mirror of
https://github.com/imjasonh/gcloud-help
synced 2026-07-18 14:56:05 +00:00
gcloud: Wed May 15 09:19:06 UTC 2024
This commit is contained in:
Automated
parent
e8259d86b1
commit
3b84182be4
193 changed files with 10091 additions and 581 deletions
|
|
@ -6,27 +6,58 @@ SYNOPSIS
|
|||
gcloud alpha access-context-manager cloud-bindings create
|
||||
--group-key=GROUP_KEY [--dry-run-level=[DRY_RUN_LEVEL,...]]
|
||||
[--level=[LEVEL,...]] [--organization=ORGANIZATION]
|
||||
[GCLOUD_WIDE_FLAG ...]
|
||||
[--restricted-client-application-client-ids=[RESTRICTED_CLIENT_APPLICATION_CLIENT_IDS,
|
||||
...]]
|
||||
[--restricted-client-application-names=[RESTRICTED_CLIENT_APPLICATION_NAMES,
|
||||
...]] [GCLOUD_WIDE_FLAG ...]
|
||||
|
||||
DESCRIPTION
|
||||
(ALPHA) Create a new cloud access binding. The access level will be bound
|
||||
with the group. The access level will be enforced when any user in the
|
||||
group tries to access the Google cloud console or API.
|
||||
(ALPHA) Create a new access binding. The access level will be bound with
|
||||
the group and the restricted client application. The access level is
|
||||
enforced at the organization level for all context-aware access group
|
||||
members, as specified in the bind. If a restricted client application is
|
||||
specified, then the enforcement applies only to the specified application,
|
||||
and not to the entire organization.
|
||||
|
||||
EXAMPLES
|
||||
To create a new cloud access binding, run:
|
||||
To create a new cloud access binding at the organization level, run:
|
||||
|
||||
$ gcloud alpha access-context-manager cloud-bindings create \
|
||||
--group-key=my-group-key \
|
||||
--level=accessPolicies/123/accessLevels/abc
|
||||
|
||||
To create a new cloud access binding for the dry run access level, run:
|
||||
To create a new cloud access binding for particular applications, run:
|
||||
|
||||
$ gcloud alpha access-context-manager cloud-bindings create \
|
||||
--group-key=my-group-key \
|
||||
--level=accessPolicies/123/accessLevels/abc \
|
||||
--organization='1234567890' \
|
||||
--restricted-client-application-names='Google Cloud SDK, Cloud
|
||||
Console' \
|
||||
--restricted-client-application-client-ids='123456789.apps.googl\
|
||||
eusercontent.com'
|
||||
|
||||
To create a new cloud access binding for the dry run access level at the
|
||||
organization level, run:
|
||||
|
||||
$ gcloud alpha access-context-manager cloud-bindings create \
|
||||
--group-key=my-group-key \
|
||||
--level=accessPolicies/123/accessLevels/abc \
|
||||
--dry-run-level=accessPolicies/123/accessLevels/def
|
||||
|
||||
To create a new cloud access binding for the dry run access level for
|
||||
particular applications, run:
|
||||
|
||||
$ gcloud alpha access-context-manager cloud-bindings create \
|
||||
--group-key=my-group-key \
|
||||
--level=accessPolicies/123/accessLevels/abc \
|
||||
--dry-run-level=accessPolicies/123/accessLevels/def \
|
||||
--organization='1234567890' \
|
||||
--restricted-client-application-names='Google Cloud SDK, Cloud
|
||||
Console' \
|
||||
--restricted-client-application-client-ids='123456789.apps.googl\
|
||||
eusercontent.com'
|
||||
|
||||
REQUIRED FLAGS
|
||||
--group-key=GROUP_KEY
|
||||
Google Group id whose members are subject to the restrictions of this
|
||||
|
|
@ -34,19 +65,32 @@ REQUIRED FLAGS
|
|||
|
||||
OPTIONAL FLAGS
|
||||
--dry-run-level=[DRY_RUN_LEVEL,...]
|
||||
The dry run access level that binds to the given group. The dry run
|
||||
access level will be evaluated but won't be enforced. Denial on dry run
|
||||
access level will be logged. The input must be the full identifier of
|
||||
an access level, such as accessPolicies/123/accessLevels/new-def.
|
||||
The dry run access level that binds to the given group and restricted
|
||||
client applications. The dry run access level is evaluated but isn't
|
||||
enforced. Denial on a dry run access level is logged. The input must be
|
||||
the full identifier of an access level, such as
|
||||
accessPolicies/123/accessLevels/new-def. If no
|
||||
restricted-client-application-client-ids or
|
||||
restricted-client-application-names are provided, then the access level
|
||||
is applied to the entire organization.
|
||||
|
||||
--level=[LEVEL,...]
|
||||
The access level that binds to the given group. The input must be the
|
||||
full identifier of an access level, such as
|
||||
accessPolicies/123/accessLevels/abc.
|
||||
The access level that binds to the given group and restricted client
|
||||
applications. The input must be the full identifier of an access level,
|
||||
such as accessPolicies/123/accessLevels/abc. If no
|
||||
restricted-client-application-client-ids or
|
||||
restricted-client-application-names are provided, then the access level
|
||||
is applied to the entire organization.
|
||||
|
||||
--organization=ORGANIZATION
|
||||
Parent organization for this binding.
|
||||
|
||||
--restricted-client-application-client-ids=[RESTRICTED_CLIENT_APPLICATION_CLIENT_IDS,...]
|
||||
Client IDs to which the access level is applied.
|
||||
|
||||
--restricted-client-application-names=[RESTRICTED_CLIENT_APPLICATION_NAMES,...]
|
||||
Application names to which the access level is applied.
|
||||
|
||||
GCLOUD WIDE FLAGS
|
||||
These flags are available to all commands: --access-token-file, --account,
|
||||
--billing-project, --configuration, --flags-file, --flatten, --format,
|
||||
|
|
|
|||
|
|
@ -31,7 +31,7 @@ COMMANDS
|
|||
(ALPHA) List cloud access bindings under an organization.
|
||||
|
||||
update
|
||||
(ALPHA) Update a existing cloud access binding under an organization.
|
||||
(ALPHA) Update an existing access binding under an organization.
|
||||
|
||||
NOTES
|
||||
This command is currently in alpha and might change without notice. If this
|
||||
|
|
|
|||
|
|
@ -15,10 +15,20 @@ EXAMPLES
|
|||
|
||||
$ gcloud alpha access-context-manager cloud-bindings list
|
||||
|
||||
This command prints a list of gcpUserAccessBindings in a tabular form:
|
||||
This command prints a list of Google Cloud user access bindings,
|
||||
gcpUserAccessBindings, in YAML format:
|
||||
|
||||
NAME GROUP_KEY ACCESS_LEVEL DRY_RUN_ACCESS_LEVEL
|
||||
organizations/256/gcpUserAccessBindings/b3-BhcX_Ud5N a3dad accessPolicies/9522/accessLevels/device_trusted accessPolicies/9522/accessLevels/specific_location
|
||||
---
|
||||
accessLevels:
|
||||
- accessPolicies/9522/accessLevels/device_trusted
|
||||
dryRunAccessLevels:
|
||||
- accessPolicies/9522/accessLevels/specific_location
|
||||
groupKey: a3dad
|
||||
name: organizations/256/gcpUserAccessBindings/b3-BhcX_Ud5N
|
||||
restrictedClientApplications:
|
||||
- clientId: 123.apps.googleusercontent.com
|
||||
- name: Cloud Console
|
||||
- name: Google Cloud SDK
|
||||
|
||||
FLAGS
|
||||
Organization resource - The parent organization of the bindings you want
|
||||
|
|
|
|||
|
|
@ -1,19 +1,23 @@
|
|||
NAME
|
||||
gcloud alpha access-context-manager cloud-bindings update - update a
|
||||
existing cloud access binding under an organization
|
||||
gcloud alpha access-context-manager cloud-bindings update - update an
|
||||
existing access binding under an organization
|
||||
|
||||
SYNOPSIS
|
||||
gcloud alpha access-context-manager cloud-bindings update
|
||||
(--binding=BINDING : --organization=ORGANIZATION)
|
||||
[--dry-run-level=[DRY_RUN_LEVEL,...]] [--level=[LEVEL,...]]
|
||||
[GCLOUD_WIDE_FLAG ...]
|
||||
[--restricted-client-application-client-ids=[RESTRICTED_CLIENT_APPLICATION_CLIENT_IDS,
|
||||
...]]
|
||||
[--restricted-client-application-names=[RESTRICTED_CLIENT_APPLICATION_NAMES,
|
||||
...]] [GCLOUD_WIDE_FLAG ...]
|
||||
|
||||
DESCRIPTION
|
||||
(ALPHA) Update an existing cloud access binding. You can update the level,
|
||||
dry run level or both. They can't be both empty after update.
|
||||
(ALPHA) Update an existing access binding. You can update the level, dry
|
||||
run level, restricted client application client IDs and restricted client
|
||||
application names. They can't all be empty.
|
||||
|
||||
EXAMPLES
|
||||
To update an existing cloud access binding, run:
|
||||
To update an existing access binding, run:
|
||||
|
||||
$ gcloud alpha access-context-manager cloud-bindings update \
|
||||
--binding=my-binding-id \
|
||||
|
|
@ -25,6 +29,15 @@ EXAMPLES
|
|||
--binding=my-binding-id --level= \
|
||||
--dry-run-level=accessPolicies/123/accessLevels/new-def
|
||||
|
||||
To update restricted client applications, run:
|
||||
|
||||
$ gcloud alpha access-context-manager cloud-bindings update \
|
||||
--binding=my-binding-id \
|
||||
--restricted-client-application-client-ids='123.apps.googleuserc\
|
||||
ontent.com' \
|
||||
--restricted-client-application-names='Cloud Console, Google
|
||||
Cloud SDK'
|
||||
|
||||
REQUIRED FLAGS
|
||||
Cloud access binding resource - The cloud access binding you want to
|
||||
update. The arguments in this group can be used to specify the attributes
|
||||
|
|
@ -62,6 +75,14 @@ OPTIONAL FLAGS
|
|||
binding. The input must be the full identifier of an access level, such
|
||||
as accessPolicies/123/accessLevels/new-abc.
|
||||
|
||||
--restricted-client-application-client-ids=[RESTRICTED_CLIENT_APPLICATION_CLIENT_IDS,...]
|
||||
The application client IDs that replace the existing application client
|
||||
IDs for the restricted client applications in the given binding.
|
||||
|
||||
--restricted-client-application-names=[RESTRICTED_CLIENT_APPLICATION_NAMES,...]
|
||||
The application names that replace the existing application names for
|
||||
the restricted client applications in the given binding.
|
||||
|
||||
GCLOUD WIDE FLAGS
|
||||
These flags are available to all commands: --access-token-file, --account,
|
||||
--billing-project, --configuration, --flags-file, --flatten, --format,
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue