mirror of
https://github.com/imjasonh/gcloud-help
synced 2026-07-18 14:56:05 +00:00
gcloud: Thu Apr 6 10:23:36 UTC 2023
This commit is contained in:
Automated
parent
5fabf24be7
commit
32e56b8b99
209 changed files with 5396 additions and 561 deletions
|
|
@ -0,0 +1,63 @@
|
|||
NAME
|
||||
gcloud alpha compute security-policies add-user-defined-field - add a user
|
||||
defined field to a Compute Engine security policy
|
||||
|
||||
SYNOPSIS
|
||||
gcloud alpha compute security-policies add-user-defined-field NAME
|
||||
--base=BASE --offset=OFFSET --size=SIZE
|
||||
--user-defined-field-name=USER_DEFINED_FIELD_NAME [--mask=MASK]
|
||||
[--region=REGION] [GCLOUD_WIDE_FLAG ...]
|
||||
|
||||
DESCRIPTION
|
||||
(ALPHA) gcloud alpha compute security-policies add-user-defined-field is
|
||||
used to add user defined fields to security policies.
|
||||
|
||||
EXAMPLES
|
||||
To add a user defined field run this:
|
||||
|
||||
$ gcloud alpha compute security-policies add-user-defined-field \
|
||||
SECURITY_POLICY --user-defined-field-name=my-field --base=ipv6 \
|
||||
--offset=10 --size=3
|
||||
|
||||
POSITIONAL ARGUMENTS
|
||||
NAME
|
||||
Name of the security policy to update.
|
||||
|
||||
REQUIRED FLAGS
|
||||
--base=BASE
|
||||
The base relative to which offset is measured. BASE must be one of:
|
||||
ipv4, ipv6, tcp, udp.
|
||||
|
||||
--offset=OFFSET
|
||||
Offset of the first byte of the field (in network byte order) relative
|
||||
to base.
|
||||
|
||||
--size=SIZE
|
||||
Size of the field in bytes. Valid values: 1-4.
|
||||
|
||||
--user-defined-field-name=USER_DEFINED_FIELD_NAME
|
||||
The name for the user defined field.
|
||||
|
||||
OPTIONAL FLAGS
|
||||
--mask=MASK
|
||||
If specified, apply this mask (bitwise AND) to the field to ignore bits
|
||||
before matching. Encoded as a hexadecimal number (starting with "0x").
|
||||
|
||||
--region=REGION
|
||||
Region of the security policy to update. Overrides the default
|
||||
compute/region property value for this command invocation.
|
||||
|
||||
GCLOUD WIDE FLAGS
|
||||
These flags are available to all commands: --access-token-file, --account,
|
||||
--billing-project, --configuration, --flags-file, --flatten, --format,
|
||||
--help, --impersonate-service-account, --log-http, --project, --quiet,
|
||||
--trace-token, --user-output-enabled, --verbosity.
|
||||
|
||||
Run $ gcloud help for details.
|
||||
|
||||
NOTES
|
||||
This command is currently in alpha and might change without notice. If this
|
||||
command fails with API permission errors despite specifying the correct
|
||||
project, you might be trying to access an API with an invitation-only early
|
||||
access allowlist.
|
||||
|
||||
|
|
@ -33,6 +33,9 @@ GROUPS
|
|||
COMMANDS
|
||||
COMMAND is one of the following:
|
||||
|
||||
add-user-defined-field
|
||||
(ALPHA) Add a user defined field to a Compute Engine security policy.
|
||||
|
||||
create
|
||||
(ALPHA) Create a Compute Engine security policy.
|
||||
|
||||
|
|
@ -54,6 +57,10 @@ COMMANDS
|
|||
list-preconfigured-expression-sets
|
||||
(ALPHA) List all available preconfigured expression sets.
|
||||
|
||||
remove-user-defined-field
|
||||
(ALPHA) Remove a user defined field from a Compute Engine security
|
||||
policy.
|
||||
|
||||
update
|
||||
(ALPHA) Update a Compute Engine security policy.
|
||||
|
||||
|
|
|
|||
|
|
@ -0,0 +1,46 @@
|
|||
NAME
|
||||
gcloud alpha compute security-policies remove-user-defined-field - remove a
|
||||
user defined field from a Compute Engine security policy
|
||||
|
||||
SYNOPSIS
|
||||
gcloud alpha compute security-policies remove-user-defined-field NAME
|
||||
--user-defined-field-name=USER_DEFINED_FIELD_NAME [--region=REGION]
|
||||
[GCLOUD_WIDE_FLAG ...]
|
||||
|
||||
DESCRIPTION
|
||||
(ALPHA) gcloud alpha compute security-policies remove-user-defined-field is
|
||||
used to remove user defined fields from security policies.
|
||||
|
||||
EXAMPLES
|
||||
To remove a user defined field run this:
|
||||
|
||||
$ gcloud alpha compute security-policies remove-user-defined-field \
|
||||
SECURITY_POLICY --user-defined-field-name=my-field
|
||||
|
||||
POSITIONAL ARGUMENTS
|
||||
NAME
|
||||
Name of the security policy to update.
|
||||
|
||||
REQUIRED FLAGS
|
||||
--user-defined-field-name=USER_DEFINED_FIELD_NAME
|
||||
The name of the user defined field to remove.
|
||||
|
||||
OPTIONAL FLAGS
|
||||
--region=REGION
|
||||
Region of the security policy to update. Overrides the default
|
||||
compute/region property value for this command invocation.
|
||||
|
||||
GCLOUD WIDE FLAGS
|
||||
These flags are available to all commands: --access-token-file, --account,
|
||||
--billing-project, --configuration, --flags-file, --flatten, --format,
|
||||
--help, --impersonate-service-account, --log-http, --project, --quiet,
|
||||
--trace-token, --user-output-enabled, --verbosity.
|
||||
|
||||
Run $ gcloud help for details.
|
||||
|
||||
NOTES
|
||||
This command is currently in alpha and might change without notice. If this
|
||||
command fails with API permission errors despite specifying the correct
|
||||
project, you might be trying to access an API with an invitation-only early
|
||||
access allowlist.
|
||||
|
||||
|
|
@ -5,7 +5,15 @@ NAME
|
|||
SYNOPSIS
|
||||
gcloud alpha compute security-policies rules create PRIORITY
|
||||
--action=ACTION
|
||||
(--expression=EXPRESSION | --src-ip-ranges=[SRC_IP_RANGE,...])
|
||||
(--expression=EXPRESSION --network-dest-ip-ranges=[DEST_IP_RANGE,...]
|
||||
--network-dest-ports=[DEST_PORT,...]
|
||||
--network-ip-protocols=[IP_PROTOCOL,...]
|
||||
--network-src-asns=[SRC_ASN,...]
|
||||
--network-src-ip-ranges=[SRC_IP_RANGE,...]
|
||||
--network-src-ports=[SRC_PORT,...]
|
||||
--network-src-region-codes=[SRC_REGION_CODE,...]
|
||||
--network-user-defined-fields=[NAME;VALUE:VALUE:...,...]
|
||||
--src-ip-ranges=[SRC_IP_RANGE,...])
|
||||
[--ban-duration-sec=BAN_DURATION_SEC]
|
||||
[--ban-threshold-count=BAN_THRESHOLD_COUNT]
|
||||
[--ban-threshold-interval-sec=BAN_THRESHOLD_INTERVAL_SEC]
|
||||
|
|
@ -81,11 +89,48 @@ REQUIRED FLAGS
|
|||
|
||||
Security policy rule matcher.
|
||||
|
||||
Exactly one of these must be specified:
|
||||
At least one of these must be specified:
|
||||
|
||||
--expression=EXPRESSION
|
||||
The Cloud Armor rules language expression to match for this rule.
|
||||
|
||||
--network-dest-ip-ranges=[DEST_IP_RANGE,...]
|
||||
The destination IPs/IP ranges to match for this rule. To match all
|
||||
IPs specify *.
|
||||
|
||||
--network-dest-ports=[DEST_PORT,...]
|
||||
The destination ports to match for this rule. Each element can be an
|
||||
16-bit unsigned decimal number (e.g. "80") or range (e.g."0-1023"),
|
||||
To match all destination ports specify *.
|
||||
|
||||
--network-ip-protocols=[IP_PROTOCOL,...]
|
||||
The IP protocols to match for this rule. Each element can be an 8-bit
|
||||
unsigned decimal number (e.g. "6"), range (e.g."253-254"), or one of
|
||||
the following protocol names: "tcp", "udp", "icmp", "esp", "ah",
|
||||
"ipip", or "sctp". To match all protocols specify *.
|
||||
|
||||
--network-src-asns=[SRC_ASN,...]
|
||||
BGP Autonomous System Number associated with the source IP address to
|
||||
match for this rule.
|
||||
|
||||
--network-src-ip-ranges=[SRC_IP_RANGE,...]
|
||||
The source IPs/IP ranges to match for this rule. To match all IPs
|
||||
specify *.
|
||||
|
||||
--network-src-ports=[SRC_PORT,...]
|
||||
The source ports to match for this rule. Each element can be an
|
||||
16-bit unsigned decimal number (e.g. "80") or range (e.g."0-1023"),
|
||||
To match all source ports specify *.
|
||||
|
||||
--network-src-region-codes=[SRC_REGION_CODE,...]
|
||||
The two letter ISO 3166-1 alpha-2 country code associated with the
|
||||
source IP address to match for this rule. To match all region codes
|
||||
specify *.
|
||||
|
||||
--network-user-defined-fields=[NAME;VALUE:VALUE:...,...]
|
||||
Each element names a defined field and lists the matching values for
|
||||
that field.
|
||||
|
||||
--src-ip-ranges=[SRC_IP_RANGE,...]
|
||||
The source IPs/IP ranges to match for this rule. To match all IPs
|
||||
specify *.
|
||||
|
|
|
|||
|
|
@ -23,8 +23,15 @@ SYNOPSIS
|
|||
[--redirect-target=REDIRECT_TARGET] [--redirect-type=REDIRECT_TYPE]
|
||||
[--request-headers-to-add=[REQUEST_HEADERS_TO_ADD,...]]
|
||||
[--security-policy=SECURITY_POLICY]
|
||||
[--expression=EXPRESSION | --src-ip-ranges=[SRC_IP_RANGE,...]]
|
||||
[GCLOUD_WIDE_FLAG ...]
|
||||
[--expression=EXPRESSION --network-dest-ip-ranges=[DEST_IP_RANGE,...]
|
||||
--network-dest-ports=[DEST_PORT,...]
|
||||
--network-ip-protocols=[IP_PROTOCOL,...]
|
||||
--network-src-asns=[SRC_ASN,...]
|
||||
--network-src-ip-ranges=[SRC_IP_RANGE,...]
|
||||
--network-src-ports=[SRC_PORT,...]
|
||||
--network-src-region-codes=[SRC_REGION_CODE,...]
|
||||
--network-user-defined-fields=[NAME;VALUE:VALUE:...,...]
|
||||
--src-ip-ranges=[SRC_IP_RANGE,...]] [GCLOUD_WIDE_FLAG ...]
|
||||
|
||||
DESCRIPTION
|
||||
(ALPHA) gcloud alpha compute security-policies rules update is used to
|
||||
|
|
@ -211,11 +218,46 @@ FLAGS
|
|||
|
||||
Security policy rule matcher.
|
||||
|
||||
At most one of these can be specified:
|
||||
|
||||
--expression=EXPRESSION
|
||||
The Cloud Armor rules language expression to match for this rule.
|
||||
|
||||
--network-dest-ip-ranges=[DEST_IP_RANGE,...]
|
||||
The destination IPs/IP ranges to match for this rule. To match all
|
||||
IPs specify *.
|
||||
|
||||
--network-dest-ports=[DEST_PORT,...]
|
||||
The destination ports to match for this rule. Each element can be an
|
||||
16-bit unsigned decimal number (e.g. "80") or range (e.g."0-1023"),
|
||||
To match all destination ports specify *.
|
||||
|
||||
--network-ip-protocols=[IP_PROTOCOL,...]
|
||||
The IP protocols to match for this rule. Each element can be an 8-bit
|
||||
unsigned decimal number (e.g. "6"), range (e.g."253-254"), or one of
|
||||
the following protocol names: "tcp", "udp", "icmp", "esp", "ah",
|
||||
"ipip", or "sctp". To match all protocols specify *.
|
||||
|
||||
--network-src-asns=[SRC_ASN,...]
|
||||
BGP Autonomous System Number associated with the source IP address to
|
||||
match for this rule.
|
||||
|
||||
--network-src-ip-ranges=[SRC_IP_RANGE,...]
|
||||
The source IPs/IP ranges to match for this rule. To match all IPs
|
||||
specify *.
|
||||
|
||||
--network-src-ports=[SRC_PORT,...]
|
||||
The source ports to match for this rule. Each element can be an
|
||||
16-bit unsigned decimal number (e.g. "80") or range (e.g."0-1023"),
|
||||
To match all source ports specify *.
|
||||
|
||||
--network-src-region-codes=[SRC_REGION_CODE,...]
|
||||
The two letter ISO 3166-1 alpha-2 country code associated with the
|
||||
source IP address to match for this rule. To match all region codes
|
||||
specify *.
|
||||
|
||||
--network-user-defined-fields=[NAME;VALUE:VALUE:...,...]
|
||||
Each element names a defined field and lists the matching values for
|
||||
that field.
|
||||
|
||||
--src-ip-ranges=[SRC_IP_RANGE,...]
|
||||
The source IPs/IP ranges to match for this rule. To match all IPs
|
||||
specify *.
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue