mirror of
https://github.com/imjasonh/gcloud-help
synced 2026-07-16 12:22:03 +00:00
gcloud: Thu Jul 25 09:27:13 UTC 2024
This commit is contained in:
parent
503936d882
commit
3a4c5997b9
153 changed files with 2744 additions and 496 deletions
|
|
@ -85,8 +85,7 @@ FLAGS
|
|||
|
||||
--network-tier=NETWORK_TIER
|
||||
The network tier to assign to the reserved IP addresses. NETWORK_TIER
|
||||
must be one of: PREMIUM, STANDARD, FIXED_STANDARD. The default value is
|
||||
PREMIUM.
|
||||
must be one of: PREMIUM, STANDARD. The default value is PREMIUM.
|
||||
|
||||
While regional external addresses (--region specified, --subnet
|
||||
omitted) can use either PREMIUM or STANDARD, global external addresses
|
||||
|
|
|
|||
|
|
@ -5,6 +5,7 @@ SYNOPSIS
|
|||
gcloud alpha compute commitments create COMMITMENT --plan=PLAN
|
||||
(--resources=[local-ssd=LOCAL-SSD],[memory=MEMORY],[vcpu=VCPU]
|
||||
--resources-accelerator=[count=COUNT],[type=TYPE]) [--auto-renew]
|
||||
[--custom-end-time=CUSTOM_END_TIME]
|
||||
[--merge-source-commitments=MERGE_SOURCE_COMMITMENTS] [--region=REGION]
|
||||
[--split-source-commitment=SPLIT_SOURCE_COMMITMENT]
|
||||
[--type=TYPE; default="general-purpose"]
|
||||
|
|
@ -69,6 +70,10 @@ OPTIONAL FLAGS
|
|||
--auto-renew
|
||||
Enable auto renewal for the commitment.
|
||||
|
||||
--custom-end-time=CUSTOM_END_TIME
|
||||
Specifies a custom future end date and extends the commitment's ongoing
|
||||
term.
|
||||
|
||||
--merge-source-commitments=MERGE_SOURCE_COMMITMENTS
|
||||
Creates the new commitment by merging the specified source commitments
|
||||
and combining their resources.
|
||||
|
|
|
|||
|
|
@ -3,7 +3,8 @@ NAME
|
|||
|
||||
SYNOPSIS
|
||||
gcloud alpha compute commitments update COMMITMENT [--auto-renew]
|
||||
[--plan=PLAN] [--region=REGION] [GCLOUD_WIDE_FLAG ...]
|
||||
[--custom-end-time=CUSTOM_END_TIME] [--plan=PLAN] [--region=REGION]
|
||||
[GCLOUD_WIDE_FLAG ...]
|
||||
|
||||
DESCRIPTION
|
||||
(ALPHA) Update Compute Engine commitments.
|
||||
|
|
@ -35,6 +36,10 @@ FLAGS
|
|||
--auto-renew
|
||||
Enable auto renewal for the commitment.
|
||||
|
||||
--custom-end-time=CUSTOM_END_TIME
|
||||
Specifies a custom future end date and extends the commitment's ongoing
|
||||
term.
|
||||
|
||||
--plan=PLAN
|
||||
Duration of the commitment. PLAN must be (only one value is supported):
|
||||
36-month.
|
||||
|
|
|
|||
|
|
@ -5,21 +5,12 @@ NAME
|
|||
SYNOPSIS
|
||||
gcloud alpha compute firewall-policies mirroring-rules create PRIORITY
|
||||
--action=ACTION --firewall-policy=FIREWALL_POLICY
|
||||
[--description=DESCRIPTION]
|
||||
[--dest-address-groups=[DEST_ADDRESS_GROUPS,...]]
|
||||
[--dest-fqdns=[DEST_FQDNS,...]] [--dest-ip-ranges=[DEST_IP_RANGE,...]]
|
||||
[--dest-region-codes=[DEST_REGION_CODES,...]]
|
||||
[--dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...]]
|
||||
[--description=DESCRIPTION] [--dest-ip-ranges=[DEST_IP_RANGE,...]]
|
||||
[--direction=DIRECTION] [--[no-]disabled]
|
||||
[--layer4-configs=[LAYER4_CONFIG,...]] [--organization=ORGANIZATION]
|
||||
[--security-profile-group=SECURITY_PROFILE_GROUP]
|
||||
[--src-address-groups=[SOURCE_ADDRESS_GROUPS,...]]
|
||||
[--src-fqdns=[SOURCE_FQDNS,...]] [--src-ip-ranges=[SRC_IP_RANGE,...]]
|
||||
[--src-region-codes=[SOURCE_REGION_CODES,...]]
|
||||
[--src-threat-intelligence=[SOURCE_THREAT_INTELLIGENCE_LISTS,...]]
|
||||
[--target-resources=[TARGET_RESOURCES,...]]
|
||||
[--target-service-accounts=[TARGET_SERVICE_ACCOUNTS,...]]
|
||||
[GCLOUD_WIDE_FLAG ...]
|
||||
[--src-ip-ranges=[SRC_IP_RANGE,...]]
|
||||
[--target-resources=[TARGET_RESOURCES,...]] [GCLOUD_WIDE_FLAG ...]
|
||||
|
||||
DESCRIPTION
|
||||
(ALPHA) gcloud alpha compute firewall-policies mirroring-rules create is
|
||||
|
|
@ -52,27 +43,9 @@ OPTIONAL FLAGS
|
|||
--description=DESCRIPTION
|
||||
An optional, textual description for the rule.
|
||||
|
||||
--dest-address-groups=[DEST_ADDRESS_GROUPS,...]
|
||||
Destination address groups to match for this rule. Can only be
|
||||
specified if DIRECTION is egress.
|
||||
|
||||
--dest-fqdns=[DEST_FQDNS,...]
|
||||
Destination FQDNs to match for this rule. Can only be specified if
|
||||
DIRECTION is egress.
|
||||
|
||||
--dest-ip-ranges=[DEST_IP_RANGE,...]
|
||||
Destination IP ranges to match for this rule.
|
||||
|
||||
--dest-region-codes=[DEST_REGION_CODES,...]
|
||||
Destination Region Code to match for this rule. Can only be specified
|
||||
if DIRECTION is egress.
|
||||
|
||||
--dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...]
|
||||
Destination Threat Intelligence lists to match for this rule. Can only
|
||||
be specified if DIRECTION is egress. The available lists can be found
|
||||
here:
|
||||
https://cloud.google.com/vpc/docs/firewall-policies-rule-details#threat-intelligence-fw-policy.
|
||||
|
||||
--direction=DIRECTION
|
||||
Direction of the traffic the rule is applied. The default is to apply
|
||||
on incoming traffic. DIRECTION must be one of: INGRESS, EGRESS.
|
||||
|
|
@ -101,33 +74,12 @@ OPTIONAL FLAGS
|
|||
In order to set this property, please run the command gcloud config set
|
||||
api_endpoint_overrides/networksecurity https://<namespace>/.
|
||||
|
||||
--src-address-groups=[SOURCE_ADDRESS_GROUPS,...]
|
||||
Source address groups to match for this rule. Can only be specified if
|
||||
DIRECTION is ingress.
|
||||
|
||||
--src-fqdns=[SOURCE_FQDNS,...]
|
||||
Source FQDNs to match for this rule. Can only be specified if DIRECTION
|
||||
is ingress.
|
||||
|
||||
--src-ip-ranges=[SRC_IP_RANGE,...]
|
||||
Source IP ranges to match for this rule.
|
||||
|
||||
--src-region-codes=[SOURCE_REGION_CODES,...]
|
||||
Source Region Code to match for this rule. Can only be specified if
|
||||
DIRECTION is ingress.
|
||||
|
||||
--src-threat-intelligence=[SOURCE_THREAT_INTELLIGENCE_LISTS,...]
|
||||
Source Threat Intelligence lists to match for this rule. Can only be
|
||||
specified if DIRECTION is ingress. The available lists can be found
|
||||
here:
|
||||
https://cloud.google.com/vpc/docs/firewall-policies-rule-details#threat-intelligence-fw-policy.
|
||||
|
||||
--target-resources=[TARGET_RESOURCES,...]
|
||||
List of URLs of target resources to which the rule is applied.
|
||||
|
||||
--target-service-accounts=[TARGET_SERVICE_ACCOUNTS,...]
|
||||
List of target service accounts for the rule.
|
||||
|
||||
GCLOUD WIDE FLAGS
|
||||
These flags are available to all commands: --access-token-file, --account,
|
||||
--billing-project, --configuration, --flags-file, --flatten, --format,
|
||||
|
|
|
|||
|
|
@ -5,22 +5,13 @@ NAME
|
|||
SYNOPSIS
|
||||
gcloud alpha compute firewall-policies mirroring-rules update PRIORITY
|
||||
--firewall-policy=FIREWALL_POLICY [--action=ACTION]
|
||||
[--description=DESCRIPTION]
|
||||
[--dest-address-groups=[DEST_ADDRESS_GROUPS,...]]
|
||||
[--dest-fqdns=[DEST_FQDNS,...]] [--dest-ip-ranges=[DEST_IP_RANGE,...]]
|
||||
[--dest-region-codes=[DEST_REGION_CODES,...]]
|
||||
[--dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...]]
|
||||
[--description=DESCRIPTION] [--dest-ip-ranges=[DEST_IP_RANGE,...]]
|
||||
[--direction=DIRECTION] [--[no-]disabled]
|
||||
[--layer4-configs=[LAYER4_CONFIG,...]] [--new-priority=NEW_PRIORITY]
|
||||
[--organization=ORGANIZATION]
|
||||
[--security-profile-group=SECURITY_PROFILE_GROUP]
|
||||
[--src-address-groups=[SOURCE_ADDRESS_GROUPS,...]]
|
||||
[--src-fqdns=[SOURCE_FQDNS,...]] [--src-ip-ranges=[SRC_IP_RANGE,...]]
|
||||
[--src-region-codes=[SOURCE_REGION_CODES,...]]
|
||||
[--src-threat-intelligence=[SOURCE_THREAT_INTELLIGENCE_LISTS,...]]
|
||||
[--target-resources=[TARGET_RESOURCES,...]]
|
||||
[--target-service-accounts=[TARGET_SERVICE_ACCOUNTS,...]]
|
||||
[GCLOUD_WIDE_FLAG ...]
|
||||
[--src-ip-ranges=[SRC_IP_RANGE,...]]
|
||||
[--target-resources=[TARGET_RESOURCES,...]] [GCLOUD_WIDE_FLAG ...]
|
||||
|
||||
DESCRIPTION
|
||||
(ALPHA) gcloud alpha compute firewall-policies mirroring-rules update is
|
||||
|
|
@ -52,27 +43,9 @@ OPTIONAL FLAGS
|
|||
--description=DESCRIPTION
|
||||
An optional, textual description for the rule.
|
||||
|
||||
--dest-address-groups=[DEST_ADDRESS_GROUPS,...]
|
||||
Destination address groups to match for this rule. Can only be
|
||||
specified if DIRECTION is egress.
|
||||
|
||||
--dest-fqdns=[DEST_FQDNS,...]
|
||||
Destination FQDNs to match for this rule. Can only be specified if
|
||||
DIRECTION is egress.
|
||||
|
||||
--dest-ip-ranges=[DEST_IP_RANGE,...]
|
||||
Destination IP ranges to match for this rule.
|
||||
|
||||
--dest-region-codes=[DEST_REGION_CODES,...]
|
||||
Destination Region Code to match for this rule. Can only be specified
|
||||
if DIRECTION is egress.
|
||||
|
||||
--dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...]
|
||||
Destination Threat Intelligence lists to match for this rule. Can only
|
||||
be specified if DIRECTION is egress. The available lists can be found
|
||||
here:
|
||||
https://cloud.google.com/vpc/docs/firewall-policies-rule-details#threat-intelligence-fw-policy.
|
||||
|
||||
--direction=DIRECTION
|
||||
Direction of the traffic the rule is applied. The default is to apply
|
||||
on incoming traffic. DIRECTION must be one of: INGRESS, EGRESS.
|
||||
|
|
@ -104,33 +77,12 @@ OPTIONAL FLAGS
|
|||
In order to set this property, please run the command gcloud config set
|
||||
api_endpoint_overrides/networksecurity https://<namespace>/.
|
||||
|
||||
--src-address-groups=[SOURCE_ADDRESS_GROUPS,...]
|
||||
Source address groups to match for this rule. Can only be specified if
|
||||
DIRECTION is ingress.
|
||||
|
||||
--src-fqdns=[SOURCE_FQDNS,...]
|
||||
Source FQDNs to match for this rule. Can only be specified if DIRECTION
|
||||
is ingress.
|
||||
|
||||
--src-ip-ranges=[SRC_IP_RANGE,...]
|
||||
Source IP ranges to match for this rule.
|
||||
|
||||
--src-region-codes=[SOURCE_REGION_CODES,...]
|
||||
Source Region Code to match for this rule. Can only be specified if
|
||||
DIRECTION is ingress.
