From 40ba53d37fc88f09495721b2e4ddce326dd26461 Mon Sep 17 00:00:00 2001 From: Automated Date: Thu, 6 Jun 2024 09:19:36 +0000 Subject: [PATCH] gcloud: Thu Jun 6 09:19:36 UTC 2024 --- gcloud/_version | 8 +- gcloud/ai/endpoints/help | 3 + gcloud/ai/endpoints/stream-raw-predict | 103 +++++++ gcloud/alpha/ai/endpoints/help | 3 + gcloud/alpha/ai/endpoints/stream-raw-predict | 106 +++++++ gcloud/alpha/auth/application-default/login | 6 +- .../bms/instances/disable-hyperthreading | 71 +++++ .../alpha/bms/instances/enable-hyperthreading | 71 +++++ gcloud/alpha/bms/instances/help | 9 + gcloud/alpha/bms/instances/reimage | 111 +++++++ gcloud/alpha/builds/worker-pools/create | 77 +++-- gcloud/alpha/builds/worker-pools/update | 20 +- .../alpha/composer/environments/check-upgrade | 4 +- .../alpha/composer/environments/list-upgrades | 4 +- gcloud/alpha/compute/backend-services/update | 36 +++ .../compute/firewall-policies/rules/create | 20 ++ .../compute/firewall-policies/rules/update | 20 ++ gcloud/alpha/compute/forwarding-rules/create | 5 +- gcloud/alpha/compute/forwarding-rules/update | 40 ++- .../network-firewall-policies/rules/create | 20 ++ .../network-firewall-policies/rules/update | 20 ++ .../connection-profiles/create/cloudsql | 3 +- .../developer-connect/connections/create | 6 +- .../iam/workforce-pools/providers/create-oidc | 4 +- .../iam/workforce-pools/providers/update-oidc | 5 +- gcloud/alpha/managed-kafka/clusters/create | 4 +- gcloud/alpha/managed-kafka/clusters/update | 4 +- gcloud/alpha/netapp/active-directories/create | 5 +- gcloud/alpha/netapp/active-directories/update | 13 +- gcloud/alpha/scc/notifications/create | 15 +- gcloud/alpha/scc/notifications/delete | 17 +- gcloud/alpha/scc/notifications/describe | 17 +- gcloud/alpha/scc/notifications/list | 17 +- gcloud/alpha/scc/notifications/update | 17 +- gcloud/alpha/sql/instances/clone | 20 +- gcloud/alpha/transfer/jobs/create | 10 +- gcloud/alpha/transfer/jobs/list | 6 +- gcloud/auth/application-default/login | 6 +- gcloud/beta/ai/endpoints/help | 3 + gcloud/beta/ai/endpoints/stream-raw-predict | 104 +++++++ gcloud/beta/auth/application-default/login | 6 +- gcloud/beta/builds/worker-pools/create | 42 +-- gcloud/beta/builds/worker-pools/update | 20 +- .../beta/composer/environments/check-upgrade | 6 +- .../beta/composer/environments/list-upgrades | 6 +- gcloud/beta/compute/forwarding-rules/create | 12 + gcloud/beta/iam/help | 6 + gcloud/beta/iam/policy-bindings/create | 229 ++++++++++++++ gcloud/beta/iam/policy-bindings/delete | 107 +++++++ gcloud/beta/iam/policy-bindings/describe | 95 ++++++ gcloud/beta/iam/policy-bindings/help | 38 +++ gcloud/beta/iam/policy-bindings/list | 114 +++++++ .../search-target-policy-bindings | 121 ++++++++ gcloud/beta/iam/policy-bindings/update | 223 ++++++++++++++ .../principal-access-boundary-policies/create | 163 ++++++++++ .../principal-access-boundary-policies/delete | 89 ++++++ .../describe | 72 +++++ .../principal-access-boundary-policies/help | 37 +++ .../search-policy-bindings | 99 ++++++ .../principal-access-boundary-policies/update | 287 ++++++++++++++++++ .../iam/workforce-pools/providers/create-oidc | 4 +- .../iam/workforce-pools/providers/update-oidc | 5 +- gcloud/beta/managed-kafka/clusters/create | 4 +- gcloud/beta/managed-kafka/clusters/update | 4 +- gcloud/beta/netapp/active-directories/create | 5 +- gcloud/beta/netapp/active-directories/update | 13 +- gcloud/beta/scc/notifications/create | 15 +- gcloud/beta/scc/notifications/delete | 17 +- gcloud/beta/scc/notifications/describe | 17 +- gcloud/beta/scc/notifications/list | 17 +- gcloud/beta/scc/notifications/update | 17 +- gcloud/beta/sql/instances/clone | 20 +- gcloud/builds/worker-pools/create | 66 ++-- gcloud/builds/worker-pools/update | 20 +- gcloud/composer/environments/check-upgrade | 111 +++++++ gcloud/composer/environments/help | 8 + gcloud/composer/environments/list-upgrades | 92 ++++++ gcloud/compute/forwarding-rules/create | 12 + .../os-config/os-policy-assignments/update | 8 +- .../connection-profiles/create/cloudsql | 2 +- gcloud/edge-cloud/container/clusters/update | 26 +- .../iam/workforce-pools/providers/create-oidc | 4 +- .../iam/workforce-pools/providers/update-oidc | 5 +- gcloud/infra-manager/deployments/apply | 2 +- gcloud/infra-manager/previews/create | 2 +- gcloud/netapp/active-directories/create | 5 +- gcloud/netapp/active-directories/update | 13 +- gcloud/scc/notifications/create | 15 +- gcloud/scc/notifications/delete | 17 +- gcloud/scc/notifications/describe | 17 +- gcloud/scc/notifications/list | 17 +- gcloud/scc/notifications/update | 17 +- gcloud/sql/instances/clone | 20 +- 93 files changed, 3117 insertions(+), 305 deletions(-) create mode 100644 gcloud/ai/endpoints/stream-raw-predict create mode 100644 gcloud/alpha/ai/endpoints/stream-raw-predict create mode 100644 gcloud/alpha/bms/instances/disable-hyperthreading create mode 100644 gcloud/alpha/bms/instances/enable-hyperthreading create mode 100644 gcloud/alpha/bms/instances/reimage create mode 100644 gcloud/beta/ai/endpoints/stream-raw-predict create mode 100644 gcloud/beta/iam/policy-bindings/create create mode 100644 gcloud/beta/iam/policy-bindings/delete create mode 100644 gcloud/beta/iam/policy-bindings/describe create mode 100644 gcloud/beta/iam/policy-bindings/help create mode 100644 gcloud/beta/iam/policy-bindings/list create mode 100644 gcloud/beta/iam/policy-bindings/search-target-policy-bindings create mode 100644 gcloud/beta/iam/policy-bindings/update create mode 100644 gcloud/beta/iam/principal-access-boundary-policies/create create mode 100644 gcloud/beta/iam/principal-access-boundary-policies/delete create mode 100644 gcloud/beta/iam/principal-access-boundary-policies/describe create mode 100644 gcloud/beta/iam/principal-access-boundary-policies/help create mode 100644 gcloud/beta/iam/principal-access-boundary-policies/search-policy-bindings create mode 100644 gcloud/beta/iam/principal-access-boundary-policies/update create mode 100644 gcloud/composer/environments/check-upgrade create mode 100644 gcloud/composer/environments/list-upgrades diff --git a/gcloud/_version b/gcloud/_version index d18c0b8a5..9aff5e0a4 100644 --- a/gcloud/_version +++ b/gcloud/_version @@ -1,8 +1,8 @@ -Google Cloud SDK 478.0.0 -alpha 2024.05.24 -beta 2024.05.24 +Google Cloud SDK 479.0.0 +alpha 2024.05.31 +beta 2024.05.31 bq 2.1.5 bundled-python3-unix 3.11.8 -core 2024.05.24 +core 2024.05.31 gcloud-crc32c 1.0.0 gsutil 5.29 diff --git a/gcloud/ai/endpoints/help b/gcloud/ai/endpoints/help index c84849921..467ab0cf0 100644 --- a/gcloud/ai/endpoints/help +++ b/gcloud/ai/endpoints/help @@ -45,6 +45,9 @@ COMMANDS raw-predict Run Vertex AI online raw prediction. + stream-raw-predict + Run Vertex AI online stream raw prediction. + undeploy-model Undeploy a model from an existing Vertex AI endpoint. diff --git a/gcloud/ai/endpoints/stream-raw-predict b/gcloud/ai/endpoints/stream-raw-predict new file mode 100644 index 000000000..9d055b8bd --- /dev/null +++ b/gcloud/ai/endpoints/stream-raw-predict @@ -0,0 +1,103 @@ +NAME + gcloud ai endpoints stream-raw-predict - run Vertex AI online stream raw + prediction + +SYNOPSIS + gcloud ai endpoints stream-raw-predict (ENDPOINT : --region=REGION) + --request=REQUEST [--http-headers=[HEADER=VALUE,...]] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + gcloud ai endpoints stream-raw-predict sends a stream raw prediction + request to a Vertex AI endpoint. The request can be given on the command + line or read from a file or stdin. + +EXAMPLES + To predict against an endpoint 123 under project example in region + us-central1, reading the request from the command line, run: + + $ gcloud ai endpoints stream-raw-predict 123 --project=example \ + --region=us-central1 --request='{ + "instances": [ + { "values": [1, 2, 3, 4], "key": 1 }, + { "values": [5, 6, 7, 8], "key": 2 } + ] + }' + + If the request body was in the file input.json, run: + + $ gcloud ai endpoints stream-raw-predict 123 --project=example \ + --region=us-central1 --request=@input.json + + To send the image file image.jpeg and set the content type, run: + + $ gcloud ai endpoints stream-raw-predict 123 --project=example \ + --region=us-central1 --http-headers=Content-Type=image/jpeg \ + --request=@image.jpeg + +POSITIONAL ARGUMENTS + Endpoint resource - The endpoint to do online stream raw prediction. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument endpoint on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + ENDPOINT + ID of the endpoint or fully qualified identifier for the endpoint. + + To set the name attribute: + ▸ provide the argument endpoint on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + Cloud region for the endpoint. + + To set the region attribute: + ▸ provide the argument endpoint on the command line with a fully + specified name; + ▸ provide the argument --region on the command line; + ▸ set the property ai/region; + ▸ choose one from the prompted list of available regions. + +REQUIRED FLAGS + --request=REQUEST + The request to send to the endpoint. + + If the request starts with the letter '@', the rest should be a file + name to read the request from, or '@-' to read from stdin. If the + request body actually starts with '@', it must be placed in a file. + + If required, the Content-Type header should also be set appropriately, + particularly for binary data. + +OPTIONAL FLAGS + --http-headers=[HEADER=VALUE,...] + List of header and value pairs to send as part of the request. For + example, to set the Content-Type and X-Header: + + --http-headers=Content-Type="application/json",X-Header=Value + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha ai endpoints stream-raw-predict + + $ gcloud beta ai endpoints stream-raw-predict + diff --git a/gcloud/alpha/ai/endpoints/help b/gcloud/alpha/ai/endpoints/help index 08cea60cb..04e19c549 100644 --- a/gcloud/alpha/ai/endpoints/help +++ b/gcloud/alpha/ai/endpoints/help @@ -46,6 +46,9 @@ COMMANDS raw-predict (ALPHA) Run Vertex AI online raw prediction. + stream-raw-predict + (ALPHA) Run Vertex AI online stream raw prediction. + undeploy-model (ALPHA) Undeploy a model from an existing Vertex AI endpoint. diff --git a/gcloud/alpha/ai/endpoints/stream-raw-predict b/gcloud/alpha/ai/endpoints/stream-raw-predict new file mode 100644 index 000000000..e24d0c2a7 --- /dev/null +++ b/gcloud/alpha/ai/endpoints/stream-raw-predict @@ -0,0 +1,106 @@ +NAME + gcloud alpha ai endpoints stream-raw-predict - run Vertex AI online stream + raw prediction + +SYNOPSIS + gcloud alpha ai endpoints stream-raw-predict (ENDPOINT : --region=REGION) + --request=REQUEST [--http-headers=[HEADER=VALUE,...]] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) gcloud alpha ai endpoints stream-raw-predict sends a stream raw + prediction request to a Vertex AI endpoint. The request can be given on the + command line or read from a file or stdin. + +EXAMPLES + To predict against an endpoint 123 under project example in region + us-central1, reading the request from the command line, run: + + $ gcloud alpha ai endpoints stream-raw-predict 123 \ + --project=example --region=us-central1 --request='{ + "instances": [ + { "values": [1, 2, 3, 4], "key": 1 }, + { "values": [5, 6, 7, 8], "key": 2 } + ] + }' + + If the request body was in the file input.json, run: + + $ gcloud alpha ai endpoints stream-raw-predict 123 \ + --project=example --region=us-central1 --request=@input.json + + To send the image file image.jpeg and set the content type, run: + + $ gcloud alpha ai endpoints stream-raw-predict 123 \ + --project=example --region=us-central1 \ + --http-headers=Content-Type=image/jpeg --request=@image.jpeg + +POSITIONAL ARGUMENTS + Endpoint resource - The endpoint to do online stream raw prediction. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument endpoint on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + ENDPOINT + ID of the endpoint or fully qualified identifier for the endpoint. + + To set the name attribute: + ▸ provide the argument endpoint on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + Cloud region for the endpoint. + + To set the region attribute: + ▸ provide the argument endpoint on the command line with a fully + specified name; + ▸ provide the argument --region on the command line; + ▸ set the property ai/region; + ▸ choose one from the prompted list of available regions. + +REQUIRED FLAGS + --request=REQUEST + The request to send to the endpoint. + + If the request starts with the letter '@', the rest should be a file + name to read the request from, or '@-' to read from stdin. If the + request body actually starts with '@', it must be placed in a file. + + If required, the Content-Type header should also be set appropriately, + particularly for binary data. + +OPTIONAL FLAGS + --http-headers=[HEADER=VALUE,...] + List of header and value pairs to send as part of the request. For + example, to set the Content-Type and X-Header: + + --http-headers=Content-Type="application/json",X-Header=Value + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud ai endpoints stream-raw-predict + + $ gcloud beta ai endpoints stream-raw-predict + diff --git a/gcloud/alpha/auth/application-default/login b/gcloud/alpha/auth/application-default/login index c06f198c6..f6f91e0f5 100644 --- a/gcloud/alpha/auth/application-default/login +++ b/gcloud/alpha/auth/application-default/login @@ -143,7 +143,11 @@ FLAGS https://www.googleapis.com/auth/cloud-platform, https://www.googleapis.com/auth/sqlservice.login scopes are used. The list of possible scopes can be found at: - https://developers.google.com/identity/protocols/googlescopes. + https://developers.google.com/identity/protocols/googlescopes. To add + scopes for applications outside of Google Cloud Platform, such as + Google Drive, create an OAuth Client ID + (https://support.google.com/cloud/answer/6158849) and provide it by + using the --client-id-file flag. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/bms/instances/disable-hyperthreading b/gcloud/alpha/bms/instances/disable-hyperthreading new file mode 100644 index 000000000..20301bfc0 --- /dev/null +++ b/gcloud/alpha/bms/instances/disable-hyperthreading @@ -0,0 +1,71 @@ +NAME + gcloud alpha bms instances disable-hyperthreading - disable hyperthreading + for a Bare Metal Solution instance + +SYNOPSIS + gcloud alpha bms instances disable-hyperthreading + (INSTANCE : --region=REGION) [--async] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Disables hyperthreading for a Bare Metal Solution instance. + +EXAMPLES + To disable hyperthreading for an instance named test-instance, run: + + $ gcloud alpha bms instances disable-hyperthreading test-instance + +POSITIONAL ARGUMENTS + Instance resource - Arguments and flags that specify the Bare Metal + Solution instance you want to disable hyperthreading for. The arguments in + this group can be used to specify the attributes of this resource. (NOTE) + Some attributes are not given arguments in this group but can be set in + other ways. + + To set the project attribute: + ◆ provide the argument instance on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + INSTANCE + ID of the instance or fully qualified identifier for the instance. + + To set the instance attribute: + ▸ provide the argument instance on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + Region of the resource. + + To set the region attribute: + ▸ provide the argument instance on the command line with a fully + specified name; + ▸ provide the argument --region on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the baremetalsolution/v2 API. The full documentation for + this API can be found at: https://cloud.google.com/bare-metal + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/bms/instances/enable-hyperthreading b/gcloud/alpha/bms/instances/enable-hyperthreading new file mode 100644 index 000000000..5809e1da3 --- /dev/null +++ b/gcloud/alpha/bms/instances/enable-hyperthreading @@ -0,0 +1,71 @@ +NAME + gcloud alpha bms instances enable-hyperthreading - enable hyperthreading + for a Bare Metal Solution instance + +SYNOPSIS + gcloud alpha bms instances enable-hyperthreading + (INSTANCE : --region=REGION) [--async] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Enables hyperthreading for a Bare Metal Solution instance. + +EXAMPLES + To enable hyperthreading for an instance named test-instance, run: + + $ gcloud alpha bms instances enable-hyperthreading test-instance + +POSITIONAL ARGUMENTS + Instance resource - Arguments and flags that specify the Bare Metal + Solution instance you want to enable hyperthreading for. The arguments in + this group can be used to specify the attributes of this resource. (NOTE) + Some attributes are not given arguments in this group but can be set in + other ways. + + To set the project attribute: + ◆ provide the argument instance on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + INSTANCE + ID of the instance or fully qualified identifier for the instance. + + To set the instance attribute: + ▸ provide the argument instance on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + Region of the resource. + + To set the region attribute: + ▸ provide the argument instance on the command line with a fully + specified name; + ▸ provide the argument --region on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the baremetalsolution/v2 API. The full documentation for + this API can be found at: https://cloud.google.com/bare-metal + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/bms/instances/help b/gcloud/alpha/bms/instances/help index dd387262a..9b08c779b 100644 --- a/gcloud/alpha/bms/instances/help +++ b/gcloud/alpha/bms/instances/help @@ -23,10 +23,16 @@ COMMANDS describe (ALPHA) Describe a Bare Metal solution instance. + disable-hyperthreading + (ALPHA) Disable hyperthreading for a Bare Metal Solution instance. + disable-serial-console (ALPHA) Disable interactive serial console for a Bare Metal Solution instance. + enable-hyperthreading + (ALPHA) Enable hyperthreading for a Bare Metal Solution instance. + enable-serial-console (ALPHA) Enable interactive serial console for a Bare Metal Solution instance. @@ -34,6 +40,9 @@ COMMANDS list (ALPHA) List Bare Metal Solution instances in a project. + reimage + (ALPHA) Reimage a Bare Metal Solution instance. + rename (ALPHA) Rename a Bare Metal Solution instance. diff --git a/gcloud/alpha/bms/instances/reimage b/gcloud/alpha/bms/instances/reimage new file mode 100644 index 000000000..94d4ded6c --- /dev/null +++ b/gcloud/alpha/bms/instances/reimage @@ -0,0 +1,111 @@ +NAME + gcloud alpha bms instances reimage - reimage a Bare Metal Solution instance + +SYNOPSIS + gcloud alpha bms instances reimage (INSTANCE : --region=REGION) + --os-image=OS_IMAGE [--async] + [--kms-crypto-key-version=KMS_CRYPTO_KEY_VERSION] + [--ssh-keys=[SSH_KEYS,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Reimage a Bare Metal Solution instance. + + This call returns immediately, but the reimage operation may take several + minutes to complete. To check if the operation is complete, use the + describe command for the instance. + +EXAMPLES + To reimage an instance called my-instance in region us-central1 with the OS + image code RHEL9x, run: + + $ gcloud alpha bms instances reimage my-instance \ + --region=us-central1 --os-image=RHEL9x + + To set KMS key and ssh keys in order to connect the instance. Please use + corresponding flags: + + $ gcloud alpha bms instances reimage my-instance \ + --region=us-central1 --os-image=RHEL9x \ + --ssh-keys=ssh-key-1,ssh-key-2 \ + --kms-key-version=sample-kms-key-version + +POSITIONAL ARGUMENTS + Instance resource - instance. The arguments in this group can be used to + specify the attributes of this resource. (NOTE) Some attributes are not + given arguments in this group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument instance on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + INSTANCE + ID of the instance or fully qualified identifier for the instance. + + To set the instance attribute: + ▸ provide the argument instance on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + Region of the resource. + + To set the region attribute: + ▸ provide the argument instance on the command line with a fully + specified name; + ▸ provide the argument --region on the command line. + +REQUIRED FLAGS + --os-image=OS_IMAGE + OS image to install on the server. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --kms-crypto-key-version=KMS_CRYPTO_KEY_VERSION + Resource ID of a KMS CryptoKeyVersion used to encrypt the initial + password. + + https://cloud.google.com/kms/docs/resource-hierarchy#key_versions + + SSH key resource - ssh_key. This represents a Cloud resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. + + To set the project attribute: + ◆ provide the argument --ssh-keys on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + To set the region attribute: + ◆ provide the argument --ssh-keys on the command line with a fully + specified name; + ◆ global is the only supported location. + + --ssh-keys=[SSH_KEYS,...] + IDs of the SSH keys or fully qualified identifiers for the SSH keys. + + To set the ssh_key attribute: + ▸ provide the argument --ssh-keys on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/builds/worker-pools/create b/gcloud/alpha/builds/worker-pools/create index bfeb53846..8127eaa80 100644 --- a/gcloud/alpha/builds/worker-pools/create +++ b/gcloud/alpha/builds/worker-pools/create @@ -5,7 +5,9 @@ NAME SYNOPSIS gcloud alpha builds worker-pools create WORKER_POOL --region=REGION [--generation=GENERATION; default=1] - [--config-from-file=CONFIG_FROM_FILE | --peered-network=PEERED_NETWORK + [--config-from-file=CONFIG_FROM_FILE | --disable-public-ip-address + --network-attachment=NETWORK_ATTACHMENT --route-all-traffic + | --peered-network=PEERED_NETWORK --peered-network-ip-range=PEERED_NETWORK_IP_RANGE --no-public-egress --worker-disk-size=WORKER_DISK_SIZE --worker-machine-type=WORKER_MACHINE_TYPE] [GCLOUD_WIDE_FLAG ...] @@ -57,32 +59,65 @@ OPTIONAL FLAGS Command-line flags to configure the private pool: - --peered-network=PEERED_NETWORK - Existing network to which workers are peered. The network is - specified in resource URL format - projects/{network_project}/global/networks/{network_name}. + At most one of these can be specified: - If not specified, the workers are not peered to any network. + Network configuration for Private Service Connect interface: - --peered-network-ip-range=PEERED_NETWORK_IP_RANGE - An IP range for your peered network. Specify the IP range using - Classless Inter-Domain Routing (CIDR) notation with a slash and the - subnet prefix size, such as /29. + --disable-public-ip-address + If set, workers in the worker pool are created without an + external IP address. - Your subnet prefix size must be between 1 and 29. Optional: you can - specify an IP address before the subnet prefix value - for example - 192.168.0.0/24. + If the worker pool is within a VPC Service Control perimeter, + use this flag. - If no IP address is specified, your VPC automatically determines - the starting IP for the range. If no IP range is specified, Cloud - Build uses /24 as the default network IP range. + --network-attachment=NETWORK_ATTACHMENT + The network attachment that the worker network interface is + peered to. The network attachment is specified in resource URL + format + projects/{project}/regions/{region}/networkAttachments/{name}. + The region of network attachment must be the same as the worker + pool. See + https://cloud.google.com/vpc/docs/about-network-attachments for + details. - --no-public-egress - If set, workers in the worker pool are created without an external - IP address. + --route-all-traffic + Route all traffic through PSC interface. Enable this if you + want full control of traffic in the private pool. Configure + Cloud NAT for the subnet of network attachment if you need to + access public Internet. - If the worker pool is within a VPC Service Control perimeter, use - this flag. + If unset, Only route private IPs, e.g. 10.0.0.0/8, + 172.16.0.0/12, and 192.168.0.0/16 through PSC interface. + + Network configuration for Service Networking: + + --peered-network=PEERED_NETWORK + Existing network to which workers are peered. The network is + specified in resource URL format + projects/{network_project}/global/networks/{network_name}. + + If not specified, the workers are not peered to any network. + + --peered-network-ip-range=PEERED_NETWORK_IP_RANGE + An IP range for your peered network. Specify the IP range using + Classless Inter-Domain Routing (CIDR) notation with a slash and + the subnet prefix size, such as /29. + + Your subnet prefix size must be between 1 and 29. Optional: you + can specify an IP address before the subnet prefix value - for + example 192.168.0.0/24. + + If no IP address is specified, your VPC automatically + determines the starting IP for the range. If no IP range is + specified, Cloud Build uses /24 as the default network IP + range. + + --no-public-egress + If set, workers in the worker pool are created without an + external IP address. + + If the worker pool is within a VPC Service Control perimeter, + use this flag. Configuration to be used for creating workers in the worker pool: diff --git a/gcloud/alpha/builds/worker-pools/update b/gcloud/alpha/builds/worker-pools/update index e8f62bcb3..2f5d3e83e 100644 --- a/gcloud/alpha/builds/worker-pools/update +++ b/gcloud/alpha/builds/worker-pools/update @@ -41,18 +41,20 @@ REQUIRED FLAGS Command-line flags to configure the private pool: - At most one of these can be specified: + Network configuration for Service Networking: - --public-egress - If set, workers in the worker pool are created with an external - IP address. + At most one of these can be specified: - --no-public-egress - If set, workers in the worker pool are created without an - external IP address. + --public-egress + If set, workers in the worker pool are created with an external + IP address. - If the worker pool is within a VPC Service Control perimeter, use - this flag. + --no-public-egress + If set, workers in the worker pool are created without an + external IP address. + + If the worker pool is within a VPC Service Control perimeter, + use this flag. Configuration to be used for creating workers in the worker pool: diff --git a/gcloud/alpha/composer/environments/check-upgrade b/gcloud/alpha/composer/environments/check-upgrade index 1f3ec8f43..880d82e5c 100644 --- a/gcloud/alpha/composer/environments/check-upgrade +++ b/gcloud/alpha/composer/environments/check-upgrade @@ -106,7 +106,9 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. This variant is also available: + access allowlist. These variants are also available: + + $ gcloud composer environments check-upgrade $ gcloud beta composer environments check-upgrade diff --git a/gcloud/alpha/composer/environments/list-upgrades b/gcloud/alpha/composer/environments/list-upgrades index 6e731a786..b58f771fa 100644 --- a/gcloud/alpha/composer/environments/list-upgrades +++ b/gcloud/alpha/composer/environments/list-upgrades @@ -87,7 +87,9 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. This variant is also available: + access allowlist. These variants are also available: + + $ gcloud composer environments list-upgrades $ gcloud beta composer environments list-upgrades diff --git a/gcloud/alpha/compute/backend-services/update b/gcloud/alpha/compute/backend-services/update index a43933c0b..7bf0b9ee3 100644 --- a/gcloud/alpha/compute/backend-services/update +++ b/gcloud/alpha/compute/backend-services/update @@ -14,6 +14,7 @@ SYNOPSIS [--description=DESCRIPTION] [--drop-traffic-if-unhealthy] [--edge-security-policy=EDGE_SECURITY_POLICY] [--[no-]enable-cdn] [--[no-]enable-logging] [--[no-]enable-strong-affinity] + [--external-managed-migration-testing-percentage=EXTERNAL_MANAGED_MIGRATION_TESTING_PERCENTAGE] [--failover-ratio=FAILOVER_RATIO] [--health-checks=HEALTH_CHECK,[...]] [--no-health-checks] [--http-health-checks=HTTP_HEALTH_CHECK,[...]] [--https-health-checks=HTTPS_HEALTH_CHECK,[...]] @@ -21,6 +22,7 @@ SYNOPSIS oauth2-client-secret=OAUTH2-CLIENT-SECRET]] [--idle-timeout-sec=IDLE_TIMEOUT_SEC] [--ip-address-selection-policy=IP_ADDRESS_SELECTION_POLICY] + [--load-balancing-scheme=LOAD_BALANCING_SCHEME] [--locality-lb-policy=LOCALITY_LB_POLICY] [--logging-optional=LOGGING_OPTIONAL] [--logging-optional-fields=[LOGGING_OPTIONAL_FIELDS,...]] @@ -36,6 +38,8 @@ SYNOPSIS | --no-bypass-cache-on-request-headers] [--cache-key-query-string-blacklist=[QUERY_STRING,...] | --cache-key-query-string-whitelist=QUERY_STRING,[...]] + [--clear-external-managed-migration-state + | --external-managed-migration-state=EXTERNAL_MANAGED_MIGRATION_STATE] [--client-ttl=CLIENT_TTL | --no-client-ttl] [--custom-request-header=CUSTOM_REQUEST_HEADER | --no-custom-request-headers] @@ -198,6 +202,12 @@ FLAGS loadbalancingScheme EXTERNAL. Use --enable-strong-affinity to enable and --no-enable-strong-affinity to disable. + --external-managed-migration-testing-percentage=EXTERNAL_MANAGED_MIGRATION_TESTING_PERCENTAGE + Determines the fraction of requests that should be processed by the + Global external Application Load Balancer. + + The value of this field must be in the range [0, 100]. + --failover-ratio=FAILOVER_RATIO Applicable only to backend service-based external passthrough Network load balancers and internal passthrough Network load balancers as part @@ -283,6 +293,13 @@ FLAGS IP_ADDRESS_SELECTION_POLICY must be one of: IPV4_ONLY, PREFER_IPV6, IPV6_ONLY. + --load-balancing-scheme=LOAD_BALANCING_SCHEME + Only for the Global external ALB migration. + + The value of this field must be EXTERNAL or EXTERNAL_MANAGED. + + LOAD_BALANCING_SCHEME must be one of: EXTERNAL, EXTERNAL_MANAGED. + --locality-lb-policy=LOCALITY_LB_POLICY The load balancing algorithm used within the scope of the locality. LOCALITY_LB_POLICY must be one of: INVALID_LB_POLICY, ROUND_ROBIN, @@ -550,6 +567,25 @@ FLAGS percent encoded and not treated as delimiters. Can only be applied for global resources. + At most one of these can be specified: + + --clear-external-managed-migration-state + Clears current state of external managed migration. + + --external-managed-migration-state=EXTERNAL_MANAGED_MIGRATION_STATE + Specifies the canary migration state. Possible values are PREPARE, + TEST_BY_PERCENTAGE, and TEST_ALL_TRAFFIC. + + To begin the migration from EXTERNAL to EXTERNAL_MANAGED, the state + must be changed to PREPARE. The state must be changed to + TEST_ALL_TRAFFIC before the loadBalancingScheme can be changed to + EXTERNAL_MANAGED. Optionally, the TEST_BY_PERCENTAGE state can be + used to migrate traffic by percentage using + externalManagedMigrationTestingPercentage. + + EXTERNAL_MANAGED_MIGRATION_STATE must be one of: PREPARE, + TEST_BY_PERCENTAGE, TEST_ALL_TRAFFIC. + At most one of these can be specified: --client-ttl=CLIENT_TTL diff --git a/gcloud/alpha/compute/firewall-policies/rules/create b/gcloud/alpha/compute/firewall-policies/rules/create index 3b08e47bd..21889e26b 100644 --- a/gcloud/alpha/compute/firewall-policies/rules/create +++ b/gcloud/alpha/compute/firewall-policies/rules/create @@ -8,6 +8,7 @@ SYNOPSIS [--description=DESCRIPTION] [--dest-address-groups=[DEST_ADDRESS_GROUPS,...]] [--dest-fqdns=[DEST_FQDNS,...]] [--dest-ip-ranges=[DEST_IP_RANGE,...]] + [--dest-network-scope=DEST_NETWORK_SCOPE] [--dest-region-codes=[DEST_REGION_CODES,...]] [--dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...]] [--direction=DIRECTION] [--[no-]disabled] [--[no-]enable-logging] @@ -15,6 +16,8 @@ SYNOPSIS [--security-profile-group=SECURITY_PROFILE_GROUP] [--src-address-groups=[SOURCE_ADDRESS_GROUPS,...]] [--src-fqdns=[SOURCE_FQDNS,...]] [--src-ip-ranges=[SRC_IP_RANGE,...]] + [--src-network-scope=SRC_NETWORK_SCOPE] + [--src-networks=[SRC_NETWORKS,...]] [--src-region-codes=[SOURCE_REGION_CODES,...]] [--src-threat-intelligence=[SOURCE_THREAT_INTELLIGENCE_LISTS,...]] [--target-resources=[TARGET_RESOURCES,...]] @@ -61,6 +64,12 @@ OPTIONAL FLAGS --dest-ip-ranges=[DEST_IP_RANGE,...] Destination IP ranges to match for this rule. + --dest-network-scope=DEST_NETWORK_SCOPE + Use this flag to indicate that the rule should match internet or + non-internet traffic. It applies to destination traffic for egress + rules. Valid values are INTERNET and NON_INTERNET. Use empty string to + clear the field. + --dest-region-codes=[DEST_REGION_CODES,...] Destination Region Code to match for this rule. Can only be specified if DIRECTION is egress. @@ -115,6 +124,17 @@ OPTIONAL FLAGS --src-ip-ranges=[SRC_IP_RANGE,...] Source IP ranges to match for this rule. + --src-network-scope=SRC_NETWORK_SCOPE + Use this flag to indicate that the rule should match internet, + non-internet traffic or traffic coming from the network specified by + --src-network. It applies to ingress rules. Valid values are INTERNET, + NON_INTERNET and VPC_NETWORKS. Use empty string to clear the field. + + --src-networks=[SRC_NETWORKS,...] + The source VPC networks to match for this rule. It can only be + specified when --src-network-scope is VPC_NETWORKS. It applies to + ingress rules .It accepts full or partial URLs. + --src-region-codes=[SOURCE_REGION_CODES,...] Source Region Code to match for this rule. Can only be specified if DIRECTION is ingress. diff --git a/gcloud/alpha/compute/firewall-policies/rules/update b/gcloud/alpha/compute/firewall-policies/rules/update index 8d03bd0d1..93c9528a6 100644 --- a/gcloud/alpha/compute/firewall-policies/rules/update +++ b/gcloud/alpha/compute/firewall-policies/rules/update @@ -8,6 +8,7 @@ SYNOPSIS [--description=DESCRIPTION] [--dest-address-groups=[DEST_ADDRESS_GROUPS,...]] [--dest-fqdns=[DEST_FQDNS,...]] [--dest-ip-ranges=[DEST_IP_RANGE,...]] + [--dest-network-scope=DEST_NETWORK_SCOPE] [--dest-region-codes=[DEST_REGION_CODES,...]] [--dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...]] [--direction=DIRECTION] [--[no-]disabled] [--[no-]enable-logging] @@ -16,6 +17,8 @@ SYNOPSIS [--security-profile-group=SECURITY_PROFILE_GROUP] [--src-address-groups=[SOURCE_ADDRESS_GROUPS,...]] [--src-fqdns=[SOURCE_FQDNS,...]] [--src-ip-ranges=[SRC_IP_RANGE,...]] + [--src-network-scope=SRC_NETWORK_SCOPE] + [--src-networks=[SRC_NETWORKS,...]] [--src-region-codes=[SOURCE_REGION_CODES,...]] [--src-threat-intelligence=[SOURCE_THREAT_INTELLIGENCE_LISTS,...]] [--target-resources=[TARGET_RESOURCES,...]] @@ -63,6 +66,12 @@ OPTIONAL FLAGS --dest-ip-ranges=[DEST_IP_RANGE,...] Destination IP ranges to match for this rule. + --dest-network-scope=DEST_NETWORK_SCOPE + Use this flag to indicate that the rule should match internet or + non-internet traffic. It applies to destination traffic for egress + rules. Valid values are INTERNET and NON_INTERNET. Use empty string to + clear the field. + --dest-region-codes=[DEST_REGION_CODES,...] Destination Region Code to match for this rule. Can only be specified if DIRECTION is egress. @@ -120,6 +129,17 @@ OPTIONAL FLAGS --src-ip-ranges=[SRC_IP_RANGE,...] Source IP ranges to match for this rule. + --src-network-scope=SRC_NETWORK_SCOPE + Use this flag to indicate that the rule should match internet, + non-internet traffic or traffic coming from the network specified by + --src-network. It applies to ingress rules. Valid values are INTERNET, + NON_INTERNET and VPC_NETWORKS. Use empty string to clear the field. + + --src-networks=[SRC_NETWORKS,...] + The source VPC networks to match for this rule. It can only be + specified when --src-network-scope is VPC_NETWORKS. It applies to + ingress rules .It accepts full or partial URLs. + --src-region-codes=[SOURCE_REGION_CODES,...] Source Region Code to match for this rule. Can only be specified if DIRECTION is ingress. diff --git a/gcloud/alpha/compute/forwarding-rules/create b/gcloud/alpha/compute/forwarding-rules/create index fce21536e..fcd516c37 100644 --- a/gcloud/alpha/compute/forwarding-rules/create +++ b/gcloud/alpha/compute/forwarding-rules/create @@ -220,8 +220,9 @@ OPTIONAL FLAGS (--target-google-apis-bundle=API_BUNDLE) --ip-collection=IP_COLLECTION - Resource reference to a PublicDelegatedPrefix. The PDP must be a - sub-PDP in EXTERNAL_IPV6_FORWARDING_RULE_CREATION mode. + Resource reference to a public delegated prefix. The + PublicDelegatedPrefix (PDP) must be a sub-prefix in + EXTERNAL_IPV6_FORWARDING_RULE_CREATION mode. --ip-collection-region=IP_COLLECTION_REGION Region of the public delegated prefix to operate on. If not specified, diff --git a/gcloud/alpha/compute/forwarding-rules/update b/gcloud/alpha/compute/forwarding-rules/update index f43420d5e..f176995b8 100644 --- a/gcloud/alpha/compute/forwarding-rules/update +++ b/gcloud/alpha/compute/forwarding-rules/update @@ -4,9 +4,14 @@ NAME SYNOPSIS gcloud alpha compute forwarding-rules update NAME [--allow-global-access] - [--allow-psc-global-access] [--network-tier=NETWORK_TIER] + [--allow-psc-global-access] + [--external-managed-backend-bucket-migration-testing-percentage=EXTERNAL_MANAGED_BACKEND_BUCKET_MIGRATION_TESTING_PERCENTAGE] + [--load-balancing-scheme=LOAD_BALANCING_SCHEME] + [--network-tier=NETWORK_TIER] [--source-ip-ranges=SOURCE_IP_RANGE,[...]] [--update-labels=[KEY=VALUE,...]] + [--clear-external-managed-backend-bucket-migration-state + | --external-managed-backend-bucket-migration-state=EXTERNAL_MANAGED_BACKEND_BUCKET_MIGRATION_STATE] [--clear-labels | --remove-labels=[KEY,...]] [--global | --region=REGION] [GCLOUD_WIDE_FLAG ...] @@ -53,6 +58,19 @@ FLAGS Connect forwarding rule. This can only be specified if the forwarding rule's target is a service attachment (--target-service-attachment). + --external-managed-backend-bucket-migration-testing-percentage=EXTERNAL_MANAGED_BACKEND_BUCKET_MIGRATION_TESTING_PERCENTAGE + Determines the fraction of requests that should be processed by the + Global external Application Load Balancer. + + The value of this field must be in the range [0, 100]. + + --load-balancing-scheme=LOAD_BALANCING_SCHEME + Only for the Global external ALB migration. + + The value of this field must be EXTERNAL or EXTERNAL_MANAGED. + + LOAD_BALANCING_SCHEME must be one of: EXTERNAL, EXTERNAL_MANAGED. + --network-tier=NETWORK_TIER Update the network tier of a forwarding rule. It does not allow to change from PREMIUM to STANDARD and visa versa. @@ -71,6 +89,26 @@ FLAGS contain only hyphens (-), underscores (_), lowercase characters, and numbers. + At most one of these can be specified: + + --clear-external-managed-backend-bucket-migration-state + Clears current state of external managed migration. + + --external-managed-backend-bucket-migration-state=EXTERNAL_MANAGED_BACKEND_BUCKET_MIGRATION_STATE + Specifies the canary migration state. Possible values are PREPARE, + TEST_BY_PERCENTAGE, and TEST_ALL_TRAFFIC. + + To begin the migration from EXTERNAL to EXTERNAL_MANAGED, the state + must be changed to PREPARE. The state must be changed to + TEST_ALL_TRAFFIC before the loadBalancingScheme can be changed to + EXTERNAL_MANAGED. Optionally, the TEST_BY_PERCENTAGE state can be + used to migrate traffic to backend buckets attached to this + forwarding rule by percentage using + externalManagedBackendBucketMigrationTestingPercentage. + + EXTERNAL_MANAGED_BACKEND_BUCKET_MIGRATION_STATE must be one of: + PREPARE, TEST_BY_PERCENTAGE, TEST_ALL_TRAFFIC. + At most one of these can be specified: --clear-labels diff --git a/gcloud/alpha/compute/network-firewall-policies/rules/create b/gcloud/alpha/compute/network-firewall-policies/rules/create index 9096bed9e..bc7be2e56 100644 --- a/gcloud/alpha/compute/network-firewall-policies/rules/create +++ b/gcloud/alpha/compute/network-firewall-policies/rules/create @@ -8,6 +8,7 @@ SYNOPSIS [--description=DESCRIPTION] [--dest-address-groups=[DEST_ADDRESS_GROUPS,...]] [--dest-fqdns=[DEST_FQDNS,...]] [--dest-ip-ranges=[DEST_IP_RANGE,...]] + [--dest-network-scope=DEST_NETWORK_SCOPE] [--dest-region-codes=[DEST_REGION_CODES,...]] [--dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...]] [--direction=DIRECTION] [--[no-]disabled] [--[no-]enable-logging] @@ -15,6 +16,8 @@ SYNOPSIS [--security-profile-group=SECURITY_PROFILE_GROUP] [--src-address-groups=[SOURCE_ADDRESS_GROUPS,...]] [--src-fqdns=[SOURCE_FQDNS,...]] [--src-ip-ranges=[SRC_IP_RANGE,...]] + [--src-network-scope=SRC_NETWORK_SCOPE] + [--src-networks=[SRC_NETWORKS,...]] [--src-region-codes=[SOURCE_REGION_CODES,...]] [--src-secure-tags=[SOURCE_SECURE_TAGS,...]] [--src-threat-intelligence=[SOURCE_THREAT_INTELLIGENCE_LISTS,...]] @@ -71,6 +74,12 @@ OPTIONAL FLAGS --dest-ip-ranges=[DEST_IP_RANGE,...] Destination IP ranges to match for this rule. + --dest-network-scope=DEST_NETWORK_SCOPE + Use this flag to indicate that the rule should match internet or + non-internet traffic. It applies to destination traffic for egress + rules. Valid values are INTERNET and NON_INTERNET. Use empty string to + clear the field. + --dest-region-codes=[DEST_REGION_CODES,...] Destination Region Code to match for this rule. Can only be specified if DIRECTION is egress. @@ -122,6 +131,17 @@ OPTIONAL FLAGS --src-secure-tags.Multiple IP address blocks can be specified if they are separated by commas. + --src-network-scope=SRC_NETWORK_SCOPE + Use this flag to indicate that the rule should match internet, + non-internet traffic or traffic coming from the network specified by + --src-network. It applies to ingress rules. Valid values are INTERNET, + NON_INTERNET and VPC_NETWORKS. Use empty string to clear the field. + + --src-networks=[SRC_NETWORKS,...] + The source VPC networks to match for this rule. It can only be + specified when --src-network-scope is VPC_NETWORKS. It applies to + ingress rules .It accepts full or partial URLs. + --src-region-codes=[SOURCE_REGION_CODES,...] Source Region Code to match for this rule. Can only be specified if DIRECTION is ingress. diff --git a/gcloud/alpha/compute/network-firewall-policies/rules/update b/gcloud/alpha/compute/network-firewall-policies/rules/update index 0fb1ba6be..27947ce62 100644 --- a/gcloud/alpha/compute/network-firewall-policies/rules/update +++ b/gcloud/alpha/compute/network-firewall-policies/rules/update @@ -8,6 +8,7 @@ SYNOPSIS [--description=DESCRIPTION] [--dest-address-groups=[DEST_ADDRESS_GROUPS,...]] [--dest-fqdns=[DEST_FQDNS,...]] [--dest-ip-ranges=[DEST_IP_RANGE,...]] + [--dest-network-scope=DEST_NETWORK_SCOPE] [--dest-region-codes=[DEST_REGION_CODES,...]] [--dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...]] [--direction=DIRECTION] [--[no-]disabled] [--[no-]enable-logging] @@ -15,6 +16,8 @@ SYNOPSIS [--security-profile-group=SECURITY_PROFILE_GROUP] [--src-address-groups=[SOURCE_ADDRESS_GROUPS,...]] [--src-fqdns=[SOURCE_FQDNS,...]] [--src-ip-ranges=[SRC_IP_RANGE,...]] + [--src-network-scope=SRC_NETWORK_SCOPE] + [--src-networks=[SRC_NETWORKS,...]] [--src-region-codes=[SOURCE_REGION_CODES,...]] [--src-secure-tags=[SOURCE_SECURE_TAGS,...]] [--src-threat-intelligence=[SOURCE_THREAT_INTELLIGENCE_LISTS,...]] @@ -64,6 +67,12 @@ OPTIONAL FLAGS --dest-ip-ranges=[DEST_IP_RANGE,...] Destination IP ranges to match for this rule. + --dest-network-scope=DEST_NETWORK_SCOPE + Use this flag to indicate that the rule should match internet or + non-internet traffic. It applies to destination traffic for egress + rules. Valid values are INTERNET and NON_INTERNET. Use empty string to + clear the field. + --dest-region-codes=[DEST_REGION_CODES,...] Destination Region Code to match for this rule. Can only be specified if DIRECTION is egress. @@ -118,6 +127,17 @@ OPTIONAL FLAGS --src-secure-tags.Multiple IP address blocks can be specified if they are separated by commas. + --src-network-scope=SRC_NETWORK_SCOPE + Use this flag to indicate that the rule should match internet, + non-internet traffic or traffic coming from the network specified by + --src-network. It applies to ingress rules. Valid values are INTERNET, + NON_INTERNET and VPC_NETWORKS. Use empty string to clear the field. + + --src-networks=[SRC_NETWORKS,...] + The source VPC networks to match for this rule. It can only be + specified when --src-network-scope is VPC_NETWORKS. It applies to + ingress rules .It accepts full or partial URLs. + --src-region-codes=[SOURCE_REGION_CODES,...] Source Region Code to match for this rule. Can only be specified if DIRECTION is ingress. diff --git a/gcloud/alpha/database-migration/connection-profiles/create/cloudsql b/gcloud/alpha/database-migration/connection-profiles/create/cloudsql index 46e609e8a..5aa8becae 100644 --- a/gcloud/alpha/database-migration/connection-profiles/create/cloudsql +++ b/gcloud/alpha/database-migration/connection-profiles/create/cloudsql @@ -76,7 +76,8 @@ REQUIRED FLAGS --database-version=DATABASE_VERSION Database engine type and version. DATABASE_VERSION must be one of: MYSQL_5_7, MYSQL_5_6, MYSQL_8_0, POSTGRES_9_6, POSTGRES_10, - POSTGRES_11, POSTGRES_12, POSTGRES_13, POSTGRES_14, POSTGRES_15. + POSTGRES_11, POSTGRES_12, POSTGRES_13, POSTGRES_14, POSTGRES_15, + POSTGRES_16. Connection profile resource - Database Migration Service source connection profile ID. This represents a Cloud resource. (NOTE) Some attributes are diff --git a/gcloud/alpha/developer-connect/connections/create b/gcloud/alpha/developer-connect/connections/create index a6e5d7b9f..35cc15567 100644 --- a/gcloud/alpha/developer-connect/connections/create +++ b/gcloud/alpha/developer-connect/connections/create @@ -5,7 +5,7 @@ SYNOPSIS gcloud alpha developer-connect connections create (CONNECTION : --location=LOCATION) [--annotations=[ANNOTATIONS,...]] [--async] [--disabled] [--etag=ETAG] [--labels=[LABELS,...]] - [--github-config-github-app=GITHUB_CONFIG_GITHUB_APP + [--github-config-app=GITHUB_CONFIG_APP : --github-config-app-installation-id=GITHUB_CONFIG_APP_INSTALLATION_ID (--github-config-authorizer-credential-oauth-token-secret-version=GITHUB_CONFIG_AUTHORIZER_CREDENTIAL_OAUTH_TOKEN_SECRET_VERSION : --secret=SECRET)] [GCLOUD_WIDE_FLAG ...] @@ -114,9 +114,9 @@ FLAGS Configuration for connections to github.com. - --github-config-github-app=GITHUB_CONFIG_GITHUB_APP + --github-config-app=GITHUB_CONFIG_APP The GitHub Application that was installed to the GitHub user or - organization. GITHUB_CONFIG_GITHUB_APP must be one of: + organization. GITHUB_CONFIG_APP must be one of: developer-connect The Developer Connect GitHub Application. diff --git a/gcloud/alpha/iam/workforce-pools/providers/create-oidc b/gcloud/alpha/iam/workforce-pools/providers/create-oidc index 0f17b7add..f03f4f725 100644 --- a/gcloud/alpha/iam/workforce-pools/providers/create-oidc +++ b/gcloud/alpha/iam/workforce-pools/providers/create-oidc @@ -285,8 +285,8 @@ OPTIONAL FLAGS --extra-attributes-type=EXTRA_ATTRIBUTES_TYPE Represents the identity provider and type of claims that should be - fetched. EXTRA_ATTRIBUTES_TYPE must be one of: - attributes-type-unspecified, azure-ad-groups-id, azure-ad-groups-mail. + fetched. EXTRA_ATTRIBUTES_TYPE must be (only one value is supported): + azure-ad-groups-mail. --extra-attributes-filter=EXTRA_ATTRIBUTES_FILTER The filter used to request specific records from IdP. In case of diff --git a/gcloud/alpha/iam/workforce-pools/providers/update-oidc b/gcloud/alpha/iam/workforce-pools/providers/update-oidc index 003ba3659..262eae451 100644 --- a/gcloud/alpha/iam/workforce-pools/providers/update-oidc +++ b/gcloud/alpha/iam/workforce-pools/providers/update-oidc @@ -259,7 +259,7 @@ FLAGS At most one of these can be specified: --clear-extra-attributes-config - Clear the extra attributes configuration + Clear the extra attributes configuration. --extra-attributes-client-id=EXTRA_ATTRIBUTES_CLIENT_ID The OAuth 2.0 client ID for retrieving extra attributes from the @@ -286,8 +286,7 @@ FLAGS --extra-attributes-type=EXTRA_ATTRIBUTES_TYPE Represents the identity provider and type of claims that should be - fetched. EXTRA_ATTRIBUTES_TYPE must be one of: - attributes-type-unspecified, azure-ad-groups-id, + fetched. EXTRA_ATTRIBUTES_TYPE must be (only one value is supported): azure-ad-groups-mail. GCLOUD WIDE FLAGS diff --git a/gcloud/alpha/managed-kafka/clusters/create b/gcloud/alpha/managed-kafka/clusters/create index 29e04eba3..6a3967b98 100644 --- a/gcloud/alpha/managed-kafka/clusters/create +++ b/gcloud/alpha/managed-kafka/clusters/create @@ -90,9 +90,9 @@ OPTIONAL FLAGS --labels=[KEY=VALUE,...] List of label KEY=VALUE pairs to add. Keys must start with a lowercase - character and contain only hyphens (-), underscores (), lowercase + character and contain only hyphens (-), underscores (_), lowercase characters, and numbers. Values must contain only hyphens (-), - underscores (), lowercase characters, and numbers. + underscores (_), lowercase characters, and numbers. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/managed-kafka/clusters/update b/gcloud/alpha/managed-kafka/clusters/update index e35d523cb..68071b9c2 100644 --- a/gcloud/alpha/managed-kafka/clusters/update +++ b/gcloud/alpha/managed-kafka/clusters/update @@ -66,9 +66,9 @@ REQUIRED FLAGS --labels=[KEY=VALUE,...] List of label KEY=VALUE pairs to add. Keys must start with a - lowercase character and contain only hyphens (-), underscores (), + lowercase character and contain only hyphens (-), underscores (_), lowercase characters, and numbers. Values must contain only hyphens - (-), underscores (), lowercase characters, and numbers. + (-), underscores (_), lowercase characters, and numbers. --memory=MEMORY The memory to provision for the cluster in bytes. The value must be diff --git a/gcloud/alpha/netapp/active-directories/create b/gcloud/alpha/netapp/active-directories/create index befe5e4be..e640b6a5b 100644 --- a/gcloud/alpha/netapp/active-directories/create +++ b/gcloud/alpha/netapp/active-directories/create @@ -6,7 +6,7 @@ SYNOPSIS gcloud alpha netapp active-directories create (ACTIVE_DIRECTORY : --location=LOCATION) --dns=DNS --domain=DOMAIN --net-bios-prefix=NET_BIOS_PREFIX --password=PASSWORD - --username=USERNAME [--async] + --username=USERNAME [--administrators=[ADMINISTRATOR,...]] [--async] [--backup-operators=[BACKUP_OPERATOR,...]] [--description=DESCRIPTION] [--enable-aes=ENABLE_AES] [--enable-ldap-signing=ENABLE_LDAP_SIGNING] [--encrypt-dc-connections=ENCRYPT_DC_CONNECTIONS] @@ -81,6 +81,9 @@ REQUIRED FLAGS Username of the Active Directory domain administrator. OPTIONAL FLAGS + --administrators=[ADMINISTRATOR,...] + Members of the Active Directory built-in Administrators group. + --async Return immediately, without waiting for the operation in progress to complete. diff --git a/gcloud/alpha/netapp/active-directories/update b/gcloud/alpha/netapp/active-directories/update index 14638ed97..d3cdf205c 100644 --- a/gcloud/alpha/netapp/active-directories/update +++ b/gcloud/alpha/netapp/active-directories/update @@ -6,7 +6,7 @@ SYNOPSIS gcloud alpha netapp active-directories update (ACTIVE_DIRECTORY : --location=LOCATION) --dns=DNS --domain=DOMAIN --net-bios-prefix=NET_BIOS_PREFIX --password=PASSWORD - --username=USERNAME [--async] + --username=USERNAME [--administrators=[ADMINISTRATOR,...]] [--async] [--backup-operators=[BACKUP_OPERATOR,...]] [--description=DESCRIPTION] [--enable-aes=ENABLE_AES] [--enable-ldap-signing=ENABLE_LDAP_SIGNING] [--encrypt-dc-connections=ENCRYPT_DC_CONNECTIONS] @@ -28,9 +28,11 @@ EXAMPLES --location=us-central1 --domain=new-domain.com --dns=1.1.1.1 \ --site=new_site --net-bios-prefix=new_prefix \ --organizational-unit=ou2 --enable-aes=true --username=user2 \ - --password="secure2" --backup-operators=backup_op3 \ - --security-operators=secure_op3 --enable-ldap-signing=true \ - --encrypt-dc-connections=yes --kdc-hostname=kdc-host1 + --password="secure2" --backup-operators=backup_op1,backup_op2 \ + --security-operators=secure_op1,secure_op2 \ + --administrators=admin_op1,admin_op2 \ + --enable-ldap-signing=true --encrypt-dc-connections=yes \ + --kdc-hostname=kdc-host1 POSITIONAL ARGUMENTS Active directory resource - The Active Directory to update. The arguments @@ -83,6 +85,9 @@ REQUIRED FLAGS Username of the Active Directory domain administrator. OPTIONAL FLAGS + --administrators=[ADMINISTRATOR,...] + Members of the Active Directory built-in Administrators group. + --async Return immediately, without waiting for the operation in progress to complete. diff --git a/gcloud/alpha/scc/notifications/create b/gcloud/alpha/scc/notifications/create index 5204e8811..4dc05db4f 100644 --- a/gcloud/alpha/scc/notifications/create +++ b/gcloud/alpha/scc/notifications/create @@ -70,15 +70,14 @@ OPTIONAL FLAGS Filter to be used for notification config. --location=LOCATION; default="global" - When data residency controls are enabled, this attribute specifies the - location in which the resource is located and applicable. The location - attribute can be provided as part of the fully specified resource name - or with the --location argument on the command line. The default - location is global. + If data residency is enabled, specify the Security Command Center + location in which to create the notification. The resulting + notificationConfig resource is stored only in this location. Only + findings that are issued in this location are sent to Pub/Sub. - The default location on this command is unrelated to the default - location that is specified when data residency controls are enabled for - Security Command Center. + If data residency is not enabled, specifying the --location flag + creates the notification by using Security Command Center API v2, and + the only valid value for the flag is global. At most one of these can be specified: diff --git a/gcloud/alpha/scc/notifications/delete b/gcloud/alpha/scc/notifications/delete index 482c81d98..7101e9b20 100644 --- a/gcloud/alpha/scc/notifications/delete +++ b/gcloud/alpha/scc/notifications/delete @@ -51,15 +51,16 @@ POSITIONAL ARGUMENTS FLAGS --location=LOCATION; default="global" - When data residency controls are enabled, this attribute specifies the - location in which the resource is located and applicable. The location - attribute can be provided as part of the fully specified resource name - or with the --location argument on the command line. The default - location is global. + Required if either data residency is enabled or the notificationConfig + was created by using the API v2. - The default location on this command is unrelated to the default - location that is specified when data residency controls are enabled for - Security Command Center. + If data residency is enabled, specify the Security Command Center + location in which the notification is stored. + + If data residency is not enabled, include /locations/``LOCATION'' in + the full name or specify the --location flag only if the + notificationConfig was created by using the Security Command Center API + v2, in which case, the only valid location is global. At most one of these can be specified: diff --git a/gcloud/alpha/scc/notifications/describe b/gcloud/alpha/scc/notifications/describe index 7989aaa7c..f426739d6 100644 --- a/gcloud/alpha/scc/notifications/describe +++ b/gcloud/alpha/scc/notifications/describe @@ -45,15 +45,16 @@ POSITIONAL ARGUMENTS FLAGS --location=LOCATION; default="global" - When data residency controls are enabled, this attribute specifies the - location in which the resource is located and applicable. The location - attribute can be provided as part of the fully specified resource name - or with the --location argument on the command line. The default - location is global. + Required if either data residency is enabled or the notificationConfig + resources were created by using the API v2. - The default location on this command is unrelated to the default - location that is specified when data residency controls are enabled for - Security Command Center. + If data residency is enabled, specify the Security Command Center + location in which the notifications are stored. + + If data residency is not enabled, include /locations/``LOCATION'' only + if the notificationConfig resource was created by using the Security + Command Center API v2, in which case, the only valid location is + global. At most one of these can be specified: diff --git a/gcloud/alpha/scc/notifications/list b/gcloud/alpha/scc/notifications/list index 5a329380d..dbf80decc 100644 --- a/gcloud/alpha/scc/notifications/list +++ b/gcloud/alpha/scc/notifications/list @@ -51,15 +51,16 @@ POSITIONAL ARGUMENTS FLAGS --location=LOCATION; default="global" - When data residency controls are enabled, this attribute specifies the - location in which the resource is located and applicable. The location - attribute can be provided as part of the fully specified resource name - or with the --location argument on the command line. The default - location is global. + Required if either data residency is enabled or the notificationConfig + resources were created by using the API v2. - The default location on this command is unrelated to the default - location that is specified when data residency controls are enabled for - Security Command Center. + If data residency is enabled, specify the Security Command Center + location in which the notifications are stored. + + If data residency is not enabled, including /locations/``LOCATION'' in + the name or the --location flag in the command lists only the + notificationConfig resources that were created by using the Security + Command Center API v2 and the only valid location is global. LIST COMMAND FLAGS --filter=EXPRESSION diff --git a/gcloud/alpha/scc/notifications/update b/gcloud/alpha/scc/notifications/update index 670cb0507..1d04e01a6 100644 --- a/gcloud/alpha/scc/notifications/update +++ b/gcloud/alpha/scc/notifications/update @@ -79,15 +79,16 @@ FLAGS notification configuration. --location=LOCATION; default="global" - When data residency controls are enabled, this attribute specifies the - location in which the resource is located and applicable. The location - attribute can be provided as part of the fully specified resource name - or with the --location argument on the command line. The default - location is global. + Required if either data residency is enabled or the notificationConfig + was created by using the API v2. - The default location on this command is unrelated to the default - location that is specified when data residency controls are enabled for - Security Command Center. + If data residency is enabled, specify the Security Command Center + location in which the notification is stored. + + If data residency is not enabled, include /locations/``LOCATION'' in + the full name or specify the --location flag only if the + notificationConfig resource was created by using the Security Command + Center API v2, in which case, the only valid location is global. --pubsub-topic=PUBSUB_TOPIC The Pub/Sub topic which will receive notifications. Its format is diff --git a/gcloud/alpha/sql/instances/clone b/gcloud/alpha/sql/instances/clone index e341ad66b..dfcbb4ec0 100644 --- a/gcloud/alpha/sql/instances/clone +++ b/gcloud/alpha/sql/instances/clone @@ -4,10 +4,11 @@ NAME SYNOPSIS gcloud alpha sql instances clone SOURCE DESTINATION [--allocated-ip-range-name=ALLOCATED_IP_RANGE_NAME] [--async] + [--preferred-secondary-zone=PREFERRED_SECONDARY_ZONE] + [--preferred-zone=PREFERRED_ZONE] [--bin-log-file-name=BIN_LOG_FILE_NAME --bin-log-position=BIN_LOG_POSITION | [--point-in-time=POINT_IN_TIME - : --preferred-zone=PREFERRED_ZONE - --restore-database-name=RESTORE_DATABASE_NAME]] + : --restore-database-name=RESTORE_DATABASE_NAME]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -81,6 +82,17 @@ FLAGS Return immediately, without waiting for the operation in progress to complete. + --preferred-secondary-zone=PREFERRED_SECONDARY_ZONE + The preferred secondary zone for the cloned regional instance. If you + specify a value for this flag, then the destination instance uses the + value as the secondary zone. The secondary zone can't be the same as + the primary zone. + + --preferred-zone=PREFERRED_ZONE + The preferred zone for the cloned instance. If you specify a value for + this flag, then the destination instance uses the value as the primary + zone. + At most one of these can be specified: Binary log coordinates for point-in-time recovery. @@ -120,10 +132,6 @@ FLAGS This flag argument must be specified if any of the other arguments in this group are specified. - --preferred-zone=PREFERRED_ZONE - The preferred zone for the cloned instance. If set, the destination - instance will be created in this zone. - --restore-database-name=RESTORE_DATABASE_NAME The name of the database to be restored for a point-in-time restore. If set, the destination instance will only restore the specified diff --git a/gcloud/alpha/transfer/jobs/create b/gcloud/alpha/transfer/jobs/create index 43c97e7f0..be3152b70 100644 --- a/gcloud/alpha/transfer/jobs/create +++ b/gcloud/alpha/transfer/jobs/create @@ -8,7 +8,7 @@ SYNOPSIS --source-agent-pool=SOURCE_AGENT_POOL --destination-agent-pool=DESTINATION_AGENT_POOL --intermediate-storage-path=INTERMEDIATE_STORAGE_PATH - --manifest-file=MANIFEST_FILE] + --manifest-file=MANIFEST_FILE] [--replication] [--event-stream-name=EVENT_STREAM_NAME --event-stream-starts=EVENT_STREAM_STARTS --event-stream-expires=EVENT_STREAM_EXPIRES] @@ -171,6 +171,14 @@ FLAGS destination://path/to/manifest.csv). For manifest file formatting, see https://cloud.google.com/storage-transfer/docs/manifest. + REPLICATION OPTIONS + + --replication + Enable replication to automatically copy all new and existing objects + from the source to the destination. Important: Objects deleted from + the source bucket will not be deleted from the destination bucket. + Please note that it is an event-driven transfer. + EVENT STREAM Configure an event stream to transfer data whenever it is added or changed diff --git a/gcloud/alpha/transfer/jobs/list b/gcloud/alpha/transfer/jobs/list index bc2bad874..f3e3217d1 100644 --- a/gcloud/alpha/transfer/jobs/list +++ b/gcloud/alpha/transfer/jobs/list @@ -5,7 +5,7 @@ SYNOPSIS gcloud alpha transfer jobs list [--limit=LIMIT] [--page-size=PAGE_SIZE; default=256] [--job-names=[JOB_NAMES,...]] [--job-statuses=[JOB_STATUSES,...]] [--expand-table] - [GCLOUD_WIDE_FLAG ...] + [--job-type=JOB_TYPE; default="transfer"] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) List Transfer Service transfer jobs in a given project to show @@ -55,6 +55,10 @@ FLAGS frequency, lastest operation name, job status) in command output. Tip: increase the size of your terminal before running the command. + --job-type=JOB_TYPE; default="transfer" + The type of the job you want to list. JOB_TYPE must be one of: + transfer, replication. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/auth/application-default/login b/gcloud/auth/application-default/login index fb8432233..aab9e6647 100644 --- a/gcloud/auth/application-default/login +++ b/gcloud/auth/application-default/login @@ -143,7 +143,11 @@ FLAGS https://www.googleapis.com/auth/cloud-platform, https://www.googleapis.com/auth/sqlservice.login scopes are used. The list of possible scopes can be found at: - https://developers.google.com/identity/protocols/googlescopes. + https://developers.google.com/identity/protocols/googlescopes. To add + scopes for applications outside of Google Cloud Platform, such as + Google Drive, create an OAuth Client ID + (https://support.google.com/cloud/answer/6158849) and provide it by + using the --client-id-file flag. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/beta/ai/endpoints/help b/gcloud/beta/ai/endpoints/help index aa4b42fdb..6d84b3b61 100644 --- a/gcloud/beta/ai/endpoints/help +++ b/gcloud/beta/ai/endpoints/help @@ -46,6 +46,9 @@ COMMANDS raw-predict (BETA) Run Vertex AI online raw prediction. + stream-raw-predict + (BETA) Run Vertex AI online stream raw prediction. + undeploy-model (BETA) Undeploy a model from an existing Vertex AI endpoint. diff --git a/gcloud/beta/ai/endpoints/stream-raw-predict b/gcloud/beta/ai/endpoints/stream-raw-predict new file mode 100644 index 000000000..560debc37 --- /dev/null +++ b/gcloud/beta/ai/endpoints/stream-raw-predict @@ -0,0 +1,104 @@ +NAME + gcloud beta ai endpoints stream-raw-predict - run Vertex AI online stream + raw prediction + +SYNOPSIS + gcloud beta ai endpoints stream-raw-predict (ENDPOINT : --region=REGION) + --request=REQUEST [--http-headers=[HEADER=VALUE,...]] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) gcloud beta ai endpoints stream-raw-predict sends a stream raw + prediction request to a Vertex AI endpoint. The request can be given on the + command line or read from a file or stdin. + +EXAMPLES + To predict against an endpoint 123 under project example in region + us-central1, reading the request from the command line, run: + + $ gcloud beta ai endpoints stream-raw-predict 123 \ + --project=example --region=us-central1 --request='{ + "instances": [ + { "values": [1, 2, 3, 4], "key": 1 }, + { "values": [5, 6, 7, 8], "key": 2 } + ] + }' + + If the request body was in the file input.json, run: + + $ gcloud beta ai endpoints stream-raw-predict 123 \ + --project=example --region=us-central1 --request=@input.json + + To send the image file image.jpeg and set the content type, run: + + $ gcloud beta ai endpoints stream-raw-predict 123 \ + --project=example --region=us-central1 \ + --http-headers=Content-Type=image/jpeg --request=@image.jpeg + +POSITIONAL ARGUMENTS + Endpoint resource - The endpoint to do online stream raw prediction. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument endpoint on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + ENDPOINT + ID of the endpoint or fully qualified identifier for the endpoint. + + To set the name attribute: + ▸ provide the argument endpoint on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + Cloud region for the endpoint. + + To set the region attribute: + ▸ provide the argument endpoint on the command line with a fully + specified name; + ▸ provide the argument --region on the command line; + ▸ set the property ai/region; + ▸ choose one from the prompted list of available regions. + +REQUIRED FLAGS + --request=REQUEST + The request to send to the endpoint. + + If the request starts with the letter '@', the rest should be a file + name to read the request from, or '@-' to read from stdin. If the + request body actually starts with '@', it must be placed in a file. + + If required, the Content-Type header should also be set appropriately, + particularly for binary data. + +OPTIONAL FLAGS + --http-headers=[HEADER=VALUE,...] + List of header and value pairs to send as part of the request. For + example, to set the Content-Type and X-Header: + + --http-headers=Content-Type="application/json",X-Header=Value + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud ai endpoints stream-raw-predict + + $ gcloud alpha ai endpoints stream-raw-predict + diff --git a/gcloud/beta/auth/application-default/login b/gcloud/beta/auth/application-default/login index e12975f8b..eaeec0018 100644 --- a/gcloud/beta/auth/application-default/login +++ b/gcloud/beta/auth/application-default/login @@ -143,7 +143,11 @@ FLAGS https://www.googleapis.com/auth/cloud-platform, https://www.googleapis.com/auth/sqlservice.login scopes are used. The list of possible scopes can be found at: - https://developers.google.com/identity/protocols/googlescopes. + https://developers.google.com/identity/protocols/googlescopes. To add + scopes for applications outside of Google Cloud Platform, such as + Google Drive, create an OAuth Client ID + (https://support.google.com/cloud/answer/6158849) and provide it by + using the --client-id-file flag. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/beta/builds/worker-pools/create b/gcloud/beta/builds/worker-pools/create index 7ca2dbfb0..7a024897f 100644 --- a/gcloud/beta/builds/worker-pools/create +++ b/gcloud/beta/builds/worker-pools/create @@ -49,32 +49,34 @@ OPTIONAL FLAGS Command-line flags to configure the private pool: - --peered-network=PEERED_NETWORK - Existing network to which workers are peered. The network is - specified in resource URL format - projects/{network_project}/global/networks/{network_name}. + Network configuration for Service Networking: - If not specified, the workers are not peered to any network. + --peered-network=PEERED_NETWORK + Existing network to which workers are peered. The network is + specified in resource URL format + projects/{network_project}/global/networks/{network_name}. - --peered-network-ip-range=PEERED_NETWORK_IP_RANGE - An IP range for your peered network. Specify the IP range using - Classless Inter-Domain Routing (CIDR) notation with a slash and the - subnet prefix size, such as /29. + If not specified, the workers are not peered to any network. - Your subnet prefix size must be between 1 and 29. Optional: you can - specify an IP address before the subnet prefix value - for example - 192.168.0.0/24. + --peered-network-ip-range=PEERED_NETWORK_IP_RANGE + An IP range for your peered network. Specify the IP range using + Classless Inter-Domain Routing (CIDR) notation with a slash and + the subnet prefix size, such as /29. - If no IP address is specified, your VPC automatically determines - the starting IP for the range. If no IP range is specified, Cloud - Build uses /24 as the default network IP range. + Your subnet prefix size must be between 1 and 29. Optional: you + can specify an IP address before the subnet prefix value - for + example 192.168.0.0/24. - --no-public-egress - If set, workers in the worker pool are created without an external - IP address. + If no IP address is specified, your VPC automatically determines + the starting IP for the range. If no IP range is specified, Cloud + Build uses /24 as the default network IP range. - If the worker pool is within a VPC Service Control perimeter, use - this flag. + --no-public-egress + If set, workers in the worker pool are created without an + external IP address. + + If the worker pool is within a VPC Service Control perimeter, use + this flag. Configuration to be used for creating workers in the worker pool: diff --git a/gcloud/beta/builds/worker-pools/update b/gcloud/beta/builds/worker-pools/update index e31d7060c..f4c113d86 100644 --- a/gcloud/beta/builds/worker-pools/update +++ b/gcloud/beta/builds/worker-pools/update @@ -38,18 +38,20 @@ REQUIRED FLAGS Command-line flags to configure the private pool: - At most one of these can be specified: + Network configuration for Service Networking: - --public-egress - If set, workers in the worker pool are created with an external - IP address. + At most one of these can be specified: - --no-public-egress - If set, workers in the worker pool are created without an - external IP address. + --public-egress + If set, workers in the worker pool are created with an external + IP address. - If the worker pool is within a VPC Service Control perimeter, use - this flag. + --no-public-egress + If set, workers in the worker pool are created without an + external IP address. + + If the worker pool is within a VPC Service Control perimeter, + use this flag. Configuration to be used for creating workers in the worker pool: diff --git a/gcloud/beta/composer/environments/check-upgrade b/gcloud/beta/composer/environments/check-upgrade index 68c531765..0242dda35 100644 --- a/gcloud/beta/composer/environments/check-upgrade +++ b/gcloud/beta/composer/environments/check-upgrade @@ -103,8 +103,10 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud composer environments check-upgrade $ gcloud alpha composer environments check-upgrade diff --git a/gcloud/beta/composer/environments/list-upgrades b/gcloud/beta/composer/environments/list-upgrades index 8bebec669..874eb81b1 100644 --- a/gcloud/beta/composer/environments/list-upgrades +++ b/gcloud/beta/composer/environments/list-upgrades @@ -84,8 +84,10 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud composer environments list-upgrades $ gcloud alpha composer environments list-upgrades diff --git a/gcloud/beta/compute/forwarding-rules/create b/gcloud/beta/compute/forwarding-rules/create index 52b8b32bb..912f6a8a2 100644 --- a/gcloud/beta/compute/forwarding-rules/create +++ b/gcloud/beta/compute/forwarding-rules/create @@ -16,6 +16,8 @@ SYNOPSIS | --target-vpn-gateway=TARGET_VPN_GATEWAY) [--address=ADDRESS] [--allow-global-access] [--allow-psc-global-access] [--description=DESCRIPTION] [--disable-automate-dns-zone] + [--ip-collection=IP_COLLECTION] + [--ip-collection-region=IP_COLLECTION_REGION] [--ip-protocol=IP_PROTOCOL] [--ip-version=IP_VERSION] [--is-mirroring-collector] [--load-balancing-scheme=LOAD_BALANCING_SCHEME] [--network=NETWORK] @@ -217,6 +219,16 @@ OPTIONAL FLAGS (--target-service-attachment=SERVICE_ATTACHMENT) or Google APIs bundle (--target-google-apis-bundle=API_BUNDLE) + --ip-collection=IP_COLLECTION + Resource reference to a public delegated prefix. The + PublicDelegatedPrefix (PDP) must be a sub-prefix in + EXTERNAL_IPV6_FORWARDING_RULE_CREATION mode. + + --ip-collection-region=IP_COLLECTION_REGION + Region of the public delegated prefix to operate on. If not specified, + the region is set to the region of the forwarding rule. Overrides the + default compute/region property value for this command invocation. + --ip-protocol=IP_PROTOCOL IP protocol that the rule will serve. The default is TCP. diff --git a/gcloud/beta/iam/help b/gcloud/beta/iam/help index 484469638..f39cf69cf 100644 --- a/gcloud/beta/iam/help +++ b/gcloud/beta/iam/help @@ -30,6 +30,12 @@ GROUPS policies (BETA) Manage IAM deny policies. + policy-bindings + (BETA) Manage PolicyBinding instances. + + principal-access-boundary-policies + (BETA) Manage PrincipalAccessBoundaryPolicy instances. + roles (BETA) Create and manipulate roles. diff --git a/gcloud/beta/iam/policy-bindings/create b/gcloud/beta/iam/policy-bindings/create new file mode 100644 index 000000000..4617fa1a7 --- /dev/null +++ b/gcloud/beta/iam/policy-bindings/create @@ -0,0 +1,229 @@ +NAME + gcloud beta iam policy-bindings create - create PolicyBinding instance + +SYNOPSIS + gcloud beta iam policy-bindings create + (POLICY_BINDING + : --folder=FOLDER --location=LOCATION --organization=ORGANIZATION) + --policy=POLICY --target-principal-set=TARGET_PRINCIPAL_SET + [--annotations=[ANNOTATIONS,...]] [--async] + [--display-name=DISPLAY_NAME] [--etag=ETAG] [--policy-kind=POLICY_KIND] + [--condition-description=CONDITION_DESCRIPTION + --condition-expression=CONDITION_EXPRESSION + --condition-location=CONDITION_LOCATION + --condition-title=CONDITION_TITLE] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Create PolicyBinding instance. + +EXAMPLES + To create a policy binding instance called my-binding that references a + principal access boundary policy run: + + $ gcloud beta iam policy-bindings create my-binding \ + --organization=123 --location=global \ + --policy=organizations/123/locations/global/\ + principalAccessBoundaryPolicies/my-policy \ + --target-principal-set=//cloudresourcemanager.googleapis.com/\ + organizations/123 + +POSITIONAL ARGUMENTS + PolicyBinding resource - Identifier. The resource name of the policy + binding. The binding parent is the closest CRM resource (i.e., Project, + Folder or Organization) to the binding target. + + Format: + projects/{project_id}/locations/{location}/policyBindings/{policy_binding_id} + projects/{project_number}/locations/{location}/policyBindings/{policy_binding_id} + folders/{folder_id}/locations/{location}/policyBindings/{policy_binding_id} + organizations/{organization_id}/locations/{location}/policyBindings/{policy_binding_id} + The arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument policy_binding on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. This resource can + be one of the following types: [iam.folders.locations.policyBindings, + iam.organizations.locations.policyBindings, + iam.projects.locations.policyBindings]. + + This must be specified. + + POLICY_BINDING + ID of the policyBinding or fully qualified identifier for the + policyBinding. + + To set the policy_binding attribute: + ▸ provide the argument policy_binding on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --folder=FOLDER + The folder id of the policyBinding resource. + + To set the folder attribute: + ▸ provide the argument policy_binding on the command line with a + fully specified name; + ▸ provide the argument --folder on the command line. Must be + specified for resource of type + [iam.folders.locations.policyBindings]. + + --location=LOCATION + The location id of the policyBinding resource. + + To set the location attribute: + ▸ provide the argument policy_binding on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + The organization id of the policyBinding resource. + + To set the organization attribute: + ▸ provide the argument policy_binding on the command line with a + fully specified name; + ▸ provide the argument --organization on the command line. Must be + specified for resource of type + [iam.organizations.locations.policyBindings]. + +REQUIRED FLAGS + --policy=POLICY + The resource name of the policy to be bound. The binding parent and + policy must belong to the same Organization (or Project). + + Target is the full resource name of the resource to which the policy will + be bound. Immutable once set. + + This must be specified. + + Arguments for the target. + + --target-principal-set=TARGET_PRINCIPAL_SET + Full Resource Name used for principal access boundary policy + bindings Examples: Organization: + "//cloudresourcemanager.googleapis.com/organizations/ORGANIZATION_ID" + Folder: "//cloudresourcemanager.googleapis.com/folders/FOLDER_ID" + Project: + "//cloudresourcemanager.googleapis.com/projects/PROJECT_NUMBER" + "//cloudresourcemanager.googleapis.com/projects/PROJECT_ID" + Workload Identity Pool: + "//iam.googleapis.com/projects/PROJECT_NUMBER/locations/LOCATION/workloadIdentityPools/WORKLOAD_POOL_ID" + Workforce Identity: + "//iam.googleapis.com/locations/global/workforcePools/WORKFORCE_POOL_ID" + Workspace Identity: + "//iam.googleapis.com/locations/global/workspace/WORKSPACE_ID" + +OPTIONAL FLAGS + --annotations=[ANNOTATIONS,...] + User defined annotations. See https://google.aip.dev/148#annotations + for more details such as format and size limitations. + + KEY + Sets KEY value. + + VALUE + Sets VALUE value. + + Shorthand Example: + + --annotations=string=string + + JSON Example: + + --annotations='{"string": "string"}' + + File Example: + + --annotations=path_to_file.(yaml|json) + + --async + Return immediately, without waiting for the operation in progress to + complete. + + --display-name=DISPLAY_NAME + The description of the policy binding. Must be less than or equal to 63 + characters. + + --etag=ETAG + The etag for the policy binding. If this is provided on update, it must + match the server's etag. + + --policy-kind=POLICY_KIND + The kind of the policy to attach in this binding: + + + When the policy is empty, this field must be set. + When the policy + is set, this field + can be left empty and will be set to the policy + kind, or + must set to the input policy kind + + POLICY_KIND must be (only one value is supported): + + principal-access-boundary + Principal access boundary policy kind + + Represents a textual expression in the Common Expression Language (CEL) + syntax. CEL is a C-like expression language. The syntax and semantics of + CEL are documented at https://github.com/google/cel-spec. + + Example (Comparison): + + title: "Summary size limit" + description: "Determines if a summary is less than 100 chars" + expression: "document.summary.size() < 100" + + Example (Equality): + + title: "Requestor is owner" + description: "Determines if requestor is the document owner" + expression: "document.owner == request.auth.claims.email" + + Example (Logic): + + title: "Public documents" + description: "Determine whether the document should be publicly visible" + expression: "document.type != 'private' && document.type != 'internal'" + + Example (Data Manipulation): + + title: "Notification string" + description: "Create a notification string with a timestamp." + expression: "'New message received at ' + string(document.create_time)" + + The exact variables and functions that may be referenced within an + expression are determined by the service that evaluates it. See the + service documentation for additional information. + + --condition-description=CONDITION_DESCRIPTION + Description of the expression. This is a longer text which describes + the expression, e.g. when hovered over it in a UI. + + --condition-expression=CONDITION_EXPRESSION + Textual representation of an expression in Common Expression Language + syntax. + + --condition-location=CONDITION_LOCATION + String indicating the location of the expression for error reporting, + e.g. a file name and a position in the file. + + --condition-title=CONDITION_TITLE + Title for the expression, i.e. a short string describing its purpose. + This can be used e.g. in UIs which allow to enter the expression. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v3beta API. The full documentation for this API + can be found at: https://cloud.google.com/iam/ + +NOTES + This command is currently in beta and might change without notice. + diff --git a/gcloud/beta/iam/policy-bindings/delete b/gcloud/beta/iam/policy-bindings/delete new file mode 100644 index 000000000..5f50d6c12 --- /dev/null +++ b/gcloud/beta/iam/policy-bindings/delete @@ -0,0 +1,107 @@ +NAME + gcloud beta iam policy-bindings delete - delete PolicyBinding instance + +SYNOPSIS + gcloud beta iam policy-bindings delete + (POLICY_BINDING + : --folder=FOLDER --location=LOCATION --organization=ORGANIZATION) + [--async] [--etag=ETAG] [--validate-only] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Delete PolicyBinding instance. + +EXAMPLES + To delete my-binding instance in organization 123 run: + + $ gcloud beta iam policy-bindings delete my-binding \ + --organization=123 --location=global + +POSITIONAL ARGUMENTS + PolicyBinding resource - The name of the policy binding to delete. + + Format: + projects/{project_id}/locations/{location}/policyBindings/{policy_binding_id} + projects/{project_number}/locations/{location}/policyBindings/{policy_binding_id} + folders/{folder_id}/locations/{location}/policyBindings/{policy_binding_id} + organizations/{organization_id}/locations/{location}/policyBindings/{policy_binding_id} + The arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument policy_binding on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. This resource can + be one of the following types: [iam.folders.locations.policyBindings, + iam.organizations.locations.policyBindings, + iam.projects.locations.policyBindings]. + + This must be specified. + + POLICY_BINDING + ID of the policyBinding or fully qualified identifier for the + policyBinding. + + To set the policy_binding attribute: + ▸ provide the argument policy_binding on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --folder=FOLDER + The folder id of the policyBinding resource. + + To set the folder attribute: + ▸ provide the argument policy_binding on the command line with a + fully specified name; + ▸ provide the argument --folder on the command line. Must be + specified for resource of type + [iam.folders.locations.policyBindings]. + + --location=LOCATION + The location id of the policyBinding resource. + + To set the location attribute: + ▸ provide the argument policy_binding on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + The organization id of the policyBinding resource. + + To set the organization attribute: + ▸ provide the argument policy_binding on the command line with a + fully specified name; + ▸ provide the argument --organization on the command line. Must be + specified for resource of type + [iam.organizations.locations.policyBindings]. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --etag=ETAG + The etag of the policy binding. If this is provided, it must match the + server's etag. + + --validate-only + If set, validate the request and preview the deletion, but do not + actually post it. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v3beta API. The full documentation for this API + can be found at: https://cloud.google.com/iam/ + +NOTES + This command is currently in beta and might change without notice. + diff --git a/gcloud/beta/iam/policy-bindings/describe b/gcloud/beta/iam/policy-bindings/describe new file mode 100644 index 000000000..2880e826a --- /dev/null +++ b/gcloud/beta/iam/policy-bindings/describe @@ -0,0 +1,95 @@ +NAME + gcloud beta iam policy-bindings describe - get PolicyBinding instance + +SYNOPSIS + gcloud beta iam policy-bindings describe + (POLICY_BINDING + : --folder=FOLDER --location=LOCATION --organization=ORGANIZATION) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Get PolicyBinding instance. + +EXAMPLES + To get the details of a single policy binding my-binding in organization + 123 run: + + $ gcloud beta iam policy-bindings describe my-binding \ + --organization=123 --location=global + +POSITIONAL ARGUMENTS + PolicyBinding resource - The name of the policy binding to retrieve. + + Format: + projects/{project_id}/locations/{location}/policyBindings/{policy_binding_id} + projects/{project_number}/locations/{location}/policyBindings/{policy_binding_id} + folders/{folder_id}/locations/{location}/policyBindings/{policy_binding_id} + organizations/{organization_id}/locations/{location}/policyBindings/{policy_binding_id} + The arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument policy_binding on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. This resource can + be one of the following types: [iam.folders.locations.policyBindings, + iam.organizations.locations.policyBindings, + iam.projects.locations.policyBindings]. + + This must be specified. + + POLICY_BINDING + ID of the policyBinding or fully qualified identifier for the + policyBinding. + + To set the policy_binding attribute: + ▸ provide the argument policy_binding on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --folder=FOLDER + The folder id of the policyBinding resource. + + To set the folder attribute: + ▸ provide the argument policy_binding on the command line with a + fully specified name; + ▸ provide the argument --folder on the command line. Must be + specified for resource of type + [iam.folders.locations.policyBindings]. + + --location=LOCATION + The location id of the policyBinding resource. + + To set the location attribute: + ▸ provide the argument policy_binding on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + The organization id of the policyBinding resource. + + To set the organization attribute: + ▸ provide the argument policy_binding on the command line with a + fully specified name; + ▸ provide the argument --organization on the command line. Must be + specified for resource of type + [iam.organizations.locations.policyBindings]. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v3beta API. The full documentation for this API + can be found at: https://cloud.google.com/iam/ + +NOTES + This command is currently in beta and might change without notice. + diff --git a/gcloud/beta/iam/policy-bindings/help b/gcloud/beta/iam/policy-bindings/help new file mode 100644 index 000000000..c754c3a28 --- /dev/null +++ b/gcloud/beta/iam/policy-bindings/help @@ -0,0 +1,38 @@ +NAME + gcloud beta iam policy-bindings - manage PolicyBinding instances + +SYNOPSIS + gcloud beta iam policy-bindings COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Manage PolicyBinding instances. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + create + (BETA) Create PolicyBinding instance. + + delete + (BETA) Delete PolicyBinding instance. + + describe + (BETA) Get PolicyBinding instance. + + list + (BETA) List PolicyBinding instances. + + search-target-policy-bindings + (BETA) Search policy bindings by target. + + update + (BETA) Update PolicyBinding instance. + +NOTES + This command is currently in beta and might change without notice. + diff --git a/gcloud/beta/iam/policy-bindings/list b/gcloud/beta/iam/policy-bindings/list new file mode 100644 index 000000000..9c0874250 --- /dev/null +++ b/gcloud/beta/iam/policy-bindings/list @@ -0,0 +1,114 @@ +NAME + gcloud beta iam policy-bindings list - list PolicyBinding instances + +SYNOPSIS + gcloud beta iam policy-bindings list + (--location=LOCATION : --folder=FOLDER --organization=ORGANIZATION) + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) List PolicyBinding instances. + +EXAMPLES + To list all policy binding instances in project my-project run: + + $ gcloud beta iam policy-bindings list --project=my-project \ + --location=global + +REQUIRED FLAGS + Location resource - The parent resource, which owns the collection of + policy bindings. + + Format: projects/{project_id}/locations/{location} + projects/{project_number}/locations/{location} + folders/{folder_id}/locations/{location} + organizations/{organization_id}/locations/{location} The arguments in this + group can be used to specify the attributes of this resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. + + To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. This resource can + be one of the following types: [iam.folders.locations, + iam.organizations.locations, iam.projects.locations]. + + This must be specified. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. + + To set the location attribute: + ▸ provide the argument --location on the command line. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --folder=FOLDER + The folder id of the location resource. + + To set the folder attribute: + ▸ provide the argument --location on the command line with a fully + specified name; + ▸ provide the argument --folder on the command line. Must be + specified for resource of type [iam.folders.locations]. + + --organization=ORGANIZATION + The organization id of the location resource. + + To set the organization attribute: + ▸ provide the argument --location on the command line with a fully + specified name; + ▸ provide the argument --organization on the command line. Must be + specified for resource of type [iam.organizations.locations]. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v3beta API. The full documentation for this API + can be found at: https://cloud.google.com/iam/ + +NOTES + This command is currently in beta and might change without notice. + diff --git a/gcloud/beta/iam/policy-bindings/search-target-policy-bindings b/gcloud/beta/iam/policy-bindings/search-target-policy-bindings new file mode 100644 index 000000000..8a36b5813 --- /dev/null +++ b/gcloud/beta/iam/policy-bindings/search-target-policy-bindings @@ -0,0 +1,121 @@ +NAME + gcloud beta iam policy-bindings search-target-policy-bindings - search + policy bindings by target + +SYNOPSIS + gcloud beta iam policy-bindings search-target-policy-bindings + --target=TARGET + (--location=LOCATION : --folder=FOLDER --organization=ORGANIZATION) + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Search policy bindings by target. + +EXAMPLES + To search for policy bindings with target, run: + + $ gcloud beta iam policy-bindings search-target-policy-bindings \ + --organization=123 --location=global \ + --target=//cloudresourcemanager.googleapis.com/organizations/123 + +REQUIRED FLAGS + --target=TARGET + The target resource, which is bound to the policy in the binding. + + Format: //iam.googleapis.com/locations/global/workforcePools/POOL_ID + //iam.googleapis.com/projects/PROJECT_NUMBER/locations/global/workloadIdentityPools/POOL_ID + //iam.googleapis.com/locations/global/workspace/WORKSPACE_ID + //cloudresourcemanager.googleapis.com/projects/{project_number} + //cloudresourcemanager.googleapis.com/folders/{folder_id} + //cloudresourcemanager.googleapis.com/organizations/{organization_id} + + Location resource - The parent resource where this search will be + performed. This should be the nearest CRM resource to the target. + + Format: projects/{project_id}/locations/{location} + projects/{project_number}/locations/{location} + folders/{folder_id}/locations/{location} + organizations/{organization_id}/locations/{location} The arguments in this + group can be used to specify the attributes of this resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. + + To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. This resource can + be one of the following types: [iam.folders.locations, + iam.organizations.locations, iam.projects.locations]. + + This must be specified. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. + + To set the location attribute: + ▸ provide the argument --location on the command line. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --folder=FOLDER + The folder id of the location resource. + + To set the folder attribute: + ▸ provide the argument --location on the command line with a fully + specified name; + ▸ provide the argument --folder on the command line. Must be + specified for resource of type [iam.folders.locations]. + + --organization=ORGANIZATION + The organization id of the location resource. + + To set the organization attribute: + ▸ provide the argument --location on the command line with a fully + specified name; + ▸ provide the argument --organization on the command line. Must be + specified for resource of type [iam.organizations.locations]. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v3beta API. The full documentation for this API + can be found at: https://cloud.google.com/iam/ + +NOTES + This command is currently in beta and might change without notice. + diff --git a/gcloud/beta/iam/policy-bindings/update b/gcloud/beta/iam/policy-bindings/update new file mode 100644 index 000000000..b99b1b834 --- /dev/null +++ b/gcloud/beta/iam/policy-bindings/update @@ -0,0 +1,223 @@ +NAME + gcloud beta iam policy-bindings update - update PolicyBinding instance + +SYNOPSIS + gcloud beta iam policy-bindings update + (POLICY_BINDING + : --folder=FOLDER --location=LOCATION --organization=ORGANIZATION) + [--async] [--display-name=DISPLAY_NAME] [--etag=ETAG] + [--annotations=[ANNOTATIONS,...] + | --update-annotations=[UPDATE_ANNOTATIONS,...] --clear-annotations + | --remove-annotations=[__REMOVE_ANNOTATIONS,...]] + [--condition-description=CONDITION_DESCRIPTION + --condition-expression=CONDITION_EXPRESSION + --condition-location=CONDITION_LOCATION + --condition-title=CONDITION_TITLE] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Update PolicyBinding instance. + +EXAMPLES + To update display name of my-binding in organization 123 run: + + $ gcloud beta iam policy-bindings update my-binding \ + --organization=123 --location=global \ + --display-name=new-display-name + +POSITIONAL ARGUMENTS + PolicyBinding resource - Identifier. The resource name of the policy + binding. The binding parent is the closest CRM resource (i.e., Project, + Folder or Organization) to the binding target. + + Format: + projects/{project_id}/locations/{location}/policyBindings/{policy_binding_id} + projects/{project_number}/locations/{location}/policyBindings/{policy_binding_id} + folders/{folder_id}/locations/{location}/policyBindings/{policy_binding_id} + organizations/{organization_id}/locations/{location}/policyBindings/{policy_binding_id} + The arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument policy_binding on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. This resource can + be one of the following types: [iam.folders.locations.policyBindings, + iam.organizations.locations.policyBindings, + iam.projects.locations.policyBindings]. + + This must be specified. + + POLICY_BINDING + ID of the policyBinding or fully qualified identifier for the + policyBinding. + + To set the policy_binding attribute: + ▸ provide the argument policy_binding on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --folder=FOLDER + The folder id of the policyBinding resource. + + To set the folder attribute: + ▸ provide the argument policy_binding on the command line with a + fully specified name; + ▸ provide the argument --folder on the command line. Must be + specified for resource of type + [iam.folders.locations.policyBindings]. + + --location=LOCATION + The location id of the policyBinding resource. + + To set the location attribute: + ▸ provide the argument policy_binding on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + The organization id of the policyBinding resource. + + To set the organization attribute: + ▸ provide the argument policy_binding on the command line with a + fully specified name; + ▸ provide the argument --organization on the command line. Must be + specified for resource of type + [iam.organizations.locations.policyBindings]. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --display-name=DISPLAY_NAME + The description of the policy binding. Must be less than or equal to 63 + characters. + + --etag=ETAG + The etag for the policy binding. If this is provided on update, it must + match the server's etag. + + Update annotations. + + At most one of these can be specified: + + --annotations=[ANNOTATIONS,...] + Set annotations to new value. User defined annotations. See + https://google.aip.dev/148#annotations for more details such as + format and size limitations + + KEY + Sets KEY value. + + VALUE + Sets VALUE value. + + Shorthand Example: + + --annotations=string=string + + JSON Example: + + --annotations='{"string": "string"}' + + File Example: + + --annotations=path_to_file.(yaml|json) + + --update-annotations=[UPDATE_ANNOTATIONS,...] + Update annotations value or add key value pair. User defined + annotations. See https://google.aip.dev/148#annotations for more + details such as format and size limitations + + KEY + Sets KEY value. + + VALUE + Sets VALUE value. + + Shorthand Example: + + --update-annotations=string=string + + JSON Example: + + --update-annotations='{"string": "string"}' + + File Example: + + --update-annotations=path_to_file.(yaml|json) + + At most one of these can be specified: + + --clear-annotations + Clear annotations value and set to empty map. + + --remove-annotations=[__REMOVE_ANNOTATIONS,...] + Remove existing value from map annotations. + + Represents a textual expression in the Common Expression Language (CEL) + syntax. CEL is a C-like expression language. The syntax and semantics of + CEL are documented at https://github.com/google/cel-spec. + + Example (Comparison): + + title: "Summary size limit" + description: "Determines if a summary is less than 100 chars" + expression: "document.summary.size() < 100" + + Example (Equality): + + title: "Requestor is owner" + description: "Determines if requestor is the document owner" + expression: "document.owner == request.auth.claims.email" + + Example (Logic): + + title: "Public documents" + description: "Determine whether the document should be publicly visible" + expression: "document.type != 'private' && document.type != 'internal'" + + Example (Data Manipulation): + + title: "Notification string" + description: "Create a notification string with a timestamp." + expression: "'New message received at ' + string(document.create_time)" + + The exact variables and functions that may be referenced within an + expression are determined by the service that evaluates it. See the + service documentation for additional information. + + --condition-description=CONDITION_DESCRIPTION + Description of the expression. This is a longer text which describes + the expression, e.g. when hovered over it in a UI. + + --condition-expression=CONDITION_EXPRESSION + Textual representation of an expression in Common Expression Language + syntax. + + --condition-location=CONDITION_LOCATION + String indicating the location of the expression for error reporting, + e.g. a file name and a position in the file. + + --condition-title=CONDITION_TITLE + Title for the expression, i.e. a short string describing its purpose. + This can be used e.g. in UIs which allow to enter the expression. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v3beta API. The full documentation for this API + can be found at: https://cloud.google.com/iam/ + +NOTES + This command is currently in beta and might change without notice. + diff --git a/gcloud/beta/iam/principal-access-boundary-policies/create b/gcloud/beta/iam/principal-access-boundary-policies/create new file mode 100644 index 000000000..336dd4688 --- /dev/null +++ b/gcloud/beta/iam/principal-access-boundary-policies/create @@ -0,0 +1,163 @@ +NAME + gcloud beta iam principal-access-boundary-policies create - create + PrincipalAccessBoundaryPolicy instance + +SYNOPSIS + gcloud beta iam principal-access-boundary-policies create + (PRINCIPAL_ACCESS_BOUNDARY_POLICY + : --location=LOCATION --organization=ORGANIZATION) + [--annotations=[ANNOTATIONS,...]] [--async] + [--display-name=DISPLAY_NAME] [--etag=ETAG] + [[--details-rules=[description=DESCRIPTION], + [effect=EFFECT],[resources=RESOURCES] + : --details-enforcement-version=DETAILS_ENFORCEMENT_VERSION]] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Create PrincipalAccessBoundaryPolicy instance. + +EXAMPLES + To create a policy instance called my-policy, run: + + $ gcloud beta iam principal-access-boundary-policies create \ + my-policy --organization=123 --location=global + +POSITIONAL ARGUMENTS + PrincipalAccessBoundaryPolicy resource - Identifier. The resource name of + the principal access boundary policy. + + The following format is supported: + organizations/{organization_id}/locations/{location}/principalAccessBoundaryPolicies/{policy_id} + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + PRINCIPAL_ACCESS_BOUNDARY_POLICY + ID of the principalAccessBoundaryPolicy or fully qualified identifier + for the principalAccessBoundaryPolicy. + + To set the principal_access_boundary_policy attribute: + ▸ provide the argument principal_access_boundary_policy on the + command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location id of the principalAccessBoundaryPolicy resource. + + To set the location attribute: + ▸ provide the argument principal_access_boundary_policy on the + command line with a fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + The organization id of the principalAccessBoundaryPolicy resource. + + To set the organization attribute: + ▸ provide the argument principal_access_boundary_policy on the + command line with a fully specified name; + ▸ provide the argument --organization on the command line. + +FLAGS + --annotations=[ANNOTATIONS,...] + User defined annotations. See https://google.aip.dev/148#annotations + for more details such as format and size limitations. + + KEY + Sets KEY value. + + VALUE + Sets VALUE value. + + Shorthand Example: + + --annotations=string=string + + JSON Example: + + --annotations='{"string": "string"}' + + File Example: + + --annotations=path_to_file.(yaml|json) + + --async + Return immediately, without waiting for the operation in progress to + complete. + + --display-name=DISPLAY_NAME + The description of the principal access boundary policy. Must be less + than or equal to 63 characters. + + --etag=ETAG + The etag for the principal access boundary. If this is provided on + update, it must match the server's etag. + + Principal access boundary policy details + + --details-rules=[description=DESCRIPTION],[effect=EFFECT],[resources=RESOURCES] + A list of principal access boundary policy rules. The number of rules + in a policy is limited to 500. Required, A list of principal access + boundary policy rules. The number of rules in a policy is limited to + 500. + + description + The description of the principal access boundary policy rule. + Must be less than or equal to 256 characters. + + effect + The access relationship of principals to the resources in this + rule. + + resources + A list of Cloud Resource Manager resources. The resource and all + the descendants are included. The number of resources in a policy + is limited to 500 across all rules. + + The following resource names are supported: + ▫ Organization, such as + "//cloudresourcemanager.googleapis.com/organizations/123". + ▫ Folder, such as + "//cloudresourcemanager.googleapis.com/folders/123". + ▫ Project, such as + "//cloudresourcemanager.googleapis.com/projects/123" or + "//cloudresourcemanager.googleapis.com/projects/my-project-id". + + Shorthand Example: + + --details-rules=description=string,effect=string,resources=["string"] --details-rules=description=string,effect=string,resources=["string"] + + JSON Example: + + --details-rules='[{"description": "string", "effect": "string", "resources": ["string"]}]' + + File Example: + + --details-rules=path_to_file.(yaml|json) + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --details-enforcement-version=DETAILS_ENFORCEMENT_VERSION + The version number that indicates which GCP services are included in + the enforcement (e.g. "latest", "1", ...). If empty, the PAB policy + version will be set to the current latest version, and this version + won't get updated when new versions are released. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v3beta API. The full documentation for this API + can be found at: https://cloud.google.com/iam/ + +NOTES + This command is currently in beta and might change without notice. + diff --git a/gcloud/beta/iam/principal-access-boundary-policies/delete b/gcloud/beta/iam/principal-access-boundary-policies/delete new file mode 100644 index 000000000..36a690db1 --- /dev/null +++ b/gcloud/beta/iam/principal-access-boundary-policies/delete @@ -0,0 +1,89 @@ +NAME + gcloud beta iam principal-access-boundary-policies delete - delete + PrincipalAccessBoundaryPolicy instance + +SYNOPSIS + gcloud beta iam principal-access-boundary-policies delete + (PRINCIPAL_ACCESS_BOUNDARY_POLICY + : --location=LOCATION --organization=ORGANIZATION) [--async] + [--etag=ETAG] [--force] [--validate-only] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Delete PrincipalAccessBoundaryPolicy instance. + +EXAMPLES + To delete my-policy instance in organization 123, run: + + $ gcloud beta iam principal-access-boundary-policies delete \ + my-policy --organization=123 --location=global + +POSITIONAL ARGUMENTS + PrincipalAccessBoundaryPolicy resource - The name of the principal access + boundary policy to delete. + + Format: + organizations/{organization_id}/locations/{location}/principalAccessBoundaryPolicies/{principal_access_boundary_policy_id} + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + PRINCIPAL_ACCESS_BOUNDARY_POLICY + ID of the principalAccessBoundaryPolicy or fully qualified identifier + for the principalAccessBoundaryPolicy. + + To set the principal_access_boundary_policy attribute: + ▸ provide the argument principal_access_boundary_policy on the + command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location id of the principalAccessBoundaryPolicy resource. + + To set the location attribute: + ▸ provide the argument principal_access_boundary_policy on the + command line with a fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + The organization id of the principalAccessBoundaryPolicy resource. + + To set the organization attribute: + ▸ provide the argument principal_access_boundary_policy on the + command line with a fully specified name; + ▸ provide the argument --organization on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --etag=ETAG + The etag of the principal access boundary policy. If this is provided, + it must match the server's etag. + + --force + If set to true, the request will force the deletion of the Policy even + if the Policy references PolicyBindings. + + --validate-only + If set, validate the request and preview the deletion, but do not + actually post it. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v3beta API. The full documentation for this API + can be found at: https://cloud.google.com/iam/ + +NOTES + This command is currently in beta and might change without notice. + diff --git a/gcloud/beta/iam/principal-access-boundary-policies/describe b/gcloud/beta/iam/principal-access-boundary-policies/describe new file mode 100644 index 000000000..79ca651e1 --- /dev/null +++ b/gcloud/beta/iam/principal-access-boundary-policies/describe @@ -0,0 +1,72 @@ +NAME + gcloud beta iam principal-access-boundary-policies describe - get + PrincipalAccessBoundaryPolicy instance + +SYNOPSIS + gcloud beta iam principal-access-boundary-policies describe + (PRINCIPAL_ACCESS_BOUNDARY_POLICY + : --location=LOCATION --organization=ORGANIZATION) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Get PrincipalAccessBoundaryPolicy instance. + +EXAMPLES + To get the details of a single policy my-policy in organization 123, run: + + $ gcloud beta iam principal-access-boundary-policies describe \ + my-policy --organization=123 --location=global + +POSITIONAL ARGUMENTS + PrincipalAccessBoundaryPolicy resource - The name of the principal access + boundary policy to retrieve. + + Format: + organizations/{organization_id}/locations/{location}/principalAccessBoundaryPolicies/{principal_access_boundary_policy_id} + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + PRINCIPAL_ACCESS_BOUNDARY_POLICY + ID of the principalAccessBoundaryPolicy or fully qualified identifier + for the principalAccessBoundaryPolicy. + + To set the principal_access_boundary_policy attribute: + ▸ provide the argument principal_access_boundary_policy on the + command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location id of the principalAccessBoundaryPolicy resource. + + To set the location attribute: + ▸ provide the argument principal_access_boundary_policy on the + command line with a fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + The organization id of the principalAccessBoundaryPolicy resource. + + To set the organization attribute: + ▸ provide the argument principal_access_boundary_policy on the + command line with a fully specified name; + ▸ provide the argument --organization on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v3beta API. The full documentation for this API + can be found at: https://cloud.google.com/iam/ + +NOTES + This command is currently in beta and might change without notice. + diff --git a/gcloud/beta/iam/principal-access-boundary-policies/help b/gcloud/beta/iam/principal-access-boundary-policies/help new file mode 100644 index 000000000..8ea648ddc --- /dev/null +++ b/gcloud/beta/iam/principal-access-boundary-policies/help @@ -0,0 +1,37 @@ +NAME + gcloud beta iam principal-access-boundary-policies - manage + PrincipalAccessBoundaryPolicy instances + +SYNOPSIS + gcloud beta iam principal-access-boundary-policies COMMAND + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Manage PrincipalAccessBoundaryPolicy instances. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + create + (BETA) Create PrincipalAccessBoundaryPolicy instance. + + delete + (BETA) Delete PrincipalAccessBoundaryPolicy instance. + + describe + (BETA) Get PrincipalAccessBoundaryPolicy instance. + + search-policy-bindings + (BETA) Search Principal Access Boundary Policy Bindings. + + update + (BETA) Update PrincipalAccessBoundaryPolicy instance. + +NOTES + This command is currently in beta and might change without notice. + diff --git a/gcloud/beta/iam/principal-access-boundary-policies/search-policy-bindings b/gcloud/beta/iam/principal-access-boundary-policies/search-policy-bindings new file mode 100644 index 000000000..f2fcb8cfc --- /dev/null +++ b/gcloud/beta/iam/principal-access-boundary-policies/search-policy-bindings @@ -0,0 +1,99 @@ +NAME + gcloud beta iam principal-access-boundary-policies search-policy-bindings - + search Principal Access Boundary Policy Bindings + +SYNOPSIS + gcloud beta iam principal-access-boundary-policies search-policy-bindings + (PRINCIPAL_ACCESS_BOUNDARY_POLICY + : --location=LOCATION --organization=ORGANIZATION) + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Search all policy bindings that bind a specific policy if a user has + searchPolicyBindings permission on that policy. + +EXAMPLES + To search policy bindings associated with Principal Access Boundary Policy, + run: + + $ gcloud beta iam principal-access-boundary-policies \ search-policy-bindings my-policy --organization=123 \ + --location=global + +POSITIONAL ARGUMENTS + PrincipalAccessBoundaryPolicy resource - The name of the principal access + boundary policy. Format: + organizations/{organization_id}/locations/{location}/principalAccessBoundaryPolicies/{principal_access_boundary_policy_id} + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + PRINCIPAL_ACCESS_BOUNDARY_POLICY + ID of the principalAccessBoundaryPolicy or fully qualified identifier + for the principalAccessBoundaryPolicy. + + To set the principal_access_boundary_policy attribute: + ▸ provide the argument principal_access_boundary_policy on the + command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location id of the principalAccessBoundaryPolicy resource. + + To set the location attribute: + ▸ provide the argument principal_access_boundary_policy on the + command line with a fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + The organization id of the principalAccessBoundaryPolicy resource. + + To set the organization attribute: + ▸ provide the argument principal_access_boundary_policy on the + command line with a fully specified name; + ▸ provide the argument --organization on the command line. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v3beta API. The full documentation for this API + can be found at: https://cloud.google.com/iam/ + +NOTES + This command is currently in beta and might change without notice. + diff --git a/gcloud/beta/iam/principal-access-boundary-policies/update b/gcloud/beta/iam/principal-access-boundary-policies/update new file mode 100644 index 000000000..c96a19fd3 --- /dev/null +++ b/gcloud/beta/iam/principal-access-boundary-policies/update @@ -0,0 +1,287 @@ +NAME + gcloud beta iam principal-access-boundary-policies update - update + PrincipalAccessBoundaryPolicy instance + +SYNOPSIS + gcloud beta iam principal-access-boundary-policies update + (PRINCIPAL_ACCESS_BOUNDARY_POLICY + : --location=LOCATION --organization=ORGANIZATION) [--async] + [--display-name=DISPLAY_NAME] [--etag=ETAG] + [--annotations=[ANNOTATIONS,...] + | --update-annotations=[UPDATE_ANNOTATIONS,...] --clear-annotations + | --remove-annotations=[__REMOVE_ANNOTATIONS,...]] + [--details-enforcement-version=DETAILS_ENFORCEMENT_VERSION + --details-rules=[description=DESCRIPTION], + [effect=EFFECT],[resources=RESOURCES] + | --add-details-rules=[description=DESCRIPTION], + [effect=EFFECT],[resources=RESOURCES] --clear-details-rules + | --remove-details-rules=[description=DESCRIPTION], + [effect=EFFECT],[resources=RESOURCES]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Update PrincipalAccessBoundaryPolicy instance. + +EXAMPLES + To update display name of my-policy in organization 123, run: + + $ gcloud beta iam principal-access-boundary-policies update \ + my-policy --organization=123 --location=global \ + --display-name=new-display-name + +POSITIONAL ARGUMENTS + PrincipalAccessBoundaryPolicy resource - Identifier. The resource name of + the principal access boundary policy. + + The following format is supported: + organizations/{organization_id}/locations/{location}/principalAccessBoundaryPolicies/{policy_id} + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + PRINCIPAL_ACCESS_BOUNDARY_POLICY + ID of the principalAccessBoundaryPolicy or fully qualified identifier + for the principalAccessBoundaryPolicy. + + To set the principal_access_boundary_policy attribute: + ▸ provide the argument principal_access_boundary_policy on the + command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location id of the principalAccessBoundaryPolicy resource. + + To set the location attribute: + ▸ provide the argument principal_access_boundary_policy on the + command line with a fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + The organization id of the principalAccessBoundaryPolicy resource. + + To set the organization attribute: + ▸ provide the argument principal_access_boundary_policy on the + command line with a fully specified name; + ▸ provide the argument --organization on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --display-name=DISPLAY_NAME + The description of the principal access boundary policy. Must be less + than or equal to 63 characters. + + --etag=ETAG + The etag for the principal access boundary. If this is provided on + update, it must match the server's etag. + + Update annotations. + + At most one of these can be specified: + + --annotations=[ANNOTATIONS,...] + Set annotations to new value. User defined annotations. See + https://google.aip.dev/148#annotations for more details such as + format and size limitations + + KEY + Sets KEY value. + + VALUE + Sets VALUE value. + + Shorthand Example: + + --annotations=string=string + + JSON Example: + + --annotations='{"string": "string"}' + + File Example: + + --annotations=path_to_file.(yaml|json) + + --update-annotations=[UPDATE_ANNOTATIONS,...] + Update annotations value or add key value pair. User defined + annotations. See https://google.aip.dev/148#annotations for more + details such as format and size limitations + + KEY + Sets KEY value. + + VALUE + Sets VALUE value. + + Shorthand Example: + + --update-annotations=string=string + + JSON Example: + + --update-annotations='{"string": "string"}' + + File Example: + + --update-annotations=path_to_file.(yaml|json) + + At most one of these can be specified: + + --clear-annotations + Clear annotations value and set to empty map. + + --remove-annotations=[__REMOVE_ANNOTATIONS,...] + Remove existing value from map annotations. + + Principal access boundary policy details + + --details-enforcement-version=DETAILS_ENFORCEMENT_VERSION + The version number that indicates which GCP services are included in + the enforcement (e.g. "latest", "1", ...). If empty, the PAB policy + version will be set to the current latest version, and this version + won't get updated when new versions are released. + + Update details_rules. + + At most one of these can be specified: + + --details-rules=[description=DESCRIPTION],[effect=EFFECT],[resources=RESOURCES] + Set details_rules to new value. A list of principal access boundary + policy rules. The number of rules in a policy is limited to 500. + + description + The description of the principal access boundary policy rule. + Must be less than or equal to 256 characters. + + effect + The access relationship of principals to the resources in this + rule. + + resources + A list of Cloud Resource Manager resources. The resource and + all the descendants are included. The number of resources in a + policy is limited to 500 across all rules. + + The following resource names are supported: + ◇ Organization, such as + "//cloudresourcemanager.googleapis.com/organizations/123". + ◇ Folder, such as + "//cloudresourcemanager.googleapis.com/folders/123". + ◇ Project, such as + "//cloudresourcemanager.googleapis.com/projects/123" or + "//cloudresourcemanager.googleapis.com/projects/my-project-id". + + Shorthand Example: + + --details-rules=description=string,effect=string,resources=["string"] --details-rules=description=string,effect=string,resources=["string"] + + JSON Example: + + --details-rules='[{"description": "string", "effect": "string", "resources": ["string"]}]' + + File Example: + + --details-rules=path_to_file.(yaml|json) + + --add-details-rules=[description=DESCRIPTION],[effect=EFFECT],[resources=RESOURCES] + Add new value to details_rules list. A list of principal access + boundary policy rules. The number of rules in a policy is limited + to 500. + + description + The description of the principal access boundary policy rule. + Must be less than or equal to 256 characters. + + effect + The access relationship of principals to the resources in this + rule. + + resources + A list of Cloud Resource Manager resources. The resource and + all the descendants are included. The number of resources in a + policy is limited to 500 across all rules. + + The following resource names are supported: + ◇ Organization, such as + "//cloudresourcemanager.googleapis.com/organizations/123". + ◇ Folder, such as + "//cloudresourcemanager.googleapis.com/folders/123". + ◇ Project, such as + "//cloudresourcemanager.googleapis.com/projects/123" or + "//cloudresourcemanager.googleapis.com/projects/my-project-id". + + Shorthand Example: + + --add-details-rules=description=string,effect=string,resources=["string"] --add-details-rules=description=string,effect=string,resources=["string"] + + JSON Example: + + --add-details-rules='[{"description": "string", "effect": "string", "resources": ["string"]}]' + + File Example: + + --add-details-rules=path_to_file.(yaml|json) + + At most one of these can be specified: + + --clear-details-rules + Clear details_rules value and set to empty list. + + --remove-details-rules=[description=DESCRIPTION],[effect=EFFECT],[resources=RESOURCES] + Remove existing value from details_rules list. A list of + principal access boundary policy rules. The number of rules in a + policy is limited to 500. + + description + The description of the principal access boundary policy rule. + Must be less than or equal to 256 characters. + + effect + The access relationship of principals to the resources in + this rule. + + resources + A list of Cloud Resource Manager resources. The resource and + all the descendants are included. The number of resources in + a policy is limited to 500 across all rules. + + The following resource names are supported: + ▹ Organization, such as + "//cloudresourcemanager.googleapis.com/organizations/123". + ▹ Folder, such as + "//cloudresourcemanager.googleapis.com/folders/123". + ▹ Project, such as + "//cloudresourcemanager.googleapis.com/projects/123" or + "//cloudresourcemanager.googleapis.com/projects/my-project-id". + + Shorthand Example: + + --remove-details-rules=description=string,effect=string,resources=["string"] --remove-details-rules=description=string,effect=string,resources=["string"] + + JSON Example: + + --remove-details-rules='[{"description": "string", "effect": "string", "resources": ["string"]}]' + + File Example: + + --remove-details-rules=path_to_file.(yaml|json) + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iam/v3beta API. The full documentation for this API + can be found at: https://cloud.google.com/iam/ + +NOTES + This command is currently in beta and might change without notice. + diff --git a/gcloud/beta/iam/workforce-pools/providers/create-oidc b/gcloud/beta/iam/workforce-pools/providers/create-oidc index 25dca16a4..a2e15c3b7 100644 --- a/gcloud/beta/iam/workforce-pools/providers/create-oidc +++ b/gcloud/beta/iam/workforce-pools/providers/create-oidc @@ -285,8 +285,8 @@ OPTIONAL FLAGS --extra-attributes-type=EXTRA_ATTRIBUTES_TYPE Represents the identity provider and type of claims that should be - fetched. EXTRA_ATTRIBUTES_TYPE must be one of: - attributes-type-unspecified, azure-ad-groups-id, azure-ad-groups-mail. + fetched. EXTRA_ATTRIBUTES_TYPE must be (only one value is supported): + azure-ad-groups-mail. --extra-attributes-filter=EXTRA_ATTRIBUTES_FILTER The filter used to request specific records from IdP. In case of diff --git a/gcloud/beta/iam/workforce-pools/providers/update-oidc b/gcloud/beta/iam/workforce-pools/providers/update-oidc index 71a73b3a2..749b94b60 100644 --- a/gcloud/beta/iam/workforce-pools/providers/update-oidc +++ b/gcloud/beta/iam/workforce-pools/providers/update-oidc @@ -259,7 +259,7 @@ FLAGS At most one of these can be specified: --clear-extra-attributes-config - Clear the extra attributes configuration + Clear the extra attributes configuration. --extra-attributes-client-id=EXTRA_ATTRIBUTES_CLIENT_ID The OAuth 2.0 client ID for retrieving extra attributes from the @@ -286,8 +286,7 @@ FLAGS --extra-attributes-type=EXTRA_ATTRIBUTES_TYPE Represents the identity provider and type of claims that should be - fetched. EXTRA_ATTRIBUTES_TYPE must be one of: - attributes-type-unspecified, azure-ad-groups-id, + fetched. EXTRA_ATTRIBUTES_TYPE must be (only one value is supported): azure-ad-groups-mail. GCLOUD WIDE FLAGS diff --git a/gcloud/beta/managed-kafka/clusters/create b/gcloud/beta/managed-kafka/clusters/create index b3248d8a4..5ad80cf83 100644 --- a/gcloud/beta/managed-kafka/clusters/create +++ b/gcloud/beta/managed-kafka/clusters/create @@ -90,9 +90,9 @@ OPTIONAL FLAGS --labels=[KEY=VALUE,...] List of label KEY=VALUE pairs to add. Keys must start with a lowercase - character and contain only hyphens (-), underscores (), lowercase + character and contain only hyphens (-), underscores (_), lowercase characters, and numbers. Values must contain only hyphens (-), - underscores (), lowercase characters, and numbers. + underscores (_), lowercase characters, and numbers. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/beta/managed-kafka/clusters/update b/gcloud/beta/managed-kafka/clusters/update index 19f5a471f..175af1572 100644 --- a/gcloud/beta/managed-kafka/clusters/update +++ b/gcloud/beta/managed-kafka/clusters/update @@ -66,9 +66,9 @@ REQUIRED FLAGS --labels=[KEY=VALUE,...] List of label KEY=VALUE pairs to add. Keys must start with a - lowercase character and contain only hyphens (-), underscores (), + lowercase character and contain only hyphens (-), underscores (_), lowercase characters, and numbers. Values must contain only hyphens - (-), underscores (), lowercase characters, and numbers. + (-), underscores (_), lowercase characters, and numbers. --memory=MEMORY The memory to provision for the cluster in bytes. The value must be diff --git a/gcloud/beta/netapp/active-directories/create b/gcloud/beta/netapp/active-directories/create index 43e1a7787..f214881e1 100644 --- a/gcloud/beta/netapp/active-directories/create +++ b/gcloud/beta/netapp/active-directories/create @@ -6,7 +6,7 @@ SYNOPSIS gcloud beta netapp active-directories create (ACTIVE_DIRECTORY : --location=LOCATION) --dns=DNS --domain=DOMAIN --net-bios-prefix=NET_BIOS_PREFIX --password=PASSWORD - --username=USERNAME [--async] + --username=USERNAME [--administrators=[ADMINISTRATOR,...]] [--async] [--backup-operators=[BACKUP_OPERATOR,...]] [--description=DESCRIPTION] [--enable-aes=ENABLE_AES] [--enable-ldap-signing=ENABLE_LDAP_SIGNING] [--encrypt-dc-connections=ENCRYPT_DC_CONNECTIONS] @@ -81,6 +81,9 @@ REQUIRED FLAGS Username of the Active Directory domain administrator. OPTIONAL FLAGS + --administrators=[ADMINISTRATOR,...] + Members of the Active Directory built-in Administrators group. + --async Return immediately, without waiting for the operation in progress to complete. diff --git a/gcloud/beta/netapp/active-directories/update b/gcloud/beta/netapp/active-directories/update index d8884fac5..7cfe783de 100644 --- a/gcloud/beta/netapp/active-directories/update +++ b/gcloud/beta/netapp/active-directories/update @@ -6,7 +6,7 @@ SYNOPSIS gcloud beta netapp active-directories update (ACTIVE_DIRECTORY : --location=LOCATION) --dns=DNS --domain=DOMAIN --net-bios-prefix=NET_BIOS_PREFIX --password=PASSWORD - --username=USERNAME [--async] + --username=USERNAME [--administrators=[ADMINISTRATOR,...]] [--async] [--backup-operators=[BACKUP_OPERATOR,...]] [--description=DESCRIPTION] [--enable-aes=ENABLE_AES] [--enable-ldap-signing=ENABLE_LDAP_SIGNING] [--encrypt-dc-connections=ENCRYPT_DC_CONNECTIONS] @@ -28,9 +28,11 @@ EXAMPLES --location=us-central1 --domain=new-domain.com --dns=1.1.1.1 \ --site=new_site --net-bios-prefix=new_prefix \ --organizational-unit=ou2 --enable-aes=true --username=user2 \ - --password="secure2" --backup-operators=backup_op3 \ - --security-operators=secure_op3 --enable-ldap-signing=true \ - --encrypt-dc-connections=yes --kdc-hostname=kdc-host1 + --password="secure2" --backup-operators=backup_op1,backup_op2 \ + --security-operators=secure_op1,secure_op2 \ + --administrators=admin_op1,admin_op2 \ + --enable-ldap-signing=true --encrypt-dc-connections=yes \ + --kdc-hostname=kdc-host1 POSITIONAL ARGUMENTS Active directory resource - The Active Directory to update. The arguments @@ -83,6 +85,9 @@ REQUIRED FLAGS Username of the Active Directory domain administrator. OPTIONAL FLAGS + --administrators=[ADMINISTRATOR,...] + Members of the Active Directory built-in Administrators group. + --async Return immediately, without waiting for the operation in progress to complete. diff --git a/gcloud/beta/scc/notifications/create b/gcloud/beta/scc/notifications/create index 22aa67ea7..1ffb0e485 100644 --- a/gcloud/beta/scc/notifications/create +++ b/gcloud/beta/scc/notifications/create @@ -70,15 +70,14 @@ OPTIONAL FLAGS Filter to be used for notification config. --location=LOCATION; default="global" - When data residency controls are enabled, this attribute specifies the - location in which the resource is located and applicable. The location - attribute can be provided as part of the fully specified resource name - or with the --location argument on the command line. The default - location is global. + If data residency is enabled, specify the Security Command Center + location in which to create the notification. The resulting + notificationConfig resource is stored only in this location. Only + findings that are issued in this location are sent to Pub/Sub. - The default location on this command is unrelated to the default - location that is specified when data residency controls are enabled for - Security Command Center. + If data residency is not enabled, specifying the --location flag + creates the notification by using Security Command Center API v2, and + the only valid value for the flag is global. At most one of these can be specified: diff --git a/gcloud/beta/scc/notifications/delete b/gcloud/beta/scc/notifications/delete index ead691cb5..a42ede607 100644 --- a/gcloud/beta/scc/notifications/delete +++ b/gcloud/beta/scc/notifications/delete @@ -50,15 +50,16 @@ POSITIONAL ARGUMENTS FLAGS --location=LOCATION; default="global" - When data residency controls are enabled, this attribute specifies the - location in which the resource is located and applicable. The location - attribute can be provided as part of the fully specified resource name - or with the --location argument on the command line. The default - location is global. + Required if either data residency is enabled or the notificationConfig + was created by using the API v2. - The default location on this command is unrelated to the default - location that is specified when data residency controls are enabled for - Security Command Center. + If data residency is enabled, specify the Security Command Center + location in which the notification is stored. + + If data residency is not enabled, include /locations/``LOCATION'' in + the full name or specify the --location flag only if the + notificationConfig was created by using the Security Command Center API + v2, in which case, the only valid location is global. At most one of these can be specified: diff --git a/gcloud/beta/scc/notifications/describe b/gcloud/beta/scc/notifications/describe index 679fdbd3c..41799568f 100644 --- a/gcloud/beta/scc/notifications/describe +++ b/gcloud/beta/scc/notifications/describe @@ -45,15 +45,16 @@ POSITIONAL ARGUMENTS FLAGS --location=LOCATION; default="global" - When data residency controls are enabled, this attribute specifies the - location in which the resource is located and applicable. The location - attribute can be provided as part of the fully specified resource name - or with the --location argument on the command line. The default - location is global. + Required if either data residency is enabled or the notificationConfig + resources were created by using the API v2. - The default location on this command is unrelated to the default - location that is specified when data residency controls are enabled for - Security Command Center. + If data residency is enabled, specify the Security Command Center + location in which the notifications are stored. + + If data residency is not enabled, include /locations/``LOCATION'' only + if the notificationConfig resource was created by using the Security + Command Center API v2, in which case, the only valid location is + global. At most one of these can be specified: diff --git a/gcloud/beta/scc/notifications/list b/gcloud/beta/scc/notifications/list index d4473edc9..634f49673 100644 --- a/gcloud/beta/scc/notifications/list +++ b/gcloud/beta/scc/notifications/list @@ -51,15 +51,16 @@ POSITIONAL ARGUMENTS FLAGS --location=LOCATION; default="global" - When data residency controls are enabled, this attribute specifies the - location in which the resource is located and applicable. The location - attribute can be provided as part of the fully specified resource name - or with the --location argument on the command line. The default - location is global. + Required if either data residency is enabled or the notificationConfig + resources were created by using the API v2. - The default location on this command is unrelated to the default - location that is specified when data residency controls are enabled for - Security Command Center. + If data residency is enabled, specify the Security Command Center + location in which the notifications are stored. + + If data residency is not enabled, including /locations/``LOCATION'' in + the name or the --location flag in the command lists only the + notificationConfig resources that were created by using the Security + Command Center API v2 and the only valid location is global. LIST COMMAND FLAGS --filter=EXPRESSION diff --git a/gcloud/beta/scc/notifications/update b/gcloud/beta/scc/notifications/update index 9c0abd028..2a202deba 100644 --- a/gcloud/beta/scc/notifications/update +++ b/gcloud/beta/scc/notifications/update @@ -79,15 +79,16 @@ FLAGS notification configuration. --location=LOCATION; default="global" - When data residency controls are enabled, this attribute specifies the - location in which the resource is located and applicable. The location - attribute can be provided as part of the fully specified resource name - or with the --location argument on the command line. The default - location is global. + Required if either data residency is enabled or the notificationConfig + was created by using the API v2. - The default location on this command is unrelated to the default - location that is specified when data residency controls are enabled for - Security Command Center. + If data residency is enabled, specify the Security Command Center + location in which the notification is stored. + + If data residency is not enabled, include /locations/``LOCATION'' in + the full name or specify the --location flag only if the + notificationConfig resource was created by using the Security Command + Center API v2, in which case, the only valid location is global. --pubsub-topic=PUBSUB_TOPIC The Pub/Sub topic which will receive notifications. Its format is diff --git a/gcloud/beta/sql/instances/clone b/gcloud/beta/sql/instances/clone index aa6c516a2..e7996b99c 100644 --- a/gcloud/beta/sql/instances/clone +++ b/gcloud/beta/sql/instances/clone @@ -3,10 +3,11 @@ NAME SYNOPSIS gcloud beta sql instances clone SOURCE DESTINATION [--async] + [--preferred-secondary-zone=PREFERRED_SECONDARY_ZONE] + [--preferred-zone=PREFERRED_ZONE] [--bin-log-file-name=BIN_LOG_FILE_NAME --bin-log-position=BIN_LOG_POSITION | [--point-in-time=POINT_IN_TIME - : --preferred-zone=PREFERRED_ZONE - --restore-database-name=RESTORE_DATABASE_NAME]] + : --restore-database-name=RESTORE_DATABASE_NAME]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -67,6 +68,17 @@ FLAGS Return immediately, without waiting for the operation in progress to complete. + --preferred-secondary-zone=PREFERRED_SECONDARY_ZONE + The preferred secondary zone for the cloned regional instance. If you + specify a value for this flag, then the destination instance uses the + value as the secondary zone. The secondary zone can't be the same as + the primary zone. + + --preferred-zone=PREFERRED_ZONE + The preferred zone for the cloned instance. If you specify a value for + this flag, then the destination instance uses the value as the primary + zone. + At most one of these can be specified: Binary log coordinates for point-in-time recovery. @@ -106,10 +118,6 @@ FLAGS This flag argument must be specified if any of the other arguments in this group are specified. - --preferred-zone=PREFERRED_ZONE - The preferred zone for the cloned instance. If set, the destination - instance will be created in this zone. - --restore-database-name=RESTORE_DATABASE_NAME The name of the database to be restored for a point-in-time restore. If set, the destination instance will only restore the specified diff --git a/gcloud/builds/worker-pools/create b/gcloud/builds/worker-pools/create index 61344fe72..b573a2690 100644 --- a/gcloud/builds/worker-pools/create +++ b/gcloud/builds/worker-pools/create @@ -4,10 +4,12 @@ NAME SYNOPSIS gcloud builds worker-pools create WORKER_POOL --region=REGION - [--config-from-file=CONFIG_FROM_FILE | --peered-network=PEERED_NETWORK - --peered-network-ip-range=PEERED_NETWORK_IP_RANGE --no-public-egress - --worker-disk-size=WORKER_DISK_SIZE - --worker-machine-type=WORKER_MACHINE_TYPE] [GCLOUD_WIDE_FLAG ...] + [--config-from-file=CONFIG_FROM_FILE + | --worker-disk-size=WORKER_DISK_SIZE + --worker-machine-type=WORKER_MACHINE_TYPE + --peered-network=PEERED_NETWORK + --peered-network-ip-range=PEERED_NETWORK_IP_RANGE --no-public-egress] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION Create a worker pool for use by Google Cloud Build. @@ -49,33 +51,6 @@ OPTIONAL FLAGS Command-line flags to configure the private pool: - --peered-network=PEERED_NETWORK - Existing network to which workers are peered. The network is - specified in resource URL format - projects/{network_project}/global/networks/{network_name}. - - If not specified, the workers are not peered to any network. - - --peered-network-ip-range=PEERED_NETWORK_IP_RANGE - An IP range for your peered network. Specify the IP range using - Classless Inter-Domain Routing (CIDR) notation with a slash and the - subnet prefix size, such as /29. - - Your subnet prefix size must be between 1 and 29. Optional: you can - specify an IP address before the subnet prefix value - for example - 192.168.0.0/24. - - If no IP address is specified, your VPC automatically determines - the starting IP for the range. If no IP range is specified, Cloud - Build uses /24 as the default network IP range. - - --no-public-egress - If set, workers in the worker pool are created without an external - IP address. - - If the worker pool is within a VPC Service Control perimeter, use - this flag. - Configuration to be used for creating workers in the worker pool: --worker-disk-size=WORKER_DISK_SIZE @@ -88,6 +63,35 @@ OPTIONAL FLAGS If unspecified, Cloud Build uses a standard machine type. + Network configuration for Service Networking: + + --peered-network=PEERED_NETWORK + Existing network to which workers are peered. The network is + specified in resource URL format + projects/{network_project}/global/networks/{network_name}. + + If not specified, the workers are not peered to any network. + + --peered-network-ip-range=PEERED_NETWORK_IP_RANGE + An IP range for your peered network. Specify the IP range using + Classless Inter-Domain Routing (CIDR) notation with a slash and + the subnet prefix size, such as /29. + + Your subnet prefix size must be between 1 and 29. Optional: you + can specify an IP address before the subnet prefix value - for + example 192.168.0.0/24. + + If no IP address is specified, your VPC automatically determines + the starting IP for the range. If no IP range is specified, Cloud + Build uses /24 as the default network IP range. + + --no-public-egress + If set, workers in the worker pool are created without an + external IP address. + + If the worker pool is within a VPC Service Control perimeter, use + this flag. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/builds/worker-pools/update b/gcloud/builds/worker-pools/update index 375782fbb..2554de942 100644 --- a/gcloud/builds/worker-pools/update +++ b/gcloud/builds/worker-pools/update @@ -51,18 +51,20 @@ REQUIRED FLAGS If unspecified, Cloud Build uses a standard machine type. - At most one of these can be specified: + Network configuration for Service Networking: - --public-egress - If set, workers in the worker pool are created with an external - IP address. + At most one of these can be specified: - --no-public-egress - If set, workers in the worker pool are created without an - external IP address. + --public-egress + If set, workers in the worker pool are created with an external + IP address. - If the worker pool is within a VPC Service Control perimeter, use - this flag. + --no-public-egress + If set, workers in the worker pool are created without an + external IP address. + + If the worker pool is within a VPC Service Control perimeter, + use this flag. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/composer/environments/check-upgrade b/gcloud/composer/environments/check-upgrade new file mode 100644 index 000000000..c37d37941 --- /dev/null +++ b/gcloud/composer/environments/check-upgrade @@ -0,0 +1,111 @@ +NAME + gcloud composer environments check-upgrade - check that upgrading a Cloud + Composer environment does not result in PyPI module conflicts + +SYNOPSIS + gcloud composer environments check-upgrade + (ENVIRONMENT : --location=LOCATION) [--async] + [--airflow-version=AIRFLOW_VERSION | --image-version=IMAGE_VERSION] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Check that upgrading a Cloud Composer environment does not result in PyPI + module conflicts. + +EXAMPLES + To check that upgrading to the 'composer-1.16.5-airflow-1.10.15' image in a Cloud Composer environment named 'env-1' does not cause + PyPI package conflicts, + run: + + $ gcloud composer environments check-upgrade env-1 \ + --image-version=composer-1.16.5-airflow-1.10.15 + +POSITIONAL ARGUMENTS + Environment resource - The environment to check upgrade for. The arguments + in this group can be used to specify the attributes of this resource. + (NOTE) Some attributes are not given arguments in this group but can be + set in other ways. + + To set the project attribute: + ◆ provide the argument environment on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + ENVIRONMENT + ID of the environment or fully qualified identifier for the + environment. + + To set the environment attribute: + ▸ provide the argument environment on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Region where Composer environment runs or in which to create the + environment. + + To set the location attribute: + ▸ provide the argument environment on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property composer/location. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + Group of arguments for performing in-place environment upgrades. + + At most one of these can be specified: + + --airflow-version=AIRFLOW_VERSION + Upgrade the environment to a later Apache Airflow version in-place. + + Must be of the form X[.Y[.Z]], where [] denotes optional fragments. + Examples: 2, 2.3, 2.3.4. + + The Apache Airflow version is a semantic version or an alias in the + form of major or major.minor version numbers, resolved to the latest + matching Apache Airflow version supported in the current Cloud + Composer version. The resolved version is stored in the upgraded + environment. + + --image-version=IMAGE_VERSION + Upgrade the environment to a later version in-place. + + The image version encapsulates the versions of both Cloud Composer + and Apache Airflow. Must be of the form + composer-A[.B.C[-D.E]]-airflow-X[.Y[.Z]], where [] denotes optional + fragments. + + Examples: composer-2-airflow-2, composer-2-airflow-2.2, + composer-2.1.2-airflow-2.3.4. + + The Cloud Composer portion of the image version is a semantic version + or an alias in the form of major version number or latest, resolved + to the current Cloud Composer version. The Apache Airflow portion of + the image version is a semantic version or an alias in the form of + major or major.minor version numbers, resolved to the latest matching + Apache Airflow version supported in the given Cloud Composer version. + The resolved versions are stored in the upgraded environment. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha composer environments check-upgrade + + $ gcloud beta composer environments check-upgrade + diff --git a/gcloud/composer/environments/help b/gcloud/composer/environments/help index 2ecdd48f9..63fe686c1 100644 --- a/gcloud/composer/environments/help +++ b/gcloud/composer/environments/help @@ -31,6 +31,10 @@ GROUPS COMMANDS COMMAND is one of the following: + check-upgrade + Check that upgrading a Cloud Composer environment does not result in + PyPI module conflicts. + create Create and initialize a Cloud Composer environment. @@ -52,6 +56,10 @@ COMMANDS list-packages List all PyPI modules installed in an Airflow worker. + list-upgrades + List the Cloud Composer image version upgrades for a specