diff --git a/gcloud/_version b/gcloud/_version index 36062d72a..d11e01d5a 100644 --- a/gcloud/_version +++ b/gcloud/_version @@ -1,6 +1,7 @@ -Google Cloud SDK 395.0.0 -alpha 2022.07.22 -beta 2022.07.22 +Google Cloud SDK 396.0.0 +alpha 2022.07.29 +beta 2022.07.29 bq 2.0.75 -core 2022.07.22 +core 2022.07.29 +gcloud-crc32c 1.0.0 gsutil 5.11 diff --git a/gcloud/ai/models/upload b/gcloud/ai/models/upload index 806e53dbb..da0ac0565 100644 --- a/gcloud/ai/models/upload +++ b/gcloud/ai/models/upload @@ -13,7 +13,8 @@ SYNOPSIS [--explanation-metadata-file=EXPLANATION_METADATA_FILE] [--explanation-method=EXPLANATION_METHOD] [--explanation-path-count=EXPLANATION_PATH_COUNT] - [--explanation-step-count=EXPLANATION_STEP_COUNT] [--model-id=MODEL_ID] + [--explanation-step-count=EXPLANATION_STEP_COUNT] + [--labels=[KEY=VALUE,...]] [--model-id=MODEL_ID] [--parent-model=PARENT_MODEL] [--region=REGION] [--smooth-grad-noise-sigma=SMOOTH_GRAD_NOISE_SIGMA] [--smooth-grad-noise-sigma-by-feature=[KEY=VALUE,...]] @@ -82,6 +83,15 @@ OPTIONAL FLAGS --explanation-step-count=EXPLANATION_STEP_COUNT Number of steps to approximate the path integral for explanation. + --labels=[KEY=VALUE,...] + Labels with user-defined metadata to organize your Models. + + Label keys and values can be no longer than 64 characters (Unicode + codepoints), can only contain lowercase letters, numeric characters, + underscores and dashes. International characters are allowed. + + See https://goo.gl/xmQnxf for more information and examples of labels. + --model-id=MODEL_ID ID to use for the uploaded Model, which will become the final component of the model resource name. diff --git a/gcloud/alpha/ai/models/upload b/gcloud/alpha/ai/models/upload index 3ac814cc9..eee10bd1b 100644 --- a/gcloud/alpha/ai/models/upload +++ b/gcloud/alpha/ai/models/upload @@ -13,7 +13,8 @@ SYNOPSIS [--explanation-metadata-file=EXPLANATION_METADATA_FILE] [--explanation-method=EXPLANATION_METHOD] [--explanation-path-count=EXPLANATION_PATH_COUNT] - [--explanation-step-count=EXPLANATION_STEP_COUNT] [--model-id=MODEL_ID] + [--explanation-step-count=EXPLANATION_STEP_COUNT] + [--labels=[KEY=VALUE,...]] [--model-id=MODEL_ID] [--parent-model=PARENT_MODEL] [--region=REGION] [--smooth-grad-noise-sigma=SMOOTH_GRAD_NOISE_SIGMA] [--smooth-grad-noise-sigma-by-feature=[KEY=VALUE,...]] @@ -82,6 +83,15 @@ OPTIONAL FLAGS --explanation-step-count=EXPLANATION_STEP_COUNT Number of steps to approximate the path integral for explanation. + --labels=[KEY=VALUE,...] + Labels with user-defined metadata to organize your Models. + + Label keys and values can be no longer than 64 characters (Unicode + codepoints), can only contain lowercase letters, numeric characters, + underscores and dashes. International characters are allowed. + + See https://goo.gl/xmQnxf for more information and examples of labels. + --model-id=MODEL_ID ID to use for the uploaded Model, which will become the final component of the model resource name. diff --git a/gcloud/alpha/alloydb/backups/create b/gcloud/alpha/alloydb/backups/create index 1d299f5ce..5d426c963 100644 --- a/gcloud/alpha/alloydb/backups/create +++ b/gcloud/alpha/alloydb/backups/create @@ -4,7 +4,10 @@ NAME SYNOPSIS gcloud alpha alloydb backups create BACKUP --cluster=CLUSTER - --region=REGION [--async] [GCLOUD_WIDE_FLAG ...] + --region=REGION [--async] + [--kms-key=KMS_KEY : --kms-keyring=KMS_KEYRING + --kms-location=KMS_LOCATION --kms-project=KMS_PROJECT] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Creates a new AlloyDB backup within a given project. @@ -32,6 +35,39 @@ OPTIONAL FLAGS Return immediately, without waiting for the operation in progress to complete. + Key resource - The Cloud KMS (Key Management Service) cryptokey that will + be used to protect the backup. The 'AlloyDB Service Agent' service account + must hold permission 'Cloud KMS CryptoKey Encrypter/Decrypter'. The + arguments in this group can be used to specify the attributes of this + resource. + + --kms-key=KMS_KEY + ID of the key or fully qualified identifier for the key. To set the + kms-key attribute: + ▸ provide the argument --kms-key on the command line. + + This flag must be specified if any of the other arguments in this + group are specified. + + --kms-keyring=KMS_KEYRING + The KMS keyring of the key. To set the kms-keyring attribute: + ▸ provide the argument --kms-key on the command line with a fully + specified name; + ▸ provide the argument --kms-keyring on the command line. + + --kms-location=KMS_LOCATION + The Cloud location for the key. To set the kms-location attribute: + ▸ provide the argument --kms-key on the command line with a fully + specified name; + ▸ provide the argument --kms-location on the command line. + + --kms-project=KMS_PROJECT + The Cloud project for the key. To set the kms-project attribute: + ▸ provide the argument --kms-key on the command line with a fully + specified name; + ▸ provide the argument --kms-project on the command line; + ▸ set the property core/project. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/alloydb/backups/describe b/gcloud/alpha/alloydb/backups/describe index 256652b88..306079582 100644 --- a/gcloud/alpha/alloydb/backups/describe +++ b/gcloud/alpha/alloydb/backups/describe @@ -1,13 +1,13 @@ NAME - gcloud alpha alloydb backups describe - creates a new AlloyDB backup within - a given project and location + gcloud alpha alloydb backups describe - describes an AlloyDB backup in a + given project and region SYNOPSIS gcloud alpha alloydb backups describe BACKUP --region=REGION [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Creates a new AlloyDB backup within a given project and location. + (ALPHA) Describes an AlloyDB backup in a given project and region. EXAMPLES To describe a backup, run: diff --git a/gcloud/alpha/alloydb/backups/help b/gcloud/alpha/alloydb/backups/help index a3b240094..fc3e992b2 100644 --- a/gcloud/alpha/alloydb/backups/help +++ b/gcloud/alpha/alloydb/backups/help @@ -24,8 +24,7 @@ COMMANDS (ALPHA) Deletes an AlloyDB backup within a given project. describe - (ALPHA) Creates a new AlloyDB backup within a given project and - location. + (ALPHA) Describes an AlloyDB backup in a given project and region. list (ALPHA) Lists AlloyDB backups in a given project. diff --git a/gcloud/alpha/alloydb/clusters/create b/gcloud/alpha/alloydb/clusters/create index 47c4b8bf2..3652a4d3a 100644 --- a/gcloud/alpha/alloydb/clusters/create +++ b/gcloud/alpha/alloydb/clusters/create @@ -4,7 +4,10 @@ NAME SYNOPSIS gcloud alpha alloydb clusters create CLUSTER --password=PASSWORD - --region=REGION [--async] [--network=NETWORK] [GCLOUD_WIDE_FLAG ...] + --region=REGION [--async] [--network=NETWORK] + [--kms-key=KMS_KEY : --kms-keyring=KMS_KEYRING + --kms-location=KMS_LOCATION --kms-project=KMS_PROJECT] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Creates a new AlloyDB cluster within a given project. @@ -39,6 +42,39 @@ OPTIONAL FLAGS network, 'testsharednetwork', this would be of the form:--network=projects/testproject/global/networks/testsharednetwork + Key resource - The Cloud KMS (Key Management Service) cryptokey that will + be used to protect the cluster. The 'AlloyDB Service Agent' service + account must hold permission 'Cloud KMS CryptoKey Encrypter/Decrypter'. + The arguments in this group can be used to specify the attributes of this + resource. + + --kms-key=KMS_KEY + ID of the key or fully qualified identifier for the key. To set the + kms-key attribute: + ▸ provide the argument --kms-key on the command line. + + This flag must be specified if any of the other arguments in this + group are specified. + + --kms-keyring=KMS_KEYRING + The KMS keyring of the key. To set the kms-keyring attribute: + ▸ provide the argument --kms-key on the command line with a fully + specified name; + ▸ provide the argument --kms-keyring on the command line. + + --kms-location=KMS_LOCATION + The Cloud location for the key. To set the kms-location attribute: + ▸ provide the argument --kms-key on the command line with a fully + specified name; + ▸ provide the argument --kms-location on the command line. + + --kms-project=KMS_PROJECT + The Cloud project for the key. To set the kms-project attribute: + ▸ provide the argument --kms-key on the command line with a fully + specified name; + ▸ provide the argument --kms-project on the command line; + ▸ set the property core/project. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/alloydb/clusters/update b/gcloud/alpha/alloydb/clusters/update index c5e21bb4b..1c2edf805 100644 --- a/gcloud/alpha/alloydb/clusters/update +++ b/gcloud/alpha/alloydb/clusters/update @@ -8,8 +8,8 @@ SYNOPSIS | [--automated-backup-days-of-week=[DAYS_OF_WEEK,...] --automated-backup-start-times=[START_TIMES,...] : --automated-backup-window=TIMEOUT_PERIOD - --automated-backup-retention-count=RETENTION_COUNT - | --automated-backup-retention-period=RETENTION_PERIOD]] + [--automated-backup-encryption-key=AUTOMATED_BACKUP_ENCRYPTION_KEY + : --automated-backup-encryption-key-keyring=AUTOMATED_BACKUP_ENCRYPTION_KEY_KEYRING --automated-backup-encryption-key-location=AUTOMATED_BACKUP_ENCRYPTION_KEY_LOCATION --automated-backup-encryption-key-project=AUTOMATED_BACKUP_ENCRYPTION_KEY_PROJECT] --automated-backup-retention-count=RETENTION_COUNT | --automated-backup-retention-period=RETENTION_PERIOD]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -76,6 +76,44 @@ OPTIONAL FLAGS window must be at least 5 minutes long. There is no upper bound on the window. If not set, it will default to 1 hour. + Key resource - The Cloud KMS (Key Management Service) cryptokey that + will be used to protect the automated backups. The 'AlloyDB Service + Agent' service account must hold permission 'Cloud KMS CryptoKey + Encrypter/Decrypter'. The arguments in this group can be used to + specify the attributes of this resource. + + --automated-backup-encryption-key=AUTOMATED_BACKUP_ENCRYPTION_KEY + ID of the key or fully qualified identifier for the key. To set + the kms-key attribute: + ◇ provide the argument --automated-backup-encryption-key on the + command line. + + This flag must be specified if any of the other arguments in this + group are specified. + + --automated-backup-encryption-key-keyring=AUTOMATED_BACKUP_ENCRYPTION_KEY_KEYRING + The KMS keyring of the key. To set the kms-keyring attribute: + ◇ provide the argument --automated-backup-encryption-key on the + command line with a fully specified name; + ◇ provide the argument + --automated-backup-encryption-key-keyring on the command line. + + --automated-backup-encryption-key-location=AUTOMATED_BACKUP_ENCRYPTION_KEY_LOCATION + The Cloud location for the key. To set the kms-location + attribute: + ◇ provide the argument --automated-backup-encryption-key on the + command line with a fully specified name; + ◇ provide the argument + --automated-backup-encryption-key-location on the command line. + + --automated-backup-encryption-key-project=AUTOMATED_BACKUP_ENCRYPTION_KEY_PROJECT + The Cloud project for the key. To set the kms-project attribute: + ◇ provide the argument --automated-backup-encryption-key on the + command line with a fully specified name; + ◇ provide the argument + --automated-backup-encryption-key-project on the command line; + ◇ set the property core/project. + Retention policy. If no retention policy is provided, all automated backups will be retained. diff --git a/gcloud/alpha/beyondcorp/client-connector/gateways/get-iam-policy b/gcloud/alpha/beyondcorp/client-connector/gateways/get-iam-policy new file mode 100644 index 000000000..7393c4f18 --- /dev/null +++ b/gcloud/alpha/beyondcorp/client-connector/gateways/get-iam-policy @@ -0,0 +1,95 @@ +NAME + gcloud alpha beyondcorp client-connector gateways get-iam-policy - get the + IAM policy for a BeyondCorp client gateway + +SYNOPSIS + gcloud alpha beyondcorp client-connector gateways get-iam-policy + (CLIENT_GATEWAY : --location=LOCATION) [--filter=EXPRESSION] + [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Gets the IAM policy for the given BeyondCorp client gateway. + +EXAMPLES + To get the IAM policy for a client gateway my-client-gateway run: + + $ gcloud alpha beyondcorp client-connector gateways get-iam-policy \ + my-client-gateway --project=consumer-project-id \ + --location=us-central1 + +POSITIONAL ARGUMENTS + Client gateway resource - The BeyondCorp client gateway for which to get + the IAM policy. The arguments in this group can be used to specify the + attributes of this resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. To set the project + attribute: + ◆ provide the argument client_gateway on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + CLIENT_GATEWAY + ID of the client_gateway or fully qualified identifier for the + client_gateway. To set the client_gateway attribute: + ▸ provide the argument client_gateway on the command line. + + This positional must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + The location of the BeyondCorp Enterprise client connector. + + To set the location attribute: + ▸ provide the argument client_gateway on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the beyondcorp/v1alpha API. The full documentation for + this API can be found at: https://cloud.google.com/ + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta beyondcorp client-connector gateways get-iam-policy + diff --git a/gcloud/alpha/beyondcorp/client-connector/gateways/help b/gcloud/alpha/beyondcorp/client-connector/gateways/help index 67a6764d1..db0aae58f 100644 --- a/gcloud/alpha/beyondcorp/client-connector/gateways/help +++ b/gcloud/alpha/beyondcorp/client-connector/gateways/help @@ -31,9 +31,15 @@ COMMANDS describe (ALPHA) Describe a single BeyondCorp client gateway. + get-iam-policy + (ALPHA) Get the IAM policy for a BeyondCorp client gateway. + list (ALPHA) List BeyondCorp client gateway resources. + set-iam-policy + (ALPHA) Set the IAM policy for a BeyondCorp client gateway. + NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct diff --git a/gcloud/alpha/beyondcorp/client-connector/gateways/set-iam-policy b/gcloud/alpha/beyondcorp/client-connector/gateways/set-iam-policy new file mode 100644 index 000000000..e772ab7c3 --- /dev/null +++ b/gcloud/alpha/beyondcorp/client-connector/gateways/set-iam-policy @@ -0,0 +1,75 @@ +NAME + gcloud alpha beyondcorp client-connector gateways set-iam-policy - set the + IAM policy for a BeyondCorp client gateway + +SYNOPSIS + gcloud alpha beyondcorp client-connector gateways set-iam-policy + (CLIENT_GATEWAY : --location=LOCATION) POLICY_FILE + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Sets the IAM policy for the given BeyondCorp client gateway. + +EXAMPLES + The following command will read an IAM policy defined in a JSON file + 'policy.json' and set it for the client gateway with ID my-client-gateway: + + $ gcloud alpha beyondcorp client-connector gateways set-iam-policy \ + my-client-gateway policy.json --location=us-central1 + +POSITIONAL ARGUMENTS + Client gateway resource - The BeyondCorp client gateway for which to set + the IAM policy. The arguments in this group can be used to specify the + attributes of this resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. To set the project + attribute: + ◆ provide the argument client_gateway on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + CLIENT_GATEWAY + ID of the client_gateway or fully qualified identifier for the + client_gateway. To set the client_gateway attribute: + ▸ provide the argument client_gateway on the command line. + + This positional must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + The location of the BeyondCorp Enterprise client connector. + + To set the location attribute: + ▸ provide the argument client_gateway on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + + POLICY_FILE + Path to a local JSON or YAML formatted file containing a valid policy. + + The output of the get-iam-policy command is a valid file, as is any + JSON or YAML file conforming to the structure of a Policy + (https://cloud.google.com/iam/reference/rest/v1/Policy). + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the beyondcorp/v1alpha API. The full documentation for + this API can be found at: https://cloud.google.com/ + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta beyondcorp client-connector gateways set-iam-policy + diff --git a/gcloud/alpha/beyondcorp/client-connector/services/create b/gcloud/alpha/beyondcorp/client-connector/services/create index bc56bf492..41a586221 100644 --- a/gcloud/alpha/beyondcorp/client-connector/services/create +++ b/gcloud/alpha/beyondcorp/client-connector/services/create @@ -77,7 +77,7 @@ REQUIRED FLAGS "config":{ "transportProtocol":"TCP", "destinationRoutes":[{ - "address":"196.0.0.1", + "address":"196.0.0.0", "netmask":"255.255.255.0" }] } diff --git a/gcloud/alpha/beyondcorp/client-connector/services/get-iam-policy b/gcloud/alpha/beyondcorp/client-connector/services/get-iam-policy new file mode 100644 index 000000000..47ee2fa69 --- /dev/null +++ b/gcloud/alpha/beyondcorp/client-connector/services/get-iam-policy @@ -0,0 +1,98 @@ +NAME + gcloud alpha beyondcorp client-connector services get-iam-policy - get the + IAM policy for a BeyondCorp client connector service + +SYNOPSIS + gcloud alpha beyondcorp client-connector services get-iam-policy + (CLIENT_CONNECTOR_SERVICE : --location=LOCATION) [--filter=EXPRESSION] + [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Gets the IAM policy for a BeyondCorp client connector service. + +EXAMPLES + To get the IAM policy for a client connector service with ID + my-service-resource run: + + $ gcloud alpha beyondcorp client-connector services get-iam-policy \ + my-service-resource --project=consumer-project-id \ + --location=us-central1 + +POSITIONAL ARGUMENTS + Client connector service resource - The BeyondCorp client connector + service for which to get the IAM policy. The arguments in this group can + be used to specify the attributes of this resource. (NOTE) Some attributes + are not given arguments in this group but can be set in other ways. To set + the project attribute: + ◆ provide the argument client_connector_service on the command line + with a fully specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + CLIENT_CONNECTOR_SERVICE + ID of the client_connector_service or fully qualified identifier for + the client_connector_service. To set the client_connector_service + attribute: + ▸ provide the argument client_connector_service on the command + line. + + This positional must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + The location of the BeyondCorp Enterprise client connector. + + To set the location attribute: + ▸ provide the argument client_connector_service on the command line + with a fully specified name; + ▸ provide the argument --location on the command line. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the beyondcorp/v1alpha API. The full documentation for + this API can be found at: https://cloud.google.com/ + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta beyondcorp client-connector services get-iam-policy + diff --git a/gcloud/alpha/beyondcorp/client-connector/services/help b/gcloud/alpha/beyondcorp/client-connector/services/help index a9fbd0b54..6e37c2513 100644 --- a/gcloud/alpha/beyondcorp/client-connector/services/help +++ b/gcloud/alpha/beyondcorp/client-connector/services/help @@ -33,9 +33,15 @@ COMMANDS describe (ALPHA) Describe a BeyondCorp client connector service. + get-iam-policy + (ALPHA) Get the IAM policy for a BeyondCorp client connector service. + list (ALPHA) List BeyondCorp client connector service resources. + set-iam-policy + (ALPHA) Set the IAM policy for a BeyondCorp client connector service. + update (ALPHA) Update a BeyondCorp client connector service. diff --git a/gcloud/alpha/beyondcorp/client-connector/services/set-iam-policy b/gcloud/alpha/beyondcorp/client-connector/services/set-iam-policy new file mode 100644 index 000000000..464d0fd47 --- /dev/null +++ b/gcloud/alpha/beyondcorp/client-connector/services/set-iam-policy @@ -0,0 +1,79 @@ +NAME + gcloud alpha beyondcorp client-connector services set-iam-policy - set the + IAM policy for a BeyondCorp client connector service + +SYNOPSIS + gcloud alpha beyondcorp client-connector services set-iam-policy + (CLIENT_CONNECTOR_SERVICE : --location=LOCATION) POLICY_FILE + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Sets the IAM policy for the given BeyondCorp client connector + service. + +EXAMPLES + The following command will read an IAM policy defined in a JSON file + 'policy.json' and set it for the client connector service with ID + my-service-resource: + + $ gcloud alpha beyondcorp client-connector services set-iam-policy \ + my-service-resource policy.json + +POSITIONAL ARGUMENTS + Client connector service resource - The BeyondCorp client connector + service for which to set the IAM policy. The arguments in this group can + be used to specify the attributes of this resource. (NOTE) Some attributes + are not given arguments in this group but can be set in other ways. To set + the project attribute: + ◆ provide the argument client_connector_service on the command line + with a fully specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + CLIENT_CONNECTOR_SERVICE + ID of the client_connector_service or fully qualified identifier for + the client_connector_service. To set the client_connector_service + attribute: + ▸ provide the argument client_connector_service on the command + line. + + This positional must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + The location of the BeyondCorp Enterprise client connector. + + To set the location attribute: + ▸ provide the argument client_connector_service on the command line + with a fully specified name; + ▸ provide the argument --location on the command line. + + POLICY_FILE + Path to a local JSON or YAML formatted file containing a valid policy. + + The output of the get-iam-policy command is a valid file, as is any + JSON or YAML file conforming to the structure of a Policy + (https://cloud.google.com/iam/reference/rest/v1/Policy). + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the beyondcorp/v1alpha API. The full documentation for + this API can be found at: https://cloud.google.com/ + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta beyondcorp client-connector services set-iam-policy + diff --git a/gcloud/alpha/beyondcorp/client-connector/services/update b/gcloud/alpha/beyondcorp/client-connector/services/update index 1cf276f35..75f21a401 100644 --- a/gcloud/alpha/beyondcorp/client-connector/services/update +++ b/gcloud/alpha/beyondcorp/client-connector/services/update @@ -4,19 +4,36 @@ NAME SYNOPSIS gcloud alpha beyondcorp client-connector services update - (CLIENT_CONNECTOR_SERVICE : --location=LOCATION) [--async] - [--display-name=DISPLAY_NAME] [GCLOUD_WIDE_FLAG ...] + (CLIENT_CONNECTOR_SERVICE : --location=LOCATION) + (--config-from-file=CONFIG_FROM_FILE + | --display-name=DISPLAY_NAME --ingress-config=INGRESS_CONFIG) + [--async] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Update a BeyondCorp client connector service. + (ALPHA) Update a BeyondCorp client connector service. Note - Mutable fields + include - \ display_name, ingress.config.destination_routes. EXAMPLES + Note - Mutable fields include: display_name, + ingress.config.destination_routes. + The following command updates a client connector service with ID - my-service-resource in location us-central1: + my-service-resource with ingress config: $ gcloud alpha beyondcorp client-connector services update \ my-service-resource --project=consumer-project-id \ - --location=us-central1 --display-name="my-new-resource" + --location=us-central1 --display-name="my-new-resource" \ + --ingress-config='{"destinationRoutes":[{"address":"196.0.0.1", + "netmask":"255.255.255.0"},{"address":"197.0.0.2","netmask":"255.25\ + 5.255.0"}]}' + + The following command updates a client connector service with ID + my-service-resource with configuration from file: + + $ gcloud alpha beyondcorp client-connector services update \ + my-service-resource --project=consumer-project-id \ + --location=us-central1 \ + --config-from-file=/path/to/file/config.json POSITIONAL ARGUMENTS Client connector service resource - The BeyondCorp client connector @@ -49,18 +66,43 @@ POSITIONAL ARGUMENTS with a fully specified name; ▸ provide the argument --location on the command line. -FLAGS +REQUIRED FLAGS + Updated client connector service configuration. + + Exactly one of these must be specified: + + --config-from-file=CONFIG_FROM_FILE + Path to json file containing client connector service configuration. + Example - "/file/path/config.json" where config.json contains - { + "ingress":{ + "config":{ + "transportProtocol":"TCP", + "destinationRoutes":[{ + "address":"196.0.0.0", + "netmask":"255.255.255.0" + }] + } + }, + "displayName":"my-service-resource" + } + + --display-name=DISPLAY_NAME + An arbitrary user-provided name for the client connector service. The + display name should follow format - + ▸ Must be 6 to 30 characters in length. + ▸ Can only contain lowercase letters, numbers and hyphens. + ▸ Must start with a letter. + + --ingress-config=INGRESS_CONFIG + Ingress config for client gateways. Example - + {"destinationRoutes":[{"address":"196.0.0.0", + "netmask":"255.255.255.0"},{"address":"197.0.0.0","netmask":"255.255.255.0"}]}. + +OPTIONAL FLAGS --async Return immediately, without waiting for the operation in progress to complete. - --display-name=DISPLAY_NAME - An arbitrary user-provided name for the client connector service. The - display name should follow format - - ◆ Must be 6 to 30 characters in length. - ◆ Can only contain lowercase letters, numbers and hyphens. - ◆ Must start with a letter. - GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/compute/os-config/troubleshoot b/gcloud/alpha/compute/os-config/troubleshoot index e4aeb3826..f9c61b8f6 100644 --- a/gcloud/alpha/compute/os-config/troubleshoot +++ b/gcloud/alpha/compute/os-config/troubleshoot @@ -13,23 +13,20 @@ DESCRIPTION The troubleshoot command investigates