|
||||
|
||||
--src-threat-intelligence=[SOURCE_THREAT_INTELLIGENCE_LISTS,...]
|
||||
Source Threat Intelligence lists to match for this rule. Can only be
|
||||
specified if DIRECTION is ingress. The available lists can be found
|
||||
here:
|
||||
https://cloud.google.com/vpc/docs/firewall-policies-rule-details#threat-intelligence-fw-policy.
|
||||
|
||||
--target-resources=[TARGET_RESOURCES,...]
|
||||
List of URLs of target resources to which the rule is applied.
|
||||
|
||||
--target-service-accounts=[TARGET_SERVICE_ACCOUNTS,...]
|
||||
List of target service accounts for the rule.
|
||||
|
||||
GCLOUD WIDE FLAGS
|
||||
These flags are available to all commands: --access-token-file, --account,
|
||||
--billing-project, --configuration, --flags-file, --flatten, --format,
|
||||
|
|
|
|||
|
|
@ -287,8 +287,7 @@ OPTIONAL FLAGS
|
|||
|
||||
--network-tier=NETWORK_TIER
|
||||
Network tier to assign to the forwarding rules. NETWORK_TIER must be
|
||||
one of: PREMIUM, STANDARD, FIXED_STANDARD. The default value is
|
||||
PREMIUM.
|
||||
one of: PREMIUM, STANDARD. The default value is PREMIUM.
|
||||
|
||||
--service-directory-registration=SERVICE_DIRECTORY_REGISTRATION
|
||||
The Service Directory service in which to register this forwarding rule
|
||||
|
|
|
|||
|
|
@ -680,8 +680,7 @@ FLAGS
|
|||
|
||||
network-tier
|
||||
Specifies the network tier of the interface. NETWORK_TIER must be
|
||||
one of: PREMIUM, STANDARD, FIXED_STANDARD. The default value is
|
||||
PREMIUM.
|
||||
one of: PREMIUM, STANDARD. The default value is PREMIUM.
|
||||
|
||||
private-network-ip
|
||||
Assigns the given RFC1918 IP address to the interface.
|
||||
|
|
@ -776,8 +775,8 @@ FLAGS
|
|||
|
||||
--network-tier=NETWORK_TIER
|
||||
Specifies the network tier that will be used to configure the instance.
|
||||
NETWORK_TIER must be one of: PREMIUM, STANDARD, FIXED_STANDARD. The
|
||||
default value is PREMIUM.
|
||||
NETWORK_TIER must be one of: PREMIUM, STANDARD. The default value is
|
||||
PREMIUM.
|
||||
|
||||
--numa-node-count=NUMA_NODE_COUNT
|
||||
The number of virtual NUMA nodes for the instance. Valid values are: 0,
|
||||
|
|
|
|||
|
|
@ -597,8 +597,7 @@ FLAGS
|
|||
|
||||
network-tier
|
||||
Specifies the network tier of the interface. NETWORK_TIER must be
|
||||
one of: PREMIUM, STANDARD, FIXED_STANDARD. The default value is
|
||||
PREMIUM.
|
||||
one of: PREMIUM, STANDARD. The default value is PREMIUM.
|
||||
|
||||
private-network-ip
|
||||
Assigns the given RFC1918 IP address to the interface.
|
||||
|
|
@ -664,8 +663,8 @@ FLAGS
|
|||
|
||||
--network-tier=NETWORK_TIER
|
||||
Specifies the network tier that will be used to configure the instance.
|
||||
NETWORK_TIER must be one of: PREMIUM, STANDARD, FIXED_STANDARD. The
|
||||
default value is PREMIUM.
|
||||
NETWORK_TIER must be one of: PREMIUM, STANDARD. The default value is
|
||||
PREMIUM.
|
||||
|
||||
--preemptible
|
||||
If provided, instances will be preemptible and time-limited. Instances
|
||||
|
|
|
|||
|
|
@ -58,8 +58,7 @@ FLAGS
|
|||
|
||||
--network-tier=NETWORK_TIER
|
||||
Specifies the network tier of the access configuration. NETWORK_TIER
|
||||
must be one of: PREMIUM, STANDARD, FIXED_STANDARD. The default value is
|
||||
PREMIUM.
|
||||
must be one of: PREMIUM, STANDARD. The default value is PREMIUM.
|
||||
|
||||
--zone=ZONE
|
||||
Zone of the instance to operate on. If not specified, you might be
|
||||
|
|
|
|||
|
|
@ -682,8 +682,8 @@ OPTIONAL FLAGS
|
|||
|
||||
--network-tier=NETWORK_TIER
|
||||
Specifies the network tier that will be used to configure the instance.
|
||||
NETWORK_TIER must be one of: PREMIUM, STANDARD, FIXED_STANDARD. The
|
||||
default value is PREMIUM.
|
||||
NETWORK_TIER must be one of: PREMIUM, STANDARD. The default value is
|
||||
PREMIUM.
|
||||
|
||||
--numa-node-count=NUMA_NODE_COUNT
|
||||
The number of virtual NUMA nodes for the instance. Valid values are: 0,
|
||||
|
|
|
|||
|
|
@ -793,8 +793,8 @@ FLAGS
|
|||
|
||||
--network-tier=NETWORK_TIER
|
||||
Specifies the network tier that will be used to configure the instance.
|
||||
NETWORK_TIER must be one of: PREMIUM, STANDARD, FIXED_STANDARD. The
|
||||
default value is PREMIUM.
|
||||
NETWORK_TIER must be one of: PREMIUM, STANDARD. The default value is
|
||||
PREMIUM.
|
||||
|
||||
--node-project=NODE_PROJECT
|
||||
The name of the project with shared sole tenant node groups to create
|
||||
|
|
@ -1303,8 +1303,7 @@ FLAGS
|
|||
|
||||
network-tier
|
||||
Specifies the network tier of the interface. NETWORK_TIER must be
|
||||
one of: PREMIUM, STANDARD, FIXED_STANDARD. The default value is
|
||||
PREMIUM.
|
||||
one of: PREMIUM, STANDARD. The default value is PREMIUM.
|
||||
|
||||
private-network-ip
|
||||
Assigns the given RFC1918 IP address to the interface.
|
||||
|
|
|
|||
|
|
@ -682,8 +682,7 @@ FLAGS
|
|||
|
||||
network-tier
|
||||
Specifies the network tier of the interface. NETWORK_TIER must be
|
||||
one of: PREMIUM, STANDARD, FIXED_STANDARD. The default value is
|
||||
PREMIUM.
|
||||
one of: PREMIUM, STANDARD. The default value is PREMIUM.
|
||||
|
||||
private-network-ip
|
||||
Assigns the given RFC1918 IP address to the interface.
|
||||
|
|
@ -765,8 +764,8 @@ FLAGS
|
|||
|
||||
--network-tier=NETWORK_TIER
|
||||
Specifies the network tier that will be used to configure the instance.
|
||||
NETWORK_TIER must be one of: PREMIUM, STANDARD, FIXED_STANDARD. The
|
||||
default value is PREMIUM.
|
||||
NETWORK_TIER must be one of: PREMIUM, STANDARD. The default value is
|
||||
PREMIUM.
|
||||
|
||||
--numa-node-count=NUMA_NODE_COUNT
|
||||
The number of virtual NUMA nodes for the instance. Valid values are: 0,
|
||||
|
|
|
|||
|
|
@ -183,8 +183,8 @@ OPTIONAL FLAGS
|
|||
|
||||
--network-tier=NETWORK_TIER
|
||||
Specifies the network tier that will be used to configure the instance.
|
||||
NETWORK_TIER must be one of: PREMIUM, STANDARD, FIXED_STANDARD. The
|
||||
default value is PREMIUM.
|
||||
NETWORK_TIER must be one of: PREMIUM, STANDARD. The default value is
|
||||
PREMIUM.
|
||||
|
||||
--os=OS
|
||||
Specifies the OS of the image being imported. OS must be one of:
|
||||
|
|
|
|||
|
|
@ -6,21 +6,10 @@ SYNOPSIS
|
|||
gcloud alpha compute network-firewall-policies mirroring-rules create
|
||||
PRIORITY --action=ACTION --firewall-policy=FIREWALL_POLICY
|
||||
--global-firewall-policy [--description=DESCRIPTION]
|
||||
[--dest-address-groups=[DEST_ADDRESS_GROUPS,...]]
|
||||
[--dest-fqdns=[DEST_FQDNS,...]] [--dest-ip-ranges=[DEST_IP_RANGE,...]]
|
||||
[--dest-region-codes=[DEST_REGION_CODES,...]]
|
||||
[--dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...]]
|
||||
[--direction=DIRECTION] [--[no-]disabled]
|
||||
[--layer4-configs=[LAYER4_CONFIG,...]]
|
||||
[--dest-ip-ranges=[DEST_IP_RANGE,...]] [--direction=DIRECTION]
|
||||
[--[no-]disabled] [--layer4-configs=[LAYER4_CONFIG,...]]
|
||||
[--security-profile-group=SECURITY_PROFILE_GROUP]
|
||||
[--src-address-groups=[SOURCE_ADDRESS_GROUPS,...]]
|
||||
[--src-fqdns=[SOURCE_FQDNS,...]] [--src-ip-ranges=[SRC_IP_RANGE,...]]
|
||||
[--src-region-codes=[SOURCE_REGION_CODES,...]]
|
||||
[--src-secure-tags=[SOURCE_SECURE_TAGS,...]]
|
||||
[--src-threat-intelligence=[SOURCE_THREAT_INTELLIGENCE_LISTS,...]]
|
||||
[--target-secure-tags=[TARGET_SECURE_TAGS,...]]
|
||||
[--target-service-accounts=[TARGET_SERVICE_ACCOUNTS,...]]
|
||||
[GCLOUD_WIDE_FLAG ...]
|
||||
[--src-ip-ranges=[SRC_IP_RANGE,...]] [GCLOUD_WIDE_FLAG ...]
|
||||
|
||||
DESCRIPTION
|
||||
(ALPHA) gcloud alpha compute network-firewall-policies mirroring-rules
|
||||
|
|
@ -53,27 +42,9 @@ OPTIONAL FLAGS
|
|||
--description=DESCRIPTION
|
||||
An optional, textual description for the rule.
|
||||
|
||||
--dest-address-groups=[DEST_ADDRESS_GROUPS,...]
|
||||
Destination address groups to match for this rule. Can only be
|
||||
specified if DIRECTION is engress.
|
||||
|
||||
--dest-fqdns=[DEST_FQDNS,...]
|
||||
Destination FQDNs to match for this rule. Can only be specified if
|
||||
DIRECTION is egress.
|
||||
|
||||
--dest-ip-ranges=[DEST_IP_RANGE,...]
|
||||
Destination IP ranges to match for this rule.
|
||||
|
||||
--dest-region-codes=[DEST_REGION_CODES,...]
|
||||
Destination Region Code to match for this rule. Can only be specified
|
||||
if DIRECTION is egress.
|
||||
|
||||
--dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...]
|
||||
Destination Threat Intelligence lists to match for this rule. Can only
|
||||
be specified if DIRECTION is egress. The available lists can be found
|
||||
here:
|
||||
https://cloud.google.com/vpc/docs/firewall-policies-rule-details#threat-intelligence-fw-policy.
|
||||
|
||||
--direction=DIRECTION
|
||||
Direction of the traffic the rule is applied. The default is to apply
|
||||
on incoming traffic. DIRECTION must be one of: INGRESS, EGRESS.
|
||||
|
|
@ -90,14 +61,6 @@ OPTIONAL FLAGS
|
|||
A security profile group to be used with apply_security_profile_group
|
||||
action.
|
||||
|
||||
--src-address-groups=[SOURCE_ADDRESS_GROUPS,...]
|
||||
Source address groups to match for this rule. Can only be specified if
|
||||
DIRECTION is ingress.
|
||||
|
||||
--src-fqdns=[SOURCE_FQDNS,...]
|
||||
Source FQDNs to match for this rule. Can only be specified if DIRECTION
|
||||
is ingress.
|
||||
|
||||
--src-ip-ranges=[SRC_IP_RANGE,...]
|
||||
A list of IP address blocks that are allowed to make inbound
|
||||
connections that match the firewall rule to the instances on the
|
||||
|
|
@ -110,33 +73,6 @@ OPTIONAL FLAGS
|
|||
--src-secure-tags.Multiple IP address blocks can be specified if they
|
||||
are separated by commas.
|
||||
|
||||
--src-region-codes=[SOURCE_REGION_CODES,...]
|
||||
Source Region Code to match for this rule. Can only be specified if
|
||||
DIRECTION is ingress.
|
||||
|
||||
--src-secure-tags=[SOURCE_SECURE_TAGS,...]
|
||||
A list of instance secure tags indicating the set of instances on the
|
||||
network to which the rule applies if all other fields match. Either
|
||||
--src-ip-ranges or --src-secure-tags must be specified for ingress
|
||||
traffic. If both --src-ip-ranges and --src-secure-tags are specified,
|
||||
an inbound connection is allowed if either the range of the source
|
||||
matches --src-ip-ranges or the tag of the source matches
|
||||
--src-secure-tags. Secure Tags can be assigned to instances during
|
||||
instance creation.
|
||||
|
||||
--src-threat-intelligence=[SOURCE_THREAT_INTELLIGENCE_LISTS,...]
|
||||
Source Threat Intelligence lists to match for this rule. Can only be
|
||||
specified if DIRECTION is ingress. The available lists can be found
|
||||
here:
|
||||
https://cloud.google.com/vpc/docs/firewall-policies-rule-details#threat-intelligence-fw-policy.
|
||||
|
||||
--target-secure-tags=[TARGET_SECURE_TAGS,...]
|
||||
An optional, list of target secure tags with a name of the format
|
||||
tagValues/ or full namespaced name
|
||||
|
||||
--target-service-accounts=[TARGET_SERVICE_ACCOUNTS,...]
|
||||
List of target service accounts for the rule.
|
||||
|
||||
GCLOUD WIDE FLAGS
|
||||
These flags are available to all commands: --access-token-file, --account,
|
||||
--billing-project, --configuration, --flags-file, --flatten, --format,
|
||||
|
|
|
|||
|
|
@ -6,21 +6,11 @@ SYNOPSIS
|
|||
gcloud alpha compute network-firewall-policies mirroring-rules update
|
||||
PRIORITY --firewall-policy=FIREWALL_POLICY --global-firewall-policy
|
||||
[--action=ACTION] [--description=DESCRIPTION]
|
||||
[--dest-address-groups=[DEST_ADDRESS_GROUPS,...]]
|
||||
[--dest-fqdns=[DEST_FQDNS,...]] [--dest-ip-ranges=[DEST_IP_RANGE,...]]
|
||||
[--dest-region-codes=[DEST_REGION_CODES,...]]
|
||||
[--dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...]]
|
||||
[--direction=DIRECTION] [--[no-]disabled]
|
||||
[--layer4-configs=[LAYER4_CONFIG,...]] [--new-priority=NEW_PRIORITY]
|
||||
[--dest-ip-ranges=[DEST_IP_RANGE,...]] [--direction=DIRECTION]
|
||||
[--[no-]disabled] [--layer4-configs=[LAYER4_CONFIG,...]]
|
||||
[--new-priority=NEW_PRIORITY]
|
||||
[--security-profile-group=SECURITY_PROFILE_GROUP]
|
||||
[--src-address-groups=[SOURCE_ADDRESS_GROUPS,...]]
|
||||
[--src-fqdns=[SOURCE_FQDNS,...]] [--src-ip-ranges=[SRC_IP_RANGE,...]]
|
||||
[--src-region-codes=[SOURCE_REGION_CODES,...]]
|
||||
[--src-secure-tags=[SOURCE_SECURE_TAGS,...]]
|
||||
[--src-threat-intelligence=[SOURCE_THREAT_INTELLIGENCE_LISTS,...]]
|
||||
[--target-secure-tags=[TARGET_SECURE_TAGS,...]]
|
||||
[--target-service-accounts=[TARGET_SERVICE_ACCOUNTS,...]]
|
||||
[GCLOUD_WIDE_FLAG ...]
|
||||
[--src-ip-ranges=[SRC_IP_RANGE,...]] [GCLOUD_WIDE_FLAG ...]
|
||||
|
||||
DESCRIPTION
|
||||
(ALPHA) gcloud alpha compute network-firewall-policies mirroring-rules
|
||||
|
|
@ -54,27 +44,9 @@ OPTIONAL FLAGS
|
|||
--description=DESCRIPTION
|
||||
An optional, textual description for the rule.
|
||||
|
||||
--dest-address-groups=[DEST_ADDRESS_GROUPS,...]
|
||||
Destination address groups to match for this rule. Can only be
|
||||
specified if DIRECTION is engress.
|
||||
|
||||
--dest-fqdns=[DEST_FQDNS,...]
|
||||
Destination FQDNs to match for this rule. Can only be specified if
|
||||
DIRECTION is egress.
|
||||
|
||||
--dest-ip-ranges=[DEST_IP_RANGE,...]
|
||||
Destination IP ranges to match for this rule.
|
||||
|
||||
--dest-region-codes=[DEST_REGION_CODES,...]
|
||||
Destination Region Code to match for this rule. Can only be specified
|
||||
if DIRECTION is egress.
|
||||
|
||||
--dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...]
