imjasonh/gcloud-help
1
0
Fork 0
mirror of https://github.com/imjasonh/gcloud-help synced 2026-07-19 07:15:23 +00:00
Code Activity

gcloud: Thu Jan 19 00:56:33 UTC 2023

Browse source
This commit is contained in:
Automated 2023-01-19 00:56:33 +00:00
parent 348d9760ee
commit 1248f773ec
1462 changed files with 51835 additions and 5402 deletions
Download patch file Download diff file Expand all files Collapse all files

108
gcloud/storage/buckets/add-iam-policy-binding Normal file
View file

@ -0,0 +1,108 @@
NAME
gcloud storage buckets add-iam-policy-binding - add an IAM policy binding
to a bucket
SYNOPSIS
gcloud storage buckets add-iam-policy-binding URL --member=PRINCIPAL
--role=ROLE
[--condition=[KEY=VALUE,...]
| --condition-from-file=CONDITION_FROM_FILE] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
Add an IAM policy binding to a bucket. For more information, see Cloud
Identity and Access Management
(https://cloud.google.com/storage/docs/access-control/iam).
EXAMPLES
To grant a single role to a single principal for BUCKET:
$ gcloud storage buckets add-iam-policy-binding gs://BUCKET \
--member=user:john.doe@example.com \
--role=roles/storage.objectCreator
To make objects in BUCKET publicly readable:
$ gcloud storage buckets add-iam-policy-binding gs://BUCKET \
--member=AllUsers --role=roles/storage.objectViewer
To specify a custom role for a principal on BUCKET:
$ gcloud storage buckets add-iam-policy-binding gs://BUCKET \
--member=user:john.doe@example.com --role=roles/customRoleName
POSITIONAL ARGUMENTS
URL
URL of bucket to add IAM policy binding to.
REQUIRED FLAGS
--member=PRINCIPAL
The principal to add the binding for. Should be of the form
user|group|serviceAccount:email or domain:domain.
Examples: user:test-user@gmail.com, group:admins@example.com,
serviceAccount:test123@example.domain.com, or
domain:example.domain.com.
Some resources also accept the following special values:
◆ allUsers - Special identifier that represents anyone who is on the
internet, with or without a Google account.
◆ allAuthenticatedUsers - Special identifier that represents anyone
who is authenticated with a Google account or a service account.
--role=ROLE
Role name to assign to the principal. The role name is the complete
path of a predefined role, such as roles/logging.viewer, or the role ID
for a custom role, such as
organizations/{ORGANIZATION_ID}/roles/logging.viewer.
OPTIONAL FLAGS
At most one of these can be specified:
--condition=[KEY=VALUE,...]
A condition to include in the binding. When the condition is
explicitly specified as None (--condition=None), a binding without a
condition is added. When the condition is specified and is not None,
--role cannot be a basic role. Basic roles are roles/editor,
roles/owner, and roles/viewer. For more on conditions, refer to the
conditions overview guide:
https://cloud.google.com/iam/docs/conditions-overview
When using the --condition flag, include the following key-value
pairs:
expression
(Required) Condition expression that evaluates to True or False.
This uses a subset of Common Expression Language syntax.
If the condition expression includes a comma, use a different
delimiter to separate the key-value pairs. Specify the delimiter
before listing the key-value pairs. For example, to specify a
colon (:) as the delimiter, do the following:
--condition=^:^title=TITLE:expression=EXPRESSION. For more
information, see
https://cloud.google.com/sdk/gcloud/reference/topic/escaping.
title
(Required) A short string describing the purpose of the
expression.
description
(Optional) Additional description for the expression.
--condition-from-file=CONDITION_FROM_FILE
Path to a local JSON or YAML file that defines the condition. To see
available fields, see the help for --condition.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
NOTES
This variant is also available:
$ gcloud alpha storage buckets add-iam-policy-binding

