imjasonh/gcloud-help
1
0
Fork 0
mirror of https://github.com/imjasonh/gcloud-help synced 2026-07-22 15:52:30 +00:00
Code Activity

gcloud: Tue Mar 1 04:29:52 UTC 2022

Browse source
This commit is contained in:
Automated 2022-03-01 04:29:52 +00:00
parent aab53307a8
commit 1456dab6c7
9791 changed files with 814712 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

84
gcloud/beta/active-directory/domains/backups/create Normal file
View file

@ -0,0 +1,84 @@
NAME
gcloud beta active-directory domains backups create - create a Managed
Microsoft Active Directory domain backup
SYNOPSIS
gcloud beta active-directory domains backups create
(BACKUP : --domain=DOMAIN) [--async] [--labels=KEY=VALUE]
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) Create a new Managed Microsoft AD domain backup with the given name
using Google Cloud's Managed Service for Microsoft Active Directory.
This command can fail for the following reasons:
▪ The domain specified does not exist.
▪ The domain specified is being created.
▪ A backup already exists with the same target domain name.
▪ The active account does not have permission to access the given
domain.
▪ The active account does not have permission to create AD domain
backups.
EXAMPLES
The following command creates an Active Directory domain backup named
my-backup under domain my-domain.com
$ gcloud beta active-directory domains backups create my-backup \
--domain=my-domain.com --project=my-proj --async
POSITIONAL ARGUMENTS
Backup resource - Name of the Managed Microsoft AD domain backup you want
to create. The arguments in this group can be used to specify the
attributes of this resource. (NOTE) Some attributes are not given
arguments in this group but can be set in other ways. To set the project
attribute:
◆ provide the argument backup on the command line with a fully
specified name;
◆ set the property core/project;
◆ provide the argument --project on the command line.
This must be specified.
BACKUP
ID of the backup or fully qualified identifier for the backup. To set
the backup attribute:
▸ provide the argument backup on the command line.
This positional must be specified if any of the other arguments in
this group are specified.
--domain=DOMAIN
The fully-qualified domain name of the Microsoft Active Directory
domain. To set the domain attribute:
▸ provide the argument backup on the command line with a fully
specified name;
▸ provide the argument --domain on the command line.
FLAGS
--async
Return immediately, without waiting for the operation in progress to
complete.
--labels=KEY=VALUE
List of label KEY=VALUE pairs to add.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
API REFERENCE
This command uses the managedidentities/v1beta1 API. The full documentation
for this API can be found at:
https://cloud.google.com/managed-microsoft-ad/
NOTES
This command is currently in beta and might change without notice. This
variant is also available:
$ gcloud alpha active-directory domains backups create

79
gcloud/beta/active-directory/domains/backups/delete Normal file
View file

@ -0,0 +1,79 @@
NAME
gcloud beta active-directory domains backups delete - delete a Managed
Microsoft Active Directory domain backup
SYNOPSIS
gcloud beta active-directory domains backups delete
(BACKUP : --domain=DOMAIN) [--async] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) Delete a Managed Microsoft AD domain backup with the given name
using Google Cloud's Managed Service for Microsoft Active Directory.
This command can fail for the following reasons:
▪ TThe backup specified does not exist.
▪ The active account does not have permission to access the given
domain.
▪ The active account does not have permission to access the given AD
backup.
EXAMPLES
The following command deletes an AD domain backup my-backup under domain projects/my-proj/locations/global/domains/my-domain.com
$ gcloud beta active-directory domains backups delete \
projects/my-proj/locations/global/domains/my-domain.com/\
backups/my-backup \
--async
POSITIONAL ARGUMENTS
Backup resource - Name of the Managed Microsoft AD domain backup you want
to delete. The arguments in this group can be used to specify the
attributes of this resource. (NOTE) Some attributes are not given
arguments in this group but can be set in other ways. To set the project
attribute:
◆ provide the argument backup on the command line with a fully
specified name;
◆ set the property core/project;
◆ provide the argument --project on the command line.
This must be specified.
BACKUP
ID of the backup or fully qualified identifier for the backup. To set
the backup attribute:
▸ provide the argument backup on the command line.
This positional must be specified if any of the other arguments in
this group are specified.
--domain=DOMAIN
The fully-qualified domain name of the Microsoft Active Directory
domain. To set the domain attribute:
▸ provide the argument backup on the command line with a fully
specified name;
▸ provide the argument --domain on the command line.
FLAGS
--async
Return immediately, without waiting for the operation in progress to
complete.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
API REFERENCE
This command uses the managedidentities/v1beta1 API. The full documentation
for this API can be found at:
https://cloud.google.com/managed-microsoft-ad/
NOTES
This command is currently in beta and might change without notice. This
variant is also available:
$ gcloud alpha active-directory domains backups delete

74
gcloud/beta/active-directory/domains/backups/describe Normal file
View file

@ -0,0 +1,74 @@
NAME
gcloud beta active-directory domains backups describe - describe a Managed
Microsoft Active Directory domain backup
SYNOPSIS
gcloud beta active-directory domains backups describe
(BACKUP : --domain=DOMAIN) [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) Show metadata for a Managed Microsoft AD domain backup.
Displays all metadata associated with a Active Directory domain backup
given a valid domain backup name.
This command can fail for the following reasons:
▪ The specified domain backup does not exist.
▪ The active account does not have permission to access the given
domain.
EXAMPLES
The following command gets metadata for an AD domain backup with the name
my-backup under the domain my-domain in project my-project.
$ gcloud beta active-directory domains backups describe \
projects/my-proj/locations/global/domains/my-domain.com/\
backups/my-backup
POSITIONAL ARGUMENTS
Backup resource - Name of the Managed Microsoft AD domain backup you want
to describe. The arguments in this group can be used to specify the
attributes of this resource. (NOTE) Some attributes are not given
arguments in this group but can be set in other ways. To set the project
attribute:
◆ provide the argument backup on the command line with a fully
specified name;
◆ set the property core/project;
◆ provide the argument --project on the command line.
This must be specified.
BACKUP
ID of the backup or fully qualified identifier for the backup. To set
the backup attribute:
▸ provide the argument backup on the command line.
This positional must be specified if any of the other arguments in
this group are specified.
--domain=DOMAIN
The fully-qualified domain name of the Microsoft Active Directory
domain. To set the domain attribute:
▸ provide the argument backup on the command line with a fully
specified name;
▸ provide the argument --domain on the command line.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
API REFERENCE
This command uses the managedidentities/v1beta1 API. The full documentation
for this API can be found at:
https://cloud.google.com/managed-microsoft-ad/
NOTES
This command is currently in beta and might change without notice. This
variant is also available:
$ gcloud alpha active-directory domains backups describe

38
gcloud/beta/active-directory/domains/backups/help Normal file
View file

@ -0,0 +1,38 @@
NAME
gcloud beta active-directory domains backups - managed Microsoft AD Backups
SYNOPSIS
gcloud beta active-directory domains backups COMMAND [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) Managed Microsoft AD Backups.
GCLOUD WIDE FLAGS
These flags are available to all commands: --help.
Run $ gcloud help for details.
COMMANDS
COMMAND is one of the following:
create
(BETA) Create a Managed Microsoft Active Directory domain backup.
delete
(BETA) Delete a Managed Microsoft Active Directory domain backup.
describe
(BETA) Describe a Managed Microsoft Active Directory domain backup.
list
(BETA) List all Managed Microsoft Active Directory domain backups.
update
(BETA) Update a managed Microsoft Active Directory domain backup.
NOTES
This command is currently in beta and might change without notice. This
variant is also available:
$ gcloud alpha active-directory domains backups

94
gcloud/beta/active-directory/domains/backups/list Normal file
View file

@ -0,0 +1,94 @@
NAME
gcloud beta active-directory domains backups list - list all Managed
Microsoft Active Directory domain backups
SYNOPSIS
gcloud beta active-directory domains backups list --domain=DOMAIN
[--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE]
[--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) List all Managed Microsoft AD domain backups in the given Managed
Microsoft AD domain.
Displays associated Active Directory domain backups.
This command can fail for the following reasons:
▪ The active account does not have permission to access the given
domain.
EXAMPLES
The following command lists all an AD domain backups in the project
my-project and domain my-domain.com.
$ gcloud beta active-directory domains backups list \
--project=my-project --domain=my-domain.com --limit=5
REQUIRED FLAGS
Domain resource - Name of the domain under which you want to list all
Managed Microsoft AD domain backups. This represents a Cloud resource.
(NOTE) Some attributes are not given arguments in this group but can be
set in other ways. To set the project attribute:
◆ provide the argument --domain on the command line with a fully
specified name;
◆ set the property core/project;
◆ provide the argument --project on the command line.
This must be specified.
--domain=DOMAIN
ID of the domain or fully qualified identifier for the domain. To set
the domain attribute:
▸ provide the argument --domain on the command line.
LIST COMMAND FLAGS
--filter=EXPRESSION
Apply a Boolean filter EXPRESSION to each resource item to be listed.
If the expression evaluates True, then that item is listed. For more
details and examples of filter expressions, run $ gcloud topic filters.
This flag interacts with other flags that are applied in this order:
--flatten, --sort-by, --filter, --limit.
--limit=LIMIT
Maximum number of resources to list. The default is unlimited. This
flag interacts with other flags that are applied in this order:
--flatten, --sort-by, --filter, --limit.
--page-size=PAGE_SIZE
Some services group resource list output into pages. This flag
specifies the maximum number of resources per page. The default is
determined by the service if it supports paging, otherwise it is
unlimited (no paging). Paging may be applied before or after --filter
and --limit depending on the service.
--sort-by=[FIELD,...]
Comma-separated list of resource field key names to sort by. The
default order is ascending. Prefix a field with ``~'' for descending
order on that field. This flag interacts with other flags that are
applied in this order: --flatten, --sort-by, --filter, --limit.
--uri
Print a list of resource URIs instead of the default output, and change
the command output to a list of URIs. If this flag is used with
--format, the formatting is applied on this URI list. To display URIs
alongside other keys instead, use the uri() transform.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
API REFERENCE
This command uses the managedidentities/v1beta1 API. The full documentation
for this API can be found at:
https://cloud.google.com/managed-microsoft-ad/
NOTES
This command is currently in beta and might change without notice. This
variant is also available:
$ gcloud alpha active-directory domains backups list

106
gcloud/beta/active-directory/domains/backups/update Normal file
View file

@ -0,0 +1,106 @@
NAME
gcloud beta active-directory domains backups update - update a managed
Microsoft Active Directory domain backup
SYNOPSIS
gcloud beta active-directory domains backups update
(BACKUP : --domain=DOMAIN) [--async] [--update-labels=[KEY=VALUE,...]]
[--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) Update a managed Microsoft Active Directory domain backup.
▪ The backup specified does not exist.
▪ The active account does not have permission to access the given
domain.
▪ The active account does not have permission to access the given
backup.
EXAMPLES
The following command updates an AD domain backup my-backup under domain projects/my-proj/locations/global/domains/my-domain.com with the labels l1 and l2
$ gcloud beta active-directory domains backups update \
projects/my-proj/locations/global/domains/my-domain.com/\
backups/my-backup \
--update-labels=l1=1,l2=2
POSITIONAL ARGUMENTS
Backup resource - Name of the Managed Microsoft AD domain backup you want
to update. The arguments in this group can be used to specify the
attributes of this resource. (NOTE) Some attributes are not given
arguments in this group but can be set in other ways. To set the project
attribute:
◆ provide the argument backup on the command line with a fully
specified name;
◆ set the property core/project;
◆ provide the argument --project on the command line.
This must be specified.
BACKUP
ID of the backup or fully qualified identifier for the backup. To set
the backup attribute:
▸ provide the argument backup on the command line.
This positional must be specified if any of the other arguments in
this group are specified.
--domain=DOMAIN
The fully-qualified domain name of the Microsoft Active Directory
domain. To set the domain attribute:
▸ provide the argument backup on the command line with a fully
specified name;
▸ provide the argument --domain on the command line.
FLAGS
--async
Return immediately, without waiting for the operation in progress to
complete.
--update-labels=[KEY=VALUE,...]
List of label KEY=VALUE pairs to update. If a label exists, its value
is modified. Otherwise, a new label is created.
Keys must start with a lowercase character and contain only hyphens
(-), underscores (_), lowercase characters, and numbers. Values must
contain only hyphens (-), underscores (_), lowercase characters, and
numbers.
At most one of these can be specified:
--clear-labels
Remove all labels. If --update-labels is also specified then
--clear-labels is applied first.
For example, to remove all labels:
$ gcloud beta active-directory domains backups update --clear-labels
To remove all existing labels and create two new labels, foo and baz:
$ gcloud beta active-directory domains backups update \
--clear-labels --update-labels foo=bar,baz=qux
--remove-labels=[KEY,...]
List of label keys to remove. If a label does not exist it is
silently ignored. If --update-labels is also specified then
--update-labels is applied first.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
API REFERENCE
This command uses the managedidentities/v1beta1 API. The full documentation
for this API can be found at:
https://cloud.google.com/managed-microsoft-ad/
NOTES
This command is currently in beta and might change without notice. This
variant is also available:
$ gcloud alpha active-directory domains backups update