the following settings or configurations for your VM Manager setup: - + Checks if the OS Config API is enabled in the project. - - + Checks if the required metadata is set up correctly in the VM instance. - - + Checks if the latest version of the OS Config agent is running on the VM - instance. - - + Checks if a service account is attached to the VM instance. - - + Checks if the VM Manager service agent is enabled. - - + Checks if the VM instance has a public IP or Private Google Access. + ▪ Checks if the OS Config API is enabled in the project. + ▪ Checks if the required metadata is set up correctly in the VM + instance. + ▪ Checks if the latest version of the OS Config agent is running on the + VM instance. + ▪ Checks if a service account is attached to the VM instance. + ▪ Checks if the VM Manager service agent is enabled. + ▪ Checks if the VM instance has a public IP or Private Google Access. EXAMPLES To troubleshoot an instance named my-instance in zone us-west1-a, run - $ gcloud alpha compute os-config troubleshoot my-instance \ --zone=us-west1-a + $ gcloud alpha compute os-config troubleshoot my-instance \ + --zone=us-west1-a POSITIONAL ARGUMENTS INSTANCE_NAME @@ -74,5 +71,7 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. + access allowlist. This variant is also available: + + $ gcloud compute os-config troubleshoot diff --git a/gcloud/alpha/container/clusters/create b/gcloud/alpha/container/clusters/create index 942e2eafd..0c377c985 100644 --- a/gcloud/alpha/container/clusters/create +++ b/gcloud/alpha/container/clusters/create @@ -4,8 +4,11 @@ NAME SYNOPSIS gcloud alpha container clusters create NAME - [--accelerator=[type=TYPE,[count=COUNT],...]] [--addons=[ADDON,...]] - [--allow-route-overlap] [--async] + [--accelerator=[type=TYPE,[count=COUNT, + gpu-partition-size=GPU_PARTITION_SIZE, + gpu-sharing-strategy=GPU_SHARING_STRATEGY, + max-shared-clients-per-gpu=MAX_SHARED_CLIENTS_PER_GPU],...]] + [--addons=[ADDON,...]] [--allow-route-overlap] [--async] [--autoprovisioning-network-tags=TAGS,[TAGS,...]] [--autoscaling-profile=AUTOSCALING_PROFILE] [--boot-disk-kms-key=BOOT_DISK_KMS_KEY] @@ -124,7 +127,7 @@ POSITIONAL ARGUMENTS 40 characters. FLAGS - --accelerator=[type=TYPE,[count=COUNT],...] + --accelerator=[type=TYPE,[count=COUNT,gpu-partition-size=GPU_PARTITION_SIZE,gpu-sharing-strategy=GPU_SHARING_STRATEGY,max-shared-clients-per-gpu=MAX_SHARED_CLIENTS_PER_GPU],...] Attaches accelerators (e.g. GPUs) to all nodes. type @@ -137,6 +140,20 @@ FLAGS (Optional) The number of accelerators to attach to the instances. The default value is 1. + gpu-partition-size + (Optional) The GPU partition size used when running multi-instance + GPUs. For information about multi-instance GPUs, refer to: + https://cloud.google.com/kubernetes-engine/docs/how-to/gpus-multi + + gpu-sharing-strategy + (Optional) The GPU sharing strategy (e.g. time-sharing) to use. For + information about GPU sharing, refer to: + https://cloud.google.com/kubernetes-engine/docs/concepts/timesharing-gpus + + max-shared-clients-per-gpu + (Optional) The max number of containers allowed to share each GPU + on the node. This field is used together with gpu-sharing-strategy. + --addons=[ADDON,...] Addons (https://cloud.google.com/kubernetes-engine/docs/reference/rest/v1/projects.locations.clusters#Cluster.AddonsConfig) diff --git a/gcloud/alpha/container/node-pools/create b/gcloud/alpha/container/node-pools/create index 4db0a085c..778ab6dac 100644 --- a/gcloud/alpha/container/node-pools/create +++ b/gcloud/alpha/container/node-pools/create @@ -4,7 +4,10 @@ NAME SYNOPSIS gcloud alpha container node-pools create NAME - [--accelerator=[type=TYPE,[count=COUNT],...]] + [--accelerator=[type=TYPE,[count=COUNT, + gpu-partition-size=GPU_PARTITION_SIZE, + gpu-sharing-strategy=GPU_SHARING_STRATEGY, + max-shared-clients-per-gpu=MAX_SHARED_CLIENTS_PER_GPU],...]] [--boot-disk-kms-key=BOOT_DISK_KMS_KEY] [--cluster=CLUSTER] [--disable-pod-cidr-overprovision] [--disk-size=DISK_SIZE] [--disk-type=DISK_TYPE] [--enable-autoprovisioning] @@ -72,7 +75,7 @@ POSITIONAL ARGUMENTS The name of the node pool to create. FLAGS - --accelerator=[type=TYPE,[count=COUNT],...] + --accelerator=[type=TYPE,[count=COUNT,gpu-partition-size=GPU_PARTITION_SIZE,gpu-sharing-strategy=GPU_SHARING_STRATEGY,max-shared-clients-per-gpu=MAX_SHARED_CLIENTS_PER_GPU],...] Attaches accelerators (e.g. GPUs) to all nodes. type @@ -85,6 +88,20 @@ FLAGS (Optional) The number of accelerators to attach to the instances. The default value is 1. + gpu-partition-size + (Optional) The GPU partition size used when running multi-instance + GPUs. For information about multi-instance GPUs, refer to: + https://cloud.google.com/kubernetes-engine/docs/how-to/gpus-multi + + gpu-sharing-strategy + (Optional) The GPU sharing strategy (e.g. time-sharing) to use. For + information about GPU sharing, refer to: + https://cloud.google.com/kubernetes-engine/docs/concepts/timesharing-gpus + + max-shared-clients-per-gpu + (Optional) The max number of containers allowed to share each GPU + on the node. This field is used together with gpu-sharing-strategy. + --boot-disk-kms-key=BOOT_DISK_KMS_KEY The Customer Managed Encryption Key used to encrypt the boot disk attached to each node in the node pool. This should be of the form diff --git a/gcloud/alpha/deploy/releases/create b/gcloud/alpha/deploy/releases/create index 2a9a0f09b..31e164cf9 100644 --- a/gcloud/alpha/deploy/releases/create +++ b/gcloud/alpha/deploy/releases/create @@ -34,6 +34,13 @@ EXAMPLES --delivery-pipeline=my-pipeline --region=us-central1 \ --to-target=prod + The following command creates a release without a skaffold.yaml as input, + and generates one for you: + + $ gcloud alpha deploy releases create my-release \ + --delivery-pipeline=my-pipeline --region=us-central1 \ + --from-k8s-manifest=path/to/kubernetes/k8.yaml + The current UTC date and time on the machine running the gcloud command can also be included in the release name by adding $DATE and $TIME parameters: diff --git a/gcloud/alpha/edge-cloud/container/clusters/create b/gcloud/alpha/edge-cloud/container/clusters/create index cd74f2ba2..29a0a1a57 100644 --- a/gcloud/alpha/edge-cloud/container/clusters/create +++ b/gcloud/alpha/edge-cloud/container/clusters/create @@ -8,8 +8,7 @@ SYNOPSIS [--cluster-ipv4-cidr=CLUSTER_IPV4_CIDR; default="10.0.0.0/17"] [--cluster-ipv6-cidr=CLUSTER_IPV6_CIDR] [--default-max-pods-per-node=DEFAULT_MAX_PODS_PER_NODE] - [--fleet-project=FLEET_PROJECT] [--hub-membership=HUB_MEMBERSHIP] - [--labels=[KEY=VALUE,...]] + [--fleet-project=FLEET_PROJECT] [--labels=[KEY=VALUE,...]] [--maintenance-window-end=MAINTENANCE_WINDOW_END] [--maintenance-window-recurrence=MAINTENANCE_WINDOW_RECURRENCE] [--maintenance-window-start=MAINTENANCE_WINDOW_START] @@ -77,12 +76,6 @@ FLAGS --fleet-project=FLEET_PROJECT Name of the Fleet host project where the cluster is registered. - --hub-membership=HUB_MEMBERSHIP - DEPRECATED - use --fleet-project instead. - - Name of the membership resource to use when registering this cluster - with GKE Hub. - --labels=[KEY=VALUE,...] List of label KEY=VALUE pairs to add. diff --git a/gcloud/alpha/firebase/test/android/run b/gcloud/alpha/firebase/test/android/run index d3eb8a2f5..a24fce4a4 100644 --- a/gcloud/alpha/firebase/test/android/run +++ b/gcloud/alpha/firebase/test/android/run @@ -363,21 +363,25 @@ FLAGS is no guarantee that test cases will be distributed with perfect uniformity. - The number of shards should be less than the total number of test - cases. When one or more physical devices are selected, the number of - shards specified must be >= 1 and <= 50. When no physical devices are - selected, the number of shards specified must be >= 1 and <= 500. + The number of shards specified must always be a positive number that + is no greater than the total number of test cases. When you select + one or more physical devices, the number of shards specified must be + <= 50. When you select one or more ARM virtual devices, the number of + shards specified must be <= 100. When you select only x86 virtual + devices, the number of shards specified must be <= 500. --test-targets-for-shard=TEST_TARGETS_FOR_SHARD Specifies a group of packages, classes, and/or test cases to run in - each shard (a group of test cases). The shards are run in parallel on - separate devices. You can repeat this flag up to 50 times to specify - multiple shards when one or more physical devices are selected, or up - to 500 times when no physical devices are selected. + each shard (a group of test cases). Each time this flag is repeated, + it creates a new shard. The shards are run in parallel on separate + devices. You can repeat this flag up to 50 times when you select one + or more physical devices, up to 100 times when you select one or more + ARM virtual devices, and up to 500 times when you select only x86 + virtual devices. Note: If you include the flags --environment-variable or - --test-targets when running --test-targets-for-shard, the flags are - applied to all the shards you create. + --test-targets when running --test-targets-for-shard, the former + flags are applied to all of the shards you create. Examples: @@ -391,7 +395,7 @@ FLAGS "class com.foo.ClassForShard2#testMethod1,com.foo.ClassForShard2#testMethod2" To specify both package and class in the same shard, separate package - and class with semi-colons: + and class with semicolons: --test-targets-for-shard "class com.foo.ClassForShard3;package com.package.for.shard3" diff --git a/gcloud/alpha/functions/deploy b/gcloud/alpha/functions/deploy index 04abef749..cf7211ace 100644 --- a/gcloud/alpha/functions/deploy +++ b/gcloud/alpha/functions/deploy @@ -3,9 +3,9 @@ NAME SYNOPSIS gcloud alpha functions deploy (NAME : --region=REGION) - [--allow-unauthenticated] [--docker-registry=DOCKER_REGISTRY] - [--egress-settings=EGRESS_SETTINGS] [--entry-point=ENTRY_POINT] - [--gen2] [--ignore-file=IGNORE_FILE] + [--allow-unauthenticated] [--buildpack-stack=BUILDPACK_STACK] + [--docker-registry=DOCKER_REGISTRY] [--egress-settings=EGRESS_SETTINGS] + [--entry-point=ENTRY_POINT] [--gen2] [--ignore-file=IGNORE_FILE] [--ingress-settings=INGRESS_SETTINGS] [--memory=MEMORY] [--retry] [--run-service-account=RUN_SERVICE_ACCOUNT] [--runtime=RUNTIME] [--security-level=SECURITY_LEVEL; default="secure-always"] @@ -95,6 +95,9 @@ FLAGS If set, makes this a public function. This will allow all callers, without checking authentication. + --buildpack-stack=BUILDPACK_STACK + Specifies one of the Google provided buildpack stacks. + --docker-registry=DOCKER_REGISTRY Docker Registry to use for storing the function's Docker images. The option container-registry is used by default. diff --git a/gcloud/alpha/iam/workload-identity-pools/create-cred-config b/gcloud/alpha/iam/workload-identity-pools/create-cred-config index f88a02785..1c67061f4 100644 --- a/gcloud/alpha/iam/workload-identity-pools/create-cred-config +++ b/gcloud/alpha/iam/workload-identity-pools/create-cred-config @@ -11,10 +11,11 @@ SYNOPSIS [--credential-source-field-name=CREDENTIAL_SOURCE_FIELD_NAME] [--credential-source-headers=[key=value,...]] [--credential-source-type=CREDENTIAL_SOURCE_TYPE] [--enable-imdsv2] - [--service-account=SERVICE_ACCOUNT] [--subject-token-type=SUBJECT_TOKEN_TYPE] [--executable-output-file=EXECUTABLE_OUTPUT_FILE --executable-timeout-millis=EXECUTABLE_TIMEOUT_MILLIS] + [--service-account=SERVICE_ACCOUNT + : --service-account-token-lifetime-seconds=SERVICE_ACCOUNT_TOKEN_LIFETIME_SECONDS] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -117,9 +118,6 @@ OPTIONAL FLAGS Adds the AWS IMDSv2 session token Url to the credential source to enforce the AWS IMDSv2 flow. - --service-account=SERVICE_ACCOUNT - The email of the service account to impersonate. - --subject-token-type=SUBJECT_TOKEN_TYPE The type of token being used for authorization. @@ -132,6 +130,22 @@ OPTIONAL FLAGS The timeout duration in milliseconds for waiting for the executable to finish. + Service account impersonation options. + + --service-account=SERVICE_ACCOUNT + The email of the service account to impersonate. + + This flag must be specified if any of the other arguments in this + group are specified. + + --service-account-token-lifetime-seconds=SERVICE_ACCOUNT_TOKEN_LIFETIME_SECONDS + The desired lifetime duration of the service account access token in + seconds. This defaults to one hour when not provided. If a lifetime + greater than one hour is required, the service account must be added + as an allowed value in an Organization Policy that enforces the + constraints/iam.allowServiceAccountCredentialLifetimeExtension + constraint. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/iap/tcp/dest-groups/add-iam-policy-binding b/gcloud/alpha/iap/tcp/dest-groups/add-iam-policy-binding index 3bf5b74e7..b3a5a79b1 100644 --- a/gcloud/alpha/iap/tcp/dest-groups/add-iam-policy-binding +++ b/gcloud/alpha/iap/tcp/dest-groups/add-iam-policy-binding @@ -124,7 +124,9 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. This variant is also available: + access allowlist. These variants are also available: + + $ gcloud iap tcp dest-groups add-iam-policy-binding $ gcloud beta iap tcp dest-groups add-iam-policy-binding diff --git a/gcloud/alpha/iap/tcp/dest-groups/create b/gcloud/alpha/iap/tcp/dest-groups/create index 9c6cdacb9..ed1464fc8 100644 --- a/gcloud/alpha/iap/tcp/dest-groups/create +++ b/gcloud/alpha/iap/tcp/dest-groups/create @@ -64,7 +64,9 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. This variant is also available: + access allowlist. These variants are also available: + + $ gcloud iap tcp dest-groups create $ gcloud beta iap tcp dest-groups create diff --git a/gcloud/alpha/iap/tcp/dest-groups/delete b/gcloud/alpha/iap/tcp/dest-groups/delete index e4e7c6cc0..938fd9afc 100644 --- a/gcloud/alpha/iap/tcp/dest-groups/delete +++ b/gcloud/alpha/iap/tcp/dest-groups/delete @@ -42,7 +42,9 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. This variant is also available: + access allowlist. These variants are also available: + + $ gcloud iap tcp dest-groups delete $ gcloud beta iap tcp dest-groups delete diff --git a/gcloud/alpha/iap/tcp/dest-groups/describe b/gcloud/alpha/iap/tcp/dest-groups/describe index da88281c7..d4a8ec48c 100644 --- a/gcloud/alpha/iap/tcp/dest-groups/describe +++ b/gcloud/alpha/iap/tcp/dest-groups/describe @@ -42,7 +42,9 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. This variant is also available: + access allowlist. These variants are also available: + + $ gcloud iap tcp dest-groups describe $ gcloud beta iap tcp dest-groups describe diff --git a/gcloud/alpha/iap/tcp/dest-groups/get-iam-policy b/gcloud/alpha/iap/tcp/dest-groups/get-iam-policy index 141f4a3da..dda15b2ae 100644 --- a/gcloud/alpha/iap/tcp/dest-groups/get-iam-policy +++ b/gcloud/alpha/iap/tcp/dest-groups/get-iam-policy @@ -75,7 +75,9 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. This variant is also available: + access allowlist. These variants are also available: + + $ gcloud iap tcp dest-groups get-iam-policy $ gcloud beta iap tcp dest-groups get-iam-policy diff --git a/gcloud/alpha/iap/tcp/dest-groups/help b/gcloud/alpha/iap/tcp/dest-groups/help index 1b987d5b1..dbe17b7f6 100644 --- a/gcloud/alpha/iap/tcp/dest-groups/help +++ b/gcloud/alpha/iap/tcp/dest-groups/help @@ -49,7 +49,9 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. This variant is also available: + access allowlist. These variants are also available: + + $ gcloud iap tcp dest-groups $ gcloud beta iap tcp dest-groups diff --git a/gcloud/alpha/iap/tcp/dest-groups/list b/gcloud/alpha/iap/tcp/dest-groups/list index 718f66735..27fd156a0 100644 --- a/gcloud/alpha/iap/tcp/dest-groups/list +++ b/gcloud/alpha/iap/tcp/dest-groups/list @@ -86,7 +86,9 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. This variant is also available: + access allowlist. These variants are also available: + + $ gcloud iap tcp dest-groups list $ gcloud beta iap tcp dest-groups list diff --git a/gcloud/alpha/iap/tcp/dest-groups/remove-iam-policy-binding b/gcloud/alpha/iap/tcp/dest-groups/remove-iam-policy-binding index b5cd1ae1c..740eebf5b 100644 --- a/gcloud/alpha/iap/tcp/dest-groups/remove-iam-policy-binding +++ b/gcloud/alpha/iap/tcp/dest-groups/remove-iam-policy-binding @@ -140,7 +140,9 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. This variant is also available: + access allowlist. These variants are also available: + + $ gcloud iap tcp dest-groups remove-iam-policy-binding $ gcloud beta iap tcp dest-groups remove-iam-policy-binding diff --git a/gcloud/alpha/iap/tcp/dest-groups/set-iam-policy b/gcloud/alpha/iap/tcp/dest-groups/set-iam-policy index bef7e3fb2..b86f3346d 100644 --- a/gcloud/alpha/iap/tcp/dest-groups/set-iam-policy +++ b/gcloud/alpha/iap/tcp/dest-groups/set-iam-policy @@ -54,7 +54,9 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. This variant is also available: + access allowlist. These variants are also available: + + $ gcloud iap tcp dest-groups set-iam-policy $ gcloud beta iap tcp dest-groups set-iam-policy diff --git a/gcloud/alpha/iap/tcp/dest-groups/update b/gcloud/alpha/iap/tcp/dest-groups/update index 931b23c70..d889e7241 100644 --- a/gcloud/alpha/iap/tcp/dest-groups/update +++ b/gcloud/alpha/iap/tcp/dest-groups/update @@ -70,7 +70,9 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. This variant is also available: + access allowlist. These variants are also available: + + $ gcloud iap tcp dest-groups update $ gcloud beta iap tcp dest-groups update diff --git a/gcloud/alpha/iap/tcp/help b/gcloud/alpha/iap/tcp/help index 1926bb664..8bf99a311 100644 --- a/gcloud/alpha/iap/tcp/help +++ b/gcloud/alpha/iap/tcp/help @@ -22,7 +22,9 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. This variant is also available: + access allowlist. These variants are also available: + + $ gcloud iap tcp $ gcloud beta iap tcp diff --git a/gcloud/alpha/immersive-stream/xr/instances/create b/gcloud/alpha/immersive-stream/xr/instances/create index a9d532d04..ee927375f 100644 --- a/gcloud/alpha/immersive-stream/xr/instances/create +++ b/gcloud/alpha/immersive-stream/xr/instances/create @@ -4,7 +4,7 @@ NAME SYNOPSIS gcloud alpha immersive-stream xr instances create INSTANCE - --add-realm=[capacity=CAPACITY],[realm=REALM] --version=VERSION + --add-region=[capacity=CAPACITY],[region=REGION] --version=VERSION (--content=CONTENT : --location=LOCATION) [--async] [GCLOUD_WIDE_FLAG ...] @@ -14,33 +14,26 @@ DESCRIPTION EXAMPLES To create a service instance called 'my-instance' serving content 'my-content' with version 'my-version' that has availablilty for 2 - concurent sessions in REALM_NA_WEST and 3 concurrent sessions in - REALM_NA_EAST, run: + concurent sessions in us-west1 region and 3 concurrent sessions in us-east4 + region, run: $ gcloud alpha immersive-stream xr instances create my-instance \ --content=my-content --version=my-version \ - --add-realm=realm=REALM_NA_WEST,capacity=2 \ - --add-realm=realm=REALM_NA_EAST,capacity=3 + --add-region=region=us-west1,capacity=2 \ + --add-region=region=us-east4,capacity=3 POSITIONAL ARGUMENTS INSTANCE Name of the instance to be created REQUIRED FLAGS - --add-realm=[capacity=CAPACITY],[realm=REALM] - Flag used to specify realm and capacity required for the service + --add-region=[capacity=CAPACITY],[region=REGION] + Flag used to specify region and capacity required for the service instance's availability. - 'realm' is the realm in which the instance is deployed, and must be one of the following: - REALM_UNSPECIFIED - REALM_NA_CENTRAL - REALM_NA_EAST - REALM_NA_WEST - REALM_ASIA_NORTHEAST - REALM_ASIA_SOUTHEAST - REALM_EU_WEST + 'region' is the region in which the instance is deployed. - 'capacity' is the maxium number of concurrent streaming sessions that the instance can support in the given realm. + 'capacity' is the maxium number of concurrent streaming sessions that the instance can support in the given region. This is a repeatable flag. diff --git a/gcloud/alpha/immersive-stream/xr/instances/update b/gcloud/alpha/immersive-stream/xr/instances/update index 6f330f683..e1bd31907 100644 --- a/gcloud/alpha/immersive-stream/xr/instances/update +++ b/gcloud/alpha/immersive-stream/xr/instances/update @@ -5,23 +5,23 @@ NAME SYNOPSIS gcloud alpha immersive-stream xr instances update (INSTANCE : --location=LOCATION) - (--update-realm=[capacity=CAPACITY],[realm=REALM] | --version=VERSION) - [--async] [GCLOUD_WIDE_FLAG ...] + (--update-region=[capacity=CAPACITY],[region=REGION] + | --version=VERSION) [--async] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Update an Immersive Stream for XR service instance. This command - can either be used to update the capacity for an existing realm of the + can either be used to update the capacity for an existing region of the service instance or to update the content build version served by the - instance. If updating the capacity, only one realm may be updated for each + instance. If updating the capacity, only one region may be updated for each command execution, and the new capacity may not be 0 or exceed the quota limit. EXAMPLES - To update the service instance 'my-instance' to have capacity 2 for realm - REALM_NA_WEST, run: + To update the service instance 'my-instance' to have capacity 2 for region + us-west1, run: $ gcloud alpha immersive-stream xr instances update my-instance \ - --update-realm=realm=REALM_NA_WEST,capacity=2 + --update-region=region=us-west1,capacity=2 To update the service instance 'my-instance' to serve content build version 'my-version', run: @@ -62,17 +62,14 @@ REQUIRED FLAGS Exactly one of these must be specified: - --update-realm=[capacity=CAPACITY],[realm=REALM] - Flag used to specify realm and capacity required for the service + --update-region=[capacity=CAPACITY],[region=REGION] + Flag used to specify region and capacity required for the service instance's availability. - 'realm' is the realm in which the instance is deployed, and must be - one of the following: REALM_UNSPECIFIED REALM_NA_CENTRAL - REALM_NA_EAST REALM_NA_WEST REALM_ASIA_NORTHEAST REALM_ASIA_SOUTHEAST - REALM_EU_WEST + 'region' is the region in which the instance is deployed. 'capacity' is the maxium number of concurrent streaming sessions that - the instance can support in the given realm. + the instance can support in the given region. --version=VERSION Build version tag of the content served by this instance diff --git a/gcloud/alpha/logging/buckets/create b/gcloud/alpha/logging/buckets/create index d6ba9345d..f1a67e211 100644 --- a/gcloud/alpha/logging/buckets/create +++ b/gcloud/alpha/logging/buckets/create @@ -28,6 +28,11 @@ EXAMPLES $ gcloud alpha logging buckets create my-bucket \ --location=us-central1 + To create a bucket with custom index of 'jsonPayload.foo', run: + + $ gcloud alpha logging buckets create my-bucket \ + --index=fieldPath=jsonPayload.foo,type=INDEX_TYPE_STRING + POSITIONAL ARGUMENTS BUCKET_ID ID of the bucket to create. @@ -50,18 +55,18 @@ OPTIONAL FLAGS --index=[KEY=VALUE, ...,...] Specify an index to be added to the log bucket. This flag can be - repeated. The fieldPath and type attributes are required. For example + repeated. The fieldPath and type attributes are required. For example: --index=fieldPath=jsonPayload.foo,type=INDEX_TYPE_STRING. The following keys are accepted: fieldPath - The LogEntry field path to index.For example: + The LogEntry field path to index. For example: jsonPayload.request.status. Paths are limited to 800 characters and can include only letters, digits, underscores, hyphens, and periods. type - The type of data in this index.For example: INDEX_TYPE_STRING + The type of data in this index. For example: INDEX_TYPE_STRING Supported types are INDEX_TYPE_STRING and INDEX_TYPE_INTEGER. --restricted-fields=[RESTRICTED_FIELD,...] diff --git a/gcloud/alpha/logging/buckets/update b/gcloud/alpha/logging/buckets/update index 976480ea4..16e154db9 100644 --- a/gcloud/alpha/logging/buckets/update +++ b/gcloud/alpha/logging/buckets/update @@ -19,6 +19,26 @@ EXAMPLES $ gcloud alpha logging buckets update my-bucket --location=global \ --description=my-new-description + To update a bucket in your project and remove all indexes, run: + + $ gcloud alpha logging buckets update my-bucket --location=global \ + --clear-indexes + + To update a bucket in your project and remove an index, run: + + $ gcloud alpha logging buckets update my-bucket --location=global \ + --remove-indexes=jsonPayload.foo2 + + To update a bucket in your project and add an index, run: + + $ gcloud alpha logging buckets update my-bucket --location=global \ + --add-index=fieldPath=jsonPayload.foo2,type=INDEX_TYPE_STRING + + To update a bucket in your project and update an existing index, run: + + $ gcloud alpha logging buckets update my-bucket --location=global \ + --update-index=fieldPath=jsonPayload.foo,type=INDEX_TYPE_INTEGER + POSITIONAL ARGUMENTS BUCKET_ID The id of the bucket to update. @@ -30,19 +50,19 @@ REQUIRED FLAGS OPTIONAL FLAGS --add-index=[KEY=VALUE, ...,...] Add an index to be added to the log bucket. This flag can be repeated. - The fieldPath and type attributes are required. For example + The fieldPath and type attributes are required. For example: --index=fieldPath=jsonPayload.foo,type=INDEX_TYPE_STRING. The following keys are accepted: fieldPath - The LogEntry field path to index.For example: + The LogEntry field path to index. For example: jsonPayload.request.status. Paths are limited to 800 characters and can include only letters, digits, underscores, hyphens, and periods. type - The type of data in this index.For example: INDEX_TYPE_STRING - Supported types are Strings and Integers. + The type of data in this index. For example: INDEX_TYPE_STRING + Supported types are strings and integers. --clear-indexes Remove all logging indexes from the bucket. @@ -65,7 +85,7 @@ OPTIONAL FLAGS it is empty). --remove-indexes=[FIELD PATH,...] - Specify the field path of the Logging index(es) to delete. + Specify the field path of the logging index(es) to delete. --restricted-fields=[RESTRICTED_FIELD,...] A new set of restricted fields for the bucket. @@ -75,9 +95,9 @@ OPTIONAL FLAGS --update-index=[KEY=VALUE, ...,...] Update an index to be added to the log bucket. This will update the - type of the index, and also update its create time to the new update - time.This flag can be repeated. The fieldPath and type attributes are - required. For example + type of the index, and also update its createTime to the new update + time. This flag can be repeated. The fieldPath and type attributes are + required. For example: --index=fieldPath=jsonPayload.foo,type=INDEX_TYPE_STRING. The following keys are accepted: @@ -89,7 +109,7 @@ OPTIONAL FLAGS type The type of data in this index. For example: INDEX_TYPE_STRING - Supported types are Strings and Integers. + Supported types are strings and integers. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/projects/help b/gcloud/alpha/projects/help index 6b107623a..1396d1bd3 100644 --- a/gcloud/alpha/projects/help +++ b/gcloud/alpha/projects/help @@ -57,6 +57,9 @@ COMMANDS remove-iam-policy-binding (ALPHA) Remove IAM policy binding for a project. + search + (ALPHA) Search for projects matching the given query. + set-iam-policy (ALPHA) Set IAM policy for a project. diff --git a/gcloud/alpha/projects/search b/gcloud/alpha/projects/search new file mode 100644 index 000000000..0032ec611 --- /dev/null +++ b/gcloud/alpha/projects/search @@ -0,0 +1,63 @@ +NAME + gcloud alpha projects search - search for projects matching the given query + +SYNOPSIS + gcloud alpha projects search [--query=QUERY] [--limit=LIMIT] + [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) You can specify the maximum number of projects to list using the + --limit flag. + +EXAMPLES + The following command lists the last five created projects with names + starting with z, sorted by the project number (now called name) with 2 + projects listed on each page + + $ gcloud alpha projects search --query="name:z*" --sort-by=name \ + --limit=5 --page-size=2 + + To list projects that have been marked for deletion: + + $ gcloud alpha projects search --query='state:DELETE_REQUESTED' + +FLAGS + --query=QUERY + A boolean expression for the search criteria used to select the + projects to return. If no search criteria is specified then all + accessible projects will be returned. Query expressions can be used to + restrict results based upon displayName, state and parent, where the + operators = (:) NOT, AND and OR can be used along with the suffix + wildcard symbol *. The displayName field in a query expression should + use escaped quotes for values that include whitespace to prevent + unexpected behavior. + +LIST COMMAND FLAGS + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + This flag specifies the maximum number of projects per page. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/recommender/insights/describe b/gcloud/alpha/recommender/insights/describe index 5e64f0f0a..014f624b7 100644 --- a/gcloud/alpha/recommender/insights/describe +++ b/gcloud/alpha/recommender/insights/describe @@ -36,14 +36,14 @@ REQUIRED FLAGS Exactly one of these must be specified: --billing-account=BILLING_ACCOUNT - The Google Cloud Platform Billing Account ID to use for this + The Google Cloud Platform billing account ID to use for this invocation. --folder=FOLDER_ID - Folder ID to use for this invocation. + The Google Cloud Platform folder ID to use for this invocation. --organization=ORGANIZATION_ID - The Google Cloud Platform Organization ID to use for this invocation. + The Google Cloud Platform organization ID to use for this invocation. --project=PROJECT_ID The Google Cloud Platform project ID. Overrides the default diff --git a/gcloud/alpha/recommender/insights/list b/gcloud/alpha/recommender/insights/list index 66302840e..8a7baf2be 100644 --- a/gcloud/alpha/recommender/insights/list +++ b/gcloud/alpha/recommender/insights/list @@ -37,14 +37,14 @@ REQUIRED FLAGS Exactly one of these must be specified: --billing-account=BILLING_ACCOUNT - The Google Cloud Platform Billing Account ID to use for this + The Google Cloud Platform billing account ID to use for this invocation. --folder=FOLDER_ID - Folder ID to use for this invocation. + The Google Cloud Platform folder ID to use for this invocation. --organization=ORGANIZATION_ID - The Google Cloud Platform Organization ID to use for this invocation. + The Google Cloud Platform organization ID to use for this invocation. --project=PROJECT_ID The Google Cloud Platform project ID. Overrides the default diff --git a/gcloud/alpha/recommender/insights/mark-accepted b/gcloud/alpha/recommender/insights/mark-accepted index 634d846d0..9002e32ea 100644 --- a/gcloud/alpha/recommender/insights/mark-accepted +++ b/gcloud/alpha/recommender/insights/mark-accepted @@ -42,14 +42,14 @@ REQUIRED FLAGS Exactly one of these must be specified: --billing-account=BILLING_ACCOUNT - The Google Cloud Platform Billing Account ID to use for this + The Google Cloud Platform billing account ID to use for this invocation. --folder=FOLDER_ID - Folder ID to use for this invocation. + The Google Cloud Platform folder ID to use for this invocation. --organization=ORGANIZATION_ID - The Google Cloud Platform Organization ID to use for this invocation. + The Google Cloud Platform organization ID to use for this invocation. --project=PROJECT_ID The Google Cloud Platform project ID. Overrides the default diff --git a/gcloud/alpha/recommender/insights/mark-active b/gcloud/alpha/recommender/insights/mark-active index 4f9a4769f..895e58558 100644 --- a/gcloud/alpha/recommender/insights/mark-active +++ b/gcloud/alpha/recommender/insights/mark-active @@ -42,14 +42,14 @@ REQUIRED FLAGS Exactly one of these must be specified: --billing-account=BILLING_ACCOUNT - The Google Cloud Platform Billing Account ID to use for this + The Google Cloud Platform billing account ID to use for this invocation. --folder=FOLDER_ID - Folder ID to use for this invocation. + The Google Cloud Platform folder ID to use for this invocation. --organization=ORGANIZATION_ID - The Google Cloud Platform Organization ID to use for this invocation. + The Google Cloud Platform organization ID to use for this invocation. --project=PROJECT_ID The Google Cloud Platform project ID. Overrides the default diff --git a/gcloud/alpha/recommender/insights/mark-dismissed b/gcloud/alpha/recommender/insights/mark-dismissed index 5c910e3fe..2f70bdc33 100644 --- a/gcloud/alpha/recommender/insights/mark-dismissed +++ b/gcloud/alpha/recommender/insights/mark-dismissed @@ -43,14 +43,14 @@ REQUIRED FLAGS Exactly one of these must be specified: --billing-account=BILLING_ACCOUNT - The Google Cloud Platform Billing Account ID to use for this + The Google Cloud Platform billing account ID to use for this invocation. --folder=FOLDER_ID - Folder ID to use for this invocation. + The Google Cloud Platform folder ID to use for this invocation. --organization=ORGANIZATION_ID - The Google Cloud Platform Organization ID to use for this invocation. + The Google Cloud Platform organization ID to use for this invocation. --project=PROJECT_ID The Google Cloud Platform project ID. Overrides the default diff --git a/gcloud/alpha/recommender/recommendations/describe b/gcloud/alpha/recommender/recommendations/describe index 8f662e867..71e10a047 100644 --- a/gcloud/alpha/recommender/recommendations/describe +++ b/gcloud/alpha/recommender/recommendations/describe @@ -38,14 +38,14 @@ REQUIRED FLAGS Exactly one of these must be specified: --billing-account=BILLING_ACCOUNT - The Google Cloud Platform Billing Account ID to use for this + The Google Cloud Platform billing account ID to use for this invocation. --folder=FOLDER_ID - Folder ID to use for this invocation. + The Google Cloud Platform folder ID to use for this invocation. --organization=ORGANIZATION_ID - The Google Cloud Platform Organization ID to use for this invocation. + The Google Cloud Platform organization ID to use for this invocation. --project=PROJECT_ID The Google Cloud Platform project ID. Overrides the default diff --git a/gcloud/alpha/recommender/recommendations/list b/gcloud/alpha/recommender/recommendations/list index b23038001..905bc95b9 100644 --- a/gcloud/alpha/recommender/recommendations/list +++ b/gcloud/alpha/recommender/recommendations/list @@ -37,14 +37,14 @@ REQUIRED FLAGS Exactly one of these must be specified: --billing-account=BILLING_ACCOUNT - The Google Cloud Platform Billing Account ID to use for this + The Google Cloud Platform billing account ID to use for this invocation. --folder=FOLDER_ID - Folder ID to use for this invocation. + The Google Cloud Platform folder ID to use for this invocation. --organization=ORGANIZATION_ID - The Google Cloud Platform Organization ID to use for this invocation. + The Google Cloud Platform organization ID to use for this invocation. --project=PROJECT_ID The Google Cloud Platform project ID. Overrides the default diff --git a/gcloud/alpha/recommender/recommendations/mark-active b/gcloud/alpha/recommender/recommendations/mark-active index d57ff4e47..1be4faf8f 100644 --- a/gcloud/alpha/recommender/recommendations/mark-active +++ b/gcloud/alpha/recommender/recommendations/mark-active @@ -42,14 +42,14 @@ REQUIRED FLAGS Exactly one of these must be specified: --billing-account=BILLING_ACCOUNT - The Google Cloud Platform Billing Account ID to use for this + The Google Cloud Platform billing account ID to use for this invocation. --folder=FOLDER_ID - Folder ID to use for this invocation. + The Google Cloud Platform folder ID to use for this invocation. --organization=ORGANIZATION_ID - The Google Cloud Platform Organization ID to use for this invocation. + The Google Cloud Platform organization ID to use for this invocation. --project=PROJECT_ID The Google Cloud Platform project ID. Overrides the default diff --git a/gcloud/alpha/recommender/recommendations/mark-claimed b/gcloud/alpha/recommender/recommendations/mark-claimed index a13f5368e..164d7d9dc 100644 --- a/gcloud/alpha/recommender/recommendations/mark-claimed +++ b/gcloud/alpha/recommender/recommendations/mark-claimed @@ -45,14 +45,14 @@ REQUIRED FLAGS Exactly one of these must be specified: --billing-account=BILLING_ACCOUNT - The Google Cloud Platform Billing Account ID to use for this + The Google Cloud Platform billing account ID to use for this invocation. --folder=FOLDER_ID - Folder ID to use for this invocation. + The Google Cloud Platform folder ID to use for this invocation. --organization=ORGANIZATION_ID - The Google Cloud Platform Organization ID to use for this invocation. + The Google Cloud Platform organization ID to use for this invocation. --project=PROJECT_ID The Google Cloud Platform project ID. Overrides the default diff --git a/gcloud/alpha/recommender/recommendations/mark-dismissed b/gcloud/alpha/recommender/recommendations/mark-dismissed index ed7ba3b75..c8f323e64 100644 --- a/gcloud/alpha/recommender/recommendations/mark-dismissed +++ b/gcloud/alpha/recommender/recommendations/mark-dismissed @@ -44,14 +44,14 @@ REQUIRED FLAGS Exactly one of these must be specified: --billing-account=BILLING_ACCOUNT - The Google Cloud Platform Billing Account ID to use for this + The Google Cloud Platform billing account ID to use for this invocation. --folder=FOLDER_ID - Folder ID to use for this invocation. + The Google Cloud Platform folder ID to use for this invocation. --organization=ORGANIZATION_ID - The Google Cloud Platform Organization ID to use for this invocation. + The Google Cloud Platform organization ID to use for this invocation. --project=PROJECT_ID The Google Cloud Platform project ID. Overrides the default diff --git a/gcloud/alpha/recommender/recommendations/mark-failed b/gcloud/alpha/recommender/recommendations/mark-failed index 5a29217e4..8636bc9c8 100644 --- a/gcloud/alpha/recommender/recommendations/mark-failed +++ b/gcloud/alpha/recommender/recommendations/mark-failed @@ -42,14 +42,14 @@ REQUIRED FLAGS Exactly one of these must be specified: --billing-account=BILLING_ACCOUNT - The Google Cloud Platform Billing Account ID to use for this + The Google Cloud Platform billing account ID to use for this invocation. --folder=FOLDER_ID - Folder ID to use for this invocation. + The Google Cloud Platform folder ID to use for this invocation. --organization=ORGANIZATION_ID - The Google Cloud Platform Organization ID to use for this invocation. + The Google Cloud Platform organization ID to use for this invocation. --project=PROJECT_ID The Google Cloud Platform project ID. Overrides the default diff --git a/gcloud/alpha/recommender/recommendations/mark-succeeded b/gcloud/alpha/recommender/recommendations/mark-succeeded index 7828989c4..f46f70e45 100644 --- a/gcloud/alpha/recommender/recommendations/mark-succeeded +++ b/gcloud/alpha/recommender/recommendations/mark-succeeded @@ -42,14 +42,14 @@ REQUIRED FLAGS Exactly one of these must be specified: --billing-account=BILLING_ACCOUNT - The Google Cloud Platform Billing Account ID to use for this + The Google Cloud Platform billing account ID to use for this invocation. --folder=FOLDER_ID - Folder ID to use for this invocation. + The Google Cloud Platform folder ID to use for this invocation. --organization=ORGANIZATION_ID - The Google Cloud Platform Organization ID to use for this invocation. + The Google Cloud Platform organization ID to use for this invocation. --project=PROJECT_ID The Google Cloud Platform project ID. Overrides the default diff --git a/gcloud/alpha/resource-manager/folders/help b/gcloud/alpha/resource-manager/folders/help index 72af11aeb..34ac2c231 100644 --- a/gcloud/alpha/resource-manager/folders/help +++ b/gcloud/alpha/resource-manager/folders/help @@ -42,6 +42,9 @@ COMMANDS remove-iam-policy-binding (ALPHA) Remove IAM policy binding for a folder. + search + (ALPHA) Search folders matching the specified query. + set-iam-policy (ALPHA) Set IAM policy for a folder. diff --git a/gcloud/alpha/resource-manager/folders/search b/gcloud/alpha/resource-manager/folders/search new file mode 100644 index 000000000..74da7138e --- /dev/null +++ b/gcloud/alpha/resource-manager/folders/search @@ -0,0 +1,69 @@ +NAME + gcloud alpha resource-manager folders search - search folders matching the + specified query + +SYNOPSIS + gcloud alpha resource-manager folders search [--query=QUERY] + [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) You can specify the maximum number of folders to return in the + result using the --limit`flag. + +EXAMPLES + The following command lists the folders that have been marked for deletion: + + $ gcloud alpha resource-manager folders search \ + --query='state:DELETE_REQUESTED' + + Folders with their displayNames starting with sun like sunflower-folder, + sunburn-folder etc. can be listed using the below command + + $ gcloud alpha resource-manager folders search \ + --query='displayName:sun*' + +FLAGS + --query=QUERY + A boolean expression for the search criteria used to select the folders + to return. If no search criteria is specified then all accessible + projects will be returned. Query expressions can be used to restrict + results based upon displayName, state and parent, where the operators = + (:) NOT, AND and OR can be used along with the suffix wildcard symbol + *. The displayName field in a query expression should use escaped + quotes for values that include whitespace to prevent unexpected + behavior. + + For more details and fields supported by the query expression please + refer query parameters section [here] + (https://cloud.google.com/resource-manager/reference/rest/v3/folders/search#query-parameters) + +LIST COMMAND FLAGS + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + This flag specifies the maximum number of folders per page. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/storage/buckets/create b/gcloud/alpha/storage/buckets/create new file mode 100644 index 000000000..f16d1bbf4 --- /dev/null +++ b/gcloud/alpha/storage/buckets/create @@ -0,0 +1,82 @@ +NAME + gcloud alpha storage buckets create - create buckets for storing objects + +SYNOPSIS + gcloud alpha storage buckets create URL + [--default-encryption-key=DEFAULT_ENCRYPTION_KEY, + -k DEFAULT_ENCRYPTION_KEY] + [--default-storage-class=DEFAULT_STORAGE_CLASS, + -c DEFAULT_STORAGE_CLASS, -s DEFAULT_STORAGE_CLASS] + [--location=LOCATION, -l LOCATION] [--pap, --public-access-prevention] + [--retention-period=RETENTION_PERIOD] + [--[no-]uniform-bucket-level-access, -b] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Create a new bucket. + +EXAMPLES + The following command creates a Cloud Storage bucket named my-bucket: + + $ gcloud alpha storage buckets create gs://my-bucket + + The following command creates a bucket with the nearline default storage + class (https://cloud.google.com/storage/docs/storage-classes) in the asia + location (https://cloud.google.com/storage/docs/locations): + + $ gcloud alpha storage buckets create gs://my-bucket \ + --default-storage-class=nearline --location=asia + +POSITIONAL ARGUMENTS + URL + The URL of the bucket to create. + +FLAGS + --default-encryption-key=DEFAULT_ENCRYPTION_KEY, -k DEFAULT_ENCRYPTION_KEY + Set the default KMS key using the full path to the key, which has the + following form: + projects/[project-id]/locations/[location]/keyRings/[key-ring]/cryptoKeys/[my-key]. + + --default-storage-class=DEFAULT_STORAGE_CLASS, -c DEFAULT_STORAGE_CLASS, -s DEFAULT_STORAGE_CLASS + Default storage class + (https://cloud.google.com/storage/docs/storage-classes) for the bucket. + If not specified, the default storage class used by Cloud Storage is + "Standard". + + --location=LOCATION, -l LOCATION + Location (https://cloud.google.com/storage/docs/locations) for the + bucket. If not specified, the location used by Cloud Storage is us. A + bucket's location cannot be changed after creation. + + --pap, --public-access-prevention + Sets public access prevention to "enforced". For details on how exactly + public access is blocked, see: + http://cloud/storage/docs/public-access-prevention + + --retention-period=RETENTION_PERIOD + Minimum retention period + (https://cloud.google.com/storage/docs/bucket-lock#retention-periods) + for objects stored in the bucket, for example + --retention-period=1Y1M1D5S. Objects added to the bucket cannot be + deleted until they've been stored for the specified length of time. + Default is no retention period. Only available for Cloud Storage using + the JSON API. + + --[no-]uniform-bucket-level-access, -b + Turns on uniform bucket-level access setting. Default is False. Use + --uniform-bucket-level-access to enable and + --no-uniform-bucket-level-access to disable. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/storage/buckets/delete b/gcloud/alpha/storage/buckets/delete new file mode 100644 index 000000000..b3540662c --- /dev/null +++ b/gcloud/alpha/storage/buckets/delete @@ -0,0 +1,45 @@ +NAME + gcloud alpha storage buckets delete - deletes Cloud Storage buckets + +SYNOPSIS + gcloud alpha storage buckets delete URLS [URLS ...] + [--continue-on-error, -c] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Deletes one or more Cloud Storage buckets. + +EXAMPLES + Delete a Google Cloud Storage bucket named "my-bucket": + + $ *gcloud alpha storage buckets delete* gs://my-bucket + + Delete two buckets: + + $ *gcloud alpha storage buckets delete* gs://my-bucket \ + gs://my-other-bucket + +POSITIONAL ARGUMENTS + URLS [URLS ...] + Specifies the URLs of the buckets to delete. + +FLAGS + --continue-on-error, -c + If any operations are unsuccessful, the command will exit with a + non-zero exit status after completing the remaining operations. This + flag takes effect only in sequential execution mode (i.e. processor and + thread count are set to 1). Parallelism is default. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/storage/buckets/describe b/gcloud/alpha/storage/buckets/describe new file mode 100644 index 000000000..4eebbf2f9 --- /dev/null +++ b/gcloud/alpha/storage/buckets/describe @@ -0,0 +1,37 @@ +NAME + gcloud alpha storage buckets describe - describes Cloud Storage buckets + +SYNOPSIS + gcloud alpha storage buckets describe URL [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Describe a Cloud Storage bucket. + +EXAMPLES + Describe a Google Cloud Storage bucket named "my-bucket": + + $ gcloud alpha storage buckets describe gs://my-bucket + + Desribe bucket with JSON formatting, only returning the "name" key: + + $ gcloud alpha storage buckets describe gs://my-bucket \ + --format=json(name) + +POSITIONAL ARGUMENTS + URL + Specifies URL of bucket to describe. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/storage/buckets/help b/gcloud/alpha/storage/buckets/help new file mode 100644 index 000000000..0c0e95643 --- /dev/null +++ b/gcloud/alpha/storage/buckets/help @@ -0,0 +1,38 @@ +NAME + gcloud alpha storage buckets - manage Cloud Storage buckets + +SYNOPSIS + gcloud alpha storage buckets GROUP | COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Manage Cloud Storage buckets. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + create + (ALPHA) Create buckets for storing objects. + + delete + (ALPHA) Deletes Cloud Storage buckets. + + describe + (ALPHA) Describes Cloud Storage buckets. + + list + (ALPHA) Lists Cloud Storage buckets. + + update + (ALPHA) Update bucket settings. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/storage/buckets/list b/gcloud/alpha/storage/buckets/list new file mode 100644 index 000000000..08d363150 --- /dev/null +++ b/gcloud/alpha/storage/buckets/list @@ -0,0 +1,74 @@ +NAME + gcloud alpha storage buckets list - lists Cloud Storage buckets + +SYNOPSIS + gcloud alpha storage buckets list [URLS ...] [--filter=EXPRESSION] + [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) List Cloud Storage buckets. + +EXAMPLES + List all Google Cloud Storage buckets in default project: + + $ gcloud alpha storage buckets list + + List buckets beginning with "b": + + $ gcloud alpha storage buckets list gs://b* + + List buckets with JSON formatting, only returning the "name" key: + + $ gcloud alpha storage buckets list --format="json(name)" + +POSITIONAL ARGUMENTS + [URLS ...] + Specifies URL of buckets to List. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/storage/buckets/update b/gcloud/alpha/storage/buckets/update new file mode 100644 index 000000000..79776dfbd --- /dev/null +++ b/gcloud/alpha/storage/buckets/update @@ -0,0 +1,223 @@ +NAME + gcloud alpha storage buckets update - update bucket settings + +SYNOPSIS + gcloud alpha storage buckets update URL [URL ...] [--clear-cors] + [--clear-default-encryption-key] [--clear-lifecycle] + [--clear-log-bucket] [--clear-log-object-prefix] + [--clear-pap, --clear-public-access-prevention] + [--clear-retention-period] [--clear-web-error-page] + [--clear-web-main-page-suffix] [--continue-on-error, -c] + [--cors-file=CORS_FILE] + [--default-encryption-key=DEFAULT_ENCRYPTION_KEY] + [--[no-]default-event-based-hold] + [--default-storage-class=DEFAULT_STORAGE_CLASS] + [--lifecycle-file=LIFECYCLE_FILE] [--[no-]lock-retention-period] + [--log-bucket=LOG_BUCKET] [--log-object-prefix=LOG_OBJECT_PREFIX] + [--[no-]pap, --[no-]public-access-prevention] [--[no-]requester-pays] + [--retention-period=RETENTION_PERIOD] + [--[no-]uniform-bucket-level-access] [--[no-]versioning] + [--web-error-page=WEB_ERROR_PAGE] + [--web-main-page-suffix=WEB_MAIN_PAGE_SUFFIX] + [--clear-labels | --labels-file=LABELS_FILE + | --remove-labels=[LABEL_KEYS,...] + --update-labels=[LABEL_KEYS_AND_VALUES,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Update a bucket. + +EXAMPLES + The following command updates the retention period of a Cloud Storage + bucket named "my-bucket" to one year and thirty-six minutes: + + $ gcloud alpha storage buckets update gs://my-bucket \ + --retention-period=1y36m + + The following command clears the retention period of a bucket: + + $ gcloud alpha storage buckets update gs://my-bucket \ + --clear-retention-period + +POSITIONAL ARGUMENTS + URL [URL ...] + The URLs of the buckets to update. + +FLAGS + --clear-cors + Clears the bucket's CORS settings. + + --clear-default-encryption-key + Clears the bucket's default encryption key. + + --clear-lifecycle + Removes all lifecycle configuration for the bucket. + + --clear-log-bucket + Clears logging bucket receiving the usage current bucket's data. + + --clear-log-object-prefix + Clears prefix used to determine what usage data to send to logging + bucket. + + --clear-pap, --clear-public-access-prevention + Unsets the public access prevention setting on a bucket. + + --clear-retention-period + Clears the object retention period for a bucket. + + --clear-web-error-page + Clear website error page if bucket is hosting website. + + --clear-web-main-page-suffix + Clear website main page suffix if bucket is hosting website. + + --continue-on-error, -c + If any operations are unsuccessful, the command will exit with a + non-zero exit status after completing the remaining operations. This + flag takes effect only in sequential execution mode (i.e. processor and + thread count are set to 1). Parallelism is default. + + --cors-file=CORS_FILE + Sets the Cross-Origin Resource Sharing (CORS) configuration on a + bucket. An example CORS JSON document looks like the following: + + [ + { + "origin": ["http://origin1.example.com"], + "responseHeader": ["Content-Type"], + "method": ["GET"], + "maxAgeSeconds": 3600 + } + ] + + For more information about supported endpoints for CORS, see [Cloud + Storage CORS support] + (https://cloud.google.com/storage/docs/cross-origin#server-side-support). + + --default-encryption-key=DEFAULT_ENCRYPTION_KEY + Set the default KMS key for the bucket. + + --[no-]default-event-based-hold + Sets the default value for an event-based hold on the bucket. By + setting the default event-based hold on a bucket, newly-created objects + inherit that value as their event-based hold (it is not applied + retroactively). Use --default-event-based-hold to enable and + --no-default-event-based-hold to disable. + + --default-storage-class=DEFAULT_STORAGE_CLASS + Sets the default storage class for the bucket. + + --lifecycle-file=LIFECYCLE_FILE + Sets the lifecycle management configuration on a bucket. For example, + The following lifecycle management configuration JSON document + specifies that all objects in this bucket that are more than 365 days + old are deleted automatically: + + { + "rule": + [ + { + "action": {"type": "Delete"}, + "condition": {"age": 365} + } + ] + } + + --[no-]lock-retention-period + Locks an unlocked retention policy on the buckets. Caution: A locked + retention policy cannot be removed from a bucket or reduced in + duration. Once locked, deleting the bucket is the only way to "remove" + a retention policy. Use --lock-retention-period to enable and + --no-lock-retention-period to disable. + + --log-bucket=LOG_BUCKET + Enables usage logging of the bucket, outputting log files to the + specified logging_bucket in this flag. Cloud Storage doesn't validate + the existence of the bucket receiving logs. In addition to enabling + logging on your bucket, you will also need to grant + cloud-storage-analytics@google.com write access to the log bucket. + + --log-object-prefix=LOG_OBJECT_PREFIX + Specifies the object prefix for logging activity to the log bucket. The + default prefix is the bucket name. All read and write activity to + objects in the bucket will be logged for objects matching the prefix. + + --[no-]pap, --[no-]public-access-prevention + If True, sets public access prevention to "enforced". If False, sets + public access prevention to "inherited". For details on how exactly + public access is blocked, see: + http://cloud/storage/docs/public-access-prevention. Use + --public-access-prevention to enable and --no-public-access-prevention + to disable. + + --[no-]requester-pays + Allows you to configure a Cloud Storage bucket so that the requester + pays all costs related to accessing the bucket and its objects. Use + --requester-pays to enable and --no-requester-pays to disable. + + --retention-period=RETENTION_PERIOD + Minimum retention period + (https://cloud.google.com/storage/docs/bucket-lock#retention-periods) + for objects stored in the bucket, for example + --retention-period=1Y1M1D5S. Objects added to the bucket cannot be + deleted until they've been stored for the specified length of time. + Default is no retention period. Only available for Cloud Storage using + the JSON API. + + --[no-]uniform-bucket-level-access + Enables or disables uniform bucket-level access + (https://cloud.google.com/storage/docs/bucket-policy-only) for the + buckets. Use --uniform-bucket-level-access to enable and + --no-uniform-bucket-level-access to disable. + + --[no-]versioning + Allows you to configure a Cloud Storage bucket to keep old versions of + objects. Use --versioning to enable and --no-versioning to disable. + + --web-error-page=WEB_ERROR_PAGE + Cloud Storage allows you to configure a bucket to behave like a static + website. A subsequent GET bucket request through a custom domain for a + non-existent object serves the specified error page instead of the + standard Cloud Storage error. + + --web-main-page-suffix=WEB_MAIN_PAGE_SUFFIX + Cloud Storage allows you to configure a bucket to behave like a static + website. A subsequent GET bucket request through a custom domain serves + the specified "main" page instead of performing the usual bucket + listing. + + At most one of these can be specified: + + --clear-labels + Clear all labels associated with a bucket. + + --labels-file=LABELS_FILE + Sets the label configuration for the bucket. An example label JSON + document looks like the following: + + { + "your_label_key": "your_label_value", + "your_other_label_key": "your_other_label_value" + } + + --remove-labels=[LABEL_KEYS,...] + Remove labels by their key names. + + --update-labels=[LABEL_KEYS_AND_VALUES,...] + Add or update labels. Example: + --update-labels=key1=value1,key2=value2 + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/storage/cat b/gcloud/alpha/storage/cat new file mode 100644 index 000000000..32ed76a70 --- /dev/null +++ b/gcloud/alpha/storage/cat @@ -0,0 +1,69 @@ +NAME + gcloud alpha storage cat - outputs the contents of one or more URLs to + stdout + +SYNOPSIS + gcloud alpha storage cat URL [URL ...] [--display-url, -d] + [--range=RANGE, -r RANGE] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) The cat command outputs the contents of one or more URLs to stdout. + While the cat command does not compute a checksum, it is otherwise + equivalent to doing: + + $ gcloud alpha storage cp url... - + + (The final '-' causes gcloud to stream the output to stdout.) + +EXAMPLES + The following command writes all text files in a bucket to stdout: + + $ gcloud alpha storage cat gs://bucket/*.txt + + The following command outputs a short header describing file.txt, along + with its contents: + + $ gcloud alpha storage cat -d gs://my-bucket/file.txt + + The following command outputs bytes 256-939 of file.txt: + + $ gcloud alpha storage cat -r 256-939 gs://my-bucket/file.txt + + The following command outputs the last 5 bytes of file.txt: + + $ gcloud alpha storage cat -r -5 gs://my-bucket/file.txt + +POSITIONAL ARGUMENTS + URL [URL ...] + The url of objects to list. + +FLAGS + --display-url, -d + Prints the header before each object. + + --range=RANGE, -r RANGE + Causes gcloud storage to output just the specified byte range of the + object. In a case where "start" = 'x', and "end" = 'y', ranges take the + form: x-y (e.g., -r 256-5939), x- (e.g., -r 256-), -y (e.g., -r -5) + + When offsets start at 0, x-y means to return bytes x through y + (inclusive), x- means to return bytes x through the end of the object, + and -y changes the role of y. If -y is present, then it returns the + last y bytes of the object. + + If the bytes are out of range of the object, then nothing is printed + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/storage/cp b/gcloud/alpha/storage/cp index 22a7dc93c..d32a6b8ea 100644 --- a/gcloud/alpha/storage/cp +++ b/gcloud/alpha/storage/cp @@ -8,7 +8,7 @@ SYNOPSIS [--content-encoding=CONTENT_ENCODING] [--content-language=CONTENT_LANGUAGE] [--content-md5=MD5_DIGEST] [--content-type=CONTENT_TYPE] [--continue-on-error, -c] - [--custom-time=CUSTOM_TIME] [--do-not-decompress] + [--custom-time=CUSTOM_TIME] [--daisy-chain, -D] [--do-not-decompress] [--if-generation-match=GENERATION] [--if-metageneration-match=METAGENERATION] [--ignore-symlinks] [--manifest-path=MANIFEST_PATH, -L MANIFEST_PATH] @@ -104,6 +104,16 @@ FLAGS --custom-time=CUSTOM_TIME Custom time for Google Cloud Storage objects in RFC 3339 format. + --daisy-chain, -D + Copy in "daisy chain" mode, which means copying an object by first + downloading it to the machine where the command is run, then uploading + it to the destination bucket. The default mode is a "copy in the + cloud," where data is copied without uploading or downloading. During a + copy in the cloud, a source composite object remains composite at its + destination. However, you can use daisy chain mode to change a + composite object into a non-composite object. Note: Daisy chain mode is + automatically used when copying between providers. + --do-not-decompress Do not automatically decompress downloaded gzip files. diff --git a/gcloud/alpha/storage/help b/gcloud/alpha/storage/help index 8579c6992..180b72d3c 100644 --- a/gcloud/alpha/storage/help +++ b/gcloud/alpha/storage/help @@ -17,9 +17,21 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. +GROUPS + GROUP is one of the following: + + buckets + (ALPHA) Manage Cloud Storage buckets. + + objects + (ALPHA) Manage Cloud Storage objects. + COMMANDS COMMAND is one of the following: + cat + (ALPHA) Outputs the contents of one or more URLs to stdout. + cp (ALPHA) Upload, download, and copy Cloud Storage objects. @@ -29,6 +41,10 @@ COMMANDS rm (ALPHA) Delete objects and buckets. + service-agent + (ALPHA) Manage a project's Cloud Storage service agent, which is used + to perform Cloud KMS operations. + NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct diff --git a/gcloud/alpha/storage/objects/describe b/gcloud/alpha/storage/objects/describe new file mode 100644 index 000000000..eb0527227 --- /dev/null +++ b/gcloud/alpha/storage/objects/describe @@ -0,0 +1,55 @@ +NAME + gcloud alpha storage objects describe - describe a Cloud Storage object + +SYNOPSIS + gcloud alpha storage objects describe URL + [--decryption-keys=[DECRYPTION_KEY,...]] + [--encryption-key=ENCRYPTION_KEY] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Describe a Cloud Storage object. + +EXAMPLES + Describe a Google Cloud Storage object with the url + "gs://bucket/my-object": + + $ gcloud alpha storage objects describe gs://bucket/my-object + + Desribe object with JSON formatting, only returning the "name" key: + + $ gcloud alpha storage objects describe gs://bucket/my-object \ + --format=json(name) + +POSITIONAL ARGUMENTS + URL + Specifies URL of object to describe. + +FLAGS + --decryption-keys=[DECRYPTION_KEY,...] + A comma separated list of customer-supplied encryption keys (RFC 4648 + section 4 base64-encoded AES256 strings) that will be used to decrypt + Google Cloud Storage objects. Data encrypted with a customer-managed + encryption key (CMEK) is decrypted automatically, so CMEKs do not need + to be listed here. + + --encryption-key=ENCRYPTION_KEY + A customer-supplied encryption key (An RFC 4648 section 4 + base64-encoded AES256 string), or customer-managed encryption key of + the form + projects/{project}/locations/{location}/keyRings/{key-ring}/cryptoKeys/{crypto-key}. + This key will be used for all data written to Google Cloud Storage. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/storage/objects/help b/gcloud/alpha/storage/objects/help new file mode 100644 index 000000000..f1e4b7174 --- /dev/null +++ b/gcloud/alpha/storage/objects/help @@ -0,0 +1,32 @@ +NAME + gcloud alpha storage objects - manage Cloud Storage objects + +SYNOPSIS + gcloud alpha storage objects COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Manage Cloud Storage objects. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + describe + (ALPHA) Describe a Cloud Storage object. + + list + (ALPHA) Lists Cloud Storage objects. + + update + (ALPHA) Update Cloud Storage objects. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/storage/objects/list b/gcloud/alpha/storage/objects/list new file mode 100644 index 000000000..68a33003a --- /dev/null +++ b/gcloud/alpha/storage/objects/list @@ -0,0 +1,96 @@ +NAME + gcloud alpha storage objects list - lists Cloud Storage objects + +SYNOPSIS + gcloud alpha storage objects list URLS [URLS ...] + [--decryption-keys=[DECRYPTION_KEY,...]] + [--encryption-key=ENCRYPTION_KEY] [--filter=EXPRESSION] [--limit=LIMIT] + [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) List Cloud Storage objects. + + Bucket URLs like "gs://bucket" will match all the objects inside a bucket, + but "gs://b" will error because it matches a list of buckets. + +EXAMPLES + List all objects in bucket "my-bucket": + + $ gcloud alpha storage objects list gs://my-bucket + + List all objects in bucket beginning with "o": + + $ gcloud alpha storage objects list gs://my-bucket/o* + + List all objects in bucket with JSON formatting, only returning the value + of the "name" metadata field: + + $ gcloud alpha storage objects list gs://my-bucket \ + --format="json(name)" + +POSITIONAL ARGUMENTS + URLS [URLS ...] + Specifies URL of objects to list. + +FLAGS + --decryption-keys=[DECRYPTION_KEY,...] + A comma separated list of customer-supplied encryption keys (RFC 4648 + section 4 base64-encoded AES256 strings) that will be used to decrypt + Google Cloud Storage objects. Data encrypted with a customer-managed + encryption key (CMEK) is decrypted automatically, so CMEKs do not need + to be listed here. + + --encryption-key=ENCRYPTION_KEY + A customer-supplied encryption key (An RFC 4648 section 4 + base64-encoded AES256 string), or customer-managed encryption key of + the form + projects/{project}/locations/{location}/keyRings/{key-ring}/cryptoKeys/{crypto-key}. + This key will be used for all data written to Google Cloud Storage. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/storage/objects/update b/gcloud/alpha/storage/objects/update new file mode 100644 index 000000000..6e35407b3 --- /dev/null +++ b/gcloud/alpha/storage/objects/update @@ -0,0 +1,196 @@ +NAME + gcloud alpha storage objects update - update Cloud Storage objects + +SYNOPSIS + gcloud alpha storage objects update [URL ...] + [--cache-control=CACHE_CONTROL] [--clear-cache-control] + [--clear-content-disposition] [--clear-content-encoding] + [--clear-content-language] [--clear-content-md5] [--clear-content-type] + [--clear-custom-time] [--clear-encryption-key] + [--content-disposition=CONTENT_DISPOSITION] + [--content-encoding=CONTENT_ENCODING] + [--content-language=CONTENT_LANGUAGE] [--content-md5=MD5_DIGEST] + [--content-type=CONTENT_TYPE] [--continue-on-error, -c] + [--custom-time=CUSTOM_TIME] [--decryption-keys=[DECRYPTION_KEY,...]] + [--encryption-key=ENCRYPTION_KEY] [--[no-]event-based-hold] + [--if-generation-match=GENERATION] + [--if-metageneration-match=METAGENERATION] [--preserve-acl, -p] + [--read-paths-from-stdin, -I] [--recursive, -R, -r] + [--storage-class=STORAGE_CLASS, -s STORAGE_CLASS] + [--[no-]temporary-hold] + [--clear-custom-metadata + | --custom-metadata=[CUSTOM_METADATA_KEYS_AND_VALUES,...] + | --remove-custom-metadata=[METADATA_KEYS,...] + --update-custom-metadata=[CUSTOM_METADATA_KEYS_AND_VALUES,...]] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Update Cloud Storage objects. + +EXAMPLES + Update a Google Cloud Storage object's custom-metadata: + + $ *gcloud alpha storage objects update* gs://bucket/my-object \ + --custom-metadata=key1=value1,key2=value2 + + Set a temporary hold on JPG images: + + $ *gcloud alpha storage objects update* gs://bucket/*.jpg \ + --temporary-hold + + You can also provide a precondition on an object's metageneration in + order to avoid potential race conditions: + + $ *gcloud alpha storage objects update* gs://bucket/*.jpg \ + --temporary-hold --if-metageneration-match=123456789 + +POSITIONAL ARGUMENTS + [URL ...] + Specifies URLs of objects to update. + +FLAGS + --cache-control=CACHE_CONTROL + How caches should handle requests and responses. + + --clear-cache-control + Clears object cache control. + + --clear-content-disposition + Clears object content disposition. + + --clear-content-encoding + Clears content encoding. + + --clear-content-language + Clears object content language. + + --clear-content-md5 + Clears object content MD5. + + --clear-content-type + Clears object content type. + + --clear-custom-time + Clears object custom time. + + --clear-encryption-key + Clears encryption key associated with an object. + + --content-disposition=CONTENT_DISPOSITION + How content should be displayed. + + --content-encoding=CONTENT_ENCODING + How content is encoded (e.g. gzip). + + --content-language=CONTENT_LANGUAGE + Content's language (e.g. en signifies "English"). + + --content-md5=MD5_DIGEST + Manually specified MD5 hash digest for the contents of an uploaded + file. This flag cannot be used when uploading multiple files. The + custom digest is used by the cloud provider for validation. + + --content-type=CONTENT_TYPE + Type of data contained in the object (e.g. text/html). + + --continue-on-error, -c + If any operations are unsuccessful, the command will exit with a + non-zero exit status after completing the remaining operations. This + flag takes effect only in sequential execution mode (i.e. processor and + thread count are set to 1). Parallelism is default. + + --custom-time=CUSTOM_TIME + Custom time for Google Cloud Storage objects in RFC 3339 format. + + --decryption-keys=[DECRYPTION_KEY,...] + A comma separated list of customer-supplied encryption keys (RFC 4648 + section 4 base64-encoded AES256 strings) that will be used to decrypt + Google Cloud Storage objects. Data encrypted with a customer-managed + encryption key (CMEK) is decrypted automatically, so CMEKs do not need + to be listed here. + + --encryption-key=ENCRYPTION_KEY + A customer-supplied encryption key (An RFC 4648 section 4 + base64-encoded AES256 string), or customer-managed encryption key of + the form + projects/{project}/locations/{location}/keyRings/{key-ring}/cryptoKeys/{crypto-key}. + This key will be used for all data written to Google Cloud Storage. + + --[no-]event-based-hold + Enables or disables an event-based hold on objects. Use + --event-based-hold to enable and --no-event-based-hold to disable. + + --if-generation-match=GENERATION + Execute only if the generation matches the generation of the requested + object. + + --if-metageneration-match=METAGENERATION + Execute only if the metageneration matches the metageneration of the + requested object. + + --preserve-acl, -p + Preserves ACLs when copying in the cloud. This feature is supported for + only Google Cloud Storage and requires OWNER access to all copied + objects. To use the destination bucket's default policy (necessary for + uniform bucket-level access), use --no-preserve-acl. Enabled by + default, use -p to disable. + + --read-paths-from-stdin, -I + Read the list of objects to update from stdin. No need to enter a + source argument if this flag is present. Example: "storage objects + update -I --content-type=new-type" + + --recursive, -R, -r + Recursively update objects under any buckets or directories that match + the URL expression. + + --storage-class=STORAGE_CLASS, -s STORAGE_CLASS + Specify the storage class of the object. Triggers a rewrite + ofunderlying object data. + + --[no-]temporary-hold + Enables or disables a temporary hold on objects. Use --temporary-hold + to enable and --no-temporary-hold to disable. + + At most one of these can be specified: + + --clear-custom-metadata + Clears all custom metadata on objects. When used with + --preserve-posix, POSIX attributes will still be stored in custom + metadata. + + --custom-metadata=[CUSTOM_METADATA_KEYS_AND_VALUES,...] + Sets custom metadata on objects. When used with --preserve-posix, + POSIX attributes are also stored in custom metadata. + + Flags that preserve unspecified existing metadata cannot be used with + --custom-metadata or --clear-custom-metadata, but can be specified + together: + + --remove-custom-metadata=[METADATA_KEYS,...] + Removes individual custom metadata keys from objects. This flag can + be used with --update-custom-metadata. When used with + --preserve-posix, POSIX attributes specified by this flag are not + preserved. + + --update-custom-metadata=[CUSTOM_METADATA_KEYS_AND_VALUES,...] + Adds or sets individual custom metadata key value pairs on objects. + Existing custom metadata not specified with this flag is not + changed. This flag can be used with --remove-custom-metadata. When + keys overlap with those provided by --preserve-posix, values + specified by this flag are used. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/storage/service-agent b/gcloud/alpha/storage/service-agent new file mode 100644 index 000000000..a61d0332f --- /dev/null +++ b/gcloud/alpha/storage/service-agent @@ -0,0 +1,50 @@ +NAME + gcloud alpha storage service-agent - manage a project's Cloud Storage + service agent, which is used to perform Cloud KMS operations + +SYNOPSIS + gcloud alpha storage service-agent [--authorize-cmek=AUTHORIZE_CMEK] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) gcloud alpha storage service-agent displays the Cloud Storage + service agent, which is used to perform Cloud KMS operations against your a + default or supplied project. If the project does not yet have a service + agent, gcloud alpha storage service-agent creates one. + +EXAMPLES + To show the service agent for your default project: + + $ gcloud alpha storage service-agent + + To show the service account for my-project: + + $ gcloud alpha storage service-agent --project=my-project + + To authorize your default project to use a Cloud KMS key: + + $ gcloud alpha storage service-agent \ + --authorize-cmek=projects/key-project/locations/us-east1/\ + keyRings/key-ring/cryptoKeys/my-key + +FLAGS + --authorize-cmek=AUTHORIZE_CMEK + Adds appropriate encrypt/decrypt permissions to the specified Cloud KMS + key. This allows the Cloud Storage service agent to write and read + Cloud KMS-encrypted objects in buckets associated with the service + agent's project. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/beta/ai/models/upload b/gcloud/beta/ai/models/upload index 2de23074a..b7a31d8cb 100644 --- a/gcloud/beta/ai/models/upload +++ b/gcloud/beta/ai/models/upload @@ -13,7 +13,8 @@ SYNOPSIS [--explanation-metadata-file=EXPLANATION_METADATA_FILE] [--explanation-method=EXPLANATION_METHOD] [--explanation-path-count=EXPLANATION_PATH_COUNT] - [--explanation-step-count=EXPLANATION_STEP_COUNT] [--model-id=MODEL_ID] + [--explanation-step-count=EXPLANATION_STEP_COUNT] + [--labels=[KEY=VALUE,...]] [--model-id=MODEL_ID] [--parent-model=PARENT_MODEL] [--region=REGION] [--smooth-grad-noise-sigma=SMOOTH_GRAD_NOISE_SIGMA] [--smooth-grad-noise-sigma-by-feature=[KEY=VALUE,...]] @@ -82,6 +83,15 @@ OPTIONAL FLAGS --explanation-step-count=EXPLANATION_STEP_COUNT Number of steps to approximate the path integral for explanation. + --labels=[KEY=VALUE,...] + Labels with user-defined metadata to organize your Models. + + Label keys and values can be no longer than 64 characters (Unicode + codepoints), can only contain lowercase letters, numeric characters, + underscores and dashes. International characters are allowed. + + See https://goo.gl/xmQnxf for more information and examples of labels. + --model-id=MODEL_ID ID to use for the uploaded Model, which will become the final component of the model resource name. diff --git a/gcloud/beta/alloydb/backups/create b/gcloud/beta/alloydb/backups/create index 84dee5106..73c3a3356 100644 --- a/gcloud/beta/alloydb/backups/create +++ b/gcloud/beta/alloydb/backups/create @@ -4,7 +4,10 @@ NAME SYNOPSIS gcloud beta alloydb backups create BACKUP --cluster=CLUSTER --region=REGION - [--async] [GCLOUD_WIDE_FLAG ...] + [--async] + [--kms-key=KMS_KEY : --kms-keyring=KMS_KEYRING + --kms-location=KMS_LOCATION --kms-project=KMS_PROJECT] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) Creates a new AlloyDB backup within a given project. @@ -32,6 +35,39 @@ OPTIONAL FLAGS Return immediately, without waiting for the operation in progress to complete. + Key resource - The Cloud KMS (Key Management Service) cryptokey that will + be used to protect the backup. The 'AlloyDB Service Agent' service account + must hold permission 'Cloud KMS CryptoKey Encrypter/Decrypter'. The + arguments in this group can be used to specify the attributes of this + resource. + + --kms-key=KMS_KEY + ID of the key or fully qualified identifier for the key. To set the + kms-key attribute: + ▸ provide the argument --kms-key on the command line. + + This flag must be specified if any of the other arguments in this + group are specified. + + --kms-keyring=KMS_KEYRING + The KMS keyring of the key. To set the kms-keyring attribute: + ▸ provide the argument --kms-key on the command line with a fully + specified name; + ▸ provide the argument --kms-keyring on the command line. + + --kms-location=KMS_LOCATION + The Cloud location for the key. To set the kms-location attribute: + ▸ provide the argument --kms-key on the command line with a fully + specified name; + ▸ provide the argument --kms-location on the command line. + + --kms-project=KMS_PROJECT + The Cloud project for the key. To set the kms-project attribute: + ▸ provide the argument --kms-key on the command line with a fully + specified name; + ▸ provide the argument --kms-project on the command line; + ▸ set the property core/project. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/beta/alloydb/backups/describe b/gcloud/beta/alloydb/backups/describe index 5994bced5..f7f0864a6 100644 --- a/gcloud/beta/alloydb/backups/describe +++ b/gcloud/beta/alloydb/backups/describe @@ -1,13 +1,13 @@ NAME - gcloud beta alloydb backups describe - creates a new AlloyDB backup within - a given project and location + gcloud beta alloydb backups describe - describes an AlloyDB backup in a + given project and region SYNOPSIS gcloud beta alloydb backups describe BACKUP --region=REGION [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) Creates a new AlloyDB backup within a given project and location. + (BETA) Describes an AlloyDB backup in a given project and region. EXAMPLES To describe a backup, run: diff --git a/gcloud/beta/alloydb/backups/help b/gcloud/beta/alloydb/backups/help index 0aff92a8b..9fa6ab76f 100644 --- a/gcloud/beta/alloydb/backups/help +++ b/gcloud/beta/alloydb/backups/help @@ -23,8 +23,7 @@ COMMANDS (BETA) Deletes an AlloyDB backup within a given project. describe - (BETA) Creates a new AlloyDB backup within a given project and - location. + (BETA) Describes an AlloyDB backup in a given project and region. list (BETA) Lists AlloyDB backups in a given project. diff --git a/gcloud/beta/alloydb/clusters/create b/gcloud/beta/alloydb/clusters/create index b95aa25c7..33fb553eb 100644 --- a/gcloud/beta/alloydb/clusters/create +++ b/gcloud/beta/alloydb/clusters/create @@ -4,7 +4,10 @@ NAME SYNOPSIS gcloud beta alloydb clusters create CLUSTER --password=PASSWORD - --region=REGION [--async] [--network=NETWORK] [GCLOUD_WIDE_FLAG ...] + --region=REGION [--async] [--network=NETWORK] + [--kms-key=KMS_KEY : --kms-keyring=KMS_KEYRING + --kms-location=KMS_LOCATION --kms-project=KMS_PROJECT] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) Creates a new AlloyDB cluster within a given project. @@ -39,6 +42,39 @@ OPTIONAL FLAGS network, 'testsharednetwork', this would be of the form:--network=projects/testproject/global/networks/testsharednetwork + Key resource - The Cloud KMS (Key Management Service) cryptokey that will + be used to protect the cluster. The 'AlloyDB Service Agent' service + account must hold permission 'Cloud KMS CryptoKey Encrypter/Decrypter'. + The arguments in this group can be used to specify the attributes of this + resource. + + --kms-key=KMS_KEY + ID of the key or fully qualified identifier for the key. To set the + kms-key attribute: + ▸ provide the argument --kms-key on the command line. + + This flag must be specified if any of the other arguments in this + group are specified. + + --kms-keyring=KMS_KEYRING + The KMS keyring of the key. To set the kms-keyring attribute: + ▸ provide the argument --kms-key on the command line with a fully + specified name; + ▸ provide the argument --kms-keyring on the command line. + + --kms-location=KMS_LOCATION + The Cloud location for the key. To set the kms-location attribute: + ▸ provide the argument --kms-key on the command line with a fully + specified name; + ▸ provide the argument --kms-location on the command line. + + --kms-project=KMS_PROJECT + The Cloud project for the key. To set the kms-project attribute: + ▸ provide the argument --kms-key on the command line with a fully + specified name; + ▸ provide the argument --kms-project on the command line; + ▸ set the property core/project. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/beta/alloydb/clusters/update b/gcloud/beta/alloydb/clusters/update index 3695ff637..bb87f98ee 100644 --- a/gcloud/beta/alloydb/clusters/update +++ b/gcloud/beta/alloydb/clusters/update @@ -8,8 +8,8 @@ SYNOPSIS | [--automated-backup-days-of-week=[DAYS_OF_WEEK,...] --automated-backup-start-times=[START_TIMES,...] : --automated-backup-window=TIMEOUT_PERIOD - --automated-backup-retention-count=RETENTION_COUNT - | --automated-backup-retention-period=RETENTION_PERIOD]] + [--automated-backup-encryption-key=AUTOMATED_BACKUP_ENCRYPTION_KEY + : --automated-backup-encryption-key-keyring=AUTOMATED_BACKUP_ENCRYPTION_KEY_KEYRING --automated-backup-encryption-key-location=AUTOMATED_BACKUP_ENCRYPTION_KEY_LOCATION --automated-backup-encryption-key-project=AUTOMATED_BACKUP_ENCRYPTION_KEY_PROJECT] --automated-backup-retention-count=RETENTION_COUNT | --automated-backup-retention-period=RETENTION_PERIOD]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -76,6 +76,44 @@ OPTIONAL FLAGS window must be at least 5 minutes long. There is no upper bound on the window. If not set, it will default to 1 hour. + Key resource - The Cloud KMS (Key Management Service) cryptokey that + will be used to protect the automated backups. The 'AlloyDB Service + Agent' service account must hold permission 'Cloud KMS CryptoKey + Encrypter/Decrypter'. The arguments in this group can be used to + specify the attributes of this resource. + + --automated-backup-encryption-key=AUTOMATED_BACKUP_ENCRYPTION_KEY + ID of the key or fully qualified identifier for the key. To set + the kms-key attribute: + ◇ provide the argument --automated-backup-encryption-key on the + command line. + + This flag must be specified if any of the other arguments in this + group are specified. + + --automated-backup-encryption-key-keyring=AUTOMATED_BACKUP_ENCRYPTION_KEY_KEYRING + The KMS keyring of the key. To set the kms-keyring attribute: + ◇ provide the argument --automated-backup-encryption-key on the + command line with a fully specified name; + ◇ provide the argument + --automated-backup-encryption-key-keyring on the command line. + + --automated-backup-encryption-key-location=AUTOMATED_BACKUP_ENCRYPTION_KEY_LOCATION + The Cloud location for the key. To set the kms-location + attribute: + ◇ provide the argument --automated-backup-encryption-key on the + command line with a fully specified name; + ◇ provide the argument + --automated-backup-encryption-key-location on the command line. + + --automated-backup-encryption-key-project=AUTOMATED_BACKUP_ENCRYPTION_KEY_PROJECT + The Cloud project for the key. To set the kms-project attribute: + ◇ provide the argument --automated-backup-encryption-key on the + command line with a fully specified name; + ◇ provide the argument + --automated-backup-encryption-key-project on the command line; + ◇ set the property core/project. + Retention policy. If no retention policy is provided, all automated backups will be retained. diff --git a/gcloud/beta/beyondcorp/client-connector/gateways/get-iam-policy b/gcloud/beta/beyondcorp/client-connector/gateways/get-iam-policy new file mode 100644 index 000000000..6eaca6e85 --- /dev/null +++ b/gcloud/beta/beyondcorp/client-connector/gateways/get-iam-policy @@ -0,0 +1,93 @@ +NAME + gcloud beta beyondcorp client-connector gateways get-iam-policy - get the + IAM policy for a BeyondCorp client gateway + +SYNOPSIS + gcloud beta beyondcorp client-connector gateways get-iam-policy + (CLIENT_GATEWAY : --location=LOCATION) [--filter=EXPRESSION] + [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Gets the IAM policy for the given BeyondCorp client gateway. + +EXAMPLES + To get the IAM policy for a client gateway my-client-gateway run: + + $ gcloud beta beyondcorp client-connector gateways get-iam-policy \ + my-client-gateway --project=consumer-project-id \ + --location=us-central1 + +POSITIONAL ARGUMENTS + Client gateway resource - The BeyondCorp client gateway for which to get + the IAM policy. The arguments in this group can be used to specify the + attributes of this resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. To set the project + attribute: + ◆ provide the argument client_gateway on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + CLIENT_GATEWAY + ID of the client_gateway or fully qualified identifier for the + client_gateway. To set the client_gateway attribute: + ▸ provide the argument client_gateway on the command line. + + This positional must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + The location of the BeyondCorp Enterprise client connector. + + To set the location attribute: + ▸ provide the argument client_gateway on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the beyondcorp/v1 API. The full documentation for this + API can be found at: https://cloud.google.com/ + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha beyondcorp client-connector gateways get-iam-policy + diff --git a/gcloud/beta/beyondcorp/client-connector/gateways/help b/gcloud/beta/beyondcorp/client-connector/gateways/help index f6bbf19a3..06dfee098 100644 --- a/gcloud/beta/beyondcorp/client-connector/gateways/help +++ b/gcloud/beta/beyondcorp/client-connector/gateways/help @@ -31,9 +31,15 @@ COMMANDS describe (BETA) Describe a single BeyondCorp client gateway. + get-iam-policy + (BETA) Get the IAM policy for a BeyondCorp client gateway. + list (BETA) List BeyondCorp client gateway resources. + set-iam-policy + (BETA) Set the IAM policy for a BeyondCorp client gateway. + NOTES This command is currently in beta and might change without notice. This variant is also available: diff --git a/gcloud/beta/beyondcorp/client-connector/gateways/set-iam-policy b/gcloud/beta/beyondcorp/client-connector/gateways/set-iam-policy new file mode 100644 index 000000000..06f97971e --- /dev/null +++ b/gcloud/beta/beyondcorp/client-connector/gateways/set-iam-policy @@ -0,0 +1,73 @@ +NAME + gcloud beta beyondcorp client-connector gateways set-iam-policy - set the + IAM policy for a BeyondCorp client gateway + +SYNOPSIS + gcloud beta beyondcorp client-connector gateways set-iam-policy + (CLIENT_GATEWAY : --location=LOCATION) POLICY_FILE + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Sets the IAM policy for the given BeyondCorp client gateway. + +EXAMPLES + The following command will read an IAM policy defined in a JSON file + 'policy.json' and set it for the client gateway with ID my-client-gateway: + + $ gcloud beta beyondcorp client-connector gateways set-iam-policy \ + my-client-gateway policy.json --location=us-central1 + +POSITIONAL ARGUMENTS + Client gateway resource - The BeyondCorp client gateway for which to set + the IAM policy. The arguments in this group can be used to specify the + attributes of this resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. To set the project + attribute: + ◆ provide the argument client_gateway on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + CLIENT_GATEWAY + ID of the client_gateway or fully qualified identifier for the + client_gateway. To set the client_gateway attribute: + ▸ provide the argument client_gateway on the command line. + + This positional must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + The location of the BeyondCorp Enterprise client connector. + + To set the location attribute: + ▸ provide the argument client_gateway on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + + POLICY_FILE + Path to a local JSON or YAML formatted file containing a valid policy. + + The output of the get-iam-policy command is a valid file, as is any + JSON or YAML file conforming to the structure of a Policy + (https://cloud.google.com/iam/reference/rest/v1/Policy). + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the beyondcorp/v1 API. The full documentation for this + API can be found at: https://cloud.google.com/ + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha beyondcorp client-connector gateways set-iam-policy + diff --git a/gcloud/beta/beyondcorp/client-connector/services/create b/gcloud/beta/beyondcorp/client-connector/services/create index 033d0068c..668c278d1 100644 --- a/gcloud/beta/beyondcorp/client-connector/services/create +++ b/gcloud/beta/beyondcorp/client-connector/services/create @@ -77,7 +77,7 @@ REQUIRED FLAGS "config":{ "transportProtocol":"TCP", "destinationRoutes":[{ - "address":"196.0.0.1", + "address":"196.0.0.0", "netmask":"255.255.255.0" }] } diff --git a/gcloud/beta/beyondcorp/client-connector/services/get-iam-policy b/gcloud/beta/beyondcorp/client-connector/services/get-iam-policy new file mode 100644 index 000000000..4dfad9b2f --- /dev/null +++ b/gcloud/beta/beyondcorp/client-connector/services/get-iam-policy @@ -0,0 +1,96 @@ +NAME + gcloud beta beyondcorp client-connector services get-iam-policy - get the + IAM policy for a BeyondCorp client connector service + +SYNOPSIS + gcloud beta beyondcorp client-connector services get-iam-policy + (CLIENT_CONNECTOR_SERVICE : --location=LOCATION) [--filter=EXPRESSION] + [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Gets the IAM policy for a BeyondCorp client connector service. + +EXAMPLES + To get the IAM policy for a client connector service with ID + my-service-resource run: + + $ gcloud beta beyondcorp client-connector services get-iam-policy \ + my-service-resource --project=consumer-project-id \ + --location=us-central1 + +POSITIONAL ARGUMENTS + Client connector service resource - The BeyondCorp client connector + service for which to get the IAM policy. The arguments in this group can + be used to specify the attributes of this resource. (NOTE) Some attributes + are not given arguments in this group but can be set in other ways. To set + the project attribute: + ◆ provide the argument client_connector_service on the command line + with a fully specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + CLIENT_CONNECTOR_SERVICE + ID of the client_connector_service or fully qualified identifier for + the client_connector_service. To set the client_connector_service + attribute: + ▸ provide the argument client_connector_service on the command + line. + + This positional must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + The location of the BeyondCorp Enterprise client connector. + + To set the location attribute: + ▸ provide the argument client_connector_service on the command line + with a fully specified name; + ▸ provide the argument --location on the command line. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the beyondcorp/v1 API. The full documentation for this + API can be found at: https://cloud.google.com/ + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha beyondcorp client-connector services get-iam-policy + diff --git a/gcloud/beta/beyondcorp/client-connector/services/help b/gcloud/beta/beyondcorp/client-connector/services/help index 26dfa907b..46039288c 100644 --- a/gcloud/beta/beyondcorp/client-connector/services/help +++ b/gcloud/beta/beyondcorp/client-connector/services/help @@ -33,9 +33,15 @@ COMMANDS describe (BETA) Describe a BeyondCorp client connector service. + get-iam-policy + (BETA) Get the IAM policy for a BeyondCorp client connector service. + list (BETA) List BeyondCorp client connector service resources. + set-iam-policy + (BETA) Set the IAM policy for a BeyondCorp client connector service. + update (BETA) Update a BeyondCorp client connector service. diff --git a/gcloud/beta/beyondcorp/client-connector/services/set-iam-policy b/gcloud/beta/beyondcorp/client-connector/services/set-iam-policy new file mode 100644 index 000000000..e70cb95e7 --- /dev/null +++ b/gcloud/beta/beyondcorp/client-connector/services/set-iam-policy @@ -0,0 +1,77 @@ +NAME + gcloud beta beyondcorp client-connector services set-iam-policy - set the + IAM policy for a BeyondCorp client connector service + +SYNOPSIS + gcloud beta beyondcorp client-connector services set-iam-policy + (CLIENT_CONNECTOR_SERVICE : --location=LOCATION) POLICY_FILE + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Sets the IAM policy for the given BeyondCorp client connector + service. + +EXAMPLES + The following command will read an IAM policy defined in a JSON file + 'policy.json' and set it for the client connector service with ID + my-service-resource: + + $ gcloud beta beyondcorp client-connector services set-iam-policy \ + my-service-resource policy.json + +POSITIONAL ARGUMENTS + Client connector service resource - The BeyondCorp client connector + service for which to set the IAM policy. The arguments in this group can + be used to specify the attributes of this resource. (NOTE) Some attributes + are not given arguments in this group but can be set in other ways. To set + the project attribute: + ◆ provide the argument client_connector_service on the command line + with a fully specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + CLIENT_CONNECTOR_SERVICE + ID of the client_connector_service or fully qualified identifier for + the client_connector_service. To set the client_connector_service + attribute: + ▸ provide the argument client_connector_service on the command + line. + + This positional must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + The location of the BeyondCorp Enterprise client connector. + + To set the location attribute: + ▸ provide the argument client_connector_service on the command line + with a fully specified name; + ▸ provide the argument --location on the command line. + + POLICY_FILE + Path to a local JSON or YAML formatted file containing a valid policy. + + The output of the get-iam-policy command is a valid file, as is any + JSON or YAML file conforming to the structure of a Policy + (https://cloud.google.com/iam/reference/rest/v1/Policy). + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the beyondcorp/v1 API. The full documentation for this + API can be found at: https://cloud.google.com/ + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha beyondcorp client-connector services set-iam-policy + diff --git a/gcloud/beta/beyondcorp/client-connector/services/update b/gcloud/beta/beyondcorp/client-connector/services/update index 43b0c36d3..449bd7568 100644 --- a/gcloud/beta/beyondcorp/client-connector/services/update +++ b/gcloud/beta/beyondcorp/client-connector/services/update @@ -4,19 +4,36 @@ NAME SYNOPSIS gcloud beta beyondcorp client-connector services update - (CLIENT_CONNECTOR_SERVICE : --location=LOCATION) [--async] - [--display-name=DISPLAY_NAME] [GCLOUD_WIDE_FLAG ...] + (CLIENT_CONNECTOR_SERVICE : --location=LOCATION) + (--config-from-file=CONFIG_FROM_FILE + | --display-name=DISPLAY_NAME --ingress-config=INGRESS_CONFIG) + [--async] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) Update a BeyondCorp client connector service. + (BETA) Update a BeyondCorp client connector service. Note - Mutable fields + include - \ display_name, ingress.config.destination_routes. EXAMPLES + Note - Mutable fields include: display_name, + ingress.config.destination_routes. + The following command updates a client connector service with ID - my-service-resource in location us-central1: + my-service-resource with ingress config: $ gcloud beta beyondcorp client-connector services update \ my-service-resource --project=consumer-project-id \ - --location=us-central1 --display-name="my-new-resource" + --location=us-central1 --display-name="my-new-resource" \ + --ingress-config='{"destinationRoutes":[{"address":"196.0.0.1", + "netmask":"255.255.255.0"},{"address":"197.0.0.2","netmask":"255.25\ + 5.255.0"}]}' + + The following command updates a client connector service with ID + my-service-resource with configuration from file: + + $ gcloud beta beyondcorp client-connector services update \ + my-service-resource --project=consumer-project-id \ + --location=us-central1 \ + --config-from-file=/path/to/file/config.json POSITIONAL ARGUMENTS Client connector service resource - The BeyondCorp client connector @@ -49,18 +66,43 @@ POSITIONAL ARGUMENTS with a fully specified name; ▸ provide the argument --location on the command line. -FLAGS +REQUIRED FLAGS + Updated client connector service configuration. + + Exactly one of these must be specified: + + --config-from-file=CONFIG_FROM_FILE + Path to json file containing client connector service configuration. + Example - "/file/path/config.json" where config.json contains - { + "ingress":{ + "config":{ + "transportProtocol":"TCP", + "destinationRoutes":[{ + "address":"196.0.0.0", + "netmask":"255.255.255.0" + }] + } + }, + "displayName":"my-service-resource" + } + + --display-name=DISPLAY_NAME + An arbitrary user-provided name for the client connector service. The + display name should follow format - + ▸ Must be 6 to 30 characters in length. + ▸ Can only contain lowercase letters, numbers and hyphens. + ▸ Must start with a letter. + + --ingress-config=INGRESS_CONFIG + Ingress config for client gateways. Example - + {"destinationRoutes":[{"address":"196.0.0.0", + "netmask":"255.255.255.0"},{"address":"197.0.0.0","netmask":"255.255.255.0"}]}. + +OPTIONAL FLAGS --async Return immediately, without waiting for the operation in progress to complete. - --display-name=DISPLAY_NAME - An arbitrary user-provided name for the client connector service. The - display name should follow format - - ◆ Must be 6 to 30 characters in length. - ◆ Can only contain lowercase letters, numbers and hyphens. - ◆ Must start with a letter. - GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/beta/compute/commitments/create b/gcloud/beta/compute/commitments/create index 6bc5a9655..863ce8dc8 100644 --- a/gcloud/beta/compute/commitments/create +++ b/gcloud/beta/compute/commitments/create @@ -10,9 +10,10 @@ SYNOPSIS | [--reservation=RESERVATION : --reservation-zone=RESERVATION_ZONE --accelerator=[count=COUNT],[type=TYPE] --local-ssd=[interface=INTERFACE],[size=SIZE] - --machine-type=MACHINE_TYPE --min-cpu-platform=MIN_CPU_PLATFORM - --require-specific-reservation --vm-count=VM_COUNT - --share-setting=SHARE_SETTING + --machine-type=MACHINE_TYPE + --maintenance-interval=MAINTENANCE_INTERVAL + --min-cpu-platform=MIN_CPU_PLATFORM --require-specific-reservation + --vm-count=VM_COUNT --share-setting=SHARE_SETTING --share-with=SHARE_WITH,[SHARE_WITH,...]]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -160,6 +161,18 @@ OPTIONAL FLAGS custom-number_of_CPUs-amount_of_memory pattern, e.g. custom-32-29440. + --maintenance-interval=MAINTENANCE_INTERVAL + Specifies how infrastructure upgrades should be applied to the + VM. MAINTENANCE_INTERVAL must be (currently only one value is + supported): + + PERIODIC + VMs receive infrastructure and hypervisor updates on a + periodic basis, minimizing the number of maintenance + operations (live migrations or terminations) on an individual + VM. Security updates will still be applied as soon as they + are available. + --min-cpu-platform=MIN_CPU_PLATFORM Optional minimum CPU platform of the reservation to create. diff --git a/gcloud/beta/container/clusters/create b/gcloud/beta/container/clusters/create index 7ee3caa68..d87752c6e 100644 --- a/gcloud/beta/container/clusters/create +++ b/gcloud/beta/container/clusters/create @@ -4,8 +4,11 @@ NAME SYNOPSIS gcloud beta container clusters create NAME - [--accelerator=[type=TYPE,[count=COUNT],...]] [--addons=[ADDON,...]] - [--allow-route-overlap] [--async] + [--accelerator=[type=TYPE,[count=COUNT, + gpu-partition-size=GPU_PARTITION_SIZE, + gpu-sharing-strategy=GPU_SHARING_STRATEGY, + max-shared-clients-per-gpu=MAX_SHARED_CLIENTS_PER_GPU],...]] + [--addons=[ADDON,...]] [--allow-route-overlap] [--async] [--autoprovisioning-network-tags=TAGS,[TAGS,...]] [--autoscaling-profile=AUTOSCALING_PROFILE] [--boot-disk-kms-key=BOOT_DISK_KMS_KEY] @@ -120,7 +123,7 @@ POSITIONAL ARGUMENTS 40 characters. FLAGS - --accelerator=[type=TYPE,[count=COUNT],...] + --accelerator=[type=TYPE,[count=COUNT,gpu-partition-size=GPU_PARTITION_SIZE,gpu-sharing-strategy=GPU_SHARING_STRATEGY,max-shared-clients-per-gpu=MAX_SHARED_CLIENTS_PER_GPU],...] Attaches accelerators (e.g. GPUs) to all nodes. type @@ -133,6 +136,20 @@ FLAGS (Optional) The number of accelerators to attach to the instances. The default value is 1. + gpu-partition-size + (Optional) The GPU partition size used when running multi-instance + GPUs. For information about multi-instance GPUs, refer to: + https://cloud.google.com/kubernetes-engine/docs/how-to/gpus-multi + + gpu-sharing-strategy + (Optional) The GPU sharing strategy (e.g. time-sharing) to use. For + information about GPU sharing, refer to: + https://cloud.google.com/kubernetes-engine/docs/concepts/timesharing-gpus + + max-shared-clients-per-gpu + (Optional) The max number of containers allowed to share each GPU + on the node. This field is used together with gpu-sharing-strategy. + --addons=[ADDON,...] Addons (https://cloud.google.com/kubernetes-engine/docs/reference/rest/v1/projects.locations.clusters#Cluster.AddonsConfig) diff --git a/gcloud/beta/container/node-pools/create b/gcloud/beta/container/node-pools/create index 60b0fe84c..f55874e2a 100644 --- a/gcloud/beta/container/node-pools/create +++ b/gcloud/beta/container/node-pools/create @@ -4,7 +4,10 @@ NAME SYNOPSIS gcloud beta container node-pools create NAME - [--accelerator=[type=TYPE,[count=COUNT],...]] + [--accelerator=[type=TYPE,[count=COUNT, + gpu-partition-size=GPU_PARTITION_SIZE, + gpu-sharing-strategy=GPU_SHARING_STRATEGY, + max-shared-clients-per-gpu=MAX_SHARED_CLIENTS_PER_GPU],...]] [--boot-disk-kms-key=BOOT_DISK_KMS_KEY] [--cluster=CLUSTER] [--disable-pod-cidr-overprovision] [--disk-size=DISK_SIZE] [--disk-type=DISK_TYPE] [--enable-autoprovisioning] @@ -70,7 +73,7 @@ POSITIONAL ARGUMENTS The name of the node pool to create. FLAGS - --accelerator=[type=TYPE,[count=COUNT],...] + --accelerator=[type=TYPE,[count=COUNT,gpu-partition-size=GPU_PARTITION_SIZE,gpu-sharing-strategy=GPU_SHARING_STRATEGY,max-shared-clients-per-gpu=MAX_SHARED_CLIENTS_PER_GPU],...] Attaches accelerators (e.g. GPUs) to all nodes. type @@ -83,6 +86,20 @@ FLAGS (Optional) The number of accelerators to attach to the instances. The default value is 1. + gpu-partition-size + (Optional) The GPU partition size used when running multi-instance + GPUs. For information about multi-instance GPUs, refer to: + https://cloud.google.com/kubernetes-engine/docs/how-to/gpus-multi + + gpu-sharing-strategy + (Optional) The GPU sharing strategy (e.g. time-sharing) to use. For + information about GPU sharing, refer to: + https://cloud.google.com/kubernetes-engine/docs/concepts/timesharing-gpus + + max-shared-clients-per-gpu + (Optional) The max number of containers allowed to share each GPU + on the node. This field is used together with gpu-sharing-strategy. + --boot-disk-kms-key=BOOT_DISK_KMS_KEY The Customer Managed Encryption Key used to encrypt the boot disk attached to each node in the node pool. This should be of the form diff --git a/gcloud/beta/deploy/releases/create b/gcloud/beta/deploy/releases/create index edeadfded..9cf1b4461 100644 --- a/gcloud/beta/deploy/releases/create +++ b/gcloud/beta/deploy/releases/create @@ -34,6 +34,13 @@ EXAMPLES --delivery-pipeline=my-pipeline --region=us-central1 \ --to-target=prod + The following command creates a release without a skaffold.yaml as input, + and generates one for you: + + $ gcloud beta deploy releases create my-release \ + --delivery-pipeline=my-pipeline --region=us-central1 \ + --from-k8s-manifest=path/to/kubernetes/k8.yaml + The current UTC date and time on the machine running the gcloud command can also be included in the release name by adding $DATE and $TIME parameters: diff --git a/gcloud/beta/firebase/test/android/run b/gcloud/beta/firebase/test/android/run index c9d2805a7..a5daa31cd 100644 --- a/gcloud/beta/firebase/test/android/run +++ b/gcloud/beta/firebase/test/android/run @@ -363,21 +363,25 @@ FLAGS is no guarantee that test cases will be distributed with perfect uniformity. - The number of shards should be less than the total number of test - cases. When one or more physical devices are selected, the number of - shards specified must be >= 1 and <= 50. When no physical devices are - selected, the number of shards specified must be >= 1 and <= 500. + The number of shards specified must always be a positive number that + is no greater than the total number of test cases. When you select + one or more physical devices, the number of shards specified must be + <= 50. When you select one or more ARM virtual devices, the number of + shards specified must be <= 100. When you select only x86 virtual + devices, the number of shards specified must be <= 500. --test-targets-for-shard=TEST_TARGETS_FOR_SHARD Specifies a group of packages, classes, and/or test cases to run in - each shard (a group of test cases). The shards are run in parallel on - separate devices. You can repeat this flag up to 50 times to specify - multiple shards when one or more physical devices are selected, or up - to 500 times when no physical devices are selected. + each shard (a group of test cases). Each time this flag is repeated, + it creates a new shard. The shards are run in parallel on separate + devices. You can repeat this flag up to 50 times when you select one + or more physical devices, up to 100 times when you select one or more + ARM virtual devices, and up to 500 times when you select only x86 + virtual devices. Note: If you include the flags --environment-variable or - --test-targets when running --test-targets-for-shard, the flags are - applied to all the shards you create. + --test-targets when running --test-targets-for-shard, the former + flags are applied to all of the shards you create. Examples: @@ -391,7 +395,7 @@ FLAGS "class com.foo.ClassForShard2#testMethod1,com.foo.ClassForShard2#testMethod2" To specify both package and class in the same shard, separate package - and class with semi-colons: + and class with semicolons: --test-targets-for-shard "class com.foo.ClassForShard3;package com.package.for.shard3" diff --git a/gcloud/beta/iam/workload-identity-pools/create-cred-config b/gcloud/beta/iam/workload-identity-pools/create-cred-config index 86779b4d0..1c9d9f997 100644 --- a/gcloud/beta/iam/workload-identity-pools/create-cred-config +++ b/gcloud/beta/iam/workload-identity-pools/create-cred-config @@ -11,10 +11,11 @@ SYNOPSIS [--credential-source-field-name=CREDENTIAL_SOURCE_FIELD_NAME] [--credential-source-headers=[key=value,...]] [--credential-source-type=CREDENTIAL_SOURCE_TYPE] [--enable-imdsv2] - [--service-account=SERVICE_ACCOUNT] [--subject-token-type=SUBJECT_TOKEN_TYPE] [--executable-output-file=EXECUTABLE_OUTPUT_FILE --executable-timeout-millis=EXECUTABLE_TIMEOUT_MILLIS] + [--service-account=SERVICE_ACCOUNT + : --service-account-token-lifetime-seconds=SERVICE_ACCOUNT_TOKEN_LIFETIME_SECONDS] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -117,9 +118,6 @@ OPTIONAL FLAGS Adds the AWS IMDSv2 session token Url to the credential source to enforce the AWS IMDSv2 flow. - --service-account=SERVICE_ACCOUNT - The email of the service account to impersonate. - --subject-token-type=SUBJECT_TOKEN_TYPE The type of token being used for authorization. @@ -132,6 +130,22 @@ OPTIONAL FLAGS The timeout duration in milliseconds for waiting for the executable to finish. + Service account impersonation options. + + --service-account=SERVICE_ACCOUNT + The email of the service account to impersonate. + + This flag must be specified if any of the other arguments in this + group are specified. + + --service-account-token-lifetime-seconds=SERVICE_ACCOUNT_TOKEN_LIFETIME_SECONDS + The desired lifetime duration of the service account access token in + seconds. This defaults to one hour when not provided. If a lifetime + greater than one hour is required, the service account must be added + as an allowed value in an Organization Policy that enforces the + constraints/iam.allowServiceAccountCredentialLifetimeExtension + constraint. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/beta/iap/tcp/dest-groups/add-iam-policy-binding b/gcloud/beta/iap/tcp/dest-groups/add-iam-policy-binding index e42ed4120..ebea1380f 100644 --- a/gcloud/beta/iap/tcp/dest-groups/add-iam-policy-binding +++ b/gcloud/beta/iap/tcp/dest-groups/add-iam-policy-binding @@ -121,8 +121,10 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud iap tcp dest-groups add-iam-policy-binding $ gcloud alpha iap tcp dest-groups add-iam-policy-binding diff --git a/gcloud/beta/iap/tcp/dest-groups/create b/gcloud/beta/iap/tcp/dest-groups/create index e926502b5..7e8799841 100644 --- a/gcloud/beta/iap/tcp/dest-groups/create +++ b/gcloud/beta/iap/tcp/dest-groups/create @@ -61,8 +61,10 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud iap tcp dest-groups create $ gcloud alpha iap tcp dest-groups create diff --git a/gcloud/beta/iap/tcp/dest-groups/delete b/gcloud/beta/iap/tcp/dest-groups/delete index 85d36ece3..1d18c2771 100644 --- a/gcloud/beta/iap/tcp/dest-groups/delete +++ b/gcloud/beta/iap/tcp/dest-groups/delete @@ -39,8 +39,10 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud iap tcp dest-groups delete $ gcloud alpha iap tcp dest-groups delete diff --git a/gcloud/beta/iap/tcp/dest-groups/describe b/gcloud/beta/iap/tcp/dest-groups/describe index 9a214970f..d19f084d8 100644 --- a/gcloud/beta/iap/tcp/dest-groups/describe +++ b/gcloud/beta/iap/tcp/dest-groups/describe @@ -39,8 +39,10 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud iap tcp dest-groups describe $ gcloud alpha iap tcp dest-groups describe diff --git a/gcloud/beta/iap/tcp/dest-groups/get-iam-policy b/gcloud/beta/iap/tcp/dest-groups/get-iam-policy index 2aae21d6f..fea5c2cfc 100644 --- a/gcloud/beta/iap/tcp/dest-groups/get-iam-policy +++ b/gcloud/beta/iap/tcp/dest-groups/get-iam-policy @@ -72,8 +72,10 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud iap tcp dest-groups get-iam-policy $ gcloud alpha iap tcp dest-groups get-iam-policy diff --git a/gcloud/beta/iap/tcp/dest-groups/help b/gcloud/beta/iap/tcp/dest-groups/help index 0323df97e..581fc3722 100644 --- a/gcloud/beta/iap/tcp/dest-groups/help +++ b/gcloud/beta/iap/tcp/dest-groups/help @@ -46,8 +46,10 @@ COMMANDS (BETA) Update the IAP TCP Destination Group resource. NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud iap tcp dest-groups $ gcloud alpha iap tcp dest-groups diff --git a/gcloud/beta/iap/tcp/dest-groups/list b/gcloud/beta/iap/tcp/dest-groups/list index 78d8a9a66..ab91dd0f0 100644 --- a/gcloud/beta/iap/tcp/dest-groups/list +++ b/gcloud/beta/iap/tcp/dest-groups/list @@ -83,8 +83,10 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud iap tcp dest-groups list $ gcloud alpha iap tcp dest-groups list diff --git a/gcloud/beta/iap/tcp/dest-groups/remove-iam-policy-binding b/gcloud/beta/iap/tcp/dest-groups/remove-iam-policy-binding index 930c8c685..a2e8f2f75 100644 --- a/gcloud/beta/iap/tcp/dest-groups/remove-iam-policy-binding +++ b/gcloud/beta/iap/tcp/dest-groups/remove-iam-policy-binding @@ -137,8 +137,10 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud iap tcp dest-groups remove-iam-policy-binding $ gcloud alpha iap tcp dest-groups remove-iam-policy-binding diff --git a/gcloud/beta/iap/tcp/dest-groups/set-iam-policy b/gcloud/beta/iap/tcp/dest-groups/set-iam-policy index df8bb006e..2bd36e6ce 100644 --- a/gcloud/beta/iap/tcp/dest-groups/set-iam-policy +++ b/gcloud/beta/iap/tcp/dest-groups/set-iam-policy @@ -51,8 +51,10 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud iap tcp dest-groups set-iam-policy $ gcloud alpha iap tcp dest-groups set-iam-policy diff --git a/gcloud/beta/iap/tcp/dest-groups/update b/gcloud/beta/iap/tcp/dest-groups/update index 1ec9610db..ac7b80eab 100644 --- a/gcloud/beta/iap/tcp/dest-groups/update +++ b/gcloud/beta/iap/tcp/dest-groups/update @@ -67,8 +67,10 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud iap tcp dest-groups update $ gcloud alpha iap tcp dest-groups update diff --git a/gcloud/beta/iap/tcp/help b/gcloud/beta/iap/tcp/help index 4c0e2cfe9..06c395576 100644 --- a/gcloud/beta/iap/tcp/help +++ b/gcloud/beta/iap/tcp/help @@ -19,8 +19,10 @@ GROUPS (BETA) Manage IAP TCP Destination Group resources. NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud iap tcp $ gcloud alpha iap tcp diff --git a/gcloud/beta/logging/buckets/create b/gcloud/beta/logging/buckets/create index bc1b12d66..39cb4e205 100644 --- a/gcloud/beta/logging/buckets/create +++ b/gcloud/beta/logging/buckets/create @@ -3,7 +3,7 @@ NAME SYNOPSIS gcloud beta logging buckets create BUCKET_ID --location=LOCATION - [--description=DESCRIPTION] + [--description=DESCRIPTION] [--index=[KEY=VALUE, ...,...]] [--restricted-fields=[RESTRICTED_FIELD,...]] [--retention-days=RETENTION_DAYS] [GCLOUD_WIDE_FLAG ...] @@ -26,6 +26,11 @@ EXAMPLES $ gcloud beta logging buckets create my-bucket --location=us-central1 + To create a bucket with custom index of 'jsonPayload.foo', run: + + $ gcloud beta logging buckets create my-bucket \ + --index=fieldPath=jsonPayload.foo,type=INDEX_TYPE_STRING + POSITIONAL ARGUMENTS BUCKET_ID ID of the bucket to create. @@ -39,6 +44,22 @@ OPTIONAL FLAGS --description=DESCRIPTION A textual description for the bucket. + --index=[KEY=VALUE, ...,...] + Specify an index to be added to the log bucket. This flag can be + repeated. The fieldPath and type attributes are required. For example: + --index=fieldPath=jsonPayload.foo,type=INDEX_TYPE_STRING. The following + keys are accepted: + + fieldPath + The LogEntry field path to index. For example: + jsonPayload.request.status. Paths are limited to 800 characters and + can include only letters, digits, underscores, hyphens, and + periods. + + type + The type of data in this index. For example: INDEX_TYPE_STRING + Supported types are INDEX_TYPE_STRING and INDEX_TYPE_INTEGER. + --restricted-fields=[RESTRICTED_FIELD,...] Comma-separated list of field paths that require permission checks in this bucket. The following fields and their children are eligible: diff --git a/gcloud/beta/logging/buckets/update b/gcloud/beta/logging/buckets/update index 51733a3b1..4a08ad61f 100644 --- a/gcloud/beta/logging/buckets/update +++ b/gcloud/beta/logging/buckets/update @@ -3,9 +3,12 @@ NAME SYNOPSIS gcloud beta logging buckets update BUCKET_ID --location=LOCATION + [--add-index=[KEY=VALUE, ...,...]] [--clear-indexes] [--description=DESCRIPTION] [--locked] + [--remove-indexes=[FIELD PATH,...]] [--restricted-fields=[RESTRICTED_FIELD,...]] - [--retention-days=RETENTION_DAYS] [GCLOUD_WIDE_FLAG ...] + [--retention-days=RETENTION_DAYS] [--update-index=[KEY=VALUE, ...,...]] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) Updates the properties of a bucket. @@ -16,6 +19,26 @@ EXAMPLES $ gcloud beta logging buckets update my-bucket --location=global \ --description=my-new-description + To update a bucket in your project and remove all indexes, run: + + $ gcloud beta logging buckets update my-bucket --location=global \ + --clear-indexes + + To update a bucket in your project and remove an index, run: + + $ gcloud beta logging buckets update my-bucket --location=global \ + --remove-indexes=jsonPayload.foo2 + + To update a bucket in your project and add an index, run: + + $ gcloud beta logging buckets update my-bucket --location=global \ + --add-index=fieldPath=jsonPayload.foo2,type=INDEX_TYPE_STRING + + To update a bucket in your project and update an existing index, run: + + $ gcloud beta logging buckets update my-bucket --location=global \ + --update-index=fieldPath=jsonPayload.foo,type=INDEX_TYPE_INTEGER + POSITIONAL ARGUMENTS BUCKET_ID The id of the bucket to update. @@ -25,6 +48,25 @@ REQUIRED FLAGS Location of the bucket. OPTIONAL FLAGS + --add-index=[KEY=VALUE, ...,...] + Add an index to be added to the log bucket. This flag can be repeated. + The fieldPath and type attributes are required. For example: + --index=fieldPath=jsonPayload.foo,type=INDEX_TYPE_STRING. The following + keys are accepted: + + fieldPath + The LogEntry field path to index. For example: + jsonPayload.request.status. Paths are limited to 800 characters and + can include only letters, digits, underscores, hyphens, and + periods. + + type + The type of data in this index. For example: INDEX_TYPE_STRING + Supported types are strings and integers. + + --clear-indexes + Remove all logging indexes from the bucket. + --description=DESCRIPTION A new description for the bucket. @@ -32,12 +74,33 @@ OPTIONAL FLAGS Lock the bucket and prevent it from being modified or deleted (unless it is empty). + --remove-indexes=[FIELD PATH,...] + Specify the field path of the logging index(es) to delete. + --restricted-fields=[RESTRICTED_FIELD,...] A new set of restricted fields for the bucket. --retention-days=RETENTION_DAYS A new retention period for the bucket. + --update-index=[KEY=VALUE, ...,...] + Update an index to be added to the log bucket. This will update the + type of the index, and also update its createTime to the new update + time. This flag can be repeated. The fieldPath and type attributes are + required. For example: + --index=fieldPath=jsonPayload.foo,type=INDEX_TYPE_STRING. The following + keys are accepted: + + fieldPath + The LogEntry field path to index. For example: + jsonPayload.request.status. Paths are limited to 800 characters and + can include only letters, digits, underscores, hyphens, and + periods. + + type + The type of data in this index. For example: INDEX_TYPE_STRING + Supported types are strings and integers. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/beta/recommender/insight-type-config/describe b/gcloud/beta/recommender/insight-type-config/describe index 228f10170..d9a86c438 100644 --- a/gcloud/beta/recommender/insight-type-config/describe +++ b/gcloud/beta/recommender/insight-type-config/describe @@ -31,10 +31,10 @@ REQUIRED FLAGS Exactly one of these must be specified: --organization=ORGANIZATION_ID - The Google Cloud Organization ID to use for this invocation. + The Google Cloud organization ID to use for this invocation. --project=PROJECT_ID - The Google Cloud Project ID. Overrides the default core/project + The Google Cloud project ID. Overrides the default core/project property value for this command invocation. GCLOUD WIDE FLAGS @@ -46,5 +46,8 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud recommender insight-type-config describe diff --git a/gcloud/beta/recommender/insight-type-config/help b/gcloud/beta/recommender/insight-type-config/help index fd8310ca6..be3a31279 100644 --- a/gcloud/beta/recommender/insight-type-config/help +++ b/gcloud/beta/recommender/insight-type-config/help @@ -23,5 +23,8 @@ COMMANDS (BETA) Update an insight type configuration. NOTES - This command is currently in beta and might change without notice. + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud recommender insight-type-config diff --git a/gcloud/beta/recommender/insight-type-config/update b/gcloud/beta/recommender/insight-type-config/update index 27bc77bf1..768f605e0 100644 --- a/gcloud/beta/recommender/insight-type-config/update +++ b/gcloud/beta/recommender/insight-type-config/update @@ -36,10 +36,10 @@ REQUIRED FLAGS Exactly one of these must be specified: --organization=ORGANIZATION_ID - The Google Cloud Organization ID to use for this invocation. + The Google Cloud organization ID to use for this invocation. --project=PROJECT_ID - The Google Cloud Project ID. Overrides the default core/project + The Google Cloud project ID. Overrides the default core/project property value for this command invocation. OPTIONAL FLAGS @@ -66,5 +66,8 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud recommender insight-type-config update diff --git a/gcloud/beta/recommender/insights/describe b/gcloud/beta/recommender/insights/describe index bf938bc6a..1ecb3c781 100644 --- a/gcloud/beta/recommender/insights/describe +++ b/gcloud/beta/recommender/insights/describe @@ -36,14 +36,14 @@ REQUIRED FLAGS Exactly one of these must be specified: --billing-account=BILLING_ACCOUNT - The Google Cloud Platform Billing Account ID to use for this + The Google Cloud Platform billing account ID to use for this invocation. --folder=FOLDER_ID - Folder ID to use for this invocation. + The Google Cloud Platform folder ID to use for this invocation. --organization=ORGANIZATION_ID - The Google Cloud Platform Organization ID to use for this invocation. + The Google Cloud Platform organization ID to use for this invocation. --project=PROJECT_ID The Google Cloud Platform project ID. Overrides the default diff --git a/gcloud/beta/recommender/insights/list b/gcloud/beta/recommender/insights/list index 48b668e84..56710330a 100644 --- a/gcloud/beta/recommender/insights/list +++ b/gcloud/beta/recommender/insights/list @@ -37,14 +37,14 @@ REQUIRED FLAGS Exactly one of these must be specified: --billing-account=BILLING_ACCOUNT - The Google Cloud Platform Billing Account ID to use for this + The Google Cloud Platform billing account ID to use for this invocation. --folder=FOLDER_ID - Folder ID to use for this invocation. + The Google Cloud Platform folder ID to use for this invocation. --organization=ORGANIZATION_ID - The Google Cloud Platform Organization ID to use for this invocation. + The Google Cloud Platform organization ID to use for this invocation. --project=PROJECT_ID The Google Cloud Platform project ID. Overrides the default diff --git a/gcloud/beta/recommender/insights/mark-accepted b/gcloud/beta/recommender/insights/mark-accepted index b30f67de2..486c85e97 100644 --- a/gcloud/beta/recommender/insights/mark-accepted +++ b/gcloud/beta/recommender/insights/mark-accepted @@ -42,14 +42,14 @@ REQUIRED FLAGS Exactly one of these must be specified: --billing-account=BILLING_ACCOUNT - The Google Cloud Platform Billing Account ID to use for this + The Google Cloud Platform billing account ID to use for this invocation. --folder=FOLDER_ID - Folder ID to use for this invocation. + The Google Cloud Platform folder ID to use for this invocation. --organization=ORGANIZATION_ID - The Google Cloud Platform Organization ID to use for this invocation. + The Google Cloud Platform organization ID to use for this invocation. --project=PROJECT_ID The Google Cloud Platform project ID. Overrides the default diff --git a/gcloud/beta/recommender/recommendations/describe b/gcloud/beta/recommender/recommendations/describe index 2747bbdaa..f845f9619 100644 --- a/gcloud/beta/recommender/recommendations/describe +++ b/gcloud/beta/recommender/recommendations/describe @@ -38,14 +38,14 @@ REQUIRED FLAGS Exactly one of these must be specified: --billing-account=BILLING_ACCOUNT - The Google Cloud Platform Billing Account ID to use for this + The Google Cloud Platform billing account ID to use for this invocation. --folder=FOLDER_ID - Folder ID to use for this invocation. + The Google Cloud Platform folder ID to use for this invocation. --organization=ORGANIZATION_ID - The Google Cloud Platform Organization ID to use for this invocation. + The Google Cloud Platform organization ID to use for this invocation. --project=PROJECT_ID The Google Cloud Platform project ID. Overrides the default diff --git a/gcloud/beta/recommender/recommendations/list b/gcloud/beta/recommender/recommendations/list index ae8e99149..18f01ec30 100644 --- a/gcloud/beta/recommender/recommendations/list +++ b/gcloud/beta/recommender/recommendations/list @@ -37,14 +37,14 @@ REQUIRED FLAGS Exactly one of these must be specified: --billing-account=BILLING_ACCOUNT - The Google Cloud Platform Billing Account ID to use for this + The Google Cloud Platform billing account ID to use for this invocation. --folder=FOLDER_ID - Folder ID to use for this invocation. + The Google Cloud Platform folder ID to use for this invocation. --organization=ORGANIZATION_ID - The Google Cloud Platform Organization ID to use for this invocation. + The Google Cloud Platform organization ID to use for this invocation. --project=PROJECT_ID The Google Cloud Platform project ID. Overrides the default diff --git a/gcloud/beta/recommender/recommendations/mark-claimed b/gcloud/beta/recommender/recommendations/mark-claimed index d8f65e8a4..7457af462 100644 --- a/gcloud/beta/recommender/recommendations/mark-claimed +++ b/gcloud/beta/recommender/recommendations/mark-claimed @@ -45,14 +45,14 @@ REQUIRED FLAGS Exactly one of these must be specified: --billing-account=BILLING_ACCOUNT - The Google Cloud Platform Billing Account ID to use for this + The Google Cloud Platform billing account ID to use for this invocation. --folder=FOLDER_ID - Folder ID to use for this invocation. + The Google Cloud Platform folder ID to use for this invocation. --organization=ORGANIZATION_ID - The Google Cloud Platform Organization ID to use for this invocation. + The Google Cloud Platform organization ID to use for this invocation. --project=PROJECT_ID The Google Cloud Platform project ID. Overrides the default diff --git a/gcloud/beta/recommender/recommendations/mark-failed b/gcloud/beta/recommender/recommendations/mark-failed index 228aadf10..8584fb149 100644 --- a/gcloud/beta/recommender/recommendations/mark-failed +++ b/gcloud/beta/recommender/recommendations/mark-failed @@ -42,14 +42,14 @@ REQUIRED FLAGS Exactly one of these must be specified: --billing-account=BILLING_ACCOUNT - The Google Cloud Platform Billing Account ID to use for this + The Google Cloud Platform billing account ID to use for this invocation. --folder=FOLDER_ID - Folder ID to use for this invocation. + The Google Cloud Platform folder ID to use for this invocation. --organization=ORGANIZATION_ID - The Google Cloud Platform Organization ID to use for this invocation. + The Google Cloud Platform organization ID to use for this invocation. --project=PROJECT_ID The Google Cloud Platform project ID. Overrides the default diff --git a/gcloud/beta/recommender/recommendations/mark-succeeded b/gcloud/beta/recommender/recommendations/mark-succeeded index 286d49734..dfa1020db 100644 --- a/gcloud/beta/recommender/recommendations/mark-succeeded +++ b/gcloud/beta/recommender/recommendations/mark-succeeded @@ -42,14 +42,14 @@ REQUIRED FLAGS Exactly one of these must be specified: --billing-account=BILLING_ACCOUNT - The Google Cloud Platform Billing Account ID to use for this + The Google Cloud Platform billing account ID to use for this invocation. --folder=FOLDER_ID - Folder ID to use for this invocation. + The Google Cloud Platform folder ID to use for this invocation. --organization=ORGANIZATION_ID - The Google Cloud Platform Organization ID to use for this invocation. + The Google Cloud Platform organization ID to use for this invocation. --project=PROJECT_ID The Google Cloud Platform project ID. Overrides the default diff --git a/gcloud/beta/recommender/recommender-config/describe b/gcloud/beta/recommender/recommender-config/describe index a09068db6..84b09683a 100644 --- a/gcloud/beta/recommender/recommender-config/describe +++ b/gcloud/beta/recommender/recommender-config/describe @@ -31,10 +31,10 @@ REQUIRED FLAGS Exactly one of these must be specified: --organization=ORGANIZATION_ID - The Google Cloud Organization ID to use for this invocation. + The Google Cloud organization ID to use for this invocation. --project=PROJECT_ID - The Google Cloud Project ID. Overrides the default core/project + The Google Cloud project ID. Overrides the default core/project property value for this command invocation. GCLOUD WIDE FLAGS @@ -46,5 +46,8 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud recommender recommender-config describe diff --git a/gcloud/beta/recommender/recommender-config/help b/gcloud/beta/recommender/recommender-config/help index 1ad675189..15fb07644 100644 --- a/gcloud/beta/recommender/recommender-config/help +++ b/gcloud/beta/recommender/recommender-config/help @@ -23,5 +23,8 @@ COMMANDS (BETA) Update a recommender configuration. NOTES - This command is currently in beta and might change without notice. + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud recommender recommender-config diff --git a/gcloud/beta/recommender/recommender-config/update b/gcloud/beta/recommender/recommender-config/update index 4a8f7303c..f1e77ea2b 100644 --- a/gcloud/beta/recommender/recommender-config/update +++ b/gcloud/beta/recommender/recommender-config/update @@ -36,10 +36,10 @@ REQUIRED FLAGS Exactly one of these must be specified: --organization=ORGANIZATION_ID - The Google Cloud Organization ID to use for this invocation. + The Google Cloud organization ID to use for this invocation. --project=PROJECT_ID - The Google Cloud Project ID. Overrides the default core/project + The Google Cloud project ID. Overrides the default core/project property value for this command invocation. OPTIONAL FLAGS @@ -65,5 +65,8 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud recommender recommender-config update diff --git a/gcloud/compute/os-config/help b/gcloud/compute/os-config/help index b7ff8856e..c69e8784c 100644 --- a/gcloud/compute/os-config/help +++ b/gcloud/compute/os-config/help @@ -3,7 +3,7 @@ NAME instances SYNOPSIS - gcloud compute os-config GROUP [GCLOUD_WIDE_FLAG ...] + gcloud compute os-config GROUP | COMMAND [GCLOUD_WIDE_FLAG ...] DESCRIPTION Manage OS Config tasks for Compute Engine VM instances. @@ -34,6 +34,13 @@ GROUPS vulnerability-reports Display vulnerability reports for a Compute Engine VM. +COMMANDS + COMMAND is one of the following: + + troubleshoot + Troubleshoot issues with the setup of VM Manager on a specified VM + instance. + NOTES These variants are also available: diff --git a/gcloud/compute/os-config/troubleshoot b/gcloud/compute/os-config/troubleshoot new file mode 100644 index 000000000..50fefec6c --- /dev/null +++ b/gcloud/compute/os-config/troubleshoot @@ -0,0 +1,73 @@ +NAME + gcloud compute os-config troubleshoot - troubleshoot issues with the setup + of VM Manager on a specified VM instance + +SYNOPSIS + gcloud compute os-config troubleshoot INSTANCE_NAME [--zone=ZONE] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + gcloud compute os-config troubleshoot troubleshoots issues with the setup + of VM Manager on a specified VM instance + + The troubleshoot command investigates the following settings or + configurations for your VM Manager setup: + + ▪ Checks if the OS Config API is enabled in the project. + ▪ Checks if the required metadata is set up correctly in the VM + instance. + ▪ Checks if the latest version of the OS Config agent is running on the + VM instance. + ▪ Checks if a service account is attached to the VM instance. + ▪ Checks if the VM Manager service agent is enabled. + ▪ Checks if the VM instance has a public IP or Private Google Access. + +EXAMPLES + To troubleshoot an instance named my-instance in zone us-west1-a, run + + $ gcloud compute os-config troubleshoot my-instance --zone=us-west1-a + +POSITIONAL ARGUMENTS + INSTANCE_NAME + Name of the instance to operate on. For details on valid instance + names, refer to the criteria documented under the field 'name' at: + https://cloud.google.com/compute/docs/reference/rest/v1/instances + +FLAGS + --zone=ZONE + Zone of the instance to operate on. If not specified, you might be + prompted to select a zone (interactive mode only). gcloud attempts to + identify the appropriate zone by searching for resources in your + currently active project. If the zone cannot be determined, gcloud + prompts you for a selection with all available Google Cloud Platform + zones. + + To avoid prompting when this flag is omitted, the user can set the + compute/zone property: + + $ gcloud config set compute/zone ZONE + + A list of zones can be fetched by running: + + $ gcloud compute zones list + + To unset the property, run: + + $ gcloud config unset compute/zone + + Alternatively, the zone can be stored in the environment variable + CLOUDSDK_COMPUTE_ZONE. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This variant is also available: + + $ gcloud alpha compute os-config troubleshoot + diff --git a/gcloud/container/clusters/create b/gcloud/container/clusters/create index 16f9d8227..b7f14bba2 100644 --- a/gcloud/container/clusters/create +++ b/gcloud/container/clusters/create @@ -3,7 +3,10 @@ NAME SYNOPSIS gcloud container clusters create NAME - [--accelerator=[type=TYPE,[count=COUNT],...]] + [--accelerator=[type=TYPE,[count=COUNT, + gpu-partition-size=GPU_PARTITION_SIZE, + gpu-sharing-strategy=GPU_SHARING_STRATEGY, + max-shared-clients-per-gpu=MAX_SHARED_CLIENTS_PER_GPU],...]] [--additional-zones=ZONE,[ZONE,...]] [--addons=[ADDON,...]] [--async] [--autoprovisioning-network-tags=TAGS,[TAGS,...]] [--autoscaling-profile=AUTOSCALING_PROFILE] @@ -112,7 +115,7 @@ POSITIONAL ARGUMENTS 40 characters. FLAGS - --accelerator=[type=TYPE,[count=COUNT],...] + --accelerator=[type=TYPE,[count=COUNT,gpu-partition-size=GPU_PARTITION_SIZE,gpu-sharing-strategy=GPU_SHARING_STRATEGY,max-shared-clients-per-gpu=MAX_SHARED_CLIENTS_PER_GPU],...] Attaches accelerators (e.g. GPUs) to all nodes. type @@ -125,6 +128,20 @@ FLAGS (Optional) The number of accelerators to attach to the instances. The default value is 1. + gpu-partition-size + (Optional) The GPU partition size used when running multi-instance + GPUs. For information about multi-instance GPUs, refer to: + https://cloud.google.com/kubernetes-engine/docs/how-to/gpus-multi + + gpu-sharing-strategy + (Optional) The GPU sharing strategy (e.g. time-sharing) to use. For + information about GPU sharing, refer to: + https://cloud.google.com/kubernetes-engine/docs/concepts/timesharing-gpus + + max-shared-clients-per-gpu + (Optional) The max number of containers allowed to share each GPU + on the node. This field is used together with gpu-sharing-strategy. + --additional-zones=ZONE,[ZONE,...] (DEPRECATED) The set of additional zones in which the specified node footprint should be replicated. All zones must be in the same region as diff --git a/gcloud/container/node-pools/create b/gcloud/container/node-pools/create index d15e53fa8..94c3648c7 100644 --- a/gcloud/container/node-pools/create +++ b/gcloud/container/node-pools/create @@ -4,7 +4,10 @@ NAME SYNOPSIS gcloud container node-pools create NAME - [--accelerator=[type=TYPE,[count=COUNT],...]] + [--accelerator=[type=TYPE,[count=COUNT, + gpu-partition-size=GPU_PARTITION_SIZE, + gpu-sharing-strategy=GPU_SHARING_STRATEGY, + max-shared-clients-per-gpu=MAX_SHARED_CLIENTS_PER_GPU],...]] [--boot-disk-kms-key=BOOT_DISK_KMS_KEY] [--cluster=CLUSTER] [--disk-size=DISK_SIZE] [--disk-type=DISK_TYPE] [--enable-autoprovisioning] [--enable-autorepair] @@ -68,7 +71,7 @@ POSITIONAL ARGUMENTS The name of the node pool to create. FLAGS - --accelerator=[type=TYPE,[count=COUNT],...] + --accelerator=[type=TYPE,[count=COUNT,gpu-partition-size=GPU_PARTITION_SIZE,gpu-sharing-strategy=GPU_SHARING_STRATEGY,max-shared-clients-per-gpu=MAX_SHARED_CLIENTS_PER_GPU],...] Attaches accelerators (e.g. GPUs) to all nodes. type @@ -81,6 +84,20 @@ FLAGS (Optional) The number of accelerators to attach to the instances. The default value is 1. + gpu-partition-size + (Optional) The GPU partition size used when running multi-instance + GPUs. For information about multi-instance GPUs, refer to: + https://cloud.google.com/kubernetes-engine/docs/how-to/gpus-multi + + gpu-sharing-strategy + (Optional) The GPU sharing strategy (e.g. time-sharing) to use. For + information about GPU sharing, refer to: + https://cloud.google.com/kubernetes-engine/docs/concepts/timesharing-gpus + + max-shared-clients-per-gpu + (Optional) The max number of containers allowed to share each GPU + on the node. This field is used together with gpu-sharing-strategy. + --boot-disk-kms-key=BOOT_DISK_KMS_KEY The Customer Managed Encryption Key used to encrypt the boot disk attached to each node in the node pool. This should be of the form diff --git a/gcloud/deploy/releases/create b/gcloud/deploy/releases/create index ed8c21bad..e8ca30aae 100644 --- a/gcloud/deploy/releases/create +++ b/gcloud/deploy/releases/create @@ -34,6 +34,13 @@ EXAMPLES --delivery-pipeline=my-pipeline --region=us-central1 \ --to-target=prod + The following command creates a release without a skaffold.yaml as input, + and generates one for you: + + $ gcloud deploy releases create my-release \ + --delivery-pipeline=my-pipeline --region=us-central1 \ + --from-k8s-manifest=path/to/kubernetes/k8.yaml + The current UTC date and time on the machine running the gcloud command can also be included in the release name by adding $DATE and $TIME parameters: diff --git a/gcloud/iam/workload-identity-pools/create-cred-config b/gcloud/iam/workload-identity-pools/create-cred-config index 51bd0344c..406e9f12c 100644 --- a/gcloud/iam/workload-identity-pools/create-cred-config +++ b/gcloud/iam/workload-identity-pools/create-cred-config @@ -11,10 +11,11 @@ SYNOPSIS [--credential-source-field-name=CREDENTIAL_SOURCE_FIELD_NAME] [--credential-source-headers=[key=value,...]] [--credential-source-type=CREDENTIAL_SOURCE_TYPE] [--enable-imdsv2] - [--service-account=SERVICE_ACCOUNT] [--subject-token-type=SUBJECT_TOKEN_TYPE] [--executable-output-file=EXECUTABLE_OUTPUT_FILE --executable-timeout-millis=EXECUTABLE_TIMEOUT_MILLIS] + [--service-account=SERVICE_ACCOUNT + : --service-account-token-lifetime-seconds=SERVICE_ACCOUNT_TOKEN_LIFETIME_SECONDS] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -117,9 +118,6 @@ OPTIONAL FLAGS Adds the AWS IMDSv2 session token Url to the credential source to enforce the AWS IMDSv2 flow. - --service-account=SERVICE_ACCOUNT - The email of the service account to impersonate. - --subject-token-type=SUBJECT_TOKEN_TYPE The type of token being used for authorization. @@ -132,6 +130,22 @@ OPTIONAL FLAGS The timeout duration in milliseconds for waiting for the executable to finish. + Service account impersonation options. + + --service-account=SERVICE_ACCOUNT + The email of the service account to impersonate. + + This flag must be specified if any of the other arguments in this + group are specified. + + --service-account-token-lifetime-seconds=SERVICE_ACCOUNT_TOKEN_LIFETIME_SECONDS + The desired lifetime duration of the service account access token in + seconds. This defaults to one hour when not provided. If a lifetime + greater than one hour is required, the service account must be added + as an allowed value in an Organization Policy that enforces the + constraints/iam.allowServiceAccountCredentialLifetimeExtension + constraint. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/iap/help b/gcloud/iap/help index 8d8a42dc3..952cb2fdc 100644 --- a/gcloud/iap/help +++ b/gcloud/iap/help @@ -31,6 +31,9 @@ GROUPS settings Manage IAP settings. + tcp + Manage IAP TCP resources. + web Manage IAP web policies. diff --git a/gcloud/iap/tcp/dest-groups/add-iam-policy-binding b/gcloud/iap/tcp/dest-groups/add-iam-policy-binding new file mode 100644 index 000000000..261a72313 --- /dev/null +++ b/gcloud/iap/tcp/dest-groups/add-iam-policy-binding @@ -0,0 +1,129 @@ +NAME + gcloud iap tcp dest-groups add-iam-policy-binding - add IAM policy binding + to an IAP TCP Tunnel Destination Group resource + +SYNOPSIS + gcloud iap tcp dest-groups add-iam-policy-binding --dest-group=DEST_GROUP + --member=PRINCIPAL --region=REGION --role=ROLE + [--condition=[KEY=VALUE,...] + | --condition-from-file=CONDITION_FROM_FILE] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Adds a policy binding to the IAM policy of an IAP TCP Tunnel Destination + Group resource. One binding consists of a member, a role, and an optional + condition. + +EXAMPLES + To add an IAM policy binding for the role of + 'roles/iap.tunnelResourceAccessor' for the user 'test-user@gmail.com' in + the group 'my-group' located in the region 'us-west1', run: + + $ gcloud iap tcp dest-groups add-iam-policy-binding \ + --member='user:test-user@gmail.com' \ + --role='roles/iap.tunnelResourceAccessor' \ + --dest-group='my-group' --region='us-west1' + + To add an IAM policy binding for the role of + 'roles/iap.tunnelResourceAccessor' for all authenticated users in the group + 'my-group' located in the region 'us-west1', run: + + $ gcloud iap tcp dest-groups add-iam-policy-binding \ + --member='allAuthenticatedUsers' \ + --role='roles/iap.tunnelResourceAccessor' \ + --dest-group='my-group' --region='us-west1' + + To add an IAM policy binding which expires at the end of the year 2018 for + the role of 'roles/iap.tunnelResourceAccessor' and the user + 'test-user@gmail.com' in the group 'my-group' located in the region + 'us-west1', run: + + $ gcloud iap tcp dest-groups add-iam-policy-binding \ + --member='user:test-user@gmail.com' \ + --role='roles/iap.tunnelResourceAccessor' \ + --condition='expression=request.time < + timestamp("2019-01-01T00:00:00Z"),title=expires_end_of_2018, + description=Expires at midnight on 2018-12-31' --dest-group='my-group' --region='us-west1' + + See https://cloud.google.com/iam/docs/managing-policies for details of + policy role and member types. + +REQUIRED FLAGS + --dest-group=DEST_GROUP + Name of the Destination Group. + + --member=PRINCIPAL + The principal to add the binding for. Should be of the form + user|group|serviceAccount:email or domain:domain. + + Examples: user:test-user@gmail.com, group:admins@example.com, + serviceAccount:test123@example.domain.com, or + domain:example.domain.com. + + Some resources also accept the following special values: + ◆ allUsers - Special identifier that represents anyone who is on the + internet, with or without a Google account. + ◆ allAuthenticatedUsers - Special identifier that represents anyone + who is authenticated with a Google account or a service account. + + --region=REGION + Region of the Destination Group. + + --role=ROLE + Role name to assign to the principal. The role name is the complete + path of a predefined role, such as roles/logging.viewer, or the role ID + for a custom role, such as + organizations/{ORGANIZATION_ID}/roles/logging.viewer. + +OPTIONAL FLAGS + At most one of these can be specified: + + --condition=[KEY=VALUE,...] + A condition to include in the binding. When the condition is + explicitly specified as None (--condition=None), a binding without a + condition is added. When the condition is specified and is not None, + --role cannot be a basic role. Basic roles are roles/editor, + roles/owner, and roles/viewer. For more on conditions, refer to the + conditions overview guide: + https://cloud.google.com/iam/docs/conditions-overview + + When using the --condition flag, include the following key-value + pairs: + + expression + (Required) Condition expression that evaluates to True or False. + This uses a subset of Common Expression Language syntax. + + If the condition expression includes a comma, use a different + delimiter to separate the key-value pairs. Specify the delimiter + before listing the key-value pairs. For example, to specify a + colon (:) as the delimiter, do the following: + --condition=^:^title=TITLE:expression=EXPRESSION. For more + information, see + https://cloud.google.com/sdk/gcloud/reference/topic/escaping. + + title + (Required) A short string describing the purpose of the + expression. + + description + (Optional) Additional description for the expression. + + --condition-from-file=CONDITION_FROM_FILE + Path to a local JSON or YAML file that defines the condition. To see + available fields, see the help for --condition. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha iap tcp dest-groups add-iam-policy-binding + + $ gcloud beta iap tcp dest-groups add-iam-policy-binding + diff --git a/gcloud/iap/tcp/dest-groups/create b/gcloud/iap/tcp/dest-groups/create new file mode 100644 index 000000000..27066c202 --- /dev/null +++ b/gcloud/iap/tcp/dest-groups/create @@ -0,0 +1,69 @@ +NAME + gcloud iap tcp dest-groups create - create the IAP TCP Destination Group + resource + +SYNOPSIS + gcloud iap tcp dest-groups create GROUP_NAME --region=REGION + [--fqdn-list=FQDN_LIST] [--ip-range-list=IP_RANGE_LIST] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Create the IAP TCP Destination Group resource. + +EXAMPLES + To create a DestGroup with name GROUP_NAME, in region REGION in the current + project run: + + $ gcloud iap tcp dest-groups create GROUP_NAME --region=REGION + + To create a DestGroup with name GROUP_NAME, in region REGION with ip ranges + CIDR1, CIDR2 in the current project run: + + $ gcloud iap tcp dest-groups create GROUP_NAME --region=REGION \ + --ip-range-list=CIDR1,CIDR2 + + To create a DestGroup with name GROUP_NAME, in region REGION with fqdns + FQDN1, FQDN2 in the current project run: + + $ gcloud iap tcp dest-groups create GROUP_NAME --region=REGION \ + --fqdn-list=FQDN1,FQDN2 + + To create a DestGroup with name GROUP_NAME, in region REGION with fqdns + FQDN1, FQDN2 and ip ranges CIDR1,CIDR2 in the project PROJECT_ID run: + + $ gcloud iap tcp dest-groups create GROUP_NAME --region=REGION \ + --fqdn-list=FQDN1,FQDN2 --ip-range-list=CIDR1,CIDR2 \ + --project=PROJECT_ID + + GROUP_NAME can only contain lower-case letters (a-z) and dashes (-). + +POSITIONAL ARGUMENTS + GROUP_NAME + Name of the Destination Group. + +REQUIRED FLAGS + --region=REGION + Region of the Destination Group. + +OPTIONAL FLAGS + --fqdn-list=FQDN_LIST + List of FQDNs in the Destination Group. + + --ip-range-list=IP_RANGE_LIST + List of ip-ranges in the Destination Group. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha iap tcp dest-groups create + + $ gcloud beta iap tcp dest-groups create + diff --git a/gcloud/iap/tcp/dest-groups/delete b/gcloud/iap/tcp/dest-groups/delete new file mode 100644 index 000000000..07693492d --- /dev/null +++ b/gcloud/iap/tcp/dest-groups/delete @@ -0,0 +1,46 @@ +NAME + gcloud iap tcp dest-groups delete - delete the IAP TCP Destination Group + resource + +SYNOPSIS + gcloud iap tcp dest-groups delete GROUP_NAME --region=REGION + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Delete the IAP TCP Destination Group resource. + +EXAMPLES + To delete a DestGroup with name GROUP_NAME, in region REGION in the current + project run: + + $ gcloud iap tcp dest-groups delete DEST_GROUP_NAME --region=REGION + + To delete a DestGroup with name GROUP_NAME, in region REGION in the project + PROJECT_ID run: + + $ gcloud iap tcp dest-groups delete DEST_GROUP_NAME \ + --region=REGION --project=PROJECT_ID + +POSITIONAL ARGUMENTS + GROUP_NAME + Name of the Destination Group. + +REQUIRED FLAGS + --region=REGION + Region of the Destination Group. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha iap tcp dest-groups delete + + $ gcloud beta iap tcp dest-groups delete + diff --git a/gcloud/iap/tcp/dest-groups/describe b/gcloud/iap/tcp/dest-groups/describe new file mode 100644 index 000000000..f98be31b3 --- /dev/null +++ b/gcloud/iap/tcp/dest-groups/describe @@ -0,0 +1,46 @@ +NAME + gcloud iap tcp dest-groups describe - describe the IAP TCP Destination + Group resource + +SYNOPSIS + gcloud iap tcp dest-groups describe GROUP_NAME --region=REGION + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Describe the IAP TCP Destination Group resource. + +EXAMPLES + To get a DestGroup with name GROUP_NAME, in region REGION in the current + project run: + + $ gcloud iap tcp dest-groups describe DEST_GROUP_NAME --region=REGION + + To get a DestGroup with name GROUP_NAME, in region REGION in the project + PROJECT run: + + $ gcloud iap tcp dest-groups describe DEST_GROUP_NAME \ + --region=REGION --project=PROJECT + +POSITIONAL ARGUMENTS + GROUP_NAME + Name of the Destination Group. + +REQUIRED FLAGS + --region=REGION + Region of the Destination Group. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha iap tcp dest-groups describe + + $ gcloud beta iap tcp dest-groups describe + diff --git a/gcloud/iap/tcp/dest-groups/get-iam-policy b/gcloud/iap/tcp/dest-groups/get-iam-policy new file mode 100644 index 000000000..27168ecdf --- /dev/null +++ b/gcloud/iap/tcp/dest-groups/get-iam-policy @@ -0,0 +1,80 @@ +NAME + gcloud iap tcp dest-groups get-iam-policy - get IAM policy for an IAP TCP + Destination Group resource + +SYNOPSIS + gcloud iap tcp dest-groups get-iam-policy --dest-group=DEST_GROUP + --region=REGION [--filter=EXPRESSION] [--limit=LIMIT] + [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + gcloud iap tcp dest-groups get-iam-policy displays the IAM policy + associated with an IAP TCP Destination Group resource. If formatted as + JSON, the output can be edited and used as a policy file for + set-iam-policy. The output includes an "etag" field identifying the version + emitted and allowing detection of concurrent policy updates; see $ gcloud + iap tcp dest-groups set-iam-policy for additional details. + +EXAMPLES + To get the IAM policy for the TCP Destination Group resource with name + 'my-group' and located in the region 'us-west1' within the active project, + run: + + $ gcloud iap tcp dest-groups get-iam-policy \ + --dest-group='my-group' --region='us-west1' + + To get the IAM policy for the TCP Destination Group resource with name + 'my-group' and located in the region 'us-west1' within project 'project', + run: + + $ gcloud iap tcp dest-groups get-iam-policy \ + --dest-group='my-group' --region='us-west1' --project='project' + +REQUIRED FLAGS + --dest-group=DEST_GROUP + Name of the Destination Group. + + --region=REGION + Region of the Destination Group. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha iap tcp dest-groups get-iam-policy + + $ gcloud beta iap tcp dest-groups get-iam-policy + diff --git a/gcloud/iap/tcp/dest-groups/help b/gcloud/iap/tcp/dest-groups/help new file mode 100644 index 000000000..620726bd5 --- /dev/null +++ b/gcloud/iap/tcp/dest-groups/help @@ -0,0 +1,51 @@ +NAME + gcloud iap tcp dest-groups - manage IAP TCP Destination Group resources + +SYNOPSIS + gcloud iap tcp dest-groups COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Manage IAP TCP Destination Group resources. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + add-iam-policy-binding + Add IAM policy binding to an IAP TCP Tunnel Destination Group resource. + + create + Create the IAP TCP Destination Group resource. + + delete + Delete the IAP TCP Destination Group resource. + + describe + Describe the IAP TCP Destination Group resource. + + get-iam-policy + Get IAM policy for an IAP TCP Destination Group resource. + + list + Lists the IAP TCP Destination Group resource. + + remove-iam-policy-binding + Remove IAM policy binding from an IAP TCP Destination Group resource. + + set-iam-policy + Set the IAM policy for an IAP TCP Destination Group resource. + + update + Update the IAP TCP Destination Group resource. + +NOTES + These variants are also available: + + $ gcloud alpha iap tcp dest-groups + + $ gcloud beta iap tcp dest-groups + diff --git a/gcloud/iap/tcp/dest-groups/list b/gcloud/iap/tcp/dest-groups/list new file mode 100644 index 000000000..c67de7483 --- /dev/null +++ b/gcloud/iap/tcp/dest-groups/list @@ -0,0 +1,91 @@ +NAME + gcloud iap tcp dest-groups list - lists the IAP TCP Destination Group + resource + +SYNOPSIS + gcloud iap tcp dest-groups list [--region=REGION; default="-"] + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Lists the IAP TCP Destination Group resource. + +EXAMPLES + To list all Destination Groups in the current project run: + + $ gcloud iap tcp dest-groups list + + To list all Destination Groups in region REGION in the current project run: + + $ gcloud iap tcp dest-groups list --region=REGION + + To limit the results returned by the server to be at most PAGE_SIZE, run: + + $ gcloud iap tcp dest-groups list --page-size=PAGE_SIZE + + To list at most 5 Destination Groups sorted alphabetically by project ID, + run: + + $ gcloud iap tcp dest-groups list --sort-by=projectId --limit=5 + + To list all Destination Groups in the project PROJECT run: + + $ gcloud iap tcp dest-groups list --project=PROJECT + + To list all Destination Groups that have cidr CIDR run: + + $ gcloud iap tcp dest-groups list --filter="cidrs=CIDR" + + To list all Destination Groups that have FQDN FQDN run: + + $ gcloud iap tcp dest-groups list --filter="fqdns=FQDN" + + To list all Destination Groups that have name NAME run: + + $ gcloud iap tcp dest-groups list --filter="name=NAME" + +FLAGS + --region=REGION; default="-" + Region of the Destination Group, will list all regions by default + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha iap tcp dest-groups list + + $ gcloud beta iap tcp dest-groups list + diff --git a/gcloud/iap/tcp/dest-groups/remove-iam-policy-binding b/gcloud/iap/tcp/dest-groups/remove-iam-policy-binding new file mode 100644 index 000000000..b549e633a --- /dev/null +++ b/gcloud/iap/tcp/dest-groups/remove-iam-policy-binding @@ -0,0 +1,145 @@ +NAME + gcloud iap tcp dest-groups remove-iam-policy-binding - remove IAM policy + binding from an IAP TCP Destination Group resource + +SYNOPSIS + gcloud iap tcp dest-groups remove-iam-policy-binding + --dest-group=DEST_GROUP --member=PRINCIPAL --region=REGION --role=ROLE + [--all | --condition=[KEY=VALUE,...] + | --condition-from-file=CONDITION_FROM_FILE] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Removes a policy binding from the IAM policy of an IAP TCP Destination + Group resource. One binding consists of a member, a role and an optional + condition. + +EXAMPLES + To remove an IAM policy binding for the role of + 'roles/iap.tunnelResourceAccessor' for the user 'test-user@gmail.com' in + the group 'my-group' located in the region 'us-west1', run: + + $ gcloud iap tcp dest-groups remove-iam-policy-binding \ + --member='user:test-user@gmail.com' \ + --role='roles/iap.tunnelResourceAccessor' \ + --dest-group='my-group' --region='us-west1' + + To remove an IAM policy binding for the role of + 'roles/iap.tunnelResourceAccessor' from all authenticated users in the + group 'my-group' located in the region 'us-west1', run: + + $ gcloud iap tcp dest-groups remove-iam-policy-binding \ + --member='allAuthenticatedUsers' \ + --role='roles/iap.tunnelResourceAccessor' \ + --dest-group='my-group' --region='us-west1' + + To remove an IAM policy binding which expires at the end of the year 2018 + for the role of 'roles/iap.tunnelResourceAccessor' for the user + 'test-user@gmail.com' in the group 'my-group' located in the region + 'us-west1', run: + + $ gcloud iap tcp dest-groups remove-iam-policy-binding \ + --member='user:test-user@gmail.com' \ + --role='roles/iap.tunnelResourceAccessor' \ + --condition='expression=request.time < + timestamp("2019-01-01T00:00:00Z"),title=expires_end_of_2018, + description=Expires at midnight on 2018-12-31' \ + --dest-group='my-group' --region='us-west1' + + To remove all IAM policy bindings regardless of the condition for the role + of 'roles/iap.tunnelResourceAccessor' and for the user + 'test-user@gmail.com' in the group 'my-group' located in the region + 'us-west1', run: + + $ gcloud iap tcp dest-groups remove-iam-policy-binding \ + --member='user:test-user@gmail.com' \ + --role='roles/iap.tunnelResourceAccessor' \ + --dest-group='my-group' --region='us-west1' + + See https://cloud.google.com/iam/docs/managing-policies for details of + policy role and member types. + +REQUIRED FLAGS + --dest-group=DEST_GROUP + Name of the Destination Group. + + --member=PRINCIPAL + The principal to remove the binding for. Should be of the form + user|group|serviceAccount:email or domain:domain. + + Examples: user:test-user@gmail.com, group:admins@example.com, + serviceAccount:test123@example.domain.com, or + domain:example.domain.com. + + Deleted principals have an additional deleted: prefix and a ?uid=UID + suffix, where UID is a unique identifier for the principal. Example: + deleted:user:test-user@gmail.com?uid=123456789012345678901. + + Some resources also accept the following special values: + ◆ allUsers - Special identifier that represents anyone who is on the + internet, with or without a Google account. + ◆ allAuthenticatedUsers - Special identifier that represents anyone + who is authenticated with a Google account or a service account. + + --region=REGION + Region of the Destination Group. + + --role=ROLE + The role to remove the principal from. + +OPTIONAL FLAGS + At most one of these can be specified: + + --all + Remove all bindings with this role and principal, irrespective of any + conditions. + + --condition=[KEY=VALUE,...] + The condition of the binding that you want to remove. When the + condition is explicitly specified as None (--condition=None), a + binding without a condition is removed. Otherwise, only a binding + with a condition that exactly matches the specified condition + (including the optional description) is removed. For more on + conditions, refer to the conditions overview guide: + https://cloud.google.com/iam/docs/conditions-overview + + When using the --condition flag, include the following key-value + pairs: + + expression + (Required) Condition expression that evaluates to True or False. + This uses a subset of Common Expression Language syntax. + + If the condition expression includes a comma, use a different + delimiter to separate the key-value pairs. Specify the delimiter + before listing the key-value pairs. For example, to specify a + colon (:) as the delimiter, do the following: + --condition=^:^title=TITLE:expression=EXPRESSION. For more + information, see + https://cloud.google.com/sdk/gcloud/reference/topic/escaping. + + title + (Required) A short string describing the purpose of the + expression. + + description + (Optional) Additional description for the expression. + + --condition-from-file=CONDITION_FROM_FILE + Path to a local JSON or YAML file that defines the condition. To see + available fields, see the help for --condition. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha iap tcp dest-groups remove-iam-policy-binding + + $ gcloud beta iap tcp dest-groups remove-iam-policy-binding + diff --git a/gcloud/iap/tcp/dest-groups/set-iam-policy b/gcloud/iap/tcp/dest-groups/set-iam-policy new file mode 100644 index 000000000..b556c6559 --- /dev/null +++ b/gcloud/iap/tcp/dest-groups/set-iam-policy @@ -0,0 +1,59 @@ +NAME + gcloud iap tcp dest-groups set-iam-policy - set the IAM policy for an IAP + TCP Destination Group resource + +SYNOPSIS + gcloud iap tcp dest-groups set-iam-policy POLICY_FILE + --dest-group=DEST_GROUP --region=REGION [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + This command replaces the existing IAM policy for an IAP TCP Destination + Group resource, given a file encoded in JSON or YAML that contains the IAM + policy. If the given policy file specifies an "etag" value, then the + replacement will succeed only if the policy already in place matches that + etag. (An etag obtained via $ gcloud iap tcp dest-groups get-iam-policy + will prevent the replacement if the policy for the resource has been + subsequently updated.) A policy file that does not contain an etag value + will replace any existing policy for the resource. + +EXAMPLES + To set the IAM policy for the TCP Destination Group resource within the + active project in the group 'my-group' located in the region 'us-west1', + run: + + $ gcloud iap tcp dest-groups set-iam-policy POLICY_FILE \ + --dest-group=='my-group' --region='us-west1' + + To set the IAM policy for the TCP Destination Group resource within project + PROJECT_ID in the group 'my-group' located in the region 'us-west1', run: + + $ gcloud iap tcp dest-groups set-iam-policy POLICY_FILE \ + --project=PROJECT_ID --dest-group=='my-group' \ + --region='us-west1' + +POSITIONAL ARGUMENTS + POLICY_FILE + JSON or YAML file containing the IAM policy. + +REQUIRED FLAGS + --dest-group=DEST_GROUP + Name of the Destination Group. + + --region=REGION + Region of the Destination Group. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha iap tcp dest-groups set-iam-policy + + $ gcloud beta iap tcp dest-groups set-iam-policy + diff --git a/gcloud/iap/tcp/dest-groups/update b/gcloud/iap/tcp/dest-groups/update new file mode 100644 index 000000000..849646938 --- /dev/null +++ b/gcloud/iap/tcp/dest-groups/update @@ -0,0 +1,75 @@ +NAME + gcloud iap tcp dest-groups update - update the IAP TCP Destination Group + resource + +SYNOPSIS + gcloud iap tcp dest-groups update GROUP_NAME --region=REGION + (--fqdn-list=FQDN_LIST --ip-range-list=IP_RANGE_LIST) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Update the IAP TCP Destination Group resource. + +EXAMPLES + To update a DestGroup with name GROUP_NAME, in region REGION with ip ranges + CIDR1, CIDR2 in the current project run: + + $ gcloud iap tcp dest-groups update DEST_GROUP_NAME \ + --region=REGION --ip-range-list=CIDR1,CIDR2 + + To update a DestGroup with name GROUP_NAME, in region REGION with fqdns + FQDN1, FQDN2 in the current project run: + + $ gcloud iap tcp dest-groups update DEST_GROUP_NAME \ + --region=REGION --fqdn-list=FQDN1,FQDN2 + + To update a DestGroup with name GROUP_NAME, in region REGION with fqdns + FQDN1, FQDN2 and ip ranges CIDR1, CIDR2 in the project PROJECT_ID run: + + $ gcloud iap tcp dest-groups update DEST_GROUP_NAME \ + --region=REGION --fqdn-list=FQDN1,FQDN2 \ + --ip-range-list=CIDR1,CIDR2 --project=PROJECT_ID + + To clear the fqdn list in a DestGroup with name GROUP_NAME, in region + REGION in the current project run: + + $ gcloud iap tcp dest-groups update DEST_GROUP_NAME \ + --region=REGION --fqdn-list="" + + To clear the ip range list in a DestGroup with name GROUP_NAME, in region + REGION in the current project run: + + $ gcloud iap tcp dest-groups update DEST_GROUP_NAME \ + --region=REGION --ip-range-list="" + +POSITIONAL ARGUMENTS + GROUP_NAME + Name of the Destination Group. + +REQUIRED FLAGS + --region=REGION + Region of the Destination Group. + + At least one of these must be specified: + + --fqdn-list=FQDN_LIST + List of FQDNs in the Destination Group. + + --ip-range-list=IP_RANGE_LIST + List of ip-ranges in the Destination Group. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha iap tcp dest-groups update + + $ gcloud beta iap tcp dest-groups update + diff --git a/gcloud/iap/tcp/help b/gcloud/iap/tcp/help new file mode 100644 index 000000000..76a012db3 --- /dev/null +++ b/gcloud/iap/tcp/help @@ -0,0 +1,27 @@ +NAME + gcloud iap tcp - manage IAP TCP resources + +SYNOPSIS + gcloud iap tcp GROUP [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Manage IAP TCP resources. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +GROUPS + GROUP is one of the following: + + dest-groups + Manage IAP TCP Destination Group resources. + +NOTES + These variants are also available: + + $ gcloud alpha iap tcp + + $ gcloud beta iap tcp + diff --git a/gcloud/logging/buckets/create b/gcloud/logging/buckets/create index 90c5afbdf..f19994b9c 100644 --- a/gcloud/logging/buckets/create +++ b/gcloud/logging/buckets/create @@ -3,7 +3,7 @@ NAME SYNOPSIS gcloud logging buckets create BUCKET_ID --location=LOCATION - [--description=DESCRIPTION] + [--description=DESCRIPTION] [--index=[KEY=VALUE, ...,...]] [--restricted-fields=[RESTRICTED_FIELD,...]] [--retention-days=RETENTION_DAYS] [GCLOUD_WIDE_FLAG ...] @@ -25,6 +25,11 @@ EXAMPLES $ gcloud logging buckets create my-bucket --location=us-central1 + To create a bucket with custom index of 'jsonPayload.foo', run: + + $ gcloud logging buckets create my-bucket \ + --index=fieldPath=jsonPayload.foo,type=INDEX_TYPE_STRING + POSITIONAL ARGUMENTS BUCKET_ID ID of the bucket to create. @@ -38,6 +43,22 @@ OPTIONAL FLAGS --description=DESCRIPTION A textual description for the bucket. + --index=[KEY=VALUE, ...,...] + Specify an index to be added to the log bucket. This flag can be + repeated. The fieldPath and type attributes are required. For example: + --index=fieldPath=jsonPayload.foo,type=INDEX_TYPE_STRING. The following + keys are accepted: + + fieldPath + The LogEntry field path to index. For example: + jsonPayload.request.status. Paths are limited to 800 characters and + can include only letters, digits, underscores, hyphens, and + periods. + + type + The type of data in this index. For example: INDEX_TYPE_STRING + Supported types are INDEX_TYPE_STRING and INDEX_TYPE_INTEGER. + --restricted-fields=[RESTRICTED_FIELD,...] Comma-separated list of field paths that require permission checks in this bucket. The following fields and their children are eligible: diff --git a/gcloud/logging/buckets/update b/gcloud/logging/buckets/update index 09349528e..1899cff18 100644 --- a/gcloud/logging/buckets/update +++ b/gcloud/logging/buckets/update @@ -3,9 +3,12 @@ NAME SYNOPSIS gcloud logging buckets update BUCKET_ID --location=LOCATION + [--add-index=[KEY=VALUE, ...,...]] [--clear-indexes] [--description=DESCRIPTION] [--locked] + [--remove-indexes=[FIELD PATH,...]] [--restricted-fields=[RESTRICTED_FIELD,...]] - [--retention-days=RETENTION_DAYS] [GCLOUD_WIDE_FLAG ...] + [--retention-days=RETENTION_DAYS] [--update-index=[KEY=VALUE, ...,...]] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION Updates the properties of a bucket. @@ -16,6 +19,26 @@ EXAMPLES $ gcloud logging buckets update my-bucket --location=global \ --description=my-new-description + To update a bucket in your project and remove all indexes, run: + + $ gcloud logging buckets update my-bucket --location=global \ + --clear-indexes + + To update a bucket in your project and remove an index, run: + + $ gcloud logging buckets update my-bucket --location=global \ + --remove-indexes=jsonPayload.foo2 + + To update a bucket in your project and add an index, run: + + $ gcloud logging buckets update my-bucket --location=global \ + --add-index=fieldPath=jsonPayload.foo2,type=INDEX_TYPE_STRING + + To update a bucket in your project and update an existing index, run: + + $ gcloud logging buckets update my-bucket --location=global \ + --update-index=fieldPath=jsonPayload.foo,type=INDEX_TYPE_INTEGER + POSITIONAL ARGUMENTS BUCKET_ID The id of the bucket to update. @@ -25,6 +48,25 @@ REQUIRED FLAGS Location of the bucket. OPTIONAL FLAGS + --add-index=[KEY=VALUE, ...,...] + Add an index to be added to the log bucket. This flag can be repeated. + The fieldPath and type attributes are required. For example: + --index=fieldPath=jsonPayload.foo,type=INDEX_TYPE_STRING. The following + keys are accepted: + + fieldPath + The LogEntry field path to index. For example: + jsonPayload.request.status. Paths are limited to 800 characters and + can include only letters, digits, underscores, hyphens, and + periods. + + type + The type of data in this index. For example: INDEX_TYPE_STRING + Supported types are strings and integers. + + --clear-indexes + Remove all logging indexes from the bucket. + --description=DESCRIPTION A new description for the bucket. @@ -32,12 +74,33 @@ OPTIONAL FLAGS Lock the bucket and prevent it from being modified or deleted (unless it is empty). + --remove-indexes=[FIELD PATH,...] + Specify the field path of the logging index(es) to delete. + --restricted-fields=[RESTRICTED_FIELD,...] A new set of restricted fields for the bucket. --retention-days=RETENTION_DAYS A new retention period for the bucket. + --update-index=[KEY=VALUE, ...,...] + Update an index to be added to the log bucket. This will update the + type of the index, and also update its createTime to the new update + time. This flag can be repeated. The fieldPath and type attributes are + required. For example: + --index=fieldPath=jsonPayload.foo,type=INDEX_TYPE_STRING. The following + keys are accepted: + + fieldPath + The LogEntry field path to index. For example: + jsonPayload.request.status. Paths are limited to 800 characters and + can include only letters, digits, underscores, hyphens, and + periods. + + type + The type of data in this index. For example: INDEX_TYPE_STRING + Supported types are strings and integers. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/recommender/help b/gcloud/recommender/help index a0ba0668c..caeddfbd0 100644 --- a/gcloud/recommender/help +++ b/gcloud/recommender/help @@ -20,12 +20,18 @@ GCLOUD WIDE FLAGS GROUPS GROUP is one of the following: + insight-type-config + Manage Cloud resource insight type configuration. + insights Manage Cloud resource insights. recommendations Manage Cloud resource recommendations. + recommender-config + Manage Cloud resource recommender configuration. + NOTES These variants are also available: diff --git a/gcloud/recommender/insight-type-config/describe b/gcloud/recommender/insight-type-config/describe new file mode 100644 index 000000000..ca1ace004 --- /dev/null +++ b/gcloud/recommender/insight-type-config/describe @@ -0,0 +1,52 @@ +NAME + gcloud recommender insight-type-config describe - describe an insight type + configuration + +SYNOPSIS + gcloud recommender insight-type-config describe INSIGHT_TYPE + --location=LOCATION + (--organization=ORGANIZATION_ID | --project=PROJECT_ID) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Describe an insight type configuration based on a given entity (project, + organization), location, and insight type. + +EXAMPLES + To describe an insight type configuration, run: + + $ gcloud recommender insight-type-config describe ${INSIGHT_TYPE} \ + --project=${PROJECT} --location=${LOCATION} + +POSITIONAL ARGUMENTS + INSIGHT_TYPE + Insight type to use for this invocation. + +REQUIRED FLAGS + --location=LOCATION + Location to use for this invocation. + + Resource that is associated with cloud entity type. + + Exactly one of these must be specified: + + --organization=ORGANIZATION_ID + The Google Cloud organization ID to use for this invocation. + + --project=PROJECT_ID + The Google Cloud project ID. Overrides the default core/project + property value for this command invocation. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This variant is also available: + + $ gcloud beta recommender insight-type-config describe + diff --git a/gcloud/recommender/insight-type-config/help b/gcloud/recommender/insight-type-config/help new file mode 100644 index 000000000..973295216 --- /dev/null +++ b/gcloud/recommender/insight-type-config/help @@ -0,0 +1,29 @@ +NAME + gcloud recommender insight-type-config - manage Cloud resource insight type + configuration + +SYNOPSIS + gcloud recommender insight-type-config COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Manage Cloud resource insight type configuration. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + describe + Describe an insight type configuration. + + update + Update an insight type configuration. + +NOTES + This variant is also available: + + $ gcloud beta recommender insight-type-config + diff --git a/gcloud/recommender/insight-type-config/update b/gcloud/recommender/insight-type-config/update new file mode 100644 index 000000000..403fb15c9 --- /dev/null +++ b/gcloud/recommender/insight-type-config/update @@ -0,0 +1,72 @@ +NAME + gcloud recommender insight-type-config update - update an insight type + configuration + +SYNOPSIS + gcloud recommender insight-type-config update INSIGHT_TYPE --etag=ETAG + --location=LOCATION + (--organization=ORGANIZATION_ID | --project=PROJECT_ID) + [--annotations=KEY=VALUE,[KEY=VALUE,...]] [--config-file=CONFIG_FILE] + [--display-name=DISPLAY_NAME] [--validate-only] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Update an insight type configuration based on a given entity (project, + organization), location, and insight type. + +EXAMPLES + To update an insight type configuration, run: + + $ gcloud recommender insight-type-config update ${INSIGHT_TYPE} \ + --project=${PROJECT} --location=${LOCATION} --etag=\"123\" \ + --config-file=config.yaml + +POSITIONAL ARGUMENTS + INSIGHT_TYPE + Insight type to use for this invocation. + +REQUIRED FLAGS + --etag=ETAG + Etag of the insight type configuration. + + --location=LOCATION + Location to use for this invocation. + + Resource that is associated with cloud entity type. + + Exactly one of these must be specified: + + --organization=ORGANIZATION_ID + The Google Cloud organization ID to use for this invocation. + + --project=PROJECT_ID + The Google Cloud project ID. Overrides the default core/project + property value for this command invocation. + +OPTIONAL FLAGS + --annotations=KEY=VALUE,[KEY=VALUE,...] + Store small amounts of arbitrary data on the insight type + configuration. + + --config-file=CONFIG_FILE + Generation configuration file for the insight type configuration. + + --display-name=DISPLAY_NAME + Display name of the insight type configuration. + + --validate-only + If true, validate the request and preview the change, but do not + actually update it. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This variant is also available: + + $ gcloud beta recommender insight-type-config update + diff --git a/gcloud/recommender/insights/describe b/gcloud/recommender/insights/describe index aa795acb1..15f99622f 100644 --- a/gcloud/recommender/insights/describe +++ b/gcloud/recommender/insights/describe @@ -36,14 +36,14 @@ REQUIRED FLAGS Exactly one of these must be specified: --billing-account=BILLING_ACCOUNT - The Google Cloud Platform Billing Account ID to use for this + The Google Cloud Platform billing account ID to use for this invocation. --folder=FOLDER_ID - Folder ID to use for this invocation. + The Google Cloud Platform folder ID to use for this invocation. --organization=ORGANIZATION_ID - The Google Cloud Platform Organization ID to use for this invocation. + The Google Cloud Platform organization ID to use for this invocation. --project=PROJECT_ID The Google Cloud Platform project ID. Overrides the default diff --git a/gcloud/recommender/insights/list b/gcloud/recommender/insights/list index df4128a18..9a09905c8 100644 --- a/gcloud/recommender/insights/list +++ b/gcloud/recommender/insights/list @@ -37,14 +37,14 @@ REQUIRED FLAGS Exactly one of these must be specified: --billing-account=BILLING_ACCOUNT - The Google Cloud Platform Billing Account ID to use for this + The Google Cloud Platform billing account ID to use for this invocation. --folder=FOLDER_ID - Folder ID to use for this invocation. + The Google Cloud Platform folder ID to use for this invocation. --organization=ORGANIZATION_ID - The Google Cloud Platform Organization ID to use for this invocation. + The Google Cloud Platform organization ID to use for this invocation. --project=PROJECT_ID The Google Cloud Platform project ID. Overrides the default diff --git a/gcloud/recommender/insights/mark-accepted b/gcloud/recommender/insights/mark-accepted index ad13a87a5..29f740d6a 100644 --- a/gcloud/recommender/insights/mark-accepted +++ b/gcloud/recommender/insights/mark-accepted @@ -42,14 +42,14 @@ REQUIRED FLAGS Exactly one of these must be specified: --billing-account=BILLING_ACCOUNT - The Google Cloud Platform Billing Account ID to use for this + The Google Cloud Platform billing account ID to use for this invocation. --folder=FOLDER_ID - Folder ID to use for this invocation. + The Google Cloud Platform folder ID to use for this invocation. --organization=ORGANIZATION_ID - The Google Cloud Platform Organization ID to use for this invocation. + The Google Cloud Platform organization ID to use for this invocation. --project=PROJECT_ID The Google Cloud Platform project ID. Overrides the default diff --git a/gcloud/recommender/recommendations/describe b/gcloud/recommender/recommendations/describe index 3c9c7e688..38aa11abd 100644 --- a/gcloud/recommender/recommendations/describe +++ b/gcloud/recommender/recommendations/describe @@ -38,14 +38,14 @@ REQUIRED FLAGS Exactly one of these must be specified: --billing-account=BILLING_ACCOUNT - The Google Cloud Platform Billing Account ID to use for this + The Google Cloud Platform billing account ID to use for this invocation. --folder=FOLDER_ID - Folder ID to use for this invocation. + The Google Cloud Platform folder ID to use for this invocation. --organization=ORGANIZATION_ID - The Google Cloud Platform Organization ID to use for this invocation. + The Google Cloud Platform organization ID to use for this invocation. --project=PROJECT_ID The Google Cloud Platform project ID. Overrides the default diff --git a/gcloud/recommender/recommendations/list b/gcloud/recommender/recommendations/list index 5d8eb3ee0..e053fa8a0 100644 --- a/gcloud/recommender/recommendations/list +++ b/gcloud/recommender/recommendations/list @@ -37,14 +37,14 @@ REQUIRED FLAGS Exactly one of these must be specified: --billing-account=BILLING_ACCOUNT - The Google Cloud Platform Billing Account ID to use for this + The Google Cloud Platform billing account ID to use for this invocation. --folder=FOLDER_ID - Folder ID to use for this invocation. + The Google Cloud Platform folder ID to use for this invocation. --organization=ORGANIZATION_ID - The Google Cloud Platform Organization ID to use for this invocation. + The Google Cloud Platform organization ID to use for this invocation. --project=PROJECT_ID The Google Cloud Platform project ID. Overrides the default diff --git a/gcloud/recommender/recommendations/mark-claimed b/gcloud/recommender/recommendations/mark-claimed index e804880e8..7ddab9b0a 100644 --- a/gcloud/recommender/recommendations/mark-claimed +++ b/gcloud/recommender/recommendations/mark-claimed @@ -45,14 +45,14 @@ REQUIRED FLAGS Exactly one of these must be specified: --billing-account=BILLING_ACCOUNT - The Google Cloud Platform Billing Account ID to use for this + The Google Cloud Platform billing account ID to use for this invocation. --folder=FOLDER_ID - Folder ID to use for this invocation. + The Google Cloud Platform folder ID to use for this invocation. --organization=ORGANIZATION_ID - The Google Cloud Platform Organization ID to use for this invocation. + The Google Cloud Platform organization ID to use for this invocation. --project=PROJECT_ID The Google Cloud Platform project ID. Overrides the default diff --git a/gcloud/recommender/recommendations/mark-failed b/gcloud/recommender/recommendations/mark-failed index b5b9fdabf..bc58adf2f 100644 --- a/gcloud/recommender/recommendations/mark-failed +++ b/gcloud/recommender/recommendations/mark-failed @@ -42,14 +42,14 @@ REQUIRED FLAGS Exactly one of these must be specified: --billing-account=BILLING_ACCOUNT - The Google Cloud Platform Billing Account ID to use for this + The Google Cloud Platform billing account ID to use for this invocation. --folder=FOLDER_ID - Folder ID to use for this invocation. + The Google Cloud Platform folder ID to use for this invocation. --organization=ORGANIZATION_ID - The Google Cloud Platform Organization ID to use for this invocation. + The Google Cloud Platform organization ID to use for this invocation. --project=PROJECT_ID The Google Cloud Platform project ID. Overrides the default diff --git a/gcloud/recommender/recommendations/mark-succeeded b/gcloud/recommender/recommendations/mark-succeeded index 34e0dd4cb..cbce15c66 100644 --- a/gcloud/recommender/recommendations/mark-succeeded +++ b/gcloud/recommender/recommendations/mark-succeeded @@ -42,14 +42,14 @@ REQUIRED FLAGS Exactly one of these must be specified: --billing-account=BILLING_ACCOUNT - The Google Cloud Platform Billing Account ID to use for this + The Google Cloud Platform billing account ID to use for this invocation. --folder=FOLDER_ID - Folder ID to use for this invocation. + The Google Cloud Platform folder ID to use for this invocation. --organization=ORGANIZATION_ID - The Google Cloud Platform Organization ID to use for this invocation. + The Google Cloud Platform organization ID to use for this invocation. --project=PROJECT_ID The Google Cloud Platform project ID. Overrides the default diff --git a/gcloud/recommender/recommender-config/describe b/gcloud/recommender/recommender-config/describe new file mode 100644 index 000000000..7fff674eb --- /dev/null +++ b/gcloud/recommender/recommender-config/describe @@ -0,0 +1,52 @@ +NAME + gcloud recommender recommender-config describe - describe a recommender + configuration + +SYNOPSIS + gcloud recommender recommender-config describe RECOMMENDER + --location=LOCATION + (--organization=ORGANIZATION_ID | --project=PROJECT_ID) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Describe a recommender configuration based on a given entity (project, + organization), location, and recommender. + +EXAMPLES + To describe a recommender configuration, run: + + $ gcloud recommender recommender-config describe ${RECOMMENDER} \ + --project=${PROJECT} --location=${LOCATION} + +POSITIONAL ARGUMENTS + RECOMMENDER + Recommender to use for this invocation. + +REQUIRED FLAGS + --location=LOCATION + Location to use for this invocation. + + Resource that is associated with cloud entity type. + + Exactly one of these must be specified: + + --organization=ORGANIZATION_ID + The Google Cloud organization ID to use for this invocation. + + --project=PROJECT_ID + The Google Cloud project ID. Overrides the default core/project + property value for this command invocation. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This variant is also available: + + $ gcloud beta recommender recommender-config describe + diff --git a/gcloud/recommender/recommender-config/help b/gcloud/recommender/recommender-config/help new file mode 100644 index 000000000..ea125b0db --- /dev/null +++ b/gcloud/recommender/recommender-config/help @@ -0,0 +1,29 @@ +NAME + gcloud recommender recommender-config - manage Cloud resource recommender + configuration + +SYNOPSIS + gcloud recommender recommender-config COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Manage Cloud resource recommender configuration. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + describe + Describe a recommender configuration. + + update + Update a recommender configuration. + +NOTES + This variant is also available: + + $ gcloud beta recommender recommender-config + diff --git a/gcloud/recommender/recommender-config/update b/gcloud/recommender/recommender-config/update new file mode 100644 index 000000000..3d21da90b --- /dev/null +++ b/gcloud/recommender/recommender-config/update @@ -0,0 +1,71 @@ +NAME + gcloud recommender recommender-config update - update a recommender + configuration + +SYNOPSIS + gcloud recommender recommender-config update RECOMMENDER --etag=ETAG + --location=LOCATION + (--organization=ORGANIZATION_ID | --project=PROJECT_ID) + [--annotations=KEY=VALUE,[KEY=VALUE,...]] [--config-file=CONFIG_FILE] + [--display-name=DISPLAY_NAME] [--validate-only] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Update a recommender configuration based on a given entity (project, + organization), location, and recommender. + +EXAMPLES + To update a recommender configuration, run: + + $ gcloud recommender recommender-config update ${RECOMMENDER} \ + --project=${PROJECT} --location=${LOCATION} --etag=\"123\" \ + --config-file=config.yaml + +POSITIONAL ARGUMENTS + RECOMMENDER + Recommender to use for this invocation. + +REQUIRED FLAGS + --etag=ETAG + Etag of the recommender configuration. + + --location=LOCATION + Location to use for this invocation. + + Resource that is associated with cloud entity type. + + Exactly one of these must be specified: + + --organization=ORGANIZATION_ID + The Google Cloud organization ID to use for this invocation. + + --project=PROJECT_ID + The Google Cloud project ID. Overrides the default core/project + property value for this command invocation. + +OPTIONAL FLAGS + --annotations=KEY=VALUE,[KEY=VALUE,...] + Store small amounts of arbitrary data on the recommender configuration. + + --config-file=CONFIG_FILE + Generation configuration file for the recommender configuration. + + --display-name=DISPLAY_NAME + Display name of the recommender configuration. + + --validate-only + If true, validate the request and preview the change, but do not + actually update it. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This variant is also available: + + $ gcloud beta recommender recommender-config update +