gcloud: Wed Apr 26 10:24:37 UTC 2023

2026-07-17 22:36:52 +00:00 · 2023-04-26 10:24:37 +00:00 · 2023-04-26 10:24:37 +00:00 · 2ae1bc2b12
commit 2ae1bc2b12
parent b33a8a3e6e
276 changed files with 6093 additions and 833 deletions
--- a/gcloud/alpha/compute/commitments/create
+++ b/gcloud/alpha/compute/commitments/create
@ -99,9 +99,9 @@ OPTIONAL FLAGS
        Type of commitment. memory-optimized indicates that the commitment is
        for memory-optimized VMs. TYPE must be one of: accelerator-optimized,
        compute-optimized, compute-optimized-c2d, compute-optimized-c3,
-        general-purpose, general-purpose-e2, general-purpose-n2,
-        general-purpose-n2d, general-purpose-t2d, graphics-optimized,
-        memory-optimized, memory-optimized-m3.
+        compute-optimized-c3d, general-purpose, general-purpose-e2,
+        general-purpose-n2, general-purpose-n2d, general-purpose-t2d,
+        graphics-optimized, memory-optimized, memory-optimized-m3.

     Manage the reservations to be created with the commitment.

--- a/gcloud/alpha/compute/disks/create
+++ b/gcloud/alpha/compute/disks/create
@ -94,7 +94,7 @@ FLAGS
        https://cloud.google.com/compute/docs/images/create-delete-deprecate-private-images#guest-os-features.
        GUEST_OS_FEATURE must be one of: BARE_METAL_LINUX_COMPATIBLE, GVNIC,
        MULTI_IP_SUBNET, SEV_CAPABLE, SEV_LIVE_MIGRATABLE, SEV_SNP_CAPABLE,
-        UEFI_COMPATIBLE, VIRTIO_SCSI_MULTIQUEUE, WINDOWS.
+        TDX_CAPABLE, UEFI_COMPATIBLE, VIRTIO_SCSI_MULTIQUEUE, WINDOWS.

     --interface=INTERFACE
        Specifies the disk interface to use for attaching this disk. Valid
--- a/gcloud/alpha/compute/images/create
+++ b/gcloud/alpha/compute/images/create
@ -153,7 +153,7 @@ OPTIONAL FLAGS
        https://cloud.google.com/compute/docs/images/create-delete-deprecate-private-images#guest-os-features.
        GUEST_OS_FEATURE must be one of: BARE_METAL_LINUX_COMPATIBLE, GVNIC,
        MULTI_IP_SUBNET, SEV_CAPABLE, SEV_LIVE_MIGRATABLE, SEV_SNP_CAPABLE,
-        UEFI_COMPATIBLE, VIRTIO_SCSI_MULTIQUEUE, WINDOWS.
+        TDX_CAPABLE, UEFI_COMPATIBLE, VIRTIO_SCSI_MULTIQUEUE, WINDOWS.

     --key-exchange-key-file=[KEK_VALUE,...]
        Comma-separated list of file paths that point to X.509 certificates in
--- a/gcloud/alpha/compute/routers/nats/create
+++ b/gcloud/alpha/compute/routers/nats/create
@ -7,6 +7,7 @@ SYNOPSIS
        (--nat-all-subnet-ip-ranges
          | --nat-custom-subnet-ip-ranges=SUBNETWORK[:RANGE_NAME|ALL],[...]
          | --nat-primary-subnet-ip-ranges) [--async]
+        [--auto-network-tier=AUTO_NETWORK_TIER]
        [--[no-]enable-dynamic-port-allocation]
        [--enable-endpoint-independent-mapping] [--enable-logging]
        [--endpoint-types=[ENDPOINT_TYPE,...]]
@ -83,6 +84,17 @@ OPTIONAL FLAGS
        Return immediately, without waiting for the operation in progress to
        complete.

+     --auto-network-tier=AUTO_NETWORK_TIER
+        The network tier to use when automatically reserving NAT IP addresses.
+        AUTO_NETWORK_TIER must be one of:
+
+         PREMIUM
+            High quality, Google-grade network tier with support for all
+            networking products.
+         STANDARD
+            Public internet quality, with only limited support for other
+            networking products.
+
     --[no-]enable-dynamic-port-allocation
        Enable dynamic port allocation.

--- a/gcloud/alpha/compute/routers/nats/update
+++ b/gcloud/alpha/compute/routers/nats/update
@ -4,6 +4,7 @@ NAME

 SYNOPSIS
    gcloud alpha compute routers nats update NAME --router=ROUTER [--async]
+        [--auto-network-tier=AUTO_NETWORK_TIER]
        [--[no-]enable-dynamic-port-allocation]
        [--enable-endpoint-independent-mapping] [--enable-logging]
        [--log-filter=LOG_FILTER] [--region=REGION] [--rules=RULES]
@ -70,6 +71,17 @@ OPTIONAL FLAGS
        Return immediately, without waiting for the operation in progress to
        complete.

+     --auto-network-tier=AUTO_NETWORK_TIER
+        The network tier to use when automatically reserving NAT IP addresses.
+        AUTO_NETWORK_TIER must be one of:
+
+         PREMIUM
+            High quality, Google-grade network tier with support for all
+            networking products.
+         STANDARD
+            Public internet quality, with only limited support for other
+            networking products.
+
     --[no-]enable-dynamic-port-allocation
        Enable dynamic port allocation.

--- a/gcloud/alpha/compute/target-https-proxies/create
+++ b/gcloud/alpha/compute/target-https-proxies/create
@ -6,7 +6,9 @@ SYNOPSIS
    gcloud alpha compute target-https-proxies create NAME --url-map=URL_MAP
        [--certificate-map=CERTIFICATE_MAP] [--description=DESCRIPTION]
        [--proxy-bind] [--quic-override=QUIC_OVERRIDE; default="NONE"]
-        [--ssl-certificates=SSL_CERTIFICATE,[...]] [--ssl-policy=SSL_POLICY]
+        [--ssl-policy=SSL_POLICY]
+        [--certificate-manager-certificates=[CERTIFICATE_MANAGER_CERTIFICATES,
+          ...] | --ssl-certificates=SSL_CERTIFICATE,[...]]
        [--global | --region=REGION]
        [--global-ssl-certificates
          | --ssl-certificates-region=SSL_CERTIFICATES_REGION]
@ -89,19 +91,39 @@ OPTIONAL FLAGS
         NONE
            Allows Google to control when QUIC is rolled out.

-     --ssl-certificates=SSL_CERTIFICATE,[...]
-        References to at most 15 SSL certificate resources that are used for
-        server-side authentication. The first SSL certificate in this list is
-        considered the primary SSL certificate associated with the load
-        balancer. The SSL certificates must exist and cannot be deleted while
-        referenced by a target HTTPS proxy.
-
     --ssl-policy=SSL_POLICY
        A reference to an SSL policy resource that defines the server-side
        support for SSL features and affects the connections between clients
        and the HTTPS proxy load balancer. The SSL policy must exist and cannot
        be deleted while referenced by a target HTTPS proxy.

+     At most one of these can be specified:
+
+       Certificate resource - certificate-manager-certificates to attach. This
+       represents a Cloud resource. (NOTE) Some attributes are not given
+       arguments in this group but can be set in other ways. To set the project
+       attribute:
+        ▸ provide the argument --certificate-manager-certificates on the
+          command line with a fully specified name;
+        ▸ provide the argument --project on the command line;
+        ▸ set the property core/project. To set the location attribute:
+        ▸ provide the argument --certificate-manager-certificates on the
+          command line with a fully specified name;
+        ▸ default value of location is [global].
+
+         --certificate-manager-certificates=[CERTIFICATE_MANAGER_CERTIFICATES,...]
+            IDs of the certificates or fully qualified identifiers for the
+            certificates. To set the certificate attribute:
+            ▫ provide the argument --certificate-manager-certificates on the
+              command line.
+
+       --ssl-certificates=SSL_CERTIFICATE,[...]
+          References to at most 15 SSL certificate resources that are used for
+          server-side authentication. The first SSL certificate in this list is
+          considered the primary SSL certificate associated with the load
+          balancer. The SSL certificates must exist and cannot be deleted while
+          referenced by a target HTTPS proxy.
+
     At most one of these can be specified:

       --global
--- a/gcloud/alpha/compute/target-https-proxies/update
+++ b/gcloud/alpha/compute/target-https-proxies/update
@ -5,9 +5,11 @@ NAME
 SYNOPSIS
    gcloud alpha compute target-https-proxies update NAME
        [--quic-override=QUIC_OVERRIDE] [--url-map=URL_MAP]
-        [--certificate-map=CERTIFICATE_MAP | --clear-certificate-map
+        [--certificate-manager-certificates=[CERTIFICATE_MANAGER_CERTIFICATES,
+          ...] | --clear-ssl-certificates
          | --ssl-certificates=SSL_CERTIFICATE,[...] --global-ssl-certificates
-          | --ssl-certificates-region=SSL_CERTIFICATES_REGION]
+          | --ssl-certificates-region=SSL_CERTIFICATES_REGION
+          | --certificate-map=CERTIFICATE_MAP | --clear-certificate-map]
        [--clear-ssl-policy | --ssl-policy=SSL_POLICY --global-ssl-policy
          | --ssl-policy-region=SSL_POLICY_REGION] [--global | --region=REGION]
        [--global-url-map | --url-map-region=URL_MAP_REGION]
@ -73,32 +75,33 @@ FLAGS

       At most one of these can be specified:

-         Certificate map resource - The certificate map to attach. This
-         represents a Cloud resource. (NOTE) Some attributes are not given
+         Certificate resource - certificate-manager-certificates to attach.
+         This represents a Cloud resource. (NOTE) Some attributes are not given
         arguments in this group but can be set in other ways. To set the
         project attribute:
-          ▫ provide the argument --certificate-map on the command line with a
-            fully specified name;
+          ▫ provide the argument --certificate-manager-certificates on the
+            command line with a fully specified name;
          ▫ provide the argument --project on the command line;
          ▫ set the property core/project. To set the location attribute:
-          ▫ provide the argument --certificate-map on the command line with a
-            fully specified name;
+          ▫ provide the argument --certificate-manager-certificates on the
+            command line with a fully specified name;
          ▫ default value of location is [global].

-           --certificate-map=CERTIFICATE_MAP
-              ID of the certificate map or fully qualified identifier for the
-              certificate map. To set the map attribute:
-              ◇ provide the argument --certificate-map on the command line.
+           --certificate-manager-certificates=[CERTIFICATE_MANAGER_CERTIFICATES,...]
+              IDs of the certificates or fully qualified identifiers for the
+              certificates. To set the certificate attribute:
+              ◇ provide the argument --certificate-manager-certificates on
+                the command line.

-         --clear-certificate-map
-            Removes any attached certificate map from the HTTPS proxy.
+         --clear-ssl-certificates
+            Remove any attached SSL certificates from the HTTPS proxy.

-       --ssl-certificates=SSL_CERTIFICATE,[...]
-          References to at most 15 SSL certificate resources that are used for
-          server-side authentication. The first SSL certificate in this list is
-          considered the primary SSL certificate associated with the load
-          balancer. The SSL certificates must exist and cannot be deleted while
-          referenced by a target HTTPS proxy.
+         --ssl-certificates=SSL_CERTIFICATE,[...]
+            References to at most 15 SSL certificate resources that are used
+            for server-side authentication. The first SSL certificate in this
+            list is considered the primary SSL certificate associated with the
+            load balancer. The SSL certificates must exist and cannot be
+            deleted while referenced by a target HTTPS proxy.

       At most one of these can be specified:

@ -125,6 +128,28 @@ FLAGS
            Alternatively, the region can be stored in the environment variable
            CLOUDSDK_COMPUTE_REGION.

+       At most one of these can be specified:
+
+         Certificate map resource - The certificate map to attach. This
+         represents a Cloud resource. (NOTE) Some attributes are not given
+         arguments in this group but can be set in other ways. To set the
+         project attribute:
+          ▫ provide the argument --certificate-map on the command line with a
+            fully specified name;
+          ▫ provide the argument --project on the command line;
+          ▫ set the property core/project. To set the location attribute:
+          ▫ provide the argument --certificate-map on the command line with a
+            fully specified name;
+          ▫ default value of location is [global].
+
+           --certificate-map=CERTIFICATE_MAP
+              ID of the certificate map or fully qualified identifier for the
+              certificate map. To set the map attribute:
+              ◇ provide the argument --certificate-map on the command line.
+
+         --clear-certificate-map
+            Removes any attached certificate map from the HTTPS proxy.
+
     At most one of these can be specified:

       --clear-ssl-policy
--- a/gcloud/alpha/compute/target-ssl-proxies/update
+++ b/gcloud/alpha/compute/target-ssl-proxies/update
@ -69,7 +69,7 @@ FLAGS
          referenced by a target SSL proxy.

       --clear-ssl-certificates
-          Removes any attached SSL Certificates from the SSL proxy.
+          Remove any attached SSL certificates from the SSL proxy.

       Certificate map resource - The certificate map to attach. This
       represents a Cloud resource. (NOTE) Some attributes are not given
--- a/gcloud/alpha/compute/tpus/queued-resources/create
+++ b/gcloud/alpha/compute/tpus/queued-resources/create
@ -4,19 +4,20 @@ NAME

 SYNOPSIS
    gcloud alpha compute tpus queued-resources create
-        (QUEUED_RESOURCE : --zone=ZONE) --accelerator-type=ACCELERATOR_TYPE
-        --runtime-version=RUNTIME_VERSION
+        (QUEUED_RESOURCE : --zone=ZONE) --runtime-version=RUNTIME_VERSION
+        (--accelerator-type=ACCELERATOR_TYPE | --topology=TOPOLOGY --type=TYPE)
        (--node-id=NODE_ID
          | [--node-count=NODE_COUNT : --node-prefix=NODE_PREFIX]) [--async]
-        [--best-effort] [--guaranteed] [--internal-ips]
+        [--best-effort] [--data-disk=DATA_DISK] [--description=DESCRIPTION]
+        [--guaranteed] [--internal-ips] [--labels=[LABELS,...]]
        [--metadata=[METADATA,...]]
        [--metadata-from-file=[METADATA_FROM_FILE,...]]
-        [--network=NETWORK; default="default"]
+        [--network=NETWORK; default="default"] [--range=RANGE]
        [--reservation-host-folder=RESERVATION_HOST_FOLDER]
        [--reservation-host-organization=RESERVATION_HOST_ORGANIZATION]
        [--reservation-host-project=RESERVATION_HOST_PROJECT] [--reserved]
        [--scopes=[SCOPES,...]] [--service-account=SERVICE_ACCOUNT]
-        [--subnetwork=SUBNETWORK] [--tags=[TAGS,...]]
+        [--shielded-secure-boot] [--subnetwork=SUBNETWORK] [--tags=[TAGS,...]]
        [--valid-after-duration=VALID_AFTER_DURATION]
        [--valid-after-time=VALID_AFTER_TIME]
        [--valid-until-duration=VALID_UNTIL_DURATION]
@ -73,12 +74,32 @@ POSITIONAL ARGUMENTS
          ▸ set the property compute/zone.

 REQUIRED FLAGS
-     --accelerator-type=ACCELERATOR_TYPE
-        Accelerator type for the TPU.
-
     --runtime-version=RUNTIME_VERSION
        Runtime version for the TPU, such as 2.3.

+     Specify a chip-based or core-based TPU node.
+
+     Exactly one of these must be specified:
+
+       Core-based TPU configuration
+
+         --accelerator-type=ACCELERATOR_TYPE
+            Accelerator type for the TPU.
+
+       Chip-based TPU configuration
+
+         --topology=TOPOLOGY
+            Chip topology for TPU.
+
+            This flag argument must be specified if any of the other arguments
+            in this group are specified.
+
+         --type=TYPE
+            Type of TPU. TYPE must be one of: v2, v3, v4.
+
+            This flag argument must be specified if any of the other arguments
+            in this group are specified.
+
     Specify TPU node(s) with either a single node id or a node count and an
     optional node prefix

@ -120,6 +141,30 @@ OPTIONAL FLAGS
        If provided, the Node requested here may be scheduled at the 'best
        effort' tier.

+     --data-disk=DATA_DISK
+        Additional data disks for the TPU VM.
+
+        This flag must be repeated to provide multiple data disks. For example:
+
+            $ gcloud alpha compute tpus queued-resources create \
+                --data-disk \
+                source=projects/my-project/zones/us-central1-c/disks/my-disk,\
+            mode=read-only
+
+        The following keys are allowed:
+
+         source
+            Specifies the full path to an existing disk. Required. The disk
+            must be in the same zone.
+
+         mode
+            Specifies the mode in which to attach this disk. Valid options are
+            'read-write', 'read-only'. If not specified, the default is
+            'read-write'.
+
+     --description=DESCRIPTION
+        Text description of the TPU.
+
     --guaranteed
        If provided, the Node requested here will only be scheduled at the
        'guaranteed' tier.
@ -129,6 +174,10 @@ OPTIONAL FLAGS
        default is that external IP addresses will be associated with the TPU
        workers.

+     --labels=[LABELS,...]
+        Resource labels to represent user-provided metadata. See
+        https://cloud.google.com/compute/docs/labeling-resources for details.
+
     --metadata=[METADATA,...]
        List of comma-separated metadata key-value pairs for the Cloud TPU VM
        node. Example: --metadata='key1=value1,key2=value2'
@ -140,6 +189,16 @@ OPTIONAL FLAGS
     --network=NETWORK; default="default"
        Network that this TPU will be a part of.

+     --range=RANGE
+        CIDR range for the TPU.
+
+        The IP range that the TPU will select an IP address from. Must be in
+        CIDR notation and a /29 range, for example 192.168.0.0/29. Errors will
+        occur if the CIDR range has already been used for a currently existing
+        TPU, the CIDR range conflicts with any networks in the user's provided
+        network, or the provided network is peered with another network that is
+        using that CIDR range.
+
     --reservation-host-folder=RESERVATION_HOST_FOLDER
        The folder hosting the reservation that the TPU should use. Only one
        reservation host entity may be specified.
@ -165,6 +224,10 @@ OPTIONAL FLAGS
        Email address of the service account. If empty, default Google Compute
        Engine service account will be used.

+     --shielded-secure-boot
+        Specifies that the TPU instances are created with secure boot enabled.
+        This implicitly makes them Shielded VM instances.
+
     --subnetwork=SUBNETWORK
        Subnetwork that this TPU will be a part of.