99
gcloud/beta/active-directory/domains/create Normal file
View file

@ -0,0 +1,99 @@
NAME
gcloud beta active-directory domains create - create a Managed Microsoft AD
domain
SYNOPSIS
gcloud beta active-directory domains create DOMAIN --region=[REGION,...]
--reserved-ip-range=RESERVED_IP_RANGE [--admin-name=ADMIN_NAME]
[--async] [--authorized-networks=[AUTHORIZED_NETWORKS,...]]
[--enable-audit-logs] [--labels=KEY=VALUE] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) Create a new Managed Microsoft AD domain with the given name using
Google Cloud's Managed Service for Microsoft Active Directory.
This command can fail for the following reasons:
▪ An AD domain with the same name already exists.
▪ The active account does not have permission to create AD domains.
▪ There is an overlap between the provided CIDR range and authorized
network's CIDR.
▪ A valid region was not provided.
EXAMPLES
The following command creates an AD domain with the name my-domain.com in
region us-central1, a network peering to my-network and consuming the IP
address range 10.172.0.0/24.
$ gcloud beta active-directory domains create my-domain.com \
--region=us-central1 --reserved-ip-range="10.172.0.0/24"
--authorized-networks=projects/my-project/global/networks/my-network
POSITIONAL ARGUMENTS
Domain resource - Name of the managed Managed Microsoft AD domain you want
to create. This represents a Cloud resource. (NOTE) Some attributes are
not given arguments in this group but can be set in other ways. To set the
project attribute:
◆ provide the argument domain on the command line with a fully
specified name;
◆ set the property core/project;
◆ provide the argument --project on the command line.
This must be specified.
DOMAIN
ID of the domain or fully qualified identifier for the domain. To set
the domain attribute:
▸ provide the argument domain on the command line.
REQUIRED FLAGS
--region=[REGION,...]
Google Compute Engine region in which to provision domain controllers.
--reserved-ip-range=RESERVED_IP_RANGE
Classless Inter-Domain Routing range of internal addresses that are
reserved for this domain.
OPTIONAL FLAGS
--admin-name=ADMIN_NAME
Name of the administrator that may be used to perform Active Directory
operations. This is a delegated administrator account provisioned by
our service. If left unspecified MIAdmin will be used. This is
different from both the domain administrator and the Directory Services
Restore Mode (DSRM) administrator.
--async
Return immediately, without waiting for the operation in progress to
complete.
--authorized-networks=[AUTHORIZED_NETWORKS,...]
Names of the Google Compute Engine networks to which the domain will be
connected.
--enable-audit-logs
If specified, Active Directory data audit logs are enabled for the
domain.
--labels=KEY=VALUE
List of label KEY=VALUE pairs to add.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
API REFERENCE
This command uses the managedidentities/v1beta1 API. The full documentation
for this API can be found at:
https://cloud.google.com/managed-microsoft-ad/
NOTES
This command is currently in beta and might change without notice. These
variants are also available:
$ gcloud active-directory domains create
$ gcloud alpha active-directory domains create

64
gcloud/beta/active-directory/domains/delete Normal file
View file

@ -0,0 +1,64 @@
NAME
gcloud beta active-directory domains delete - delete a managed Microsoft
Active Directory domain
SYNOPSIS
gcloud beta active-directory domains delete DOMAIN [--async]
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) Delete a managed Microsoft Active Directory (AD) domain with the
given fully-qualified domain name.
This command can fail for the following reasons:
▪ The AD domain specified does not exist.
▪ The active account does not have permission to access the given AD
domain.
EXAMPLES
The following command deletes an AD domain with the name my-domain.com.
$ gcloud beta active-directory domains delete my-domain.com
POSITIONAL ARGUMENTS
Domain resource - Name of the managed Managed Microsoft AD domain you want
to delete. This represents a Cloud resource. (NOTE) Some attributes are
not given arguments in this group but can be set in other ways. To set the
project attribute:
◆ provide the argument domain on the command line with a fully
specified name;
◆ set the property core/project;
◆ provide the argument --project on the command line.
This must be specified.
DOMAIN
ID of the domain or fully qualified identifier for the domain. To set
the domain attribute:
▸ provide the argument domain on the command line.
FLAGS
--async
Return immediately, without waiting for the operation in progress to
complete.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
API REFERENCE
This command uses the managedidentities/v1 API. The full documentation for
this API can be found at: https://cloud.google.com/managed-microsoft-ad/
NOTES
This command is currently in beta and might change without notice. These
variants are also available:
$ gcloud active-directory domains delete
$ gcloud alpha active-directory domains delete

62
gcloud/beta/active-directory/domains/describe Normal file
View file

@ -0,0 +1,62 @@
NAME
gcloud beta active-directory domains describe - describe a Managed
Microsoft AD domain
SYNOPSIS
gcloud beta active-directory domains describe DOMAIN [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) Show metadata for a Managed Microsoft AD domain.
Displays all metadata associated with a Active Directory domain given a
valid AD domain fully-qualified domain name.
This command can fail for the following reasons:
▪ The domain specified does not exist.
▪ The active account does not have permission to access the given
domain.
EXAMPLES
The following command prints metadata for an AD domain with the name
my-domain.com.
$ gcloud beta active-directory domains describe my-domain.com
POSITIONAL ARGUMENTS
Domain resource - Name of the Managed Microsoft AD domain you want to
describe. This represents a Cloud resource. (NOTE) Some attributes are not
given arguments in this group but can be set in other ways. To set the
project attribute:
◆ provide the argument domain on the command line with a fully
specified name;
◆ set the property core/project;
◆ provide the argument --project on the command line.
This must be specified.
DOMAIN
ID of the domain or fully qualified identifier for the domain. To set
the domain attribute:
▸ provide the argument domain on the command line.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
API REFERENCE
This command uses the managedidentities/v1beta1 API. The full documentation
for this API can be found at:
https://cloud.google.com/managed-microsoft-ad/
NOTES
This command is currently in beta and might change without notice. These
variants are also available:
$ gcloud active-directory domains describe
$ gcloud alpha active-directory domains describe

62
gcloud/beta/active-directory/domains/describe-ldaps-settings Normal file
View file

@ -0,0 +1,62 @@
NAME
gcloud beta active-directory domains describe-ldaps-settings - describe the
LDAPS settings of a Managed Microsoft AD domain
SYNOPSIS
gcloud beta active-directory domains describe-ldaps-settings DOMAIN
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) Describe the Lightweight Directory Access Protocol over TLS/SSL
(LDAPS) settings of a Managed Microsoft AD domain.
This command can fail for the following reasons:
▪ The domain specified does not exist.
▪ The active account does not have permission to view LDAPS settings
for the domain.
EXAMPLES
The following command shows the LDAPS settings for an AD domain with the
name my-domain.com.
$ gcloud beta active-directory domains describe-ldaps-settings \
my-domain.com
POSITIONAL ARGUMENTS
Domain resource - Name of the Managed Microsoft AD domain you want to
describe. This represents a Cloud resource. (NOTE) Some attributes are not
given arguments in this group but can be set in other ways. To set the
project attribute:
◆ provide the argument domain on the command line with a fully
specified name;
◆ set the property core/project;
◆ provide the argument --project on the command line.
This must be specified.
DOMAIN
ID of the domain or fully qualified identifier for the domain. To set
the domain attribute:
▸ provide the argument domain on the command line.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
API REFERENCE
This command uses the managedidentities/v1beta1 API. The full documentation
for this API can be found at:
https://cloud.google.com/managed-microsoft-ad/
NOTES
This command is currently in beta and might change without notice. These
variants are also available:
$ gcloud active-directory domains describe-ldaps-settings
$ gcloud alpha active-directory domains describe-ldaps-settings

89
gcloud/beta/active-directory/domains/get-iam-policy Normal file
View file

@ -0,0 +1,89 @@
NAME
gcloud beta active-directory domains get-iam-policy - describe the IAM
policy for a Managed Microsoft AD domain
SYNOPSIS
gcloud beta active-directory domains get-iam-policy DOMAIN
[--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE]
[--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) gcloud beta active-directory domains get-iam-policy displays the IAM
policy associated with an Managed Microsoft AD domain. If formatted as
JSON, the output can be edited and used as a policy file for
set-iam-policy. The output includes an "etag" field identifying the version
emitted and allowing detection of concurrent policy updates.
This command can fail for the following reasons:
▪ The domain specified does not exist.
▪ The active account does not have permission to access the given
domain's IAM policies.
EXAMPLES
To print the IAM policy for my-domain.com, run:
$ gcloud beta active-directory domains get-iam-policy my-domain.com
POSITIONAL ARGUMENTS
Domain resource - Name of the Managed Microsoft AD domain that you want to
get the IAM policy for. This represents a Cloud resource. (NOTE) Some
attributes are not given arguments in this group but can be set in other
ways. To set the project attribute:
◆ provide the argument domain on the command line with a fully
specified name;
◆ set the property core/project;
◆ provide the argument --project on the command line.
This must be specified.
DOMAIN
ID of the domain or fully qualified identifier for the domain. To set
the domain attribute:
▸ provide the argument domain on the command line.
LIST COMMAND FLAGS
--filter=EXPRESSION
Apply a Boolean filter EXPRESSION to each resource item to be listed.
If the expression evaluates True, then that item is listed. For more
details and examples of filter expressions, run $ gcloud topic filters.
This flag interacts with other flags that are applied in this order:
--flatten, --sort-by, --filter, --limit.
--limit=LIMIT
Maximum number of resources to list. The default is unlimited. This
flag interacts with other flags that are applied in this order:
--flatten, --sort-by, --filter, --limit.
--page-size=PAGE_SIZE
Some services group resource list output into pages. This flag
specifies the maximum number of resources per page. The default is
determined by the service if it supports paging, otherwise it is
unlimited (no paging). Paging may be applied before or after --filter
and --limit depending on the service.
--sort-by=[FIELD,...]
Comma-separated list of resource field key names to sort by. The
default order is ascending. Prefix a field with ``~'' for descending
order on that field. This flag interacts with other flags that are
applied in this order: --flatten, --sort-by, --filter, --limit.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
API REFERENCE
This command uses the managedidentities/v1 API. The full documentation for
this API can be found at: https://cloud.google.com/managed-microsoft-ad/
NOTES
This command is currently in beta and might change without notice. These
variants are also available:
$ gcloud active-directory domains get-iam-policy
$ gcloud alpha active-directory domains get-iam-policy

71
gcloud/beta/active-directory/domains/help Normal file
View file

@ -0,0 +1,71 @@
NAME
gcloud beta active-directory domains - manage Managed Microsoft AD domains
SYNOPSIS
gcloud beta active-directory domains GROUP | COMMAND [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) Manage Managed Microsoft AD domains.
GCLOUD WIDE FLAGS
These flags are available to all commands: --help.
Run $ gcloud help for details.
GROUPS
GROUP is one of the following:
backups
(BETA) Managed Microsoft AD Backups.
sql-integrations
(BETA) Discover Cloud SQL integrations with Managed Microsoft AD
domains.
trusts
(BETA) Manage Managed Microsoft AD domains.
COMMANDS
COMMAND is one of the following:
create
(BETA) Create a Managed Microsoft AD domain.
delete
(BETA) Delete a managed Microsoft Active Directory domain.
describe
(BETA) Describe a Managed Microsoft AD domain.
describe-ldaps-settings
(BETA) Describe the LDAPS settings of a Managed Microsoft AD domain.
get-iam-policy
(BETA) Describe the IAM policy for a Managed Microsoft AD domain.
list
(BETA) List Managed Microsoft AD domains.
reset-admin-password
(BETA) Reset the admin password for a Managed Microsoft AD domain.
restore
(BETA) Restore the domain from The specified backup.
set-iam-policy
(BETA) Set the IAM policy for a Managed Microsoft AD domain.
update
(BETA) Update a Managed Microsoft AD domain.
update-ldaps-settings
(BETA) Update the LDAPS settings for a domain.
NOTES
This command is currently in beta and might change without notice. These
variants are also available:
$ gcloud active-directory domains
$ gcloud alpha active-directory domains

67
gcloud/beta/active-directory/domains/list Normal file
View file

@ -0,0 +1,67 @@
NAME
gcloud beta active-directory domains list - list Managed Microsoft AD
domains
SYNOPSIS
gcloud beta active-directory domains list [--filter=EXPRESSION]
[--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]]
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) List all Managed Microsoft AD domains in the specified project.
You can specify the maximum number of domains to list using the --limit
flag.
EXAMPLES
The following command lists a maximum of five domains:
$ gcloud beta active-directory domains list --limit=5
LIST COMMAND FLAGS
--filter=EXPRESSION
Apply a Boolean filter EXPRESSION to each resource item to be listed.
If the expression evaluates True, then that item is listed. For more
details and examples of filter expressions, run $ gcloud topic filters.
This flag interacts with other flags that are applied in this order:
--flatten, --sort-by, --filter, --limit.
--limit=LIMIT
Maximum number of resources to list. The default is unlimited. This
flag interacts with other flags that are applied in this order:
--flatten, --sort-by, --filter, --limit.
--page-size=PAGE_SIZE
Some services group resource list output into pages. This flag
specifies the maximum number of resources per page. The default is
determined by the service if it supports paging, otherwise it is
unlimited (no paging). Paging may be applied before or after --filter
and --limit depending on the service.
--sort-by=[FIELD,...]
Comma-separated list of resource field key names to sort by. The
default order is ascending. Prefix a field with ``~'' for descending
order on that field. This flag interacts with other flags that are
applied in this order: --flatten, --sort-by, --filter, --limit.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
API REFERENCE
This command uses the managedidentities/v1beta1 API. The full documentation
for this API can be found at:
https://cloud.google.com/managed-microsoft-ad/
NOTES
This command is currently in beta and might change without notice. These
variants are also available:
$ gcloud active-directory domains list
$ gcloud alpha active-directory domains list

61
gcloud/beta/active-directory/domains/reset-admin-password Normal file
View file

@ -0,0 +1,61 @@
NAME
gcloud beta active-directory domains reset-admin-password - reset the admin
password for a Managed Microsoft AD domain
SYNOPSIS
gcloud beta active-directory domains reset-admin-password DOMAIN
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) Reset the delegated admin password for a Managed Microsoft AD domain
given a valid AD domain fully-qualified domain name.
This command can fail for the following reasons:
▪ The AD domain specified does not exist.
▪ The active account does not have permission to access the given AD
domain.
EXAMPLES
The following command resets the admin password for an AD domain with the
name my-domain.com.
$ gcloud beta active-directory domains reset-admin-password \
my-domain.com
POSITIONAL ARGUMENTS
Domain resource - Name of the Managed Microsoft AD domain you want to
reset the password for. This represents a Cloud resource. (NOTE) Some
attributes are not given arguments in this group but can be set in other
ways. To set the project attribute:
◆ provide the argument domain on the command line with a fully
specified name;
◆ set the property core/project;
◆ provide the argument --project on the command line.
This must be specified.
DOMAIN
ID of the domain or fully qualified identifier for the domain. To set
the domain attribute:
▸ provide the argument domain on the command line.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
API REFERENCE
This command uses the managedidentities/v1 API. The full documentation for
this API can be found at: https://cloud.google.com/managed-microsoft-ad/
NOTES
This command is currently in beta and might change without notice. These
variants are also available:
$ gcloud active-directory domains reset-admin-password
$ gcloud alpha active-directory domains reset-admin-password

69
gcloud/beta/active-directory/domains/restore Normal file
View file

@ -0,0 +1,69 @@
NAME
gcloud beta active-directory domains restore - restore the domain from The
specified backup
SYNOPSIS
gcloud beta active-directory domains restore DOMAIN --backup=BACKUP
[--async] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) Restore a Managed Microsoft Active Directory domain to a previous
point in time when the backup was taken.
This command can fail for the following reasons:
▪ The domain specified does not exist.
▪ The backup specified does not exist.
▪ The active account does not have permission to restore the domain.
EXAMPLES
To restore the domain my-domain.com from backup my-backup:
$ gcloud beta active-directory domains restore my-domain.com \
--backup=my-backup --async
POSITIONAL ARGUMENTS
Domain resource - Name of the managed Managed Microsoft AD domain you want
to restore. This represents a Cloud resource. (NOTE) Some attributes are
not given arguments in this group but can be set in other ways. To set the
project attribute:
◆ provide the argument domain on the command line with a fully
specified name;
◆ set the property core/project;
◆ provide the argument --project on the command line.
This must be specified.
DOMAIN
ID of the domain or fully qualified identifier for the domain. To set
the domain attribute:
▸ provide the argument domain on the command line.
REQUIRED FLAGS
--backup=BACKUP
Name of the managed Managed Microsoft AD domain backup you want to
restore from to.
OPTIONAL FLAGS
--async
Return immediately, without waiting for the operation in progress to
complete.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
API REFERENCE
This command uses the managedidentities/v1beta1 API. The full documentation
for this API can be found at:
https://cloud.google.com/managed-microsoft-ad/
NOTES
This command is currently in beta and might change without notice. This
variant is also available:
$ gcloud alpha active-directory domains restore

69
gcloud/beta/active-directory/domains/set-iam-policy Normal file
View file

@ -0,0 +1,69 @@
NAME
gcloud beta active-directory domains set-iam-policy - set the IAM policy
for a Managed Microsoft AD domain
SYNOPSIS
gcloud beta active-directory domains set-iam-policy DOMAIN POLICY_FILE
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) Set the IAM policy associated with a Managed Microsoft AD domain.
This command can fail for the following reasons:
▪ The domain specified does not exist.
▪ The active account does not have permission to access the given
domain's IAM policies.
EXAMPLES
To set the IAM policy for my-domain.com, run:
$ gcloud beta active-directory domains set-iam-policy \
my-domain.com policy.json
See https://cloud.google.com/iam/docs/managing-policies for details of the
policy file format and contents.
POSITIONAL ARGUMENTS
Domain resource - Name of the Managed Microsoft AD domain you want to set
the IAM policy for. This represents a Cloud resource. (NOTE) Some
attributes are not given arguments in this group but can be set in other
ways. To set the project attribute:
◆ provide the argument domain on the command line with a fully
specified name;
◆ set the property core/project;
◆ provide the argument --project on the command line.
This must be specified.
DOMAIN
ID of the domain or fully qualified identifier for the domain. To set
the domain attribute:
▸ provide the argument domain on the command line.
POLICY_FILE
Path to a local JSON or YAML formatted file containing a valid policy.
The output of the get-iam-policy command is a valid file, as is any
JSON or YAML file conforming to the structure of a Policy
(https://cloud.google.com/iam/reference/rest/v1/Policy).
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
API REFERENCE
This command uses the managedidentities/v1 API. The full documentation for
this API can be found at: https://cloud.google.com/managed-microsoft-ad/
NOTES
This command is currently in beta and might change without notice. These
variants are also available:
$ gcloud active-directory domains set-iam-policy
$ gcloud alpha active-directory domains set-iam-policy

69
gcloud/beta/active-directory/domains/sql-integrations/describe Normal file
View file

@ -0,0 +1,69 @@
NAME
gcloud beta active-directory domains sql-integrations describe - describe a
Cloud SQL integration against a Managed Microsoft AD domain
SYNOPSIS
gcloud beta active-directory domains sql-integrations describe
(SQL_INTEGRATION : --domain=DOMAIN) [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) Describe a Cloud SQL integration against a Managed Microsoft AD
domain.
Displays all details of a Cloud SQL integration given a valid integration
ID.
EXAMPLES
To describe a Cloud SQL integration with the ID my-integration under the
managed AD domain my-domain, run:
$ gcloud beta active-directory domains sql-integrations describe \
my-integration --domain=my-domain --project=my-project
POSITIONAL ARGUMENTS
SQL integration resource - Arguments and flags that specify the SQL
integration you want to describe. The arguments in this group can be used
to specify the attributes of this resource. (NOTE) Some attributes are not
given arguments in this group but can be set in other ways. To set the
project attribute:
◆ provide the argument sql_integration on the command line with a fully
specified name;
◆ set the property core/project;
◆ provide the argument --project on the command line.
This must be specified.
SQL_INTEGRATION
ID of the SQL integration or fully qualified identifier for the SQL
integration. To set the sql_integration attribute:
▸ provide the argument sql_integration on the command line.
This positional must be specified if any of the other arguments in
this group are specified.
--domain=DOMAIN
The fully-qualified domain name of the Microsoft Active Directory
domain. To set the domain attribute:
▸ provide the argument sql_integration on the command line with a
fully specified name;
▸ provide the argument --domain on the command line.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
API REFERENCE
This command uses the managedidentities/v1beta1 API. The full documentation
for this API can be found at:
https://cloud.google.com/managed-microsoft-ad/
NOTES
This command is currently in beta and might change without notice. This
variant is also available:
$ gcloud alpha active-directory domains sql-integrations describe

32
gcloud/beta/active-directory/domains/sql-integrations/help Normal file
View file

@ -0,0 +1,32 @@
NAME
gcloud beta active-directory domains sql-integrations - discover Cloud SQL
integrations with Managed Microsoft AD domains
SYNOPSIS
gcloud beta active-directory domains sql-integrations COMMAND
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) Discover Cloud SQL integrations with Managed Microsoft AD domains.
GCLOUD WIDE FLAGS
These flags are available to all commands: --help.
Run $ gcloud help for details.
COMMANDS
COMMAND is one of the following:
describe
(BETA) Describe a Cloud SQL integration against a Managed Microsoft AD
domain.
list
(BETA) List Cloud SQL Integrations for a Managed Microsoft AD domain.
NOTES
This command is currently in beta and might change without notice. This
variant is also available:
$ gcloud alpha active-directory domains sql-integrations

88
gcloud/beta/active-directory/domains/sql-integrations/list Normal file
View file

@ -0,0 +1,88 @@
NAME
gcloud beta active-directory domains sql-integrations list - list Cloud SQL
Integrations for a Managed Microsoft AD domain
SYNOPSIS
gcloud beta active-directory domains sql-integrations list --domain=DOMAIN
[--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE]
[--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) List all Cloud SQL integrations for a specified Managed Microsoft AD
domain.
EXAMPLES
The following command lists all Cloud SQL integrations in the my-domain.com
domain created in the `my-project` project.
$ gcloud beta active-directory domains sql-integrations list \
--project=my-project --domain=my-domain.com
REQUIRED FLAGS
Domain resource - AD domain whose SQL integrations are to be listed. This
represents a Cloud resource. (NOTE) Some attributes are not given
arguments in this group but can be set in other ways. To set the project
attribute:
◆ provide the argument --domain on the command line with a fully
specified name;
◆ set the property core/project;
◆ provide the argument --project on the command line.
This must be specified.
--domain=DOMAIN
ID of the domain or fully qualified identifier for the domain. To set
the domain attribute:
▸ provide the argument --domain on the command line.
LIST COMMAND FLAGS
--filter=EXPRESSION
Apply a Boolean filter EXPRESSION to each resource item to be listed.
If the expression evaluates True, then that item is listed. For more
details and examples of filter expressions, run $ gcloud topic filters.
This flag interacts with other flags that are applied in this order:
--flatten, --sort-by, --filter, --limit.
--limit=LIMIT
Maximum number of resources to list. The default is unlimited. This
flag interacts with other flags that are applied in this order:
--flatten, --sort-by, --filter, --limit.
--page-size=PAGE_SIZE
Some services group resource list output into pages. This flag
specifies the maximum number of resources per page. The default is
determined by the service if it supports paging, otherwise it is
unlimited (no paging). Paging may be applied before or after --filter
and --limit depending on the service.
--sort-by=[FIELD,...]
Comma-separated list of resource field key names to sort by. The
default order is ascending. Prefix a field with ``~'' for descending
order on that field. This flag interacts with other flags that are
applied in this order: --flatten, --sort-by, --filter, --limit.
--uri
Print a list of resource URIs instead of the default output, and change
the command output to a list of URIs. If this flag is used with
--format, the formatting is applied on this URI list. To display URIs
alongside other keys instead, use the uri() transform.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
API REFERENCE
This command uses the managedidentities/v1beta1 API. The full documentation
for this API can be found at:
https://cloud.google.com/managed-microsoft-ad/
NOTES
This command is currently in beta and might change without notice. This
variant is also available:
$ gcloud alpha active-directory domains sql-integrations list

108
gcloud/beta/active-directory/domains/trusts/create Normal file
View file

@ -0,0 +1,108 @@
NAME
gcloud beta active-directory domains trusts create - create a Microsoft
Active Directory Trust between a Managed Microsoft AD domain and
another domain
SYNOPSIS
gcloud beta active-directory domains trusts create DOMAIN
--target-dns-ip-addresses=[TARGET_DNS_IP_ADDRESSES,...]
--target-domain-name=TARGET_DOMAIN_NAME [--async]
[--direction=DIRECTION; default="BIDIRECTIONAL"]
[--handshake-secret=HANDSHAKE_SECRET] [--selective-authentication]
[--type=TYPE; default="FOREST"] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) Create a Microsoft Active Directory Trust between a Managed
Microsoft AD domain and another domain.
This command can fail for the following reasons:
▪ The domain specified does not exist.
▪ The active account does not have permission to access the given
domain.
▪ A trust already exists with the same target domain name.
▪ The active account does not have permission to create AD trusts.
EXAMPLES
The following command creates an external, bidirectional AD trust between
my-domain.com and target-domain.com.
$ gcloud beta active-directory domains trusts create my-domain.com \
--target-domain-name=target-domain.com
--target-dns-ip-addresses=10.177.0.2 --type=EXTERNAL --direction=BIDIRECTIONAL
--selective-authentication=false --async
POSITIONAL ARGUMENTS
Domain resource - Name of the Managed Microsoft AD domain you want to
create an AD trust from. This represents a Cloud resource. (NOTE) Some
attributes are not given arguments in this group but can be set in other
ways. To set the project attribute:
◆ provide the argument domain on the command line with a fully
specified name;
◆ set the property core/project;
◆ provide the argument --project on the command line.
This must be specified.
DOMAIN
ID of the domain or fully qualified identifier for the domain. To set
the domain attribute:
▸ provide the argument domain on the command line.
REQUIRED FLAGS
--target-dns-ip-addresses=[TARGET_DNS_IP_ADDRESSES,...]
Target DNS server IP addresses that can resolve the target domain.
Only IPv4 is supported.
--target-domain-name=TARGET_DOMAIN_NAME
Target domain name for the Managed Microsoft AD Trust.
OPTIONAL FLAGS
--async
Return immediately, without waiting for the operation in progress to
complete.
--direction=DIRECTION; default="BIDIRECTIONAL"
Direction of the trust.
Must be one of: INBOUND, OUTBOUND, BIDIRECTIONAL. Default is
BIDIRECTIONAL.
DIRECTION must be one of: bidirectional, inbound, outbound,
trust-direction-unspecified.
--handshake-secret=HANDSHAKE_SECRET
Trust handshake secret with target domain. The secret will not be
stored. If not specified, command will prompt user for secret.
--selective-authentication
If specified, trusted side will only have selective access to approved
set of resources.
Otherwise, the trusted side has forest/domain wide access. Default is
false.
--type=TYPE; default="FOREST"
Type of the trust. Must be FOREST or EXTERNAL. Default is FOREST. TYPE
must be one of: external, forest, trust-type-unspecified.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
API REFERENCE
This command uses the managedidentities/v1 API. The full documentation for
this API can be found at: https://cloud.google.com/managed-microsoft-ad/
NOTES
This command is currently in beta and might change without notice. These
variants are also available:
$ gcloud active-directory domains trusts create
$ gcloud alpha active-directory domains trusts create

76
gcloud/beta/active-directory/domains/trusts/delete Normal file
View file

@ -0,0 +1,76 @@
NAME
gcloud beta active-directory domains trusts delete - delete an Active
Directory Trust between a Managed Microsoft AD domain and a target
domain
SYNOPSIS
gcloud beta active-directory domains trusts delete DOMAIN
--target-domain-name=TARGET_DOMAIN_NAME [--async]
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) Delete an Active Directory trust between a Managed Microsoft AD
domain and a target domain.
This command can fail for the following reasons:
▪ The domain specified does not exist.
▪ The active account does not have permission to access the given
domain.
▪ The AD trust specified does not exist.
▪ The active account does not have permission to access the given AD
trust.
EXAMPLES
The following command deletes an AD trust between my-ad-domain.com and
my-target-domain.com.
$ gcloud beta active-directory domains trusts delete \
my-ad-domain.com --target-domain-name=my-target-domain.com
POSITIONAL ARGUMENTS
Domain resource - Name of the Managed Microsoft AD domain you want to
delete a trust from. This represents a Cloud resource. (NOTE) Some
attributes are not given arguments in this group but can be set in other
ways. To set the project attribute:
◆ provide the argument domain on the command line with a fully
specified name;
◆ set the property core/project;
◆ provide the argument --project on the command line.
This must be specified.
DOMAIN
ID of the domain or fully qualified identifier for the domain. To set
the domain attribute:
▸ provide the argument domain on the command line.
REQUIRED FLAGS
--target-domain-name=TARGET_DOMAIN_NAME
Target domain name for the Managed Microsoft AD trust you want to
delete.
OPTIONAL FLAGS
--async
Return immediately, without waiting for the operation in progress to
complete.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
API REFERENCE
This command uses the managedidentities/v1 API. The full documentation for
this API can be found at: https://cloud.google.com/managed-microsoft-ad/
NOTES
This command is currently in beta and might change without notice. These
variants are also available:
$ gcloud active-directory domains trusts delete
$ gcloud alpha active-directory domains trusts delete

40
gcloud/beta/active-directory/domains/trusts/help Normal file
View file

@ -0,0 +1,40 @@
NAME
gcloud beta active-directory domains trusts - manage Managed Microsoft AD
domains
SYNOPSIS
gcloud beta active-directory domains trusts COMMAND [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) Manage Managed Microsoft AD domains.
GCLOUD WIDE FLAGS
These flags are available to all commands: --help.
Run $ gcloud help for details.
COMMANDS
COMMAND is one of the following:
create
(BETA) Create a Microsoft Active Directory Trust between a Managed
Microsoft AD domain and another domain.
delete
(BETA) Delete an Active Directory Trust between a Managed Microsoft AD
domain and a target domain.
update
(BETA) Update target DNS IP addresses for a Managed Microsoft AD trust.
validate-state
(BETA) Validate the state of a Managed Microsoft AD trust.
NOTES
This command is currently in beta and might change without notice. These
variants are also available:
$ gcloud active-directory domains trusts
$ gcloud alpha active-directory domains trusts

82
gcloud/beta/active-directory/domains/trusts/update Normal file
View file

@ -0,0 +1,82 @@
NAME
gcloud beta active-directory domains trusts update - update target DNS IP
addresses for a Managed Microsoft AD trust
SYNOPSIS
gcloud beta active-directory domains trusts update DOMAIN
--target-dns-ip-addresses=[TARGET_DNS_IP_ADDRESSES,...]
--target-domain-name=TARGET_DOMAIN_NAME [--async]
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) Update target DNS IP addresses for a Managed Microsoft AD trust
between the managed domain and the target domain.
This command can fail for the following reasons:
* The domain specified does not exist.
* The active account does not have permission to access the given
domain.
* The AD trust specified does not exist.
* The active account does not have permission to access the given
AD trust.
EXAMPLES
The following command updates the target DNS IP address for the AD trust
between my-domain.com and my-target-domain.com to 10.177.0.3.
$ gcloud beta active-directory domains trusts update \
my-domain.com --target-domain-name=my-target-domain.com
--target-dns-ip-addresses=10.177.0.3
POSITIONAL ARGUMENTS
Domain resource - Name of the Managed Microsoft AD trust for which you
want to update target DNS IP Addresses. This represents a Cloud resource.
(NOTE) Some attributes are not given arguments in this group but can be
set in other ways. To set the project attribute:
◆ provide the argument domain on the command line with a fully
specified name;
◆ set the property core/project;
◆ provide the argument --project on the command line.
This must be specified.
DOMAIN
ID of the domain or fully qualified identifier for the domain. To set
the domain attribute:
▸ provide the argument domain on the command line.
REQUIRED FLAGS
--target-dns-ip-addresses=[TARGET_DNS_IP_ADDRESSES,...]
DNS server IP addresses that can resolve the target domain.
Only IPv4 is supported.
--target-domain-name=TARGET_DOMAIN_NAME
Target domain name for the Managed Microsoft AD trust you want to
update.
OPTIONAL FLAGS
--async
Return immediately, without waiting for the operation in progress to
complete.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
API REFERENCE
This command uses the managedidentities/v1 API. The full documentation for
this API can be found at: https://cloud.google.com/managed-microsoft-ad/
NOTES
This command is currently in beta and might change without notice. These
variants are also available:
$ gcloud active-directory domains trusts update
$ gcloud alpha active-directory domains trusts update

77
gcloud/beta/active-directory/domains/trusts/validate-state Normal file
View file

@ -0,0 +1,77 @@
NAME
gcloud beta active-directory domains trusts validate-state - validate the
state of a Managed Microsoft AD trust
SYNOPSIS
gcloud beta active-directory domains trusts validate-state DOMAIN
--target-domain-name=TARGET_DOMAIN_NAME [--async]
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) Validate the state of a Managed Microsoft AD trust.
Verify that the trust has been properly created and that the
domains/forests can communicate with each other.
This command can fail for the following reasons:
▪ The AD domain specified does not exist.
▪ The active account does not have permission to access the given AD
domain.
▪ The AD trust specified does not exist.
▪ The active account does not have permission to access the given AD
trust.
EXAMPLES
The following command validates state for an AD trust with the given target
domain name my-target-domain.com.
$ gcloud beta active-directory domains trusts validate-state \
my-domain.com --target-domain-name=my-target-domain.com
POSITIONAL ARGUMENTS
Domain resource - Name of the the Managed Microsoft AD trust for which you
want to validate state. This represents a Cloud resource. (NOTE) Some
attributes are not given arguments in this group but can be set in other
ways. To set the project attribute:
◆ provide the argument domain on the command line with a fully
specified name;
◆ set the property core/project;
◆ provide the argument --project on the command line.
This must be specified.
DOMAIN
ID of the domain or fully qualified identifier for the domain. To set
the domain attribute:
▸ provide the argument domain on the command line.
REQUIRED FLAGS
--target-domain-name=TARGET_DOMAIN_NAME
Target domain name of the Managed Microsoft AD Active Directory trust
you want to validate.
OPTIONAL FLAGS
--async
Return immediately, without waiting for the operation in progress to
complete.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
API REFERENCE
This command uses the managedidentities/v1 API. The full documentation for
this API can be found at: https://cloud.google.com/managed-microsoft-ad/
NOTES
This command is currently in beta and might change without notice. These
variants are also available:
$ gcloud active-directory domains trusts validate-state
$ gcloud alpha active-directory domains trusts validate-state

144
gcloud/beta/active-directory/domains/update Normal file
View file

@ -0,0 +1,144 @@
NAME
gcloud beta active-directory domains update - update a Managed Microsoft AD
domain
SYNOPSIS
gcloud beta active-directory domains update DOMAIN [--async]
[--enable-audit-logs] [--update-labels=[KEY=VALUE,...]]
[--add-authorized-networks=[AUTH_NET1, AUTH_NET2, ...,...]
| --remove-authorized-networks=[AUTH_NET1, AUTH_NET2, ...,...]]
[--add-region=ADD_REGION | --remove-region=REMOVE_REGION]
[--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) Update the metadata and/or configuration parameters of a managed
Microsoft AD domain.
This command can fail for the following reasons:
▪ The AD domain specified does not exist.
▪ The active account does not have permission to update the given AD
domain.
EXAMPLES
The following command updates an AD domain with the name my-domain.com to
add the two labels, env and service and to add a provisioned region
us-west1:
$ gcloud beta active-directory domains update my-domain.com \
--update-labels=env=test,service=foo \
--add-region=us-west1
This peers the domain my-domain.com to the network my-network.
$ gcloud beta active-directory domains update my-domain.com
--add-authorized-networks=projects/my-project/global/networks/my-network
POSITIONAL ARGUMENTS
Domain resource - Name of the Managed Microsoft AD domain you want to
update. This represents a Cloud resource. (NOTE) Some attributes are not
given arguments in this group but can be set in other ways. To set the
project attribute:
◆ provide the argument domain on the command line with a fully
specified name;
◆ set the property core/project;
◆ provide the argument --project on the command line.
This must be specified.
DOMAIN
ID of the domain or fully qualified identifier for the domain. To set
the domain attribute:
▸ provide the argument domain on the command line.
FLAGS
--async
Return immediately, without waiting for the operation in progress to
complete.
--enable-audit-logs
If specified, Active Directory data audit logs are enabled for the
domain.
--update-labels=[KEY=VALUE,...]
List of label KEY=VALUE pairs to update. If a label exists, its value
is modified. Otherwise, a new label is created.
Keys must start with a lowercase character and contain only hyphens
(-), underscores (_), lowercase characters, and numbers. Values must
contain only hyphens (-), underscores (_), lowercase characters, and
numbers.
At most one of these can be specified:
--add-authorized-networks=[AUTH_NET1, AUTH_NET2, ...,...]
A list of URLs of additional networks to peer this domain to in the
form projects/{project}/global/networks/{network}. Networks must
belong to the project.
--remove-authorized-networks=[AUTH_NET1, AUTH_NET2, ...,...]
A list of URLs of additional networks to unpeer this domain from in
the form projects/{project}/global/networks/{network}. Networks must
belong to the project.
At most one of these can be specified:
--add-region=ADD_REGION
An additional region to provision this domain in. If domain is
already provisioned in region, nothing will be done in that region.
Supported regions are: asia-east1, asia-northeast1, asia-south1,
asia-southeast1, australia-southeast1, europe-north1, europe-west1,
europe-west2, europe-west3, europe-west4, northamerica-northeast1,
southamerica-east1, us-central1, us-east1, us-east4, us-west1,
us-west2.
--remove-region=REMOVE_REGION
A region to de-provision this domain from. If domain is already not
provisioned in a region, nothing will be done in that region. Domains
must be left provisioned in at least one region. Supported regions
are: asia-east1, asia-northeast1, asia-south1, asia-southeast1,
australia-southeast1, europe-north1, europe-west1, europe-west2,
europe-west3, europe-west4, northamerica-northeast1,
southamerica-east1, us-central1, us-east1, us-east4, us-west1,
us-west2.
At most one of these can be specified:
--clear-labels
Remove all labels. If --update-labels is also specified then
--clear-labels is applied first.
For example, to remove all labels:
$ gcloud beta active-directory domains update --clear-labels
To remove all existing labels and create two new labels, foo and baz:
$ gcloud beta active-directory domains update --clear-labels \
--update-labels foo=bar,baz=qux
--remove-labels=[KEY,...]
List of label keys to remove. If a label does not exist it is
silently ignored. If --update-labels is also specified then
--update-labels is applied first.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
API REFERENCE
This command uses the managedidentities/v1beta1 API. The full documentation
for this API can be found at:
https://cloud.google.com/managed-microsoft-ad/
NOTES
This command is currently in beta and might change without notice. These
variants are also available:
$ gcloud active-directory domains update
$ gcloud alpha active-directory domains update

97
gcloud/beta/active-directory/domains/update-ldaps-settings Normal file
View file

@ -0,0 +1,97 @@
NAME
gcloud beta active-directory domains update-ldaps-settings - update the
LDAPS settings for a domain
SYNOPSIS
gcloud beta active-directory domains update-ldaps-settings DOMAIN
(--clear-certificates | [--certificate-pfx-file=CERTIFICATE_PFX_FILE
: --certificate-password=CERTIFICATE_PASSWORD]) [--async]
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) Update a Managed Microsoft AD domain's Lightweight Directory Access
Protocol over TLS/SSL (LDAPS) settings. You must be safelisted for the
Managed AD LDAPS Alpha in order to use this feature. Consult the API
documentation for a list of certificate requirements.
This command can fail for the following reasons:
▪ The certificate is invalid.
▪ The domain specified does not exist.
▪ The active account does not have permission to view LDAPS settings
for the domain.
EXAMPLES
To enable LDAPS for the first time or update the certificates being used:
$ gcloud beta active-directory domains update-ldaps-settings \
my-domain.com \
--certificate-pfx-file=certificate-chain-with-private-key.pfx \
--certificate-password="password"
To disable LDAPS:
$ gcloud beta active-directory domains update-ldaps-settings \
my-domain.com --clear-certificates
POSITIONAL ARGUMENTS
Domain resource - Name of the managed Managed Microsoft AD domain you want
to update. This represents a Cloud resource. (NOTE) Some attributes are
not given arguments in this group but can be set in other ways. To set the
project attribute:
◆ provide the argument domain on the command line with a fully
specified name;
◆ set the property core/project;
◆ provide the argument --project on the command line.
This must be specified.
DOMAIN
ID of the domain or fully qualified identifier for the domain. To set
the domain attribute:
▸ provide the argument domain on the command line.
REQUIRED FLAGS
Exactly one of these must be specified:
--clear-certificates
Disable LDAPS by deleting all existing certificates. Certificates
will need to be re-uploaded if LDAPS is to be re-enabled.
--certificate-pfx-file=CERTIFICATE_PFX_FILE
PKCS#12-formatted pfx file that specifies the certificate chain used
to configure LDAPS. If certificate-password is not specified, command
will prompt user for secret.
This flag must be specified if any of the other arguments in this
group are specified.
--certificate-password=CERTIFICATE_PASSWORD
Password used to encrypt the PKCS#12 certificate. If not specified,
command will prompt user for secret.
OPTIONAL FLAGS
--async
Return immediately, without waiting for the operation in progress to
complete.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
API REFERENCE
This command uses the managedidentities/v1beta1 API. The full documentation
for this API can be found at:
https://cloud.google.com/managed-microsoft-ad/
NOTES
This command is currently in beta and might change without notice. These
variants are also available:
$ gcloud active-directory domains update-ldaps-settings
$ gcloud alpha active-directory domains update-ldaps-settings