37
gcloud/storage/buckets/create
View file

@ -2,13 +2,15 @@ NAME
gcloud storage buckets create - create buckets for storing objects
SYNOPSIS
gcloud storage buckets create URL
gcloud storage buckets create URL [--additional-headers=HEADER=VALUE]
[--default-encryption-key=DEFAULT_ENCRYPTION_KEY,
-k DEFAULT_ENCRYPTION_KEY]
[--default-storage-class=DEFAULT_STORAGE_CLASS,
-c DEFAULT_STORAGE_CLASS, -s DEFAULT_STORAGE_CLASS]
[--location=LOCATION, -l LOCATION]
[--[no-]enable-autoclass] [--location=LOCATION, -l LOCATION]
[--[no-]pap, --[no-]public-access-prevention]
[--placement=REGION,REGION]
[--recovery-point-objective=SETTING, --rpo=SETTING]
[--retention-period=RETENTION_PERIOD]
[--[no-]uniform-bucket-level-access, -b] [GCLOUD_WIDE_FLAG ...]
@ -32,6 +34,12 @@ POSITIONAL ARGUMENTS
The URL of the bucket to create.
FLAGS
--additional-headers=HEADER=VALUE
Includes arbitrary headers in storage API calls. Accepts a comma
separated list of key=value pairs, e.g. header1=value1,header2=value2.
Overrides the default storage/additional_headers property value for
this command invocation.
--default-encryption-key=DEFAULT_ENCRYPTION_KEY, -k DEFAULT_ENCRYPTION_KEY
Set the default KMS key using the full path to the key, which has the
following form:
@ -43,6 +51,11 @@ FLAGS
If not specified, the default storage class used by Cloud Storage is
"Standard".
--[no-]enable-autoclass
The Autoclass feature automatically selects the best storage class for
objects based on access patterns. Use --enable-autoclass to enable and
--no-enable-autoclass to disable.
--location=LOCATION, -l LOCATION
Location (https://cloud.google.com/storage/docs/locations) for the
bucket. If not specified, the location used by Cloud Storage is us. A
@ -51,10 +64,28 @@ FLAGS
--[no-]pap, --[no-]public-access-prevention
Sets public access prevention to "enforced". For details on how exactly
public access is blocked, see:
http://cloud/storage/docs/public-access-prevention. Use
http://cloud.google.com/storage/docs/public-access-prevention. Use
--public-access-prevention to enable and --no-public-access-prevention
to disable.
--placement=REGION,REGION
A comma-separated list of exactly 2 regions that form the custom
dual-region. Only regions within the same continent are or will ever be
valid. Invalid location pairs (such as mixed-continent, or with
unsupported regions) will return an error.
--recovery-point-objective=SETTING, --rpo=SETTING
Sets the recovery point objective
(https://cloud.google.com/architecture/dr-scenarios-planning-guide#basics_of_dr_planning)
of a bucket. This flag can only be used with multi-region and
dual-region buckets. DEFAULT option is valid for multi-region and
dual-regions buckets. ASYNC_TURBO option is only valid for dual-region
buckets. If unspecified when the bucket is created, it defaults to
DEFAULT for dual-region and multi-region buckets. For more information,
see Turbo Replication
(https://cloud.google.com/storage/docs/turbo-replication). SETTING must
be one of: ASYNC_TURBO, DEFAULT.
--retention-period=RETENTION_PERIOD
Minimum retention period
(https://cloud.google.com/storage/docs/bucket-lock#retention-periods)

9
gcloud/storage/buckets/delete
View file

@ -2,7 +2,8 @@ NAME
gcloud storage buckets delete - deletes Cloud Storage buckets
SYNOPSIS
gcloud storage buckets delete URLS [URLS ...] [--continue-on-error, -c]
gcloud storage buckets delete URLS [URLS ...]
[--additional-headers=HEADER=VALUE] [--continue-on-error, -c]
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
@ -22,6 +23,12 @@ POSITIONAL ARGUMENTS
Specifies the URLs of the buckets to delete.
FLAGS
--additional-headers=HEADER=VALUE
Includes arbitrary headers in storage API calls. Accepts a comma
separated list of key=value pairs, e.g. header1=value1,header2=value2.
Overrides the default storage/additional_headers property value for
this command invocation.
--continue-on-error, -c
If any operations are unsuccessful, the command will exit with a
non-zero exit status after completing the remaining operations. This

10
gcloud/storage/buckets/describe
View file

@ -2,7 +2,8 @@ NAME
gcloud storage buckets describe - describes Cloud Storage buckets
SYNOPSIS
gcloud storage buckets describe URL [GCLOUD_WIDE_FLAG ...]
gcloud storage buckets describe URL [--additional-headers=HEADER=VALUE]
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
Describe a Cloud Storage bucket.
@ -21,6 +22,13 @@ POSITIONAL ARGUMENTS
URL
Specifies URL of bucket to describe.
FLAGS
--additional-headers=HEADER=VALUE
Includes arbitrary headers in storage API calls. Accepts a comma
separated list of key=value pairs, e.g. header1=value1,header2=value2.
Overrides the default storage/additional_headers property value for
this command invocation.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,

37
gcloud/storage/buckets/get-iam-policy Normal file
View file

@ -0,0 +1,37 @@
NAME
gcloud storage buckets get-iam-policy - get the IAM policy for a bucket
SYNOPSIS
gcloud storage buckets get-iam-policy URL [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
Get the IAM policy for a bucket. For more information, see Cloud Identity
and Access Management
(https://cloud.google.com/storage/docs/access-control/iam).
EXAMPLES
To get the IAM policy for BUCKET:
$ gcloud storage buckets get-iam-policy gs://BUCKET
To output the IAM policy for BUCKET to a file:
$ gcloud storage buckets get-iam-policy gs://BUCKET > policy.txt
POSITIONAL ARGUMENTS
URL
Request IAM policy for this bucket.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
NOTES
This variant is also available:
$ gcloud alpha storage buckets get-iam-policy

12
gcloud/storage/buckets/help
View file

@ -21,6 +21,9 @@ GROUPS
COMMANDS
COMMAND is one of the following:
add-iam-policy-binding
Add an IAM policy binding to a bucket.
create
Create buckets for storing objects.
@ -30,9 +33,18 @@ COMMANDS
describe
Describes Cloud Storage buckets.
get-iam-policy
Get the IAM policy for a bucket.
list
Lists Cloud Storage buckets.
remove-iam-policy-binding
Remove an IAM policy binding from a bucket.
set-iam-policy
Set the IAM policy for a bucket.
update
Update bucket settings.

13
gcloud/storage/buckets/list
View file

@ -2,9 +2,9 @@ NAME
gcloud storage buckets list - lists Cloud Storage buckets
SYNOPSIS
gcloud storage buckets list [URLS ...] [--filter=EXPRESSION]
[--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri]
[GCLOUD_WIDE_FLAG ...]
gcloud storage buckets list [URLS ...] [--additional-headers=HEADER=VALUE]
[--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE]
[--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
List Cloud Storage buckets.
@ -26,6 +26,13 @@ POSITIONAL ARGUMENTS
[URLS ...]
Specifies URL of buckets to List.
FLAGS
--additional-headers=HEADER=VALUE
Includes arbitrary headers in storage API calls. Accepts a comma
separated list of key=value pairs, e.g. header1=value1,header2=value2.
Overrides the default storage/additional_headers property value for
this command invocation.
LIST COMMAND FLAGS
--filter=EXPRESSION
Apply a Boolean filter EXPRESSION to each resource item to be listed.

4
gcloud/storage/buckets/notifications/create
View file

@ -27,8 +27,8 @@ DESCRIPTION
the create command uses the Cloud Pub/Sub topic
projects/default-project/topics/example-bucket.
In order to enable notifications, your project's [Cloud Storage service
agent] (https://cloud.google.com/storage/docs/projects#service-accounts)
In order to enable notifications, your project's Cloud Storage service
agent (https://cloud.google.com/storage/docs/projects#service-accounts)
must have the IAM permission "pubsub.topics.publish". This command checks
to see if the destination Cloud Pub/Sub topic grants the service agent this
permission. If not, the create command attempts to grant it.

104
gcloud/storage/buckets/remove-iam-policy-binding Normal file
View file

@ -0,0 +1,104 @@
NAME
gcloud storage buckets remove-iam-policy-binding - remove an IAM policy
binding from a bucket
SYNOPSIS
gcloud storage buckets remove-iam-policy-binding URL --member=PRINCIPAL
--role=ROLE
[--all | --condition=[KEY=VALUE,...]
| --condition-from-file=CONDITION_FROM_FILE] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
Removes a policy binding from the IAM policy of a bucket, given a bucket
URL and the binding. For more information, see Cloud Identity and Access
Management (https://cloud.google.com/storage/docs/access-control/iam).
EXAMPLES
To remove an IAM policy binding from the role of
roles/storage.objectCreator for the user john.doe@example.com on BUCKET:
$ gcloud storage buckets remove-iam-policy-binding gs://BUCKET \
--member=user:john.doe@example.com \
--role=roles/storage.objectCreator
POSITIONAL ARGUMENTS
URL
URL of bucket to remove IAM policy binding from.
REQUIRED FLAGS
--member=PRINCIPAL
The principal to remove the binding for. Should be of the form
user|group|serviceAccount:email or domain:domain.
Examples: user:test-user@gmail.com, group:admins@example.com,
serviceAccount:test123@example.domain.com, or
domain:example.domain.com.
Deleted principals have an additional deleted: prefix and a ?uid=UID
suffix, where UID is a unique identifier for the principal. Example:
deleted:user:test-user@gmail.com?uid=123456789012345678901.
Some resources also accept the following special values:
◆ allUsers - Special identifier that represents anyone who is on the
internet, with or without a Google account.
◆ allAuthenticatedUsers - Special identifier that represents anyone
who is authenticated with a Google account or a service account.
--role=ROLE
The role to remove the principal from.
OPTIONAL FLAGS
At most one of these can be specified:
--all
Remove all bindings with this role and principal, irrespective of any
conditions.
--condition=[KEY=VALUE,...]
The condition of the binding that you want to remove. When the
condition is explicitly specified as None (--condition=None), a
binding without a condition is removed. Otherwise, only a binding
with a condition that exactly matches the specified condition
(including the optional description) is removed. For more on
conditions, refer to the conditions overview guide:
https://cloud.google.com/iam/docs/conditions-overview
When using the --condition flag, include the following key-value
pairs:
expression
(Required) Condition expression that evaluates to True or False.
This uses a subset of Common Expression Language syntax.
If the condition expression includes a comma, use a different
delimiter to separate the key-value pairs. Specify the delimiter
before listing the key-value pairs. For example, to specify a
colon (:) as the delimiter, do the following:
--condition=^:^title=TITLE:expression=EXPRESSION. For more
information, see
https://cloud.google.com/sdk/gcloud/reference/topic/escaping.
title
(Required) A short string describing the purpose of the
expression.
description
(Optional) Additional description for the expression.
--condition-from-file=CONDITION_FROM_FILE
Path to a local JSON or YAML file that defines the condition. To see
available fields, see the help for --condition.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
NOTES
This variant is also available:
$ gcloud alpha storage buckets remove-iam-policy-binding

57
gcloud/storage/buckets/set-iam-policy Normal file
View file

@ -0,0 +1,57 @@
NAME
gcloud storage buckets set-iam-policy - set the IAM policy for a bucket
SYNOPSIS
gcloud storage buckets set-iam-policy URLS [URLS ...] POLICY_FILE
[--continue-on-error, -c] [--etag=ETAG, -e ETAG] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
Set the IAM policy for a bucket. For more information, see Cloud Identity
and Access Management
(https://cloud.google.com/storage/docs/access-control/iam).
EXAMPLES
To set the IAM policy in POLICY-FILE on BUCKET:
$ gcloud storage buckets set-iam-policy gs://BUCKET POLICY-FILE
To set the IAM policy in POLICY-FILE on all buckets beginning with "b":
$ gcloud storage buckets set-iam-policy gs://b* POLICY-FILE
POSITIONAL ARGUMENTS
URLS [URLS ...]
URLs for buckets to apply the IAM policy to. Can include wildcards.
POLICY_FILE
Path to a local JSON or YAML formatted file containing a valid policy.
The output of the get-iam-policy command is a valid file, as is any
JSON or YAML file conforming to the structure of a Policy
(https://cloud.google.com/iam/reference/rest/v1/Policy).
FLAGS
--continue-on-error, -c
If any operations are unsuccessful, the command will exit with a
non-zero exit status after completing the remaining operations. This
flag takes effect only in sequential execution mode (i.e. processor and
thread count are set to 1). Parallelism is default.
--etag=ETAG, -e ETAG
Custom etag to set on IAM policy. API will reject etags that do not
match this value, making it useful as a precondition during concurrent
operations.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
NOTES
This variant is also available:
$ gcloud alpha storage buckets set-iam-policy

129
gcloud/storage/buckets/update
View file

@ -3,11 +3,20 @@ NAME
SYNOPSIS
gcloud storage buckets update URL [URL ...]
[--canned-acl=PREDEFINED_ACL,
--predefined-acl=PREDEFINED_ACL, -a PREDEFINED_ACL]
[--continue-on-error, -c]
[--default-storage-class=DEFAULT_STORAGE_CLASS] [--[no-]requester-pays]
[--[no-]versioning] [--clear-cors | --cors-file=CORS_FILE]
[--additional-headers=HEADER=VALUE] [--continue-on-error, -c]
[--[no-]default-event-based-hold] [--[no-]enable-autoclass]
[--lock-retention-period]
[--recovery-point-objective=SETTING, --rpo=SETTING]
[--[no-]requester-pays] [--[no-]uniform-bucket-level-access]
[--[no-]versioning]
[--acl-file=ACL_FILE --add-acl-grant=[ACL_GRANT,...]
--canned-acl=PREDEFINED_ACL, --predefined-acl=PREDEFINED_ACL,
-a PREDEFINED_ACL --remove-acl-grant=REMOVE_ACL_GRANT]
[--add-default-object-acl-grant=[DEFAULT_OBJECT_ACL_GRANT,...]
--default-object-acl-file=DEFAULT_OBJECT_ACL_FILE
--predefined-default-object-acl=PREDEFINED_DEFAULT_OBJECT_ACL
--remove-default-object-acl-grant=REMOVE_DEFAULT_OBJECT_ACL_GRANT]
[--clear-cors | --cors-file=CORS_FILE]
[--clear-default-encryption-key
| --default-encryption-key=DEFAULT_ENCRYPTION_KEY]
[--clear-labels | --labels-file=LABELS_FILE
@ -18,6 +27,7 @@ SYNOPSIS
[--clear-log-object-prefix | --log-object-prefix=LOG_OBJECT_PREFIX]
[--clear-pap, --clear-public-access-prevention
| --[no-]pap, --[no-]public-access-prevention]
[--clear-retention-period | --retention-period=RETENTION_PERIOD]
[--clear-web-error-page | --web-error-page=WEB_ERROR_PAGE]
[--clear-web-main-page-suffix
| --web-main-page-suffix=WEB_MAIN_PAGE_SUFFIX] [GCLOUD_WIDE_FLAG ...]
@ -32,15 +42,27 @@ EXAMPLES
$ gcloud storage buckets update gs://my-bucket \
--default-storage-class=NEARLINE --requester-pays
The following command updates the retention period of a Cloud Storage
bucket named "my-bucket" to one year and thirty-six minutes:
$ gcloud storage buckets update gs://my-bucket \
--retention-period=1y36m
The following command clears the retention period of a bucket:
$ gcloud storage buckets update gs://my-bucket \
--clear-retention-period
POSITIONAL ARGUMENTS
URL [URL ...]
URLs of the buckets to update.
FLAGS
--canned-acl=PREDEFINED_ACL, --predefined-acl=PREDEFINED_ACL, -a PREDEFINED_ACL
Applies predefined, or "canned," ACLs to a resource. See docs for a
list of predefined ACL constants:
https://cloud.google.com/storage/docs/access-control/lists#predefined-acl
--additional-headers=HEADER=VALUE
Includes arbitrary headers in storage API calls. Accepts a comma
separated list of key=value pairs, e.g. header1=value1,header2=value2.
Overrides the default storage/additional_headers property value for
this command invocation.
--continue-on-error, -c
If any operations are unsuccessful, the command will exit with a
@ -48,18 +70,87 @@ FLAGS
flag takes effect only in sequential execution mode (i.e. processor and
thread count are set to 1). Parallelism is default.
--default-storage-class=DEFAULT_STORAGE_CLASS
Sets the default storage class for the bucket.
--[no-]default-event-based-hold
Sets the default value for an event-based hold on the bucket. By
setting the default event-based hold on a bucket, newly-created objects
inherit that value as their event-based hold (it is not applied
retroactively). Use --default-event-based-hold to enable and
--no-default-event-based-hold to disable.
--[no-]enable-autoclass
The Autoclass feature automatically selects the best storage class for
objects based on access patterns. Use --enable-autoclass to enable and
--no-enable-autoclass to disable.
--lock-retention-period
Locks an unlocked retention policy on the buckets. Caution: A locked
retention policy cannot be removed from a bucket or reduced in
duration. Once locked, deleting the bucket is the only way to "remove"
a retention policy.
--recovery-point-objective=SETTING, --rpo=SETTING
Sets the recovery point objective
(https://cloud.google.com/architecture/dr-scenarios-planning-guide#basics_of_dr_planning)
of a bucket. This flag can only be used with multi-region and
dual-region buckets. DEFAULT option is valid for multi-region and
dual-regions buckets. ASYNC_TURBO option is only valid for dual-region
buckets. If unspecified when the bucket is created, it defaults to
DEFAULT for dual-region and multi-region buckets. For more information,
see Turbo Replication
(https://cloud.google.com/storage/docs/turbo-replication). SETTING must
be one of: ASYNC_TURBO, DEFAULT.
--[no-]requester-pays
Allows you to configure a Cloud Storage bucket so that the requester
pays all costs related to accessing the bucket and its objects. Use
--requester-pays to enable and --no-requester-pays to disable.
--[no-]uniform-bucket-level-access
Enables or disables uniform bucket-level access
(https://cloud.google.com/storage/docs/bucket-policy-only) for the
buckets. Use --uniform-bucket-level-access to enable and
--no-uniform-bucket-level-access to disable.
--[no-]versioning
Allows you to configure a Cloud Storage bucket to keep old versions of
objects. Use --versioning to enable and --no-versioning to disable.
--acl-file=ACL_FILE
Path to a local JSON or YAML formatted file containing a valid policy.
The output of gcloud storage [buckets|objects] describe
--format="multi(acl:format=json)" is a valid file and can be edited for
more fine-grained control.
--add-acl-grant=[ACL_GRANT,...]
Key-value pairs mirroring the JSON accepted by your cloud provider. For
example, for Google Cloud
Storage,--add-acl-grant=entity=user-tim@gmail.com,role=OWNER
--canned-acl=PREDEFINED_ACL, --predefined-acl=PREDEFINED_ACL, -a PREDEFINED_ACL
Applies predefined, or "canned," ACLs to a resource. See docs for a
list of predefined ACL constants:
https://cloud.google.com/storage/docs/access-control/lists#predefined-acl
--remove-acl-grant=REMOVE_ACL_GRANT
Key-value pairs mirroring the JSON accepted by your cloud provider. For
example, for Google Cloud Storage, --remove-acl-grant=ENTITY, where
ENTITY has a valid ACL entity format, such as user-tim@gmail.com,
group-admins, allUsers, etc.
--add-default-object-acl-grant=[DEFAULT_OBJECT_ACL_GRANT,...]
Adds default object ACL grant. See --add-acl-grant help text for more
details.
--default-object-acl-file=DEFAULT_OBJECT_ACL_FILE
Sets the default object ACL from file for the bucket.
--predefined-default-object-acl=PREDEFINED_DEFAULT_OBJECT_ACL
Apply a predefined set of default object access controls tobuckets
--remove-default-object-acl-grant=REMOVE_DEFAULT_OBJECT_ACL_GRANT
Removes default object ACL grant. See --remove-acl-grant help text for
more details.
At most one of these can be specified:
--clear-cors
@ -164,10 +255,24 @@ FLAGS
If True, sets public access prevention to "enforced". If False, sets
public access prevention to "inherited". For details on how exactly
public access is blocked, see:
http://cloud/storage/docs/public-access-prevention. Use
http://cloud.google.com/storage/docs/public-access-prevention. Use
--public-access-prevention to enable and
--no-public-access-prevention to disable.
At most one of these can be specified:
--clear-retention-period
Clears the object retention period for a bucket.
--retention-period=RETENTION_PERIOD
Minimum retention period
(https://cloud.google.com/storage/docs/bucket-lock#retention-periods)
for objects stored in the bucket, for example
--retention-period=1Y1M1D5S. Objects added to the bucket cannot be
deleted until they've been stored for the specified length of time.
Default is no retention period. Only available for Cloud Storage
using the JSON API.
At most one of these can be specified:
--clear-web-error-page