imjasonh/gcloud-help
1
0
Fork 0
mirror of https://github.com/imjasonh/gcloud-help synced 2026-07-18 14:56:05 +00:00
Code Activity

gcloud: Wed May 15 09:19:06 UTC 2024

Browse source
This commit is contained in:
Automated 2024-05-15 09:19:06 +00:00
parent e8259d86b1
commit 3b84182be4
193 changed files with 10091 additions and 581 deletions
Download patch file Download diff file Expand all files Collapse all files

2
gcloud/beta/alloydb/instances/create
View file

@ -129,7 +129,7 @@ OPTIONAL FLAGS
Read capacity, i.e. number of nodes in a read pool instance.
--[no-]require-connectors
Enable or disable enforcing connectors only (ex: AuthProxy)connections
Enable or disable enforcing connectors only (ex: AuthProxy) connections
to the database. Use --require-connectors to enable and
--no-require-connectors to disable.

29
gcloud/beta/alloydb/instances/create-secondary
View file

@ -4,7 +4,9 @@ NAME
SYNOPSIS
gcloud beta alloydb instances create-secondary INSTANCE --cluster=CLUSTER
--region=REGION [--async] [--availability-type=AVAILABILITY_TYPE]
--region=REGION [--assign-inbound-public-ip=ASSIGN_INBOUND_PUBLIC_IP]
[--async] [--availability-type=AVAILABILITY_TYPE]
[--[no-]require-connectors] [--ssl-mode=SSL_MODE]
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
@ -29,6 +31,16 @@ REQUIRED FLAGS
regions at https://cloud.google.com/sql/docs/instance-locations.
OPTIONAL FLAGS
--assign-inbound-public-ip=ASSIGN_INBOUND_PUBLIC_IP
Specify to enable or disable public IP on an instance. On instance
creation only disabling public IP is allowed. If you want to enable
public IP, an instance must be created with public IP disabled first,
then update the instance to enable public IP. ASSIGN_INBOUND_PUBLIC_IP
must be (only one value is supported):
NO_PUBLIC_IP
This disables public IP on the instance.
--async
Return immediately, without waiting for the operation in progress to
complete.
@ -45,6 +57,21 @@ OPTIONAL FLAGS
production instances; instance does not automatically fail over to
another zone.
--[no-]require-connectors
Enable or disable enforcing connectors only (ex: AuthProxy) connections
to the database. Use --require-connectors to enable and
--no-require-connectors to disable.
--ssl-mode=SSL_MODE
Specify the SSL mode to use when the instance connects to the database.
Default SSL mode will match what is set on the primary instance.
SSL_MODE must be one of:
ALLOW_UNENCRYPTED_AND_ENCRYPTED
SSL connections are optional. CA verification is not enforced.
ENCRYPTED_ONLY
SSL connections are required. CA verification is not enforced.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,

2
gcloud/beta/alloydb/instances/update
View file

@ -118,7 +118,7 @@ OPTIONAL FLAGS
Read capacity, i.e. number of nodes in a read pool instance.
--[no-]require-connectors
Enable or disable enforcing connectors only (ex: AuthProxy)connections
Enable or disable enforcing connectors only (ex: AuthProxy) connections
to the database. Use --require-connectors to enable and
--no-require-connectors to disable.

13
gcloud/beta/app/deploy
View file

@ -15,17 +15,16 @@ DESCRIPTION
be uploaded. A DEPLOYABLE can be a service's .yaml file or a
configuration's .yaml file (for more information about configuration files
specific to your App Engine environment, refer to
https://cloud.google.com/appengine/docs/standard/python/configuration-files
or
https://cloud.google.com/appengine/docs/flexible/python/configuration-files).
Note, for Java8 Standard apps or Java11/17 Standard apps using bundled
https://cloud.google.com/appengine/docs/standard/configuration-files or
https://cloud.google.com/appengine/docs/flexible/configuration-files).
Note, for Java 8 Standard apps or Java 11/17/21 Standard apps using bundled
services, you must add the path to the appengine-web.xml file inside the
WEB-INF directory. gcloud beta app deploy skips files specified in the
WEB-INF directory. gcloud app deploy skips files specified in the
.gcloudignore file (see gcloud topic gcloudignore for more information).
For Java11 Standard, you can either use the yaml file, a Maven pom.xml, or
For Java 11 Standard, you can either use the yaml file, a Maven pom.xml, or
a Gradle build.gradle. Alternatively, if the application is a single
self-contained jar, you can give the path to the jar and a simple service
configuration will be generated. You can deploy Java11 Maven source
configuration will be generated. You can deploy Java 11 Maven source
projects by specifying the location of your project's pom.xml file, and it
will be built and deployed using App Engine Buildpacks.

24
gcloud/beta/compute/firewall-rules/migrate
View file

@ -4,9 +4,13 @@ NAME
SYNOPSIS
gcloud beta compute firewall-rules migrate --source-network=SOURCE_NETWORK
(--bind-tags-to-instances | --export-tag-mapping
(--bind-tags-to-instances | --export-exclusion-patterns
| --export-tag-mapping
| --target-firewall-policy=TARGET_FIREWALL_POLICY)
[--export-terraform-script] [--tag-mapping-file=TAG_MAPPING_FILE]
[--exclusion-patterns-file=EXCLUSION_PATTERNS_FILE]
[--export-terraform-script] [--force]
[--tag-mapping-file=TAG_MAPPING_FILE]
[--terraform-script-output-file=TERRAFORM_SCRIPT_OUTPUT_FILE]
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
@ -32,6 +36,10 @@ REQUIRED FLAGS
If set, migration tool will bind secure tags to the instances with
the network tags which match secure tags from the tag mapping file.
--export-exclusion-patterns
If set, migration tool will dump list of regexes used to filter VPC
Firewall out of migration.
--export-tag-mapping
If set, migration tool will inspect all VPC Firewalls attached to
SOURCE_NETWORK, collect all source and target tags, and store them in
@ -42,14 +50,26 @@ REQUIRED FLAGS
result.
OPTIONAL FLAGS
--exclusion-patterns-file=EXCLUSION_PATTERNS_FILE
Path to a file with exclusion patterns used for VPC Firewall filtering.
Each regular expression describing a single firewall naming pattern
must be placed in a single line. No leading or tailing whitespaces.
--export-terraform-script
If set, migration tool will output a terraform script to create a
Firewall Policy with migrated rules.
--force
If set, migration will succeed even if the tool detects that original
rule evaluation order cannot be preserved.
--tag-mapping-file=TAG_MAPPING_FILE
Path to a JSON file with legacy tags and service accounts to secure
tags mapping.
--terraform-script-output-file=TERRAFORM_SCRIPT_OUTPUT_FILE
Path to a file where to store generated Terraform script.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,

30
gcloud/beta/compute/instance-templates/create
View file

@ -619,9 +619,9 @@ FLAGS
Adds a network interface to the instance. Mutually exclusive with any
of these flags: --address, --network, --network-tier, --subnet,
--private-network-ip, --stack-type, --ipv6-network-tier,
--ipv6-public-ptr-domain, --internal-ipv6-address,
--internal-ipv6-prefix-length, --ipv6-address, --ipv6-prefix-length,
--external-ipv6-address, --external-ipv6-prefix-length. This flag can
--internal-ipv6-address, --internal-ipv6-prefix-length, --ipv6-address,
--ipv6-prefix-length, --external-ipv6-address,
--external-ipv6-prefix-length, --ipv6-public-ptr-domain. This flag can
be repeated to specify multiple network interfaces.
The following keys are allowed:
@ -674,6 +674,30 @@ FLAGS
instance network interface IPv6 access config. IPV6_NETWORK_TIER
must be PREMIUM (currently only one value is supported).
internal-ipv6-address
Assigns the given internal IPv6 address or range to the instance
that is created. The address must be the first IP address in the
range or from a /96 IP address range. This option can be used only
when creating a single instance.
internal-ipv6-prefix-length
Optional field that indicates the prefix length of the internal
IPv6 address range. It should be used together with
internal-ipv6-address. Only /96 IP address range is supported and
the default value is 96. If not set, either the prefix length from
--internal-ipv6-address will be used or the default value of 96
will be assigned.
external-ipv6-address
Assigns the given external IPv6 address to the instance that is
created. The address must be the first IP address in the range.
This option can be used only when creating a single instance.
external-ipv6-prefix-length
The prefix length of the external IPv6 address range. This field
should be used together with external-ipv6-address. Only the /96 IP
address range is supported, and the default value is 96.
ipv6-public-ptr-domain
Assigns a custom PTR domain for the external IPv6 in the IPv6
access configuration of instance. If its value is not specified,

86
gcloud/beta/compute/instance-templates/create-with-container
View file

@ -28,6 +28,8 @@ SYNOPSIS
[boot=BOOT],[device-name=DEVICE-NAME],[mode=MODE],[name=NAME]]
[--external-ipv6-address=EXTERNAL_IPV6_ADDRESS]
[--external-ipv6-prefix-length=EXTERNAL_IPV6_PREFIX_LENGTH]
[--internal-ipv6-address=INTERNAL_IPV6_ADDRESS]
[--internal-ipv6-prefix-length=INTERNAL_IPV6_PREFIX_LENGTH]
[--ipv6-network-tier=IPV6_NETWORK_TIER] [--labels=[KEY=VALUE,...]]
[--local-ssd=[device-name=DEVICE-NAME],[interface=INTERFACE]]
[--machine-type=MACHINE_TYPE] [--maintenance-policy=MAINTENANCE_POLICY]
@ -45,7 +47,10 @@ SYNOPSIS
[--custom-cpu=CUSTOM_CPU --custom-memory=CUSTOM_MEMORY
: --custom-extensions --custom-vm-type=CUSTOM_VM_TYPE]
[--image-project=IMAGE_PROJECT --image=IMAGE
| --image-family=IMAGE_FAMILY] [--scopes=[SCOPE,...] | --no-scopes]
| --image-family=IMAGE_FAMILY]
[--reservation=RESERVATION
--reservation-affinity=RESERVATION_AFFINITY; default="any"]
[--scopes=[SCOPE,...] | --no-scopes]
[--service-account=SERVICE_ACCOUNT | --no-service-account]
[GCLOUD_WIDE_FLAG ...]
@ -417,6 +422,19 @@ FLAGS
be used together with --external-ipv6-address. Only the /96 IP address
range is supported, and the default value is 96.
--internal-ipv6-address=INTERNAL_IPV6_ADDRESS
Assigns the given internal IPv6 address or range to the instance that
is created. The address must be the first IP address in the range or
from a /96 IP address range. This option can be used only when creating
a single instance.
--internal-ipv6-prefix-length=INTERNAL_IPV6_PREFIX_LENGTH
Optional field that indicates the prefix length of the internal IPv6
address range. It should be used together with --internal-ipv6-address.
Only /96 IP address range is supported and the default value is 96. If
not set, either the prefix length from --internal-ipv6-address will be
used or the default value of 96 will be assigned.
--ipv6-network-tier=IPV6_NETWORK_TIER
Specifies the IPv6 network tier that will be used to configure the
instance network interface IPv6 access config. IPV6_NETWORK_TIER must
@ -525,8 +543,11 @@ FLAGS
--network-interface=[PROPERTY=VALUE,...]
Adds a network interface to the instance. Mutually exclusive with any
of these flags: --address, --network, --network-tier, --subnet,
--private-network-ip. This flag can be repeated to specify multiple
network interfaces.
--private-network-ip, --stack-type, --ipv6-network-tier,
--internal-ipv6-address, --internal-ipv6-prefix-length, --ipv6-address,
--ipv6-prefix-length, --external-ipv6-address,
--external-ipv6-prefix-length. This flag can be repeated to specify
multiple network interfaces.
The following keys are allowed:
address
@ -562,6 +583,39 @@ FLAGS
Specifies the Network Interface Controller (NIC) type for the
interface. NIC_TYPE must be one of: GVNIC, VIRTIO_NET.
stack-type
Specifies whether IPv6 is enabled on the interface. STACK_TYPE must
be one of: IPV4_ONLY, IPV4_IPV6. The default value is IPV4_ONLY.
ipv6-network-tier
Specifies the IPv6 network tier that will be used to configure the
instance network interface IPv6 access config. IPV6_NETWORK_TIER
must be PREMIUM (currently only one value is supported).
internal-ipv6-address
Assigns the given internal IPv6 address or range to the instance
that is created. The address must be the first IP address in the
range or from a /96 IP address range. This option can be used only
when creating a single instance.
internal-ipv6-prefix-length
Optional field that indicates the prefix length of the internal
IPv6 address range. It should be used together with
internal-ipv6-address. Only /96 IP address range is supported and
the default value is 96. If not set, either the prefix length from
--internal-ipv6-address will be used or the default value of 96
will be assigned.
external-ipv6-address
Assigns the given external IPv6 address to the instance that is
created. The address must be the first IP address in the range.
This option can be used only when creating a single instance.
external-ipv6-prefix-length
The prefix length of the external IPv6 address range. This field
should be used together with external-ipv6-address. Only the /96 IP
address range is supported, and the default value is 96.
aliases
Specifies the IP alias ranges to allocate for this interface. If
there are multiple IP alias ranges, they are separated by
@ -766,6 +820,32 @@ FLAGS
By default, debian-11 is assumed for this flag.
Specifies the reservation for instances created from this template.
--reservation=RESERVATION
The name of the reservation, required when --reservation-affinity is
one of: specific, specific-then-any-reservation or
specific-then-no-reservation.
--reservation-affinity=RESERVATION_AFFINITY; default="any"
The type of reservation for instances created from this template.
RESERVATION_AFFINITY must be one of:
any
Consume any available, matching reservation.
none
Do not consume from any reserved capacity.
specific
Must consume from a specific reservation.
specific-then-any-reservation
Prefer to consume from a specific reservation, but still consume
any available matching reservation if the specified reservation
is not available or exhausted.
specific-then-no-reservation
Prefer to consume from a specific reservation, but still consume
from the on-demand pool if the specified reservation is not
available or exhausted.
At most one of these can be specified:
--scopes=[SCOPE,...]

33
gcloud/beta/compute/instances/create
View file

@ -671,9 +671,9 @@ FLAGS
Adds a network interface to the instance. Mutually exclusive with any
of these flags: --address, --network, --network-tier, --subnet,
--private-network-ip, --stack-type, --ipv6-network-tier,
--ipv6-public-ptr-domain, --internal-ipv6-address,
--internal-ipv6-prefix-length, --ipv6-address, --ipv6-prefix-length,
--external-ipv6-address, --external-ipv6-prefix-length. This flag can
--internal-ipv6-address, --internal-ipv6-prefix-length, --ipv6-address,
--ipv6-prefix-length, --external-ipv6-address,
--external-ipv6-prefix-length, --ipv6-public-ptr-domain. This flag can
be repeated to specify multiple network interfaces.
The following keys are allowed:
@ -726,6 +726,30 @@ FLAGS
instance network interface IPv6 access config. IPV6_NETWORK_TIER
must be PREMIUM (currently only one value is supported).
internal-ipv6-address
Assigns the given internal IPv6 address or range to the instance
that is created. The address must be the first IP address in the
range or from a /96 IP address range. This option can be used only
when creating a single instance.
internal-ipv6-prefix-length
Optional field that indicates the prefix length of the internal
IPv6 address range. It should be used together with
internal-ipv6-address. Only /96 IP address range is supported and
the default value is 96. If not set, either the prefix length from
--internal-ipv6-address will be used or the default value of 96
will be assigned.
external-ipv6-address
Assigns the given external IPv6 address to the instance that is
created. The address must be the first IP address in the range.
This option can be used only when creating a single instance.
external-ipv6-prefix-length
The prefix length of the external IPv6 address range. This field
should be used together with external-ipv6-address. Only the /96 IP
address range is supported, and the default value is 96.
ipv6-public-ptr-domain
Assigns a custom PTR domain for the external IPv6 in the IPv6
access configuration of instance. If its value is not specified,
@ -875,8 +899,7 @@ FLAGS
The name of the instance template that the instance will be created
from. An instance template can be a global/regional resource.
Users can also override machine type and labels. Values of other flags
will be ignored and --source-instance-template will be used instead.
Users can override instance properties using other flags.
--source-machine-image=SOURCE_MACHINE_IMAGE
The name of the machine image that the instance will be created from.

86
gcloud/beta/compute/instances/create-with-container
View file

@ -31,6 +31,8 @@ SYNOPSIS
[--external-ipv6-prefix-length=EXTERNAL_IPV6_PREFIX_LENGTH]
[--host-error-timeout-seconds=HOST_ERROR_TIMEOUT_SECONDS]
[--instance-termination-action=INSTANCE_TERMINATION_ACTION]
[--internal-ipv6-address=INTERNAL_IPV6_ADDRESS]
[--internal-ipv6-prefix-length=INTERNAL_IPV6_PREFIX_LENGTH]
[--ipv6-network-tier=IPV6_NETWORK_TIER] [--labels=[KEY=VALUE,...]]
[--local-ssd=[device-name=DEVICE-NAME],[interface=INTERFACE]]
[--local-ssd-recovery-timeout=LOCAL_SSD_RECOVERY_TIMEOUT]
@ -57,6 +59,8 @@ SYNOPSIS
[--image-project=IMAGE_PROJECT --image=IMAGE
| --image-family=IMAGE_FAMILY] [--public-ptr | --no-public-ptr]
[--public-ptr-domain=PUBLIC_PTR_DOMAIN | --no-public-ptr-domain]
[--reservation=RESERVATION
--reservation-affinity=RESERVATION_AFFINITY; default="any"]
[--scopes=[SCOPE,...] | --no-scopes]
[--service-account=SERVICE_ACCOUNT | --no-service-account]
[GCLOUD_WIDE_FLAG ...]
@ -456,6 +460,19 @@ FLAGS
Default only for Spot VMs. Stop the VM without preserving memory.
The VM can be restarted later.
--internal-ipv6-address=INTERNAL_IPV6_ADDRESS
Assigns the given internal IPv6 address or range to the instance that
is created. The address must be the first IP address in the range or
from a /96 IP address range. This option can be used only when creating
a single instance.
--internal-ipv6-prefix-length=INTERNAL_IPV6_PREFIX_LENGTH
Optional field that indicates the prefix length of the internal IPv6
address range. It should be used together with --internal-ipv6-address.
Only /96 IP address range is supported and the default value is 96. If
not set, either the prefix length from --internal-ipv6-address will be
used or the default value of 96 will be assigned.
--ipv6-network-tier=IPV6_NETWORK_TIER
Specifies the IPv6 network tier that will be used to configure the
instance network interface IPv6 access config. IPV6_NETWORK_TIER must
@ -570,8 +587,11 @@ FLAGS
--network-interface=[PROPERTY=VALUE,...]
Adds a network interface to the instance. Mutually exclusive with any
of these flags: --address, --network, --network-tier, --subnet,
--private-network-ip. This flag can be repeated to specify multiple
network interfaces.
--private-network-ip, --stack-type, --ipv6-network-tier,
--internal-ipv6-address, --internal-ipv6-prefix-length, --ipv6-address,
--ipv6-prefix-length, --external-ipv6-address,
--external-ipv6-prefix-length. This flag can be repeated to specify
multiple network interfaces.
The following keys are allowed:
address
@ -607,6 +627,39 @@ FLAGS
Specifies the Network Interface Controller (NIC) type for the
interface. NIC_TYPE must be one of: GVNIC, VIRTIO_NET.
stack-type
Specifies whether IPv6 is enabled on the interface. STACK_TYPE must
be one of: IPV4_ONLY, IPV4_IPV6. The default value is IPV4_ONLY.
ipv6-network-tier
Specifies the IPv6 network tier that will be used to configure the
instance network interface IPv6 access config. IPV6_NETWORK_TIER
must be PREMIUM (currently only one value is supported).
internal-ipv6-address
Assigns the given internal IPv6 address or range to the instance
that is created. The address must be the first IP address in the
range or from a /96 IP address range. This option can be used only
when creating a single instance.
internal-ipv6-prefix-length
Optional field that indicates the prefix length of the internal
IPv6 address range. It should be used together with
internal-ipv6-address. Only /96 IP address range is supported and
the default value is 96. If not set, either the prefix length from
--internal-ipv6-address will be used or the default value of 96
will be assigned.
external-ipv6-address
Assigns the given external IPv6 address to the instance that is
created. The address must be the first IP address in the range.
This option can be used only when creating a single instance.
external-ipv6-prefix-length
The prefix length of the external IPv6 address range. This field
should be used together with external-ipv6-address. Only the /96 IP
address range is supported, and the default value is 96.
aliases
Specifies the IP alias ranges to allocate for this interface. If
there are multiple IP alias ranges, they are separated by
@ -711,8 +764,7 @@ FLAGS
The name of the instance template that the instance will be created
from. An instance template can be a global/regional resource.
Users can also override machine type and labels. Values of other flags
will be ignored and --source-instance-template will be used instead.
Users can override instance properties using other flags.
--stack-type=STACK_TYPE
Specifies whether IPv6 is enabled on the default network interface. If
@ -913,6 +965,32 @@ FLAGS
record for the external IP of the instance with the PTR domain name
being the DNS name of the instance.
Specifies the reservation for the instance.
--reservation=RESERVATION
The name of the reservation, required when --reservation-affinity is
one of: specific, specific-then-any-reservation or
specific-then-no-reservation.
--reservation-affinity=RESERVATION_AFFINITY; default="any"
The type of reservation for the instance. RESERVATION_AFFINITY must
be one of:
any
Consume any available, matching reservation.
none
Do not consume from any reserved capacity.
specific
Must consume from a specific reservation.
specific-then-any-reservation
Prefer to consume from a specific reservation, but still consume
any available matching reservation if the specified reservation
is not available or exhausted.
specific-then-no-reservation
Prefer to consume from a specific reservation, but still consume
from the on-demand pool if the specified reservation is not
available or exhausted.
At most one of these can be specified:
--scopes=[SCOPE,...]

4
gcloud/beta/compute/instances/help
View file

@ -113,8 +113,8 @@ COMMANDS
(BETA) List Compute Engine instances.
move
(BETA) Move an instance and its attached persistent disks between
zones.
(BETA) (DEPRECATED) Move an instance and its attached persistent disks
between zones.
patch-partner-metadata
(BETA) Patch partner metadata.

12
gcloud/beta/compute/instances/move
View file

@ -8,10 +8,14 @@ SYNOPSIS
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) gcloud beta compute instances move moves a Compute Engine virtual
machine from one zone to another. Moving a virtual machine might incur
downtime if the guest OS must be shut down in order to quiesce disk volumes
prior to snapshotting.
(BETA) (DEPRECATED) This command is deprecated. Please see
https://cloud.google.com/compute/docs/instances/moving-instance-across-zones
for an alternative method.
gcloud beta compute instances move moves a Compute Engine virtual machine
from one zone to another. Moving a virtual machine might incur downtime if
the guest OS must be shut down in order to quiesce disk volumes prior to
snapshotting.
For example, running the following command moves the instance called
example-instance-1 with its attached persistent disks, currently running in

10
gcloud/beta/compute/public-delegated-prefixes/create
View file

@ -6,7 +6,8 @@ SYNOPSIS
gcloud beta compute public-delegated-prefixes create NAME --range=RANGE
(--public-advertised-prefix=PUBLIC_ADVERTISED_PREFIX
| --public-delegated-prefix=PUBLIC_DELEGATED_PREFIX)
[--description=DESCRIPTION] [--enable-live-migration]
[--allocatable-prefix-length=ALLOCATABLE_PREFIX_LENGTH]
[--description=DESCRIPTION] [--enable-live-migration] [--mode=MODE]
[--global | --region=REGION] [GCLOUD_WIDE_FLAG ...]
EXAMPLES
@ -36,12 +37,19 @@ REQUIRED FLAGS
created from.
OPTIONAL FLAGS
--allocatable-prefix-length=ALLOCATABLE_PREFIX_LENGTH
The allocatable prefix length supported by this PDP.
--description=DESCRIPTION
Description of this public delegated prefix.
--enable-live-migration
Specify if this public delegated prefix is meant to be live migrated.
--mode=MODE
Specifies the mode of this IPv6 PDP. MODE must be one of:
EXTERNAL_IPV6_FORWARDING_RULE_CREATION, DELEGATION.
At most one of these can be specified:
--global

10
gcloud/beta/compute/public-delegated-prefixes/delegated-sub-prefixes/create
View file

@ -5,8 +5,9 @@ NAME
SYNOPSIS
gcloud beta compute public-delegated-prefixes delegated-sub-prefixes create
NAME --public-delegated-prefix=PUBLIC_DELEGATED_PREFIX
[--allocatable-prefix-length=ALLOCATABLE_PREFIX_LENGTH]
[--create-addresses] [--delegatee-project=DELEGATEE_PROJECT]
[--description=DESCRIPTION] [--range=RANGE]
[--description=DESCRIPTION] [--mode=MODE] [--range=RANGE]
[--global-public-delegated-prefix
| --public-delegated-prefix-region=PUBLIC_DELEGATED_PREFIX_REGION]
[GCLOUD_WIDE_FLAG ...]
@ -40,6 +41,9 @@ REQUIRED FLAGS
for.
OPTIONAL FLAGS
--allocatable-prefix-length=ALLOCATABLE_PREFIX_LENGTH
Specify allocatable prefix length supported by this sub prefix.
--create-addresses
Specify if the sub prefix is delegated to create address resources in
the delegatee project. Default is false.
@ -51,6 +55,10 @@ OPTIONAL FLAGS
--description=DESCRIPTION
Description of the delegated sub prefix to create.
--mode=MODE
Specify mode for the sub prefix. MODE must be one of: DELEGATION,
EXTERNAL_IPV6_FORWARDING_RULE_CREATION.
--range=RANGE
IPv4 range from this public delegated prefix that should be delegated,
in CIDR format. If not specified, the entire range ofthe public

14
gcloud/beta/compute/routers/add-bgp-peer
View file

@ -8,7 +8,9 @@ SYNOPSIS
[--advertised-route-priority=ADVERTISED_ROUTE_PRIORITY]
[--advertisement-mode=MODE] [--async]
[--custom-learned-route-priority=PRIORITY] [--[no-]enable-ipv4]
[--[no-]enable-ipv6] [--[no-]enabled] [--instance=INSTANCE]
[--[no-]enable-ipv6] [--[no-]enabled]
[--export-policies=[EXPORT_POLICY,...]]
[--import-policies=[IMPORT_POLICY,...]] [--instance=INSTANCE]
[--instance-zone=INSTANCE_ZONE]
[--ipv4-nexthop-address=IPV4_NEXTHOP_ADDRESS]
[--ipv6-nexthop-address=IPV6_NEXTHOP_ADDRESS]
@ -87,6 +89,14 @@ OPTIONAL FLAGS
terminated and all associated routing information is removed. Enabled
by default. Use --enabled to enable and --no-enabled to disable.
--export-policies=[EXPORT_POLICY,...]
Comma-separated list of export policies. Passing an empty string
removes all export policies.
--import-policies=[IMPORT_POLICY,...]
Comma-separated list of import policies. Passing an empty string
removes all import policies.
--instance=INSTANCE
Router appliance instance of the BGP peer being added.
@ -134,7 +144,7 @@ OPTIONAL FLAGS
--peer-ip-address=PEER_IP_ADDRESS
The address of the peer router. Must be a link-local IPv4 address in
the the range 169.254.0.0/16 or an ULA IPv6 address in the range
the range 169.254.0.0/16 or an ULA IPv6 address in the range
fdff:1::/64.
--peer-ipv4-nexthop-address=PEER_IPV4_NEXTHOP_ADDRESS

63
gcloud/beta/compute/routers/add-route-policy Normal file
View file

@ -0,0 +1,63 @@
NAME
gcloud beta compute routers add-route-policy - add an empty route policy to
a Compute Engine router
SYNOPSIS
gcloud beta compute routers add-route-policy NAME --policy-name=POLICY_NAME
--policy-type=POLICY_TYPE [--region=REGION] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) gcloud beta compute routers add-route-policy adds an empty route
policy to a Compute Engine router.
POSITIONAL ARGUMENTS
NAME
Name of the router to update.
REQUIRED FLAGS
--policy-name=POLICY_NAME
Name of the route policy to add.
--policy-type=POLICY_TYPE
Type of the route policy to add. POLICY_TYPE must be one of:
EXPORT
The route policy is an export policy.
IMPORT
The route policy is an import policy.
OPTIONAL FLAGS
--region=REGION
Region of the router to update. If not specified, you might be prompted
to select a region (interactive mode only).
To avoid prompting when this flag is omitted, you can set the
compute/region property:
$ gcloud config set compute/region REGION
A list of regions can be fetched by running:
$ gcloud compute regions list
To unset the property, run:
$ gcloud config unset compute/region
Alternatively, the region can be stored in the environment variable
CLOUDSDK_COMPUTE_REGION.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
NOTES
This command is currently in beta and might change without notice. This
variant is also available:
$ gcloud alpha compute routers add-route-policy

63
gcloud/beta/compute/routers/download-route-policy Normal file
View file

@ -0,0 +1,63 @@
NAME
gcloud beta compute routers download-route-policy - download a route policy
from a Compute Engine router
SYNOPSIS
gcloud beta compute routers download-route-policy NAME
--file-name=FILE_NAME --policy-name=POLICY_NAME
[--file-format=FILE_FORMAT] [--region=REGION] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) gcloud beta compute routers download-route-policy downloads a route
policy from a Compute Engine router.
POSITIONAL ARGUMENTS
NAME
Name of the router to export.
REQUIRED FLAGS
--file-name=FILE_NAME
The name of the file to download the route policy config to.
--policy-name=POLICY_NAME
Name of the route policy to download.
OPTIONAL FLAGS
--file-format=FILE_FORMAT
Format of the file passed to --file-name. FILE_FORMAT must be one of:
json, yaml.
--region=REGION
Region of the router to export. If not specified, you might be prompted
to select a region (interactive mode only).
To avoid prompting when this flag is omitted, you can set the
compute/region property:
$ gcloud config set compute/region REGION
A list of regions can be fetched by running:
$ gcloud compute regions list
To unset the property, run:
$ gcloud config unset compute/region
Alternatively, the region can be stored in the environment variable
CLOUDSDK_COMPUTE_REGION.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
NOTES
This command is currently in beta and might change without notice. This
variant is also available:
$ gcloud alpha compute routers download-route-policy

55
gcloud/beta/compute/routers/get-route-policy Normal file
View file

@ -0,0 +1,55 @@
NAME
gcloud beta compute routers get-route-policy - get a route policy from a
Compute Engine router
SYNOPSIS
gcloud beta compute routers get-route-policy NAME --policy-name=POLICY_NAME
[--region=REGION] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) gcloud beta compute routers get-route-policy gets a route policy
from a Compute Engine router.
POSITIONAL ARGUMENTS
NAME
Name of the router to get.
REQUIRED FLAGS
--policy-name=POLICY_NAME
Name of the route policy to get.
OPTIONAL FLAGS
--region=REGION
Region of the router to get. If not specified, you might be prompted to
select a region (interactive mode only).
To avoid prompting when this flag is omitted, you can set the
compute/region property:
$ gcloud config set compute/region REGION
A list of regions can be fetched by running:
$ gcloud compute regions list
To unset the property, run:
$ gcloud config unset compute/region
Alternatively, the region can be stored in the environment variable
CLOUDSDK_COMPUTE_REGION.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
NOTES
This command is currently in beta and might change without notice. This
variant is also available:
$ gcloud alpha compute routers get-route-policy

22
gcloud/beta/compute/routers/help
View file

@ -35,6 +35,9 @@ COMMANDS
add-interface
(BETA) Add an interface to a Compute Engine router.
add-route-policy
(BETA) Add an empty route policy to a Compute Engine router.
create
(BETA) Create a Compute Engine router.
@ -44,24 +47,40 @@ COMMANDS
describe
(BETA) Describe a Compute Engine router.
download-route-policy
(BETA) Download a route policy from a Compute Engine router.
get-nat-ip-info
(BETA) Display NAT IP information in a router.
get-nat-mapping-info
(BETA) Display NAT Mapping information in a router.
get-route-policy
(BETA) Get a route policy from a Compute Engine router.
get-status
(BETA) Get status of a Compute Engine router.
list
(BETA) List Google Compute Engine routers.
list-bgp-routes
(BETA) List routes advertised and learned on individual BGP sessions,
both pre- and post-policy evaluation.
list-route-policies
(BETA) List route policies from a Compute Engine router.
remove-bgp-peer
(BETA) Remove a BGP peer from a Compute Engine router.
remove-interface
(BETA) Remove an interface from a Compute Engine router.
remove-route-policy
(BETA) Remove a route policy from a Compute Engine router.
update
(BETA) Update a Compute Engine router.
@ -71,6 +90,9 @@ COMMANDS
update-interface
(BETA) Update an interface on a Compute Engine router.
upload-route-policy
(BETA) Upload a route policy into a Compute Engine router.
NOTES
This command is currently in beta and might change without notice. These
variants are also available:

118
gcloud/beta/compute/routers/list-bgp-routes Normal file
View file

@ -0,0 +1,118 @@
NAME
gcloud beta compute routers list-bgp-routes - list routes advertised and
learned on individual BGP sessions, both pre- and post-policy
evaluation
SYNOPSIS
gcloud beta compute routers list-bgp-routes NAME
--address-family=ADDRESS_FAMILY --peer=PEER
--route-direction=ROUTE_DIRECTION [--destination-range=CIDR_RANGE]
[--no-policy-applied] [--region=REGION] [--filter=EXPRESSION]
[--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri]
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) gcloud beta compute routers list-bgp-routes lists routes advertised
and learned on individual BGP sessions, both pre- and post-policy
evaluation.
POSITIONAL ARGUMENTS
NAME
Name of the router to list.
REQUIRED FLAGS
--address-family=ADDRESS_FAMILY
Limit results to routes learned for this Address Family Identifier.
ADDRESS_FAMILY must be one of:
IPV4
Interface with IPv4-based BGP.
IPV6
Interface with IPv6-based BGP.
--peer=PEER
Limit results to routes learned from this peer (name).
--route-direction=ROUTE_DIRECTION
Limit results to routes in this direction. ROUTE_DIRECTION must be one
of:
INBOUND
Learned routes.
OUTBOUND
Advertised routes.
FLAGS
--destination-range=CIDR_RANGE
Limit results to prefixes.
--policy-applied
Routes returned are post-policy evaluation. Enabled by default, use
--no-policy-applied to disable.
--region=REGION
Region of the router to list. If not specified, you might be prompted
to select a region (interactive mode only).
To avoid prompting when this flag is omitted, you can set the
compute/region property:
$ gcloud config set compute/region REGION
A list of regions can be fetched by running:
$ gcloud compute regions list
To unset the property, run:
$ gcloud config unset compute/region
Alternatively, the region can be stored in the environment variable
CLOUDSDK_COMPUTE_REGION.
LIST COMMAND FLAGS
--filter=EXPRESSION
Apply a Boolean filter EXPRESSION to each resource item to be listed.
If the expression evaluates True, then that item is listed. For more
details and examples of filter expressions, run $ gcloud topic filters.
This flag interacts with other flags that are applied in this order:
--flatten, --sort-by, --filter, --limit.
--limit=LIMIT
Maximum number of resources to list. The default is unlimited. This
flag interacts with other flags that are applied in this order:
--flatten, --sort-by, --filter, --limit.
--page-size=PAGE_SIZE
Some services group resource list output into pages. This flag
specifies the maximum number of resources per page. The default is
determined by the service if it supports paging, otherwise it is
unlimited (no paging). Paging may be applied before or after --filter
and --limit depending on the service.
--sort-by=[FIELD,...]
Comma-separated list of resource field key names to sort by. The
default order is ascending. Prefix a field with ``~'' for descending
order on that field. This flag interacts with other flags that are
applied in this order: --flatten, --sort-by, --filter, --limit.
--uri
Print a list of resource URIs instead of the default output, and change
the command output to a list of URIs. If this flag is used with
--format, the formatting is applied on this URI list. To display URIs
alongside other keys instead, use the uri() transform.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
NOTES
This command is currently in beta and might change without notice. This
variant is also available:
$ gcloud alpha compute routers list-bgp-routes

84
gcloud/beta/compute/routers/list-route-policies Normal file
View file

@ -0,0 +1,84 @@
NAME
gcloud beta compute routers list-route-policies - list route policies from
a Compute Engine router
SYNOPSIS
gcloud beta compute routers list-route-policies NAME [--region=REGION]
[--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE]
[--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) gcloud beta compute routers list-route-policies lists all route
policies from a Compute Engine router.
POSITIONAL ARGUMENTS
NAME
Name of the router to list.
FLAGS
--region=REGION
Region of the router to list. If not specified, you might be prompted
to select a region (interactive mode only).
To avoid prompting when this flag is omitted, you can set the
compute/region property:
$ gcloud config set compute/region REGION
A list of regions can be fetched by running:
$ gcloud compute regions list
To unset the property, run:
$ gcloud config unset compute/region
Alternatively, the region can be stored in the environment variable
CLOUDSDK_COMPUTE_REGION.
LIST COMMAND FLAGS
--filter=EXPRESSION
Apply a Boolean filter EXPRESSION to each resource item to be listed.
If the expression evaluates True, then that item is listed. For more
details and examples of filter expressions, run $ gcloud topic filters.
This flag interacts with other flags that are applied in this order:
--flatten, --sort-by, --filter, --limit.
--limit=LIMIT
Maximum number of resources to list. The default is unlimited. This
flag interacts with other flags that are applied in this order:
--flatten, --sort-by, --filter, --limit.
--page-size=PAGE_SIZE
Some services group resource list output into pages. This flag
specifies the maximum number of resources per page. The default is
determined by the service if it supports paging, otherwise it is
unlimited (no paging). Paging may be applied before or after --filter
and --limit depending on the service.
--sort-by=[FIELD,...]
Comma-separated list of resource field key names to sort by. The
default order is ascending. Prefix a field with ``~'' for descending
order on that field. This flag interacts with other flags that are
applied in this order: --flatten, --sort-by, --filter, --limit.
--uri
Print a list of resource URIs instead of the default output, and change
the command output to a list of URIs. If this flag is used with
--format, the formatting is applied on this URI list. To display URIs
alongside other keys instead, use the uri() transform.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
NOTES
This command is currently in beta and might change without notice. This
variant is also available:
$ gcloud alpha compute routers list-route-policies

55
gcloud/beta/compute/routers/remove-route-policy Normal file
View file

@ -0,0 +1,55 @@
NAME
gcloud beta compute routers remove-route-policy - remove a route policy
from a Compute Engine router
SYNOPSIS
gcloud beta compute routers remove-route-policy NAME
--policy-name=POLICY_NAME [--region=REGION] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) gcloud beta compute routers remove-route-policy removes a route
policy from a Compute Engine router.
POSITIONAL ARGUMENTS
NAME
Name of the router to delete.
REQUIRED FLAGS
--policy-name=POLICY_NAME
Name of the route policy to be removed.
OPTIONAL FLAGS
--region=REGION
Region of the router to delete. If not specified, you might be prompted
to select a region (interactive mode only).
To avoid prompting when this flag is omitted, you can set the
compute/region property:
$ gcloud config set compute/region REGION
A list of regions can be fetched by running:
$ gcloud compute regions list
To unset the property, run:
$ gcloud config unset compute/region
Alternatively, the region can be stored in the environment variable
CLOUDSDK_COMPUTE_REGION.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
NOTES
This command is currently in beta and might change without notice. This
variant is also available:
$ gcloud alpha compute routers remove-route-policy

14
gcloud/beta/compute/routers/update-bgp-peer
View file

@ -7,7 +7,9 @@ SYNOPSIS
[--advertised-route-priority=ADVERTISED_ROUTE_PRIORITY]
[--advertisement-mode=MODE] [--async] [--clear-md5-authentication-key]
[--custom-learned-route-priority=PRIORITY] [--[no-]enable-ipv4]
[--[no-]enable-ipv6] [--[no-]enabled] [--interface=INTERFACE]
[--[no-]enable-ipv6] [--[no-]enabled]
[--export-policies=[EXPORT_POLICY,...]]
[--import-policies=[IMPORT_POLICY,...]] [--interface=INTERFACE]
[--ip-address=IP_ADDRESS] [--ipv4-nexthop-address=IPV4_NEXTHOP_ADDRESS]
[--ipv6-nexthop-address=IPV6_NEXTHOP_ADDRESS]
[--md5-authentication-key=MD5_AUTHENTICATION_KEY] [--peer-asn=PEER_ASN]
@ -87,6 +89,14 @@ OPTIONAL FLAGS
terminated and all associated routing information is removed. Use
--enabled to enable and --no-enabled to disable.
--export-policies=[EXPORT_POLICY,...]
Comma-separated list of export policies. Passing an empty string
removes all export policies.
--import-policies=[IMPORT_POLICY,...]
Comma-separated list of import policies. Passing an empty string
removes all import policies.
--interface=INTERFACE
The name of the interface for this BGP peer.
@ -121,7 +131,7 @@ OPTIONAL FLAGS
--peer-ip-address=PEER_IP_ADDRESS
The address of the peer router. Must be a link-local IPv4 address in
the the range 169.254.0.0/16 or an ULA IPv6 address in the range
the range 169.254.0.0/16 or an ULA IPv6 address in the range
fdff:1::/64.
--peer-ipv4-nexthop-address=PEER_IPV4_NEXTHOP_ADDRESS

63
gcloud/beta/compute/routers/upload-route-policy Normal file
View file

@ -0,0 +1,63 @@
NAME
gcloud beta compute routers upload-route-policy - upload a route policy
into a Compute Engine router
SYNOPSIS
gcloud beta compute routers upload-route-policy NAME --file-name=FILE_NAME
[--file-format=FILE_FORMAT] [--policy-name=POLICY_NAME]
[--region=REGION] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) gcloud beta compute routers upload-route-policy uploads a route
policy into a Compute Engine router.
POSITIONAL ARGUMENTS
NAME
Name of the router to upload.
REQUIRED FLAGS
--file-name=FILE_NAME
Local path to the file defining the policy
OPTIONAL FLAGS
--file-format=FILE_FORMAT
Format of the file passed to --file-name. FILE_FORMAT must be one of:
json, yaml.
--policy-name=POLICY_NAME
Name of the route policy to add/replace.
--region=REGION
Region of the router to upload. If not specified, you might be prompted
to select a region (interactive mode only).
To avoid prompting when this flag is omitted, you can set the
compute/region property:
$ gcloud config set compute/region REGION
A list of regions can be fetched by running:
$ gcloud compute regions list
To unset the property, run:
$ gcloud config unset compute/region
Alternatively, the region can be stored in the environment variable
CLOUDSDK_COMPUTE_REGION.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
NOTES
This command is currently in beta and might change without notice. This
variant is also available:
$ gcloud alpha compute routers upload-route-policy

6
gcloud/beta/compute/sole-tenancy/node-groups/perform-maintenance
View file

@ -60,8 +60,10 @@ GCLOUD WIDE FLAGS
Run $ gcloud help for details.
NOTES
This command is currently in beta and might change without notice. This
variant is also available:
This command is currently in beta and might change without notice. These
variants are also available:
$ gcloud compute sole-tenancy node-groups perform-maintenance
$ gcloud alpha compute sole-tenancy node-groups perform-maintenance

5
gcloud/beta/container/fleet/mesh/debug/proxy-config
View file

@ -26,7 +26,6 @@ REQUIRED FLAGS
--type=TYPE
Proxy configuration type to retrieve.
all Retrieves all configuration for the Envoy in the specified pod
bootstrap Retrieves bootstrap configuration for the Envoy in the specified pod
clusters/cluster Retrieves cluster configuration for the Envoy in the specified pod
endpoints/endpoint Retrieves endpoint configuration for the Envoy in the specified pod
@ -35,8 +34,8 @@ REQUIRED FLAGS
routes/route Retrieves route configuration for the Envoy in the specified pod
secrets/secret Retrieves secret configuration for the Envoy in the specified pod
TYPE must be one of: all, bootstrap, cluster, clusters, endpoint,
endpoints, listener, listeners, log, route, routes, secret, secrets.
TYPE must be one of: bootstrap, cluster, clusters, endpoint, endpoints,
listener, listeners, log, route, routes, secret, secrets.
Membership resource - The group of arguments defining a membership. The
arguments in this group can be used to specify the attributes of this

5
gcloud/beta/container/hub/mesh/debug/proxy-config
View file

@ -26,7 +26,6 @@ REQUIRED FLAGS
--type=TYPE
Proxy configuration type to retrieve.
all Retrieves all configuration for the Envoy in the specified pod
bootstrap Retrieves bootstrap configuration for the Envoy in the specified pod
clusters/cluster Retrieves cluster configuration for the Envoy in the specified pod
endpoints/endpoint Retrieves endpoint configuration for the Envoy in the specified pod
@ -35,8 +34,8 @@ REQUIRED FLAGS
routes/route Retrieves route configuration for the Envoy in the specified pod
secrets/secret Retrieves secret configuration for the Envoy in the specified pod
TYPE must be one of: all, bootstrap, cluster, clusters, endpoint,
endpoints, listener, listeners, log, route, routes, secret, secrets.
TYPE must be one of: bootstrap, cluster, clusters, endpoint, endpoints,
listener, listeners, log, route, routes, secret, secrets.
Membership resource - The group of arguments defining a membership. The
arguments in this group can be used to specify the attributes of this

6
gcloud/beta/functions/deploy
View file

@ -439,6 +439,12 @@ FLAGS
--clear-max-instances
Clears the maximum instances setting for the function.
If it's any 2nd gen function or a 1st gen HTTP function, this flag
sets maximum instances to 0, which means there is no limit to maximum
instances. If it's an event-driven 1st gen function, this flag sets
maximum instances to 3000, which is the default value for 1st gen
functions.
--max-instances=MAX_INSTANCES
Sets the maximum number of instances for the function. A function
execution that would exceed max-instances times out.

26
gcloud/beta/kms/keys/create
View file

@ -168,19 +168,19 @@ OPTIONAL FLAGS
choosing an algorithm, see
https://cloud.google.com/kms/docs/algorithms. DEFAULT_ALGORITHM must be
one of: aes-128-cbc, aes-128-ctr, aes-128-gcm, aes-256-cbc,
aes-256-ctr, aes-256-gcm, ec-sign-p256-sha256, ec-sign-p384-sha384,
ec-sign-secp256k1-sha256, external-symmetric-encryption,
google-symmetric-encryption, hmac-sha1, hmac-sha224, hmac-sha256,
hmac-sha384, hmac-sha512, rsa-decrypt-oaep-2048-sha1,
rsa-decrypt-oaep-2048-sha256, rsa-decrypt-oaep-3072-sha1,
rsa-decrypt-oaep-3072-sha256, rsa-decrypt-oaep-4096-sha1,
rsa-decrypt-oaep-4096-sha256, rsa-decrypt-oaep-4096-sha512,
rsa-sign-pkcs1-2048-sha256, rsa-sign-pkcs1-3072-sha256,
rsa-sign-pkcs1-4096-sha256, rsa-sign-pkcs1-4096-sha512,
rsa-sign-pss-2048-sha256, rsa-sign-pss-3072-sha256,
rsa-sign-pss-4096-sha256, rsa-sign-pss-4096-sha512,
rsa-sign-raw-pkcs1-2048, rsa-sign-raw-pkcs1-3072,
rsa-sign-raw-pkcs1-4096.
aes-256-ctr, aes-256-gcm, ec-sign-ed25519, ec-sign-p256-sha256,
ec-sign-p384-sha384, ec-sign-secp256k1-sha256,
external-symmetric-encryption, google-symmetric-encryption, hmac-sha1,
hmac-sha224, hmac-sha256, hmac-sha384, hmac-sha512,
rsa-decrypt-oaep-2048-sha1, rsa-decrypt-oaep-2048-sha256,
rsa-decrypt-oaep-3072-sha1, rsa-decrypt-oaep-3072-sha256,
rsa-decrypt-oaep-4096-sha1, rsa-decrypt-oaep-4096-sha256,
rsa-decrypt-oaep-4096-sha512, rsa-sign-pkcs1-2048-sha256,
rsa-sign-pkcs1-3072-sha256, rsa-sign-pkcs1-4096-sha256,
rsa-sign-pkcs1-4096-sha512, rsa-sign-pss-2048-sha256,
rsa-sign-pss-3072-sha256, rsa-sign-pss-4096-sha256,
rsa-sign-pss-4096-sha512, rsa-sign-raw-pkcs1-2048,
rsa-sign-raw-pkcs1-3072, rsa-sign-raw-pkcs1-4096.
--destroy-scheduled-duration=DESTROY_SCHEDULED_DURATION
The amount of time that versions of the key should spend in the

26
gcloud/beta/kms/keys/update
View file

@ -117,19 +117,19 @@ FLAGS
choosing an algorithm, see
https://cloud.google.com/kms/docs/algorithms. DEFAULT_ALGORITHM must be
one of: aes-128-cbc, aes-128-ctr, aes-128-gcm, aes-256-cbc,
aes-256-ctr, aes-256-gcm, ec-sign-p256-sha256, ec-sign-p384-sha384,
ec-sign-secp256k1-sha256, external-symmetric-encryption,
google-symmetric-encryption, hmac-sha1, hmac-sha224, hmac-sha256,
hmac-sha384, hmac-sha512, rsa-decrypt-oaep-2048-sha1,
rsa-decrypt-oaep-2048-sha256, rsa-decrypt-oaep-3072-sha1,
rsa-decrypt-oaep-3072-sha256, rsa-decrypt-oaep-4096-sha1,
rsa-decrypt-oaep-4096-sha256, rsa-decrypt-oaep-4096-sha512,
rsa-sign-pkcs1-2048-sha256, rsa-sign-pkcs1-3072-sha256,
rsa-sign-pkcs1-4096-sha256, rsa-sign-pkcs1-4096-sha512,
rsa-sign-pss-2048-sha256, rsa-sign-pss-3072-sha256,
rsa-sign-pss-4096-sha256, rsa-sign-pss-4096-sha512,
rsa-sign-raw-pkcs1-2048, rsa-sign-raw-pkcs1-3072,
rsa-sign-raw-pkcs1-4096.
aes-256-ctr, aes-256-gcm, ec-sign-ed25519, ec-sign-p256-sha256,
ec-sign-p384-sha384, ec-sign-secp256k1-sha256,
external-symmetric-encryption, google-symmetric-encryption, hmac-sha1,
hmac-sha224, hmac-sha256, hmac-sha384, hmac-sha512,
rsa-decrypt-oaep-2048-sha1, rsa-decrypt-oaep-2048-sha256,
rsa-decrypt-oaep-3072-sha1, rsa-decrypt-oaep-3072-sha256,
rsa-decrypt-oaep-4096-sha1, rsa-decrypt-oaep-4096-sha256,
rsa-decrypt-oaep-4096-sha512, rsa-sign-pkcs1-2048-sha256,
rsa-sign-pkcs1-3072-sha256, rsa-sign-pkcs1-4096-sha256,
rsa-sign-pkcs1-4096-sha512, rsa-sign-pss-2048-sha256,
rsa-sign-pss-3072-sha256, rsa-sign-pss-4096-sha256,
rsa-sign-pss-4096-sha512, rsa-sign-raw-pkcs1-2048,
rsa-sign-raw-pkcs1-3072, rsa-sign-raw-pkcs1-4096.
--next-rotation-time=NEXT_ROTATION_TIME
Next automatic rotation time of the key. See $ gcloud topic datetimes

2
gcloud/beta/kms/keys/versions/import
View file

@ -32,7 +32,7 @@ REQUIRED FLAGS
about supported algorithms, see
https://cloud.google.com/kms/docs/algorithms. ALGORITHM must be one of:
aes-128-cbc, aes-128-ctr, aes-128-gcm, aes-256-cbc, aes-256-ctr,
aes-256-gcm, ec-sign-p256-sha256, ec-sign-p384-sha384,
aes-256-gcm, ec-sign-ed25519, ec-sign-p256-sha256, ec-sign-p384-sha384,
ec-sign-secp256k1-sha256, google-symmetric-encryption, hmac-sha1,
hmac-sha224, hmac-sha256, hmac-sha384, hmac-sha512,
rsa-decrypt-oaep-2048-sha1, rsa-decrypt-oaep-2048-sha256,

2
gcloud/beta/logging/views/describe
View file

@ -9,7 +9,7 @@ SYNOPSIS
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) Displays information about a view.
(BETA) Displays information about a log view.
EXAMPLES
To describe a view in a project, run:

15
gcloud/beta/netapp/storage-pools/create
View file

@ -7,9 +7,10 @@ SYNOPSIS
(STORAGE_POOL : --location=LOCATION) --capacity=CAPACITY
--network=[name=NAME],[psa-range=PSA-RANGE]
--service-level=SERVICE_LEVEL [--active-directory=ACTIVE_DIRECTORY]
[--async] [--description=DESCRIPTION] [--enable-ldap=ENABLE_LDAP]
[--allow-auto-tiering=ALLOW_AUTO_TIERING] [--async]
[--description=DESCRIPTION] [--enable-ldap=ENABLE_LDAP]
[--kms-config=KMS_CONFIG] [--labels=[KEY=VALUE,...]]
[GCLOUD_WIDE_FLAG ...]
[--replica-zone=REPLICA_ZONE] [--zone=ZONE] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) Creates a Storage Pool to contain Volumes with a specified Service
@ -138,6 +139,10 @@ OPTIONAL FLAGS
To set the active_directory attribute:
▸ provide the argument --active-directory on the command line.
--allow-auto-tiering=ALLOW_AUTO_TIERING
Boolean flag indicating whether Storage Pool is allowed to use
auto-tiering
--async
Return immediately, without waiting for the operation in progress to
complete.
@ -180,6 +185,12 @@ OPTIONAL FLAGS
contain only hyphens (-), underscores (_), lowercase characters, and
numbers.
--replica-zone=REPLICA_ZONE
String indicating replica zone for the Storage Pool
--zone=ZONE
String indicating active zone of the Storage Pool
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,

3
gcloud/beta/netapp/storage-pools/help
View file

@ -28,6 +28,9 @@ COMMANDS
list
(BETA) List Cloud NetApp Storage Pools.
switch
(BETA) Switch a Regional Cloud NetApp SO Storage Pool zone.
update
(BETA) Update a Cloud NetApp Storage Pool.

75
gcloud/beta/netapp/storage-pools/switch Normal file
View file

@ -0,0 +1,75 @@
NAME
gcloud beta netapp storage-pools switch - switch a Regional Cloud NetApp SO
Storage Pool zone
SYNOPSIS
gcloud beta netapp storage-pools switch
(STORAGE_POOL : --location=LOCATION) [--async] [GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) Switch a Regional Cloud NetApp SO Storage Pool zone.
EXAMPLES
The following command switches zone of a Storage Pool named NAME using the
required arguments:
$ gcloud beta netapp storage-pools switch NAME --location=us-central1
To switch zone of a Storage Pool named NAME asynchronously, run the
following command:
$ gcloud beta netapp storage-pools switch NAME \
--location=us-central1 --async
POSITIONAL ARGUMENTS
Storage pool resource - The Storage Pool to switch. The arguments in this
group can be used to specify the attributes of this resource. (NOTE) Some
attributes are not given arguments in this group but can be set in other
ways.
To set the project attribute:
◆ provide the argument storage_pool on the command line with a fully
specified name;
◆ provide the argument --project on the command line;
◆ set the property core/project.
This must be specified.
STORAGE_POOL
ID of the storage_pool or fully qualified identifier for the
storage_pool.
To set the storage_pool attribute:
▸ provide the argument storage_pool on the command line.
This positional argument must be specified if any of the other
arguments in this group are specified.
--location=LOCATION
The location of the storage_pool.
To set the location attribute:
▸ provide the argument storage_pool on the command line with a
fully specified name;
▸ provide the argument --location on the command line;
▸ set the property netapp/location.
FLAGS
--async
Return immediately, without waiting for the operation in progress to
complete.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,
--help, --impersonate-service-account, --log-http, --project, --quiet,
--trace-token, --user-output-enabled, --verbosity.
Run $ gcloud help for details.
NOTES
This command is currently in beta and might change without notice. This
variant is also available:
$ gcloud alpha netapp storage-pools switch

19
gcloud/beta/netapp/storage-pools/update
View file

@ -5,9 +5,12 @@ NAME
SYNOPSIS
gcloud beta netapp storage-pools update
(STORAGE_POOL : --location=LOCATION)
[--active-directory=ACTIVE_DIRECTORY] [--async] [--capacity=CAPACITY]
[--description=DESCRIPTION] [--update-labels=[KEY=VALUE,...]]
[--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...]
[--active-directory=ACTIVE_DIRECTORY]
[--allow-auto-tiering=ALLOW_AUTO_TIERING] [--async]
[--capacity=CAPACITY] [--description=DESCRIPTION]
[--replica-zone=REPLICA_ZONE] [--update-labels=[KEY=VALUE,...]]
[--zone=ZONE] [--clear-labels | --remove-labels=[KEY,...]]
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
(BETA) Updates a Storage Pool with given arguments
@ -77,6 +80,10 @@ FLAGS
To set the active_directory attribute:
▸ provide the argument --active-directory on the command line.
--allow-auto-tiering=ALLOW_AUTO_TIERING
Boolean flag indicating whether Storage Pool is allowed to use
auto-tiering
--async
Return immediately, without waiting for the operation in progress to
complete.
@ -88,6 +95,9 @@ FLAGS
--description=DESCRIPTION
A description of the Cloud NetApp Storage Pool
--replica-zone=REPLICA_ZONE
String indicating replica zone for the Storage Pool
--update-labels=[KEY=VALUE,...]
List of label KEY=VALUE pairs to update. If a label exists, its value
is modified. Otherwise, a new label is created.
@ -97,6 +107,9 @@ FLAGS
contain only hyphens (-), underscores (_), lowercase characters, and
numbers.
--zone=ZONE
String indicating active zone of the Storage Pool
At most one of these can be specified:
--clear-labels

13
gcloud/beta/netapp/volumes/create
View file

@ -34,6 +34,7 @@ SYNOPSIS
[--snapshot-weekly=[day=DAY],
[hour=HOUR],[minute=MINUTE],[snapshots-to-keep=SNAPSHOTS-TO-KEEP]]
[--source-snapshot=SOURCE_SNAPSHOT]
[--tiering-policy=[tier-action=ENABLED|PAUSED,...]]
[--unix-permissions=UNIX_PERMISSIONS]
[--source-backup=SOURCE_BACKUP : --backup_vault=BACKUP_VAULT]
[GCLOUD_WIDE_FLAG ...]
@ -249,6 +250,18 @@ OPTIONAL FLAGS
To set the snapshot attribute:
▸ provide the argument --source-snapshot on the command line.
--tiering-policy=[tier-action=ENABLED|PAUSED,...]
Tiering Policy contains auto tiering policy on a volume.
Tiering Policy will have the following format
--tiering-policy=tier-action=TIER_ACTION,
cooling-threshold-days=COOLING_THRESHOLD_DAYS
tier-action is an enum, supported values are ENABLED or PAUSED,
cooling-threshold-days is an integer represents time in days to mark
the volume's data block as cold and make it eligible for tiering, can
be range from 7-183. Default is 31.
--unix-permissions=UNIX_PERMISSIONS
Unix permissions the mount point will be created with. Unix permissions
are only applicable with NFS protocol only

13
gcloud/beta/netapp/volumes/update
View file

@ -32,6 +32,7 @@ SYNOPSIS
[--snapshot-weekly=[day=DAY],
[hour=HOUR],[minute=MINUTE],[snapshots-to-keep=SNAPSHOTS-TO-KEEP]]
[--source-snapshot=SOURCE_SNAPSHOT] [--storage-pool=STORAGE_POOL]
[--tiering-policy=[tier-action=ENABLED|PAUSED,...]]
[--unix-permissions=UNIX_PERMISSIONS] [--update-labels=[KEY=VALUE,...]]
[--clear-labels | --remove-labels=[KEY,...]]
[--source-backup=SOURCE_BACKUP : --backup_vault=BACKUP_VAULT]
@ -220,6 +221,18 @@ FLAGS
To set the storage_pool attribute:
▸ provide the argument --storage-pool on the command line.
--tiering-policy=[tier-action=ENABLED|PAUSED,...]
Tiering Policy contains auto tiering policy on a volume.
Tiering Policy will have the following format
--tiering-policy=tier-action=TIER_ACTION,
cooling-threshold-days=COOLING_THRESHOLD_DAYS
tier-action is an enum, supported values are ENABLED or PAUSED,
cooling-threshold-days is an integer represents time in days to mark
the volume's data block as cold and make it eligible for tiering, can
be range from 7-183. Default is 31.
--unix-permissions=UNIX_PERMISSIONS
Unix permissions the mount point will be created with. Unix permissions
are only applicable with NFS protocol only

61
gcloud/beta/scc/findings/group
View file

@ -41,20 +41,6 @@ EXAMPLES
$ gcloud beta scc findings group 123456 --source=5678 \
--group-by="category" --filter="state=\"ACTIVE\""
Group ACTIVE findings under organization 123456 and source 5678, on
2019-01-01T01:00:00 GMT, by their category:
$ gcloud beta scc findings group 123456 --source=5678 \
--group-by="category" \
--filter="state=\"ACTIVE\"" --read-time="2019-01-01T01:00:00Z"
Group findings under organization 123456 and source 5678 into following 3
state_changes (ADDED/CHANGED/UNCHANGED) based on the activity during past
24 hours:
$ gcloud beta scc findings group 123456 --source=5678 \
--group-by="state_change" --compare-duration=86400s
Group findings under organization 123456 and location=eu across all sources
by their category:
@ -77,16 +63,17 @@ POSITIONAL ARGUMENTS
FLAGS
--compare-duration=COMPARE_DURATION
When compare_duration is set, the result's "state_change" attribute is
updated to indicate whether the finding had its state changed, the
finding's state remained unchanged, or if the finding was added during
the compare_duration period of time that precedes the read_time. This
is the time between (read_time - compare_duration) and read_time. The
state_change value is derived based on the presence and state of the
finding at the two points in time. Intermediate state changes between
the two times don't affect the result. For example, the results aren't
affected if the finding is made inactive and then active again.
Possible "state_change" values when compare_duration is specified:
(DEPRECATED) When compare_duration is set, the result's "state_change"
attribute is updated to indicate whether the finding had its state
changed, the finding's state remained unchanged, or if the finding was
added during the compare_duration period of time that precedes the
read_time. This is the time between (read_time - compare_duration) and
read_time. The state_change value is derived based on the presence and
state of the finding at the two points in time. Intermediate state
changes between the two times don't affect the result. For example, the
results aren't affected if the finding is made inactive and then active
again. Possible "state_change" values when compare_duration is
specified:
◆ 'CHANGED': indicates that the finding was present at the start of
compare_duration, but changed its state at read_time.
@ -100,11 +87,16 @@ FLAGS
◆ 'REMOVED': indicates that the finding was present at the start of
compare_duration, but was not present at read_time.
If compare_duration is not specified, then the only possible
state_change is 'UNUSED', which will be the state_change set for all
findings present at read_time. If this field is set then 'state_change'
must be a specified field in 'group_by'. See $ gcloud topic datetimes
for information on supported duration formats.
If compare_duration is not specified, then the only possible
state_change is 'UNUSED', which will be the state_change set for all
findings present at read_time. If this field is set then 'state_change'
must be a specified field in 'group_by'. See $ gcloud topic datetimes
for information on supported duration formats.
The --compare-duration option is deprecated. For more information, [see
the deprecation notice]
(https://cloud.google.com/security-command-center/docs/release-notes#April_15_2024)
on the SCC release notes page.
--filter=FILTER
Expression that defines the filter to apply across findings. The
@ -156,9 +148,14 @@ FLAGS
explicitly or let gcloud fetch one-page-at-a-time.
--read-time=READ_TIME
Time used as a reference point when filtering. Absence of this field
will default to the API's version of NOW. See $ gcloud topic datetimes
for information on supported time formats.
(DEPRECATED) Time used as a reference point when filtering. Absence of
this field will default to the API's version of NOW. See $ gcloud topic
datetimes for information on supported time formats.
The --read-time option is deprecated. For more information, [see the
deprecation notice]
(https://cloud.google.com/security-command-center/docs/release-notes#April_15_2024)
on the SCC release notes page.
--source=SOURCE; default="-"
Source id. Defaults to all sources.

55
gcloud/beta/scc/findings/list
View file

@ -57,13 +57,7 @@ EXAMPLES
under organization 123456:
$ gcloud beta scc findings list 123456 --filter="state=\"ACTIVE\" \
AND event_time > 1546304400000"
List all findings that were ACTIVE as of 2019-01-01T01:00:00 GMT time,
under organization 123456:
$ gcloud beta scc findings list 123456 \
--filter="state=\"ACTIVE\"" --read-time="2019-01-01T01:00:00Z"
AND event_time > 1546304400000""
List all findings under organization 123456 across all sources and
location=eu:
@ -86,16 +80,17 @@ POSITIONAL ARGUMENTS
FLAGS
--compare-duration=COMPARE_DURATION
When compare_duration is set, the result's "state_change" attribute is
updated to indicate whether the finding had its state changed, the
finding's state remained unchanged, or if the finding was added during
the compare_duration period of time that precedes the read_time. This
is the time between (read_time - compare_duration) and read_time. The
state_change value is derived based on the presence and state of the
finding at the two points in time. Intermediate state changes between
the two times don't affect the result. For example, the results aren't
affected if the finding is made inactive and then active again.
Possible "state_change" values when compare_duration is specified:
(DEPRECATED) When compare_duration is set, the result's "state_change"
attribute is updated to indicate whether the finding had its state
changed, the finding's state remained unchanged, or if the finding was
added during the compare_duration period of time that precedes the
read_time. This is the time between (read_time - compare_duration) and
read_time. The state_change value is derived based on the presence and
state of the finding at the two points in time. Intermediate state
changes between the two times don't affect the result. For example, the
results aren't affected if the finding is made inactive and then active
again. Possible "state_change" values when compare_duration is
specified:
◆ 'CHANGED': indicates that the finding was present at the start of
compare_duration, but changed its state at read_time.
@ -109,11 +104,16 @@ FLAGS
◆ 'REMOVED': indicates that the finding was present at the start of
compare_duration, but was not present at read_time.
If compare_duration is not specified, then the only possible
state_change is 'UNUSED', which will be the state_change set for all
findings present at read_time. If this field is set then 'state_change'
must be a specified field in 'group_by'. See $ gcloud topic datetimes
for information on supported duration formats.
If compare_duration is not specified, then the only possible
state_change is 'UNUSED', which will be the state_change set for all
findings present at read_time. If this field is set then 'state_change'
must be a specified field in 'group_by'. See $ gcloud topic datetimes
for information on supported duration formats.
The --compare-duration option is deprecated. For more information, [see
the deprecation notice]
(https://cloud.google.com/security-command-center/docs/release-notes#April_15_2024)
on the SCC release notes page.
--field-mask=FIELD_MASK
Field mask to specify the finding fields listed in the response. An
@ -152,9 +152,14 @@ FLAGS
explicitly or let gcloud fetch one-page-at-a-time.
--read-time=READ_TIME
Time used as a reference point when filtering. Absence of this field
will default to the API's version of NOW. See $ gcloud topic datetimes
for information on supported time formats.
(DEPRECATED) Time used as a reference point when filtering. Absence of
this field will default to the API's version of NOW. See $ gcloud topic
datetimes for information on supported time formats.
The --read-time option is deprecated. For more information, [see the
deprecation notice]
(https://cloud.google.com/security-command-center/docs/release-notes#April_15_2024)
on the SCC release notes page.
--source=SOURCE; default="-"
Source id. Defaults to all sources.

11
gcloud/beta/scc/findings/list-marks
View file

@ -95,9 +95,14 @@ FLAGS
explicitly or let gcloud fetch one-page-at-a-time.
--read-time=READ_TIME
Time used as a reference point when filtering. Absence of this field
will default to the API's version of NOW. See $ gcloud topic datetimes
for information on supported time formats.
(DEPRECATED) Time used as a reference point when filtering. Absence of
this field will default to the API's version of NOW. See $ gcloud topic
datetimes for information on supported time formats.
The --read-time option is deprecated. For more information, [see the
deprecation notice]
(https://cloud.google.com/security-command-center/docs/release-notes#April_15_2024)
on the SCC release notes page.
LIST COMMAND FLAGS
--filter=EXPRESSION