gcloud: Tue Mar 1 21:43:54 UTC 2022

2026-07-20 04:58:26 +00:00 · 2022-03-01 21:43:54 +00:00 · 2022-03-01 21:43:54 +00:00 · 21878eea72
commit 21878eea72
parent c1c3b75313
1018 changed files with 4838 additions and 3409 deletions
--- a/gcloud/alpha/iam/list-grantable-roles
+++ b/gcloud/alpha/iam/list-grantable-roles
@ -26,7 +26,8 @@ EXAMPLES
    List grantable roles for a resource identified via URI:

        $ gcloud alpha iam list-grantable-roles \
-        https://www.googleapis.com/compute/v1/projects/example-project/zones/us-central1-f/instances/example-instance
+            https://www.googleapis.com/compute/v1/projects/example-project/\
+        zones/us-central1-f/instances/example-instance

 POSITIONAL ARGUMENTS
     RESOURCE
--- a/gcloud/alpha/iam/policies/create
+++ b/gcloud/alpha/iam/policies/create
@ -0,0 +1,51 @@
+NAME
+    gcloud alpha iam policies create - create a policy on the given attachment
+        point with the given name
+
+SYNOPSIS
+    gcloud alpha iam policies create POLICY_ID
+        --attachment-point=ATTACHMENT_POINT --kind=KIND
+        --policy-file=POLICY_FILE [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Create a policy on the given attachment point with the given name.
+
+EXAMPLES
+    The following command creates the IAM policy defined at the resource
+    project 123 of kind denypolicies and id my-deny-policy from the file
+    policy.json:
+
+        $ gcloud alpha iam policies create my-deny-policy \
+            --attachment-point=cloudresourcemanager.googleapis.com/\
+        projects/123 --kind=denypolicies --policy-file=policy.json
+
+POSITIONAL ARGUMENTS
+     POLICY_ID
+        Id of the policy.
+
+REQUIRED FLAGS
+     --attachment-point=ATTACHMENT_POINT
+        Resource to which the policy is attached.
+
+     --kind=KIND
+        Kind of the policy.
+
+     --policy-file=POLICY_FILE
+        Contents of the policy.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist. This variant is also available:
+
+        $ gcloud beta iam policies create
+
--- a/gcloud/alpha/iam/policies/delete
+++ b/gcloud/alpha/iam/policies/delete
@ -0,0 +1,54 @@
+NAME
+    gcloud alpha iam policies delete - delete a policy on the given attachment
+        point with the given name
+
+SYNOPSIS
+    gcloud alpha iam policies delete POLICY_ID
+        --attachment-point=ATTACHMENT_POINT --kind=KIND [--etag=ETAG]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Delete a policy on the given attachment point with the given name.
+
+EXAMPLES
+    The following command deletes the IAM policy defined at the resource
+    project 123 of kind denypolicies and id my-deny-policy, with etag abc:
+
+        $ gcloud alpha iam policies delete my-deny-policy \
+            --attachment-point=cloudresourcemanager.googleapis.com/\
+        projects/123 --kind=denypolicies --etag=abc
+
+    If etag isn't provided, the command will try to get the etag using the
+    calling user permissions.
+
+POSITIONAL ARGUMENTS
+     POLICY_ID
+        Id of the policy.
+
+REQUIRED FLAGS
+     --attachment-point=ATTACHMENT_POINT
+        Resource to which the policy is attached.
+
+     --kind=KIND
+        Kind of the policy.
+
+OPTIONAL FLAGS
+     --etag=ETAG
+        Etag of the existing policy.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist. This variant is also available:
+
+        $ gcloud beta iam policies delete
+
--- a/gcloud/alpha/iam/policies/get
+++ b/gcloud/alpha/iam/policies/get
@ -0,0 +1,46 @@
+NAME
+    gcloud alpha iam policies get - get a policy on the given attachment point
+        with the given name
+
+SYNOPSIS
+    gcloud alpha iam policies get POLICY_ID --attachment-point=ATTACHMENT_POINT
+        --kind=KIND [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Get a policy on the given attachment point with the given name.
+
+EXAMPLES
+    The following command gets the IAM policy defined at the resource project
+    123 of kind denypolicies and id my-deny-policy:
+
+        $ gcloud alpha iam policies get my-deny-policy \
+            --attachment-point=cloudresourcemanager.googleapis.com/\
+        projects/123 --kind=denypolicies
+
+POSITIONAL ARGUMENTS
+     POLICY_ID
+        Id of the policy.
+
+REQUIRED FLAGS
+     --attachment-point=ATTACHMENT_POINT
+        Resource to which the policy is attached.
+
+     --kind=KIND
+        Kind of the policy.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist. This variant is also available:
+
+        $ gcloud beta iam policies get
+
--- a/gcloud/alpha/iam/policies/help
+++ b/gcloud/alpha/iam/policies/help
@ -15,9 +15,27 @@ GCLOUD WIDE FLAGS
 COMMANDS
    COMMAND is one of the following:

+     create
+        (ALPHA) Create a policy on the given attachment point with the given
+        name.
+
+     delete
+        (ALPHA) Delete a policy on the given attachment point with the given
+        name.
+
+     get
+        (ALPHA) Get a policy on the given attachment point with the given name.
+
     lint-condition
        (ALPHA) Lint an IAM condition.

+     list
+        (ALPHA) List the policies on the given attachment point.
+
+     update
+        (ALPHA) Update the policy on the given attachment point with the given
+        name.
+
 NOTES
    This command is currently in alpha and might change without notice. If this
    command fails with API permission errors despite specifying the correct
--- a/gcloud/alpha/iam/policies/list
+++ b/gcloud/alpha/iam/policies/list
@ -0,0 +1,74 @@
+NAME
+    gcloud alpha iam policies list - list the policies on the given attachment
+        point
+
+SYNOPSIS
+    gcloud alpha iam policies list --attachment-point=ATTACHMENT_POINT
+        --kind=KIND [--page_token=PAGE_TOKEN] [--filter=EXPRESSION]
+        [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) List the policies on the given attachment point.
+
+EXAMPLES
+    The following command lists the IAM policy defined at the resource project
+    123 of kind denypolicies:
+
+        $ gcloud alpha iam policies list \
+            --attachment-point=cloudresourcemanager.googleapis.com/\
+        projects/123 --kind=denypolicies
+
+REQUIRED FLAGS
+     --attachment-point=ATTACHMENT_POINT
+        Resource to which the policy is attached.
+
+     --kind=KIND
+        Kind of the policy.
+
+FLAGS
+     --page_token=PAGE_TOKEN
+        Page token received from a previous call.
+
+LIST COMMAND FLAGS
+     --filter=EXPRESSION
+        Apply a Boolean filter EXPRESSION to each resource item to be listed.
+        If the expression evaluates True, then that item is listed. For more
+        details and examples of filter expressions, run $ gcloud topic filters.
+        This flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --limit=LIMIT
+        Maximum number of resources to list. The default is unlimited. This
+        flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --page-size=PAGE_SIZE
+        Some services group resource list output into pages. This flag
+        specifies the maximum number of resources per page. The default is
+        determined by the service if it supports paging, otherwise it is
+        unlimited (no paging). Paging may be applied before or after --filter
+        and --limit depending on the service.
+
+     --sort-by=[FIELD,...]
+        Comma-separated list of resource field key names to sort by. The
+        default order is ascending. Prefix a field with ``~'' for descending
+        order on that field. This flag interacts with other flags that are
+        applied in this order: --flatten, --sort-by, --filter, --limit.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist. This variant is also available:
+
+        $ gcloud beta iam policies list
+
--- a/gcloud/alpha/iam/policies/update
+++ b/gcloud/alpha/iam/policies/update
@ -0,0 +1,59 @@
+NAME
+    gcloud alpha iam policies update - update the policy on the given
+        attachment point with the given name
+
+SYNOPSIS
+    gcloud alpha iam policies update POLICY_ID
+        --attachment-point=ATTACHMENT_POINT --kind=KIND
+        --policy-file=POLICY_FILE [--etag=ETAG] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (ALPHA) Update the policy on the given attachment point with the given
+    name.
+
+EXAMPLES
+    The following command updates the IAM policy defined at the resource
+    project 123 of kind denypolicies and id my-deny-policy, with etag abc:
+
+        $ gcloud alpha iam policies update my-deny-policy \
+            --attachment-point=cloudresourcemanager.googleapis.com/\
+        projects/123 --kind=denypolicies --policy-file=policy.json \
+            --etag=abc
+
+    If etag isn't provided, the command will try to get the etag using the
+    calling user permissions.
+
+POSITIONAL ARGUMENTS
+     POLICY_ID
+        Id of the policy.
+
+REQUIRED FLAGS
+     --attachment-point=ATTACHMENT_POINT
+        Resource to which the policy is attached.
+
+     --kind=KIND
+        Kind of the policy.
+
+     --policy-file=POLICY_FILE
+        Contents of the policy.
+
+OPTIONAL FLAGS
+     --etag=ETAG
+        Etag of the existing policy.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+NOTES
+    This command is currently in alpha and might change without notice. If this
+    command fails with API permission errors despite specifying the correct
+    project, you might be trying to access an API with an invitation-only early
+    access allowlist. This variant is also available:
+
+        $ gcloud beta iam policies update
+
--- a/gcloud/alpha/iam/workload-identity-pools/create
+++ b/gcloud/alpha/iam/workload-identity-pools/create
@ -17,11 +17,9 @@ EXAMPLES
    all required and optional parameters are provided.

        $ gcloud alpha iam workload-identity-pools create \
-            my-workload-identity-pool \
-            --location="global" \
+            my-workload-identity-pool --location="global" \
            --display-name="My workload pool" \
-            --description="My workload pool description" \
-            --disabled
+            --description="My workload pool description" --disabled

 POSITIONAL ARGUMENTS
     Workload identity pool resource - The workload identity pool to create.
--- a/gcloud/alpha/iam/workload-identity-pools/providers/create-aws
+++ b/gcloud/alpha/iam/workload-identity-pools/providers/create-aws
@ -20,15 +20,12 @@ EXAMPLES
    Explicit values for all required and optional parameters are provided.

        $ gcloud alpha iam workload-identity-pools providers create-aws \
-            my-workload-identity-pool-provider \
-            --location="global" \
+            my-workload-identity-pool-provider --location="global" \
            --workload-identity-pool="my-workload-identity-pool" \
            --display-name="My workload pool provider" \
            --description="My workload pool provider description" \
-            --disabled \
-            --attribute-mapping="google.subject=assertion.arn" \
-            --attribute-condition="true" \
-            --account-id=1234567890
+            --disabled --attribute-mapping="google.subject=assertion.arn" \
+            --attribute-condition="true" --account-id=1234567890

 POSITIONAL ARGUMENTS
     Workload identity pool provider resource - The workload identity pool
--- a/gcloud/alpha/iam/workload-identity-pools/providers/create-oidc
+++ b/gcloud/alpha/iam/workload-identity-pools/providers/create-oidc
@ -20,16 +20,15 @@ EXAMPLES
    Explicit values for all required and optional parameters are provided.

        $ gcloud alpha iam workload-identity-pools providers create-oidc \
-            my-workload-identity-pool-provider \
-            --location="global" \
+            my-workload-identity-pool-provider --location="global" \
            --workload-identity-pool="my-workload-identity-pool" \
            --display-name="My workload pool provider" \
            --description="My workload pool provider description" \
-            --disabled \
-            --attribute-mapping="google.subject=assertion.sub" \
+            --disabled --attribute-mapping="google.subject=assertion.sub" \
            --attribute-condition="true" \
            --issuer-uri="https://test-idp.com" \
-            --allowed-audiences=https://test-audience-1.com,https://test-audience-2.com
+            --allowed-audiences=https://test-audience-1.com,https://\
+        test-audience-2.com

 POSITIONAL ARGUMENTS
     Workload identity pool provider resource - The workload identity pool
--- a/gcloud/alpha/iam/workload-identity-pools/providers/delete
+++ b/gcloud/alpha/iam/workload-identity-pools/providers/delete
@ -17,8 +17,8 @@ EXAMPLES

        $ gcloud alpha iam workload-identity-pools providers delete \
            my-workload-identity-pool-provider \
-           --workload-identity-pool="my-workload-identity-pool" \
-           --location="global"
+            --workload-identity-pool="my-workload-identity-pool" \
+            --location="global"

 POSITIONAL ARGUMENTS
     Workload identity pool provider resource - The workload identity pool
--- a/gcloud/alpha/iam/workload-identity-pools/providers/describe
+++ b/gcloud/alpha/iam/workload-identity-pools/providers/describe
@ -16,9 +16,9 @@ EXAMPLES
    the ID my-workload-identity-pool-provider:

        $ gcloud alpha iam workload-identity-pools providers describe \
-            my-workload-identity-pool-provider  \
-           --workload-identity-pool="my-workload-identity-pool" \
-           --location="global"
+            my-workload-identity-pool-provider \
+            --workload-identity-pool="my-workload-identity-pool" \
+            --location="global"

 POSITIONAL ARGUMENTS
     Workload identity pool provider resource - The workload identity pool
--- a/gcloud/alpha/iam/workload-identity-pools/providers/list
+++ b/gcloud/alpha/iam/workload-identity-pools/providers/list
@ -15,10 +15,9 @@ EXAMPLES
    The following command lists all workload identity pool providers in the
    workload identity pool, including soft-deleted providers:

-        $ gcloud alpha iam workload-identity-pools providers list  \
-           --workload-identity-pool="my-workload-identity-pool" \
-           --location="global" \
-           --show-deleted
+        $ gcloud alpha iam workload-identity-pools providers list \
+            --workload-identity-pool="my-workload-identity-pool" \
+            --location="global" --show-deleted

 REQUIRED FLAGS
     Workload identity pool resource - The location to list workload identity
--- a/gcloud/alpha/iam/workload-identity-pools/providers/operations/describe
+++ b/gcloud/alpha/iam/workload-identity-pools/providers/operations/describe
@ -18,8 +18,7 @@ EXAMPLES
        $ gcloud alpha iam workload-identity-pools providers operations \
            describe my-operation \
            --workload-identity-pool="my-workload-identity-pool" \
-            --provider="my-provider" \
-            --location="global"
+            --provider="my-provider" --location="global"

 POSITIONAL ARGUMENTS
     Workload identity pool provider operation resource - The workload identity
--- a/gcloud/alpha/iam/workload-identity-pools/providers/undelete
+++ b/gcloud/alpha/iam/workload-identity-pools/providers/undelete
@ -17,8 +17,8 @@ EXAMPLES

        $ gcloud alpha iam workload-identity-pools providers undelete \
            my-workload-identity-pool-provider \
-           --workload-identity-pool="my-workload-identity-pool" \
-           --location="global"
+            --workload-identity-pool="my-workload-identity-pool" \
+            --location="global"

 POSITIONAL ARGUMENTS
     Workload identity pool provider resource - The workload identity pool
--- a/gcloud/alpha/iam/workload-identity-pools/providers/update-aws
+++ b/gcloud/alpha/iam/workload-identity-pools/providers/update-aws
@ -24,10 +24,8 @@ EXAMPLES
            --workload-identity-pool="my-workload-identity-pool" \
            --display-name="My workload pool provider" \
            --description="My workload pool provider description" \
-            --disabled \
-            --attribute-mapping="google.subject=assertion.arn" \
-            --attribute-condition="true" \
-            --account-id=1234567890
+            --disabled --attribute-mapping="google.subject=assertion.arn" \
+            --attribute-condition="true" --account-id=1234567890

 POSITIONAL ARGUMENTS
     Workload identity pool provider resource - The workload identity pool
--- a/gcloud/alpha/iam/workload-identity-pools/providers/update-oidc
+++ b/gcloud/alpha/iam/workload-identity-pools/providers/update-oidc
@ -21,16 +21,15 @@ EXAMPLES
    and optional parameters are provided:

        $ gcloud alpha iam workload-identity-pools providers update-oidc \
-            my-workload-identity-pool-provider \
-            --location="global" \
+            my-workload-identity-pool-provider --location="global" \
            --workload-identity-pool="my-workload-identity-pool" \
            --display-name="My workload pool provider" \
            --description="My workload pool provider description" \
-            --disabled \
-            --attribute-mapping="google.subject=assertion.sub" \
+            --disabled --attribute-mapping="google.subject=assertion.sub" \
            --attribute-condition="true" \
-            --issuer-uri="https://test-idp.com"
-            --allowed-audiences=https://test-audience-1.com,https://test-audience-2.com
+            --issuer-uri="https://test-idp.com" \
+            --allowed-audiences=https://test-audience-1.com,https://\
+        test-audience-2.com

 POSITIONAL ARGUMENTS
     Workload identity pool provider resource - The workload identity pool
--- a/gcloud/alpha/iam/workload-identity-pools/update
+++ b/gcloud/alpha/iam/workload-identity-pools/update
@ -16,11 +16,9 @@ EXAMPLES
    my-workload-identity-pool:

        $ gcloud alpha iam workload-identity-pools update \
-            my-workload-identity-pool \
-            --location="global"
+            my-workload-identity-pool --location="global" \
            --display-name="My workload pool" \
-            --description="My workload pool description" \
-            --disabled
+            --description="My workload pool description" --disabled

 POSITIONAL ARGUMENTS
     Workload identity pool resource - The workload identity pool to update.