of the odbSubnet or fully qualified identifier for the odbSubnet. + + To set the odb-subnet attribute: + ▸ provide the argument --odb-subnet on the command line. + --request-id=REQUEST_ID An optional ID to identify the request. This value is used to identify duplicate requests. If you make a request with the same request ID and diff --git a/gcloud/oracle-database/cloud-vm-clusters/db-nodes/list b/gcloud/oracle-database/cloud-vm-clusters/db-nodes/list index b203f1c77..867f6b810 100644 --- a/gcloud/oracle-database/cloud-vm-clusters/db-nodes/list +++ b/gcloud/oracle-database/cloud-vm-clusters/db-nodes/list @@ -20,9 +20,9 @@ REQUIRED FLAGS CloudVmCluster resource - The parent value for database node in the following format: projects/{project}/locations/{location}/cloudVmClusters/{cloudVmCluster}. - The arguments in this group can be used to specify the attributes of this - resource. (NOTE) Some attributes are not given arguments in this group but - can be set in other ways. + . The arguments in this group can be used to specify the attributes of + this resource. (NOTE) Some attributes are not given arguments in this + group but can be set in other ways. To set the project attribute: ◆ provide the argument --cloud-vm-cluster on the command line with a diff --git a/gcloud/oracle-database/help b/gcloud/oracle-database/help index 7290405c1..61c74469d 100644 --- a/gcloud/oracle-database/help +++ b/gcloud/oracle-database/help @@ -42,5 +42,8 @@ GROUPS gi-versions Manage Gi Version resources. + odb-networks + Manage Odb Network resources. + operations Manage Operation resources. diff --git a/gcloud/oracle-database/odb-networks/create b/gcloud/oracle-database/odb-networks/create new file mode 100644 index 000000000..c16013d64 --- /dev/null +++ b/gcloud/oracle-database/odb-networks/create @@ -0,0 +1,124 @@ +NAME + gcloud oracle-database odb-networks create - create a new OdbNetwork + +SYNOPSIS + gcloud oracle-database odb-networks create + (ODB_NETWORK : --location=LOCATION) --network=NETWORK [--async] + [--labels=[LABELS,...]] [--request-id=REQUEST_ID] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Create a new OdbNetwork. + +EXAMPLES + To create OdbNetwork with id my-odbnetwork with network + projects/my-project/locations/global/networks/default in the location + us-east4. run: + + $ gcloud oracle-database odb-networks create my-odbnetwork \ + --location=us-east4 \ + --network=projects/my-project/locations/global/networks/default + +POSITIONAL ARGUMENTS + OdbNetwork resource - Identifier. The name of the OdbNetwork resource in + the following format: + projects/{project}/locations/{region}/odbNetworks/{odb_network} The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument odb_network on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + ODB_NETWORK + ID of the odbNetwork or fully qualified identifier for the + odbNetwork. + + To set the odb_network attribute: + ▸ provide the argument odb_network on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location id of the odbNetwork resource. + + To set the location attribute: + ▸ provide the argument odb_network on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + +REQUIRED FLAGS + Network resource - The name of the VPC network in the following format: + projects/{project}/global/networks/{network} This represents a Cloud + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument --network on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + --network=NETWORK + ID of the network or fully qualified identifier for the network. + + To set the network attribute: + ▸ provide the argument --network on the command line. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --labels=[LABELS,...] + Labels or tags associated with the resource. + + KEY + Keys must start with a lowercase character and contain only hyphens + (-), underscores (_), lowercase characters, and numbers. + + VALUE + Values must contain only hyphens (-), underscores (_), lowercase + characters, and numbers. + + Shorthand Example: + + --labels=string=string + + JSON Example: + + --labels='{"string": "string"}' + + File Example: + + --labels=path_to_file.(yaml|json) + + --request-id=REQUEST_ID + An optional ID to identify the request. This value is used to identify + duplicate requests. If you make a request with the same request ID and + the original request is still in progress or completed, the server + ignores the second request. This prevents clients from accidentally + creating duplicate commitments. + + The request ID must be a valid UUID with the exception that zero UUID + is not supported (00000000-0000-0000-0000-000000000000). + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the oracledatabase/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/oracle/database/docs diff --git a/gcloud/oracle-database/odb-networks/delete b/gcloud/oracle-database/odb-networks/delete new file mode 100644 index 000000000..bb6c565a0 --- /dev/null +++ b/gcloud/oracle-database/odb-networks/delete @@ -0,0 +1,77 @@ +NAME + gcloud oracle-database odb-networks delete - delete an OdbNetwork + +SYNOPSIS + gcloud oracle-database odb-networks delete + (ODB_NETWORK : --location=LOCATION) [--async] [--request-id=REQUEST_ID] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Delete an OdbNetwork. + +EXAMPLES + To delete an OdbNetwork with id my-odbnetwork in the location us-east4, + run: + + $ gcloud oracle-database odb-networks delete my-odbnetwork \ + --location=us-east4 + +POSITIONAL ARGUMENTS + OdbNetwork resource - The name of the resource in the following format: + projects/{project}/locations/{location}/odbNetworks/{odb_network}. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument odb_network on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + ODB_NETWORK + ID of the odbNetwork or fully qualified identifier for the + odbNetwork. + + To set the odb_network attribute: + ▸ provide the argument odb_network on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location id of the odbNetwork resource. + + To set the location attribute: + ▸ provide the argument odb_network on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --request-id=REQUEST_ID + An optional ID to identify the request. This value is used to identify + duplicate requests. If you make a request with the same request ID and + the original request is still in progress or completed, the server + ignores the second request. This prevents clients from accidentally + creating duplicate commitments. + + The request ID must be a valid UUID with the exception that zero UUID + is not supported (00000000-0000-0000-0000-000000000000). + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the oracledatabase/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/oracle/database/docs diff --git a/gcloud/oracle-database/odb-networks/describe b/gcloud/oracle-database/odb-networks/describe new file mode 100644 index 000000000..d2114c62a --- /dev/null +++ b/gcloud/oracle-database/odb-networks/describe @@ -0,0 +1,60 @@ +NAME + gcloud oracle-database odb-networks describe - get details of an OdbNetwork + +SYNOPSIS + gcloud oracle-database odb-networks describe + (ODB_NETWORK : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Get details of an OdbNetwork. + +EXAMPLES + To get an OdbNetwork with id my-odbnetwork in the location us-east4, run: + + $ gcloud oracle-database odb-networks describe my-odbnetwork \ + --location=us-east4 + +POSITIONAL ARGUMENTS + OdbNetwork resource - The name of the OdbNetwork in the following format: + projects/{project}/locations/{location}/odbNetworks/{odb_network}. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument odb_network on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + ODB_NETWORK + ID of the odbNetwork or fully qualified identifier for the + odbNetwork. + + To set the odb_network attribute: + ▸ provide the argument odb_network on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location id of the odbNetwork resource. + + To set the location attribute: + ▸ provide the argument odb_network on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the oracledatabase/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/oracle/database/docs diff --git a/gcloud/oracle-database/odb-networks/help b/gcloud/oracle-database/odb-networks/help new file mode 100644 index 000000000..b711462ec --- /dev/null +++ b/gcloud/oracle-database/odb-networks/help @@ -0,0 +1,34 @@ +NAME + gcloud oracle-database odb-networks - manage Odb Network resources + +SYNOPSIS + gcloud oracle-database odb-networks GROUP | COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Manage Odb Network resources. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +GROUPS + GROUP is one of the following: + + odb-subnets + Manage Odb Subnet resources. + +COMMANDS + COMMAND is one of the following: + + create + Create a new OdbNetwork. + + delete + Delete an OdbNetwork. + + describe + Get details of an OdbNetwork. + + list + List all OdbNetworks. diff --git a/gcloud/oracle-database/odb-networks/list b/gcloud/oracle-database/odb-networks/list new file mode 100644 index 000000000..6aed14313 --- /dev/null +++ b/gcloud/oracle-database/odb-networks/list @@ -0,0 +1,79 @@ +NAME + gcloud oracle-database odb-networks list - list all OdbNetworks + +SYNOPSIS + gcloud oracle-database odb-networks list --location=LOCATION + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + List all OdbNetworks. + +EXAMPLES + To list all OdbNetworks in the location us-east4, run: + + $ gcloud oracle-database odb-networks list --location=us-east4 + +REQUIRED FLAGS + Location resource - The parent value for the ODB Network in the following + format: projects/{project}/locations/{location}. This represents a Cloud + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. + + To set the location attribute: + ▸ provide the argument --location on the command line. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the oracledatabase/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/oracle/database/docs diff --git a/gcloud/oracle-database/odb-networks/odb-subnets/create b/gcloud/oracle-database/odb-networks/odb-subnets/create new file mode 100644 index 000000000..0068679ac --- /dev/null +++ b/gcloud/oracle-database/odb-networks/odb-subnets/create @@ -0,0 +1,126 @@ +NAME + gcloud oracle-database odb-networks odb-subnets create - create a new + OdbSubnet + +SYNOPSIS + gcloud oracle-database odb-networks odb-subnets create + (ODB_SUBNET : --location=LOCATION --odb-network=ODB_NETWORK) + --cidr-range=CIDR_RANGE --purpose=PURPOSE [--async] + [--labels=[LABELS,...]] [--request-id=REQUEST_ID] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Create a new OdbSubnet. + +EXAMPLES + To create OdbSubnet with id my-odbsubnet with cidr-range 10.0.10.0/24 and + the purpose of subnet is for client connections CLIENT_SUBNET in the + location us-east4 for a given OdbNetwork with id my-odbnetwork. run: + + $ gcloud oracle-database odb-networks odb-subnets create \ + my-odbsubnet --odb-network=my-odbnetwork \ + --cidr-range=10.0.10.0/24 --purpose=CLIENT_SUBNET \ + --location=us-east4 + +POSITIONAL ARGUMENTS + OdbSubnet resource - Identifier. The name of the OdbSubnet resource in the + following format: + projects/{project}/locations/{location}/odbNetworks/{odb_network}/odbSubnets/{odb_subnet} + The arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument odb_subnet on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + ODB_SUBNET + ID of the odbSubnet or fully qualified identifier for the odbSubnet. + + To set the odb_subnet attribute: + ▸ provide the argument odb_subnet on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location id of the odbSubnet resource. + + To set the location attribute: + ▸ provide the argument odb_subnet on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --odb-network=ODB_NETWORK + The odbNetwork id of the odbSubnet resource. + + To set the odb-network attribute: + ▸ provide the argument odb_subnet on the command line with a fully + specified name; + ▸ provide the argument --odb-network on the command line. + +REQUIRED FLAGS + --cidr-range=CIDR_RANGE + The CIDR range of the subnet. + + --purpose=PURPOSE + Purpose of the subnet. PURPOSE must be one of: + + backup-subnet + Subnet to be used for backup. + client-subnet + Subnet to be used for client connections. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --labels=[LABELS,...] + Labels or tags associated with the resource. + + KEY + Keys must start with a lowercase character and contain only hyphens + (-), underscores (_), lowercase characters, and numbers. + + VALUE + Values must contain only hyphens (-), underscores (_), lowercase + characters, and numbers. + + Shorthand Example: + + --labels=string=string + + JSON Example: + + --labels='{"string": "string"}' + + File Example: + + --labels=path_to_file.(yaml|json) + + --request-id=REQUEST_ID + An optional ID to identify the request. This value is used to identify + duplicate requests. If you make a request with the same request ID and + the original request is still in progress or completed, the server + ignores the second request. This prevents clients from accidentally + creating duplicate commitments. + + The request ID must be a valid UUID with the exception that zero UUID + is not supported (00000000-0000-0000-0000-000000000000). + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the oracledatabase/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/oracle/database/docs diff --git a/gcloud/oracle-database/odb-networks/odb-subnets/delete b/gcloud/oracle-database/odb-networks/odb-subnets/delete new file mode 100644 index 000000000..04cce3cff --- /dev/null +++ b/gcloud/oracle-database/odb-networks/odb-subnets/delete @@ -0,0 +1,85 @@ +NAME + gcloud oracle-database odb-networks odb-subnets delete - delete an + OdbSubnet + +SYNOPSIS + gcloud oracle-database odb-networks odb-subnets delete + (ODB_SUBNET : --location=LOCATION --odb-network=ODB_NETWORK) [--async] + [--request-id=REQUEST_ID] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Delete an OdbSubnet. + +EXAMPLES + To delete an OdbSubnet with id my-odbsubnet in the location us-east4 for a + given OdbNetwork with id my-odbnetwork, run: + + $ gcloud oracle-database odb-networks odb-subnets delete \ + my-odbsubnet --odb-network=my-odbnetwork --location=us-east4 + +POSITIONAL ARGUMENTS + OdbSubnet resource - The name of the resource in the following format: + projects/{project}/locations/{region}/odbNetworks/{odb_network}/odbSubnets/{odb_subnet}. + The arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument odb_subnet on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + ODB_SUBNET + ID of the odbSubnet or fully qualified identifier for the odbSubnet. + + To set the odb_subnet attribute: + ▸ provide the argument odb_subnet on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location id of the odbSubnet resource. + + To set the location attribute: + ▸ provide the argument odb_subnet on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --odb-network=ODB_NETWORK + The odbNetwork id of the odbSubnet resource. + + To set the odb-network attribute: + ▸ provide the argument odb_subnet on the command line with a fully + specified name; + ▸ provide the argument --odb-network on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --request-id=REQUEST_ID + An optional ID to identify the request. This value is used to identify + duplicate requests. If you make a request with the same request ID and + the original request is still in progress or completed, the server + ignores the second request. This prevents clients from accidentally + creating duplicate commitments. + + The request ID must be a valid UUID with the exception that zero UUID + is not supported (00000000-0000-0000-0000-000000000000). + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the oracledatabase/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/oracle/database/docs diff --git a/gcloud/oracle-database/odb-networks/odb-subnets/describe b/gcloud/oracle-database/odb-networks/odb-subnets/describe new file mode 100644 index 000000000..a6bab8296 --- /dev/null +++ b/gcloud/oracle-database/odb-networks/odb-subnets/describe @@ -0,0 +1,70 @@ +NAME + gcloud oracle-database odb-networks odb-subnets describe - get details of + an OdbSubnet + +SYNOPSIS + gcloud oracle-database odb-networks odb-subnets describe + (ODB_SUBNET : --location=LOCATION --odb-network=ODB_NETWORK) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Get details of an OdbSubnet. + +EXAMPLES + To get an OdbSubnet with id my-odbsubnet in the location us-east4 for a + given OdbNetwork with id my-odbnetwork, run: + + $ gcloud oracle-database odb-networks odb-subnets describe \ + my-odbsubnet --odb-network=my-odbnetwork --location=us-east4 + +POSITIONAL ARGUMENTS + OdbSubnet resource - The name of the OdbSubnet in the following format: + projects/{project}/locations/{location}/odbNetworks/{odb_network}/odbSubnets/{odb_subnet}. + The arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument odb_subnet on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + ODB_SUBNET + ID of the odbSubnet or fully qualified identifier for the odbSubnet. + + To set the odb_subnet attribute: + ▸ provide the argument odb_subnet on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location id of the odbSubnet resource. + + To set the location attribute: + ▸ provide the argument odb_subnet on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --odb-network=ODB_NETWORK + The odbNetwork id of the odbSubnet resource. + + To set the odb-network attribute: + ▸ provide the argument odb_subnet on the command line with a fully + specified name; + ▸ provide the argument --odb-network on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the oracledatabase/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/oracle/database/docs diff --git a/gcloud/oracle-database/odb-networks/odb-subnets/help b/gcloud/oracle-database/odb-networks/odb-subnets/help new file mode 100644 index 000000000..1f4a99c31 --- /dev/null +++ b/gcloud/oracle-database/odb-networks/odb-subnets/help @@ -0,0 +1,30 @@ +NAME + gcloud oracle-database odb-networks odb-subnets - manage Odb Subnet + resources + +SYNOPSIS + gcloud oracle-database odb-networks odb-subnets COMMAND + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Manage Odb Subnet resources. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + create + Create a new OdbSubnet. + + delete + Delete an OdbSubnet. + + describe + Get details of an OdbSubnet. + + list + List all OdbSubnets. diff --git a/gcloud/oracle-database/odb-networks/odb-subnets/list b/gcloud/oracle-database/odb-networks/odb-subnets/list new file mode 100644 index 000000000..922735afd --- /dev/null +++ b/gcloud/oracle-database/odb-networks/odb-subnets/list @@ -0,0 +1,95 @@ +NAME + gcloud oracle-database odb-networks odb-subnets list - list all OdbSubnets + +SYNOPSIS + gcloud oracle-database odb-networks odb-subnets list + (--odb-network=ODB_NETWORK : --location=LOCATION) [--filter=EXPRESSION] + [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + List all OdbSubnets. + +EXAMPLES + To list all OdbSubnets in the location us-east4 for a given OdbNetwork with + id my-odbnetwork, run: + + $ gcloud oracle-database odb-networks odb-subnets list \ + --odb-network=my-odbnetwork --location=us-east4 + +REQUIRED FLAGS + OdbNetwork resource - The parent value for the OdbSubnet in the following + format: projects/{project}/locations/{location}/odbNetworks/{odb_network}. + The arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument --odb-network on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + --odb-network=ODB_NETWORK + ID of the odbNetwork or fully qualified identifier for the + odbNetwork. + + To set the odb-network attribute: + ▸ provide the argument --odb-network on the command line. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + The location id of the odbNetwork resource. + + To set the location attribute: + ▸ provide the argument --odb-network on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the oracledatabase/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/oracle/database/docs diff --git a/gcloud/run/deploy b/gcloud/run/deploy index 3c5638641..9f2fa2b0a 100644 --- a/gcloud/run/deploy +++ b/gcloud/run/deploy @@ -408,7 +408,7 @@ FLAGS --gpu=GPU Cloud Run supports values 0 or 1. 1 gpu also requires a minimum 4 - --cpu value and a minimum 8Gi --memory value. + --cpu value and a minimum 16Gi --memory value. --liveness-probe=[KEY=VALUE,...] Comma separated settings for liveness probe in the form KEY=VALUE. diff --git a/gcloud/run/services/update b/gcloud/run/services/update index 577289f2f..33da2e2a8 100644 --- a/gcloud/run/services/update +++ b/gcloud/run/services/update @@ -373,7 +373,7 @@ FLAGS --gpu=GPU Cloud Run supports values 0 or 1. 1 gpu also requires a minimum 4 - --cpu value and a minimum 8Gi --memory value. + --cpu value and a minimum 16Gi --memory value. --image=IMAGE Name of the container image to deploy (e.g. diff --git a/gcloud/scc/findings/export-to-bigquery b/gcloud/scc/findings/export-to-bigquery new file mode 100644 index 000000000..b6b4dc185 --- /dev/null +++ b/gcloud/scc/findings/export-to-bigquery @@ -0,0 +1,75 @@ +NAME + gcloud scc findings export-to-bigquery - export Security Command Center + findings to bigquery + +SYNOPSIS + gcloud scc findings export-to-bigquery [PARENT] --dataset=DATASET + [--location=LOCATION; default="global"] [--source=SOURCE; default="-"] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Export Security Command Center findings to bigquery. + +EXAMPLES + To export findings for a given parent + ``organizations/123/sources/456/locations/global`` and dataset + ``projects/project_id/datasets/dataset_id`` run: + + $ gcloud scc findings export-to-bigquery organizations/123 \ + --dataset=projects/project_id/datasets/dataset_id --source=456 \ + --location=global + +POSITIONAL ARGUMENTS + Parent resource - parent organization, folder, or project in the Google + Cloud resource hierarchy to be used for the gcloud scc command. Specify + the argument as either [RESOURCE_TYPE/RESOURCE_ID] or [RESOURCE_ID], as + shown in the preceding examples. This represents a Cloud resource. + + [PARENT] + ID of the parent or fully qualified identifier for the parent. + + To set the parent attribute: + ▸ provide the argument parent on the command line; + ▸ Set the parent property in configuration using gcloud config set + scc/parent if it is not specified in command line. + +REQUIRED FLAGS + --dataset=DATASET + BigQuery dataset to export findings to. + +OPTIONAL FLAGS + --location=LOCATION; default="global" + When data residency controls are enabled, this attribute specifies the + location in which the resource is located and applicable. The location + attribute can be provided as part of the fully specified resource name + or with the --location argument on the command line. The default + location is global. NOTE: If you override the endpoint to a regional + endpoint + (https://cloud.google.com/security-command-center/docs/reference/rest/index.html?rep_location=global#regional-service-endpoint) + you must specify the correct data location + (https://cloud.google.com/security-command-center/docs/data-residency-support#locations) + using this flag. The default location on this command is unrelated to + the default location that is specified when data residency controls are + enabled for Security Command Center. + + --source=SOURCE; default="-" + Source id. Defaults to all sources. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the Security Command Center API. For more information, + see Security Command Center API. + (https://cloud.google.com/security-command-center/docs/reference/rest) + +NOTES + This variant is also available: + + $ gcloud alpha scc findings export-to-bigquery + diff --git a/gcloud/scc/findings/help b/gcloud/scc/findings/help index f89752243..799d55f21 100644 --- a/gcloud/scc/findings/help +++ b/gcloud/scc/findings/help @@ -21,6 +21,9 @@ COMMANDS create Create a Security Command Center finding. + export-to-bigquery + Export Security Command Center findings to bigquery. + group Filter an organization or source's findings and groups them by their specified properties. diff --git a/gcloud/secrets/create b/gcloud/secrets/create index 9069aa7b0..393767b42 100644 --- a/gcloud/secrets/create +++ b/gcloud/secrets/create @@ -4,8 +4,8 @@ NAME SYNOPSIS gcloud secrets create SECRET [--data-file=PATH] [--labels=[KEY=VALUE,...]] [--location=LOCATION] [--regional-kms-key-name=KMS-KEY-NAME] - [--set-annotations=[KEY=VALUE,...]] [--topics=[TOPICS,...]] - [--version-destroy-ttl=VERSION-DESTROY-TTL] + [--set-annotations=[KEY=VALUE,...]] [--tags=[KEY=VALUE,...]] + [--topics=[TOPICS,...]] [--version-destroy-ttl=VERSION-DESTROY-TTL] [--expire-time=EXPIRE-TIME | --ttl=TTL] [--next-rotation-time=NEXT_ROTATION_TIME --rotation-period=ROTATION_PERIOD] @@ -125,6 +125,12 @@ FLAGS List of key-value pairs to set as Annotations. All existing Annotations will be removed first. + --tags=[KEY=VALUE,...] + List of tags KEY=VALUE pairs to bind. Each item must be expressed as + =. + + Example: 123/environment=production,123/costCenter=marketing + --topics=[TOPICS,...] List of Pub/Sub topics to configure on the secret. diff --git a/gcloud/sql/backups/restore b/gcloud/sql/backups/restore index 979bb793f..6639298e7 100644 --- a/gcloud/sql/backups/restore +++ b/gcloud/sql/backups/restore @@ -217,8 +217,10 @@ OPTIONAL FLAGS Allowed range: 0 to 20. --insights-config-query-string-length=INSIGHTS_CONFIG_QUERY_STRING_LENGTH - Query string length in bytes to be stored by the query insights - feature. Default length is 1024 bytes. Allowed range: 256 to 4500 + Sets the default query length limit. For Cloud SQL Enterprise edition, + the range is from 256 to 4500 (in bytes) and the default query length + is 1024 bytes. For Cloud SQL Enterprise Plus edition, the range is from + 1024 to 100,000 (in bytes) and the default query length is 10,000 bytes. --insights-config-record-application-tags diff --git a/gcloud/sql/instances/create b/gcloud/sql/instances/create index 6a78dd16e..e3342db53 100644 --- a/gcloud/sql/instances/create +++ b/gcloud/sql/instances/create @@ -30,11 +30,12 @@ SYNOPSIS [--insights-config-query-string-length=INSIGHTS_CONFIG_QUERY_STRING_LENGTH] [--[no-]insights-config-record-application-tags] [--[no-]insights-config-record-client-address] + [--instance-type=INSTANCE_TYPE] [--maintenance-release-channel=MAINTENANCE_RELEASE_CHANNEL] [--maintenance-window-day=MAINTENANCE_WINDOW_DAY] [--maintenance-window-hour=MAINTENANCE_WINDOW_HOUR] [--master-instance-name=MASTER_INSTANCE_NAME] [--memory=MEMORY] - [--network=NETWORK] + [--network=NETWORK] [--node-count=NODE_COUNT] [--password-policy-complexity=PASSWORD_POLICY_COMPLEXITY] [--[no-]password-policy-disallow-username-substring] [--password-policy-min-length=PASSWORD_POLICY_MIN_LENGTH] @@ -295,8 +296,10 @@ FLAGS Allowed range: 0 to 20. --insights-config-query-string-length=INSIGHTS_CONFIG_QUERY_STRING_LENGTH - Query string length in bytes to be stored by the query insights - feature. Default length is 1024 bytes. Allowed range: 256 to 4500 + Sets the default query length limit. For Cloud SQL Enterprise edition, + the range is from 256 to 4500 (in bytes) and the default query length + is 1024 bytes. For Cloud SQL Enterprise Plus edition, the range is from + 1024 to 100,000 (in bytes) and the default query length is 10,000 bytes. --[no-]insights-config-record-application-tags @@ -311,6 +314,16 @@ FLAGS Use --insights-config-record-client-address to enable and --no-insights-config-record-client-address to disable. + --instance-type=INSTANCE_TYPE + The type of the instance. INSTANCE_TYPE must be one of: + + CLOUD_SQL_INSTANCE + A primary instance. + READ_POOL_INSTANCE + A read pool instance. + READ_REPLICA_INSTANCE + A read replica instance. + --maintenance-release-channel=MAINTENANCE_RELEASE_CHANNEL Which channel's updates to apply during the maintenance window. If not specified, Cloud SQL chooses the timing of updates to your instance. @@ -359,6 +372,10 @@ FLAGS network, 'testsharednetwork', this would use the form: --network=projects/testproject/global/networks/testsharednetwork + --node-count=NODE_COUNT + The number of nodes in the pool. This option is only available for read + pools. + --password-policy-complexity=PASSWORD_POLICY_COMPLEXITY The complexity of the password. This flag is available only for PostgreSQL. PASSWORD_POLICY_COMPLEXITY must be one of: diff --git a/gcloud/sql/instances/patch b/gcloud/sql/instances/patch index 89e13e894..62f166c79 100644 --- a/gcloud/sql/instances/patch +++ b/gcloud/sql/instances/patch @@ -29,11 +29,12 @@ SYNOPSIS [--insights-config-query-string-length=INSIGHTS_CONFIG_QUERY_STRING_LENGTH] [--[no-]insights-config-record-application-tags] [--[no-]insights-config-record-client-address] + [--instance-type=INSTANCE_TYPE] [--maintenance-release-channel=MAINTENANCE_RELEASE_CHANNEL] [--maintenance-version=MAINTENANCE_VERSION] [--maintenance-window-any] [--maintenance-window-day=MAINTENANCE_WINDOW_DAY] [--maintenance-window-hour=MAINTENANCE_WINDOW_HOUR] [--memory=MEMORY] - [--network=NETWORK] + [--network=NETWORK] [--node-count=NODE_COUNT] [--password-policy-complexity=PASSWORD_POLICY_COMPLEXITY] [--[no-]password-policy-disallow-username-substring] [--password-policy-min-length=PASSWORD_POLICY_MIN_LENGTH] @@ -59,6 +60,8 @@ SYNOPSIS [--clear-custom-subject-alternative-names | --custom-subject-alternative-names=DNS,[DNS,[DNS]]] [--clear-database-flags | --database-flags=FLAG=VALUE,[FLAG=VALUE,...]] + [--clear-psc-network-attachment-uri + | --psc-network-attachment-uri=PSC_NETWORK_ATTACHMENT_URI] [--gce-zone=GCE_ZONE | --secondary-zone=SECONDARY_ZONE --zone=ZONE] [--no-backup | --backup-location=BACKUP_LOCATION --backup-start-time=BACKUP_START_TIME @@ -267,8 +270,10 @@ FLAGS Allowed range: 0 to 20. --insights-config-query-string-length=INSIGHTS_CONFIG_QUERY_STRING_LENGTH - Query string length in bytes to be stored by the query insights - feature. Default length is 1024 bytes. Allowed range: 256 to 4500 + Sets the default query length limit. For Cloud SQL Enterprise edition, + the range is from 256 to 4500 (in bytes) and the default query length + is 1024 bytes. For Cloud SQL Enterprise Plus edition, the range is from + 1024 to 100,000 (in bytes) and the default query length is 10,000 bytes. --[no-]insights-config-record-application-tags @@ -283,6 +288,16 @@ FLAGS Use --insights-config-record-client-address to enable and --no-insights-config-record-client-address to disable. + --instance-type=INSTANCE_TYPE + The type of the instance. INSTANCE_TYPE must be one of: + + CLOUD_SQL_INSTANCE + A primary instance. + READ_POOL_INSTANCE + A read pool instance. + READ_REPLICA_INSTANCE + A read replica instance. + --maintenance-release-channel=MAINTENANCE_RELEASE_CHANNEL Which channel's updates to apply during the maintenance window. If not specified, Cloud SQL chooses the timing of updates to your instance. @@ -332,6 +347,10 @@ FLAGS network, 'testsharednetwork', this would use the form: --network=projects/testproject/global/networks/testsharednetwork + --node-count=NODE_COUNT + The number of nodes in the pool. This option is only available for read + pools. + --password-policy-complexity=PASSWORD_POLICY_COMPLEXITY The complexity of the password. This flag is available only for PostgreSQL. PASSWORD_POLICY_COMPLEXITY must be one of: @@ -521,6 +540,18 @@ FLAGS Resource API for allowed flags. (e.g., --database-flags max_allowed_packet=55555,skip_grant_tables=,log_output=1) + At most one of these can be specified: + + --clear-psc-network-attachment-uri + Disable outbound connectivity from a Cloud SQL instance which uses + Private Service Connect (PSC). + + --psc-network-attachment-uri=PSC_NETWORK_ATTACHMENT_URI + Full URI of the network attachment that is configured to support + outbound connectivity from a Cloud SQL instance which uses Private + Service Connect (PSC). For example, this would be of the + form:--psc-network-attachment-uri=projects/test-project/regions/us-central1/networkAttachments/my-na + At most one of these can be specified: --gce-zone=GCE_ZONE