gcloud: Wed Aug 3 09:18:38 UTC 2022

2026-07-18 14:56:05 +00:00 · 2022-08-03 09:18:38 +00:00 · 2022-08-03 09:18:38 +00:00 · 3b2f526372
commit 3b2f526372
parent 3513fd1c11
151 changed files with 4150 additions and 308 deletions
--- a/gcloud/beta/beyondcorp/client-connector/gateways/get-iam-policy
+++ b/gcloud/beta/beyondcorp/client-connector/gateways/get-iam-policy
@ -0,0 +1,93 @@
+NAME
+    gcloud beta beyondcorp client-connector gateways get-iam-policy - get the
+        IAM policy for a BeyondCorp client gateway
+
+SYNOPSIS
+    gcloud beta beyondcorp client-connector gateways get-iam-policy
+        (CLIENT_GATEWAY : --location=LOCATION) [--filter=EXPRESSION]
+        [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Gets the IAM policy for the given BeyondCorp client gateway.
+
+EXAMPLES
+    To get the IAM policy for a client gateway my-client-gateway run:
+
+        $ gcloud beta beyondcorp client-connector gateways get-iam-policy \
+            my-client-gateway --project=consumer-project-id \
+            --location=us-central1
+
+POSITIONAL ARGUMENTS
+     Client gateway resource - The BeyondCorp client gateway for which to get
+     the IAM policy. The arguments in this group can be used to specify the
+     attributes of this resource. (NOTE) Some attributes are not given
+     arguments in this group but can be set in other ways. To set the project
+     attribute:
+      ◆ provide the argument client_gateway on the command line with a fully
+        specified name;
+      ◆ set the property core/project;
+      ◆ provide the argument --project on the command line.
+
+     This must be specified.
+
+       CLIENT_GATEWAY
+          ID of the client_gateway or fully qualified identifier for the
+          client_gateway. To set the client_gateway attribute:
+          ▸ provide the argument client_gateway on the command line.
+
+          This positional must be specified if any of the other arguments in
+          this group are specified.
+
+       --location=LOCATION
+          The location of the BeyondCorp Enterprise client connector.
+
+          To set the location attribute:
+          ▸ provide the argument client_gateway on the command line with a
+            fully specified name;
+          ▸ provide the argument --location on the command line.
+
+LIST COMMAND FLAGS
+     --filter=EXPRESSION
+        Apply a Boolean filter EXPRESSION to each resource item to be listed.
+        If the expression evaluates True, then that item is listed. For more
+        details and examples of filter expressions, run $ gcloud topic filters.
+        This flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --limit=LIMIT
+        Maximum number of resources to list. The default is unlimited. This
+        flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --page-size=PAGE_SIZE
+        Some services group resource list output into pages. This flag
+        specifies the maximum number of resources per page. The default is
+        determined by the service if it supports paging, otherwise it is
+        unlimited (no paging). Paging may be applied before or after --filter
+        and --limit depending on the service.
+
+     --sort-by=[FIELD,...]
+        Comma-separated list of resource field key names to sort by. The
+        default order is ascending. Prefix a field with ``~'' for descending
+        order on that field. This flag interacts with other flags that are
+        applied in this order: --flatten, --sort-by, --filter, --limit.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the beyondcorp/v1 API. The full documentation for this
+    API can be found at: https://cloud.google.com/
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha beyondcorp client-connector gateways get-iam-policy
+
--- a/gcloud/beta/beyondcorp/client-connector/gateways/help
+++ b/gcloud/beta/beyondcorp/client-connector/gateways/help
@ -31,9 +31,15 @@ COMMANDS
     describe
        (BETA) Describe a single BeyondCorp client gateway.

+     get-iam-policy
+        (BETA) Get the IAM policy for a BeyondCorp client gateway.
+
     list
        (BETA) List BeyondCorp client gateway resources.

+     set-iam-policy
+        (BETA) Set the IAM policy for a BeyondCorp client gateway.
+
 NOTES
    This command is currently in beta and might change without notice. This
    variant is also available:
--- a/gcloud/beta/beyondcorp/client-connector/gateways/set-iam-policy
+++ b/gcloud/beta/beyondcorp/client-connector/gateways/set-iam-policy
@ -0,0 +1,73 @@
+NAME
+    gcloud beta beyondcorp client-connector gateways set-iam-policy - set the
+        IAM policy for a BeyondCorp client gateway
+
+SYNOPSIS
+    gcloud beta beyondcorp client-connector gateways set-iam-policy
+        (CLIENT_GATEWAY : --location=LOCATION) POLICY_FILE
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Sets the IAM policy for the given BeyondCorp client gateway.
+
+EXAMPLES
+    The following command will read an IAM policy defined in a JSON file
+    'policy.json' and set it for the client gateway with ID my-client-gateway:
+
+        $ gcloud beta beyondcorp client-connector gateways set-iam-policy \
+            my-client-gateway policy.json --location=us-central1
+
+POSITIONAL ARGUMENTS
+     Client gateway resource - The BeyondCorp client gateway for which to set
+     the IAM policy. The arguments in this group can be used to specify the
+     attributes of this resource. (NOTE) Some attributes are not given
+     arguments in this group but can be set in other ways. To set the project
+     attribute:
+      ◆ provide the argument client_gateway on the command line with a fully
+        specified name;
+      ◆ set the property core/project;
+      ◆ provide the argument --project on the command line.
+
+     This must be specified.
+
+       CLIENT_GATEWAY
+          ID of the client_gateway or fully qualified identifier for the
+          client_gateway. To set the client_gateway attribute:
+          ▸ provide the argument client_gateway on the command line.
+
+          This positional must be specified if any of the other arguments in
+          this group are specified.
+
+       --location=LOCATION
+          The location of the BeyondCorp Enterprise client connector.
+
+          To set the location attribute:
+          ▸ provide the argument client_gateway on the command line with a
+            fully specified name;
+          ▸ provide the argument --location on the command line.
+
+     POLICY_FILE
+        Path to a local JSON or YAML formatted file containing a valid policy.
+
+        The output of the get-iam-policy command is a valid file, as is any
+        JSON or YAML file conforming to the structure of a Policy
+        (https://cloud.google.com/iam/reference/rest/v1/Policy).
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the beyondcorp/v1 API. The full documentation for this
+    API can be found at: https://cloud.google.com/
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha beyondcorp client-connector gateways set-iam-policy
+
--- a/gcloud/beta/beyondcorp/client-connector/services/create
+++ b/gcloud/beta/beyondcorp/client-connector/services/create
@ -77,7 +77,7 @@ REQUIRED FLAGS
                  "config":{
                    "transportProtocol":"TCP",
                    "destinationRoutes":[{
-                      "address":"196.0.0.1",
+                      "address":"196.0.0.0",
                      "netmask":"255.255.255.0"
                    }]
                  }
--- a/gcloud/beta/beyondcorp/client-connector/services/get-iam-policy
+++ b/gcloud/beta/beyondcorp/client-connector/services/get-iam-policy
@ -0,0 +1,96 @@
+NAME
+    gcloud beta beyondcorp client-connector services get-iam-policy - get the
+        IAM policy for a BeyondCorp client connector service
+
+SYNOPSIS
+    gcloud beta beyondcorp client-connector services get-iam-policy
+        (CLIENT_CONNECTOR_SERVICE : --location=LOCATION) [--filter=EXPRESSION]
+        [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Gets the IAM policy for a BeyondCorp client connector service.
+
+EXAMPLES
+    To get the IAM policy for a client connector service with ID
+    my-service-resource run:
+
+        $ gcloud beta beyondcorp client-connector services get-iam-policy \
+            my-service-resource --project=consumer-project-id \
+            --location=us-central1
+
+POSITIONAL ARGUMENTS
+     Client connector service resource - The BeyondCorp client connector
+     service for which to get the IAM policy. The arguments in this group can
+     be used to specify the attributes of this resource. (NOTE) Some attributes
+     are not given arguments in this group but can be set in other ways. To set
+     the project attribute:
+      ◆ provide the argument client_connector_service on the command line
+        with a fully specified name;
+      ◆ set the property core/project;
+      ◆ provide the argument --project on the command line.
+
+     This must be specified.
+
+       CLIENT_CONNECTOR_SERVICE
+          ID of the client_connector_service or fully qualified identifier for
+          the client_connector_service. To set the client_connector_service
+          attribute:
+          ▸ provide the argument client_connector_service on the command
+            line.
+
+          This positional must be specified if any of the other arguments in
+          this group are specified.
+
+       --location=LOCATION
+          The location of the BeyondCorp Enterprise client connector.
+
+          To set the location attribute:
+          ▸ provide the argument client_connector_service on the command line
+            with a fully specified name;
+          ▸ provide the argument --location on the command line.
+
+LIST COMMAND FLAGS
+     --filter=EXPRESSION
+        Apply a Boolean filter EXPRESSION to each resource item to be listed.
+        If the expression evaluates True, then that item is listed. For more
+        details and examples of filter expressions, run $ gcloud topic filters.
+        This flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --limit=LIMIT
+        Maximum number of resources to list. The default is unlimited. This
+        flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --page-size=PAGE_SIZE
+        Some services group resource list output into pages. This flag
+        specifies the maximum number of resources per page. The default is
+        determined by the service if it supports paging, otherwise it is
+        unlimited (no paging). Paging may be applied before or after --filter
+        and --limit depending on the service.
+
+     --sort-by=[FIELD,...]
+        Comma-separated list of resource field key names to sort by. The
+        default order is ascending. Prefix a field with ``~'' for descending
+        order on that field. This flag interacts with other flags that are
+        applied in this order: --flatten, --sort-by, --filter, --limit.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the beyondcorp/v1 API. The full documentation for this
+    API can be found at: https://cloud.google.com/
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha beyondcorp client-connector services get-iam-policy
+
--- a/gcloud/beta/beyondcorp/client-connector/services/help
+++ b/gcloud/beta/beyondcorp/client-connector/services/help
@ -33,9 +33,15 @@ COMMANDS
     describe
        (BETA) Describe a BeyondCorp client connector service.

+     get-iam-policy
+        (BETA) Get the IAM policy for a BeyondCorp client connector service.
+
     list
        (BETA) List BeyondCorp client connector service resources.

+     set-iam-policy
+        (BETA) Set the IAM policy for a BeyondCorp client connector service.
+
     update
        (BETA) Update a BeyondCorp client connector service.

--- a/gcloud/beta/beyondcorp/client-connector/services/set-iam-policy
+++ b/gcloud/beta/beyondcorp/client-connector/services/set-iam-policy
@ -0,0 +1,77 @@
+NAME
+    gcloud beta beyondcorp client-connector services set-iam-policy - set the
+        IAM policy for a BeyondCorp client connector service
+
+SYNOPSIS
+    gcloud beta beyondcorp client-connector services set-iam-policy
+        (CLIENT_CONNECTOR_SERVICE : --location=LOCATION) POLICY_FILE
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    (BETA) Sets the IAM policy for the given BeyondCorp client connector
+    service.
+
+EXAMPLES
+    The following command will read an IAM policy defined in a JSON file
+    'policy.json' and set it for the client connector service with ID
+    my-service-resource:
+
+        $ gcloud beta beyondcorp client-connector services set-iam-policy \
+            my-service-resource policy.json
+
+POSITIONAL ARGUMENTS
+     Client connector service resource - The BeyondCorp client connector
+     service for which to set the IAM policy. The arguments in this group can
+     be used to specify the attributes of this resource. (NOTE) Some attributes
+     are not given arguments in this group but can be set in other ways. To set
+     the project attribute:
+      ◆ provide the argument client_connector_service on the command line
+        with a fully specified name;
+      ◆ set the property core/project;
+      ◆ provide the argument --project on the command line.
+
+     This must be specified.
+
+       CLIENT_CONNECTOR_SERVICE
+          ID of the client_connector_service or fully qualified identifier for
+          the client_connector_service. To set the client_connector_service
+          attribute:
+          ▸ provide the argument client_connector_service on the command
+            line.
+
+          This positional must be specified if any of the other arguments in
+          this group are specified.
+
+       --location=LOCATION
+          The location of the BeyondCorp Enterprise client connector.
+
+          To set the location attribute:
+          ▸ provide the argument client_connector_service on the command line
+            with a fully specified name;
+          ▸ provide the argument --location on the command line.
+
+     POLICY_FILE
+        Path to a local JSON or YAML formatted file containing a valid policy.
+
+        The output of the get-iam-policy command is a valid file, as is any
+        JSON or YAML file conforming to the structure of a Policy
+        (https://cloud.google.com/iam/reference/rest/v1/Policy).
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the beyondcorp/v1 API. The full documentation for this
+    API can be found at: https://cloud.google.com/
+
+NOTES
+    This command is currently in beta and might change without notice. This
+    variant is also available:
+
+        $ gcloud alpha beyondcorp client-connector services set-iam-policy
+
--- a/gcloud/beta/beyondcorp/client-connector/services/update
+++ b/gcloud/beta/beyondcorp/client-connector/services/update
@ -4,19 +4,36 @@ NAME

 SYNOPSIS
    gcloud beta beyondcorp client-connector services update
-        (CLIENT_CONNECTOR_SERVICE : --location=LOCATION) [--async]
-        [--display-name=DISPLAY_NAME] [GCLOUD_WIDE_FLAG ...]
+        (CLIENT_CONNECTOR_SERVICE : --location=LOCATION)
+        (--config-from-file=CONFIG_FROM_FILE
+          | --display-name=DISPLAY_NAME --ingress-config=INGRESS_CONFIG)
+        [--async] [GCLOUD_WIDE_FLAG ...]

 DESCRIPTION
-    (BETA) Update a BeyondCorp client connector service.
+    (BETA) Update a BeyondCorp client connector service. Note - Mutable fields
+    include - \ display_name, ingress.config.destination_routes.

 EXAMPLES
+    Note - Mutable fields include: display_name,
+    ingress.config.destination_routes.
+
    The following command updates a client connector service with ID
-    my-service-resource in location us-central1:
+    my-service-resource with ingress config:

        $ gcloud beta beyondcorp client-connector services update \
            my-service-resource --project=consumer-project-id \
-            --location=us-central1 --display-name="my-new-resource"
+            --location=us-central1 --display-name="my-new-resource" \
+            --ingress-config='{"destinationRoutes":[{"address":"196.0.0.1",
+         "netmask":"255.255.255.0"},{"address":"197.0.0.2","netmask":"255.25\
+        5.255.0"}]}'
+
+    The following command updates a client connector service with ID
+    my-service-resource with configuration from file:
+
+        $ gcloud beta beyondcorp client-connector services update \
+            my-service-resource --project=consumer-project-id \
+            --location=us-central1 \
+            --config-from-file=/path/to/file/config.json

 POSITIONAL ARGUMENTS
     Client connector service resource - The BeyondCorp client connector
@ -49,18 +66,43 @@ POSITIONAL ARGUMENTS
            with a fully specified name;
          ▸ provide the argument --location on the command line.

-FLAGS
+REQUIRED FLAGS
+     Updated client connector service configuration.
+
+     Exactly one of these must be specified:
+
+       --config-from-file=CONFIG_FROM_FILE
+          Path to json file containing client connector service configuration.
+          Example - "/file/path/config.json" where config.json contains -              {
+                "ingress":{
+                  "config":{
+                    "transportProtocol":"TCP",
+                    "destinationRoutes":[{
+                      "address":"196.0.0.0",
+                      "netmask":"255.255.255.0"
+                    }]
+                  }
+                },
+                "displayName":"my-service-resource"
+              }
+
+       --display-name=DISPLAY_NAME
+          An arbitrary user-provided name for the client connector service. The
+          display name should follow format -
+          ▸ Must be 6 to 30 characters in length.
+          ▸ Can only contain lowercase letters, numbers and hyphens.
+          ▸ Must start with a letter.
+
+       --ingress-config=INGRESS_CONFIG
+          Ingress config for client gateways. Example -
+          {"destinationRoutes":[{"address":"196.0.0.0",
+          "netmask":"255.255.255.0"},{"address":"197.0.0.0","netmask":"255.255.255.0"}]}.
+
+OPTIONAL FLAGS
     --async
        Return immediately, without waiting for the operation in progress to
        complete.

-     --display-name=DISPLAY_NAME
-        An arbitrary user-provided name for the client connector service. The
-        display name should follow format -
-        ◆ Must be 6 to 30 characters in length.
-        ◆ Can only contain lowercase letters, numbers and hyphens.
-        ◆ Must start with a letter.
-
 GCLOUD WIDE FLAGS
    These flags are available to all commands: --access-token-file, --account,
    --billing-project, --configuration, --flags-file, --flatten, --format,