|
||||
Destination Threat Intelligence lists to match for this rule. Can only
|
||||
be specified if DIRECTION is egress. The available lists can be found
|
||||
here:
|
||||
https://cloud.google.com/vpc/docs/firewall-policies-rule-details#threat-intelligence-fw-policy.
|
||||
|
||||
--direction=DIRECTION
|
||||
Direction of the traffic the rule is applied. The default is to apply
|
||||
on incoming traffic. DIRECTION must be one of: INGRESS, EGRESS.
|
||||
|
|
@ -94,14 +66,6 @@ OPTIONAL FLAGS
|
|||
A security profile group to be used with apply_security_profile_group
|
||||
action.
|
||||
|
||||
--src-address-groups=[SOURCE_ADDRESS_GROUPS,...]
|
||||
Source address groups to match for this rule. Can only be specified if
|
||||
DIRECTION is ingress.
|
||||
|
||||
--src-fqdns=[SOURCE_FQDNS,...]
|
||||
Source FQDNs to match for this rule. Can only be specified if DIRECTION
|
||||
is ingress.
|
||||
|
||||
--src-ip-ranges=[SRC_IP_RANGE,...]
|
||||
A list of IP address blocks that are allowed to make inbound
|
||||
connections that match the firewall rule to the instances on the
|
||||
|
|
@ -114,33 +78,6 @@ OPTIONAL FLAGS
|
|||
--src-secure-tags.Multiple IP address blocks can be specified if they
|
||||
are separated by commas.
|
||||
|
||||
--src-region-codes=[SOURCE_REGION_CODES,...]
|
||||
Source Region Code to match for this rule. Can only be specified if
|
||||
DIRECTION is ingress.
|
||||
|
||||
--src-secure-tags=[SOURCE_SECURE_TAGS,...]
|
||||
A list of instance secure tags indicating the set of instances on the
|
||||
network to which the rule applies if all other fields match. Either
|
||||
--src-ip-ranges or --src-secure-tags must be specified for ingress
|
||||
traffic. If both --src-ip-ranges and --src-secure-tags are specified,
|
||||
an inbound connection is allowed if either the range of the source
|
||||
matches --src-ip-ranges or the tag of the source matches
|
||||
--src-secure-tags. Secure Tags can be assigned to instances during
|
||||
instance creation.
|
||||
|
||||
--src-threat-intelligence=[SOURCE_THREAT_INTELLIGENCE_LISTS,...]
|
||||
Source Threat Intelligence lists to match for this rule. Can only be
|
||||
specified if DIRECTION is ingress. The available lists can be found
|
||||
here:
|
||||
https://cloud.google.com/vpc/docs/firewall-policies-rule-details#threat-intelligence-fw-policy.
|
||||
|
||||
--target-secure-tags=[TARGET_SECURE_TAGS,...]
|
||||
An optional, list of target secure tags with a name of the format
|
||||
tagValues/ or full namespaced name
|
||||
|
||||
--target-service-accounts=[TARGET_SERVICE_ACCOUNTS,...]
|
||||
List of target service accounts for the rule.
|
||||
|
||||
GCLOUD WIDE FLAGS
|
||||
These flags are available to all commands: --access-token-file, --account,
|
||||
--billing-project, --configuration, --flags-file, --flatten, --format,
|
||||
|
|
|
|||
|
|
@ -20,7 +20,7 @@ FLAGS
|
|||
|
||||
--default-network-tier=DEFAULT_NETWORK_TIER
|
||||
The default network tier to assign to the project. DEFAULT_NETWORK_TIER
|
||||
must be one of: PREMIUM, STANDARD, FIXED_STANDARD.
|
||||
must be one of: PREMIUM, STANDARD.
|
||||
|
||||
--managed-protection-tier=MANAGED_PROTECTION_TIER
|
||||
Managed protection tier to assign to the project.
|
||||
|
|
|
|||
|
|
@ -655,8 +655,8 @@ OPTIONAL FLAGS
|
|||
|
||||
--network-tier=NETWORK_TIER
|
||||
Specifies the network tier that will be used to configure the instance.
|
||||
NETWORK_TIER must be one of: PREMIUM, STANDARD, FIXED_STANDARD. The
|
||||
default value is PREMIUM.
|
||||
NETWORK_TIER must be one of: PREMIUM, STANDARD. The default value is
|
||||
PREMIUM.
|
||||
|
||||
--numa-node-count=NUMA_NODE_COUNT
|
||||
The number of virtual NUMA nodes for the instance. Valid values are: 0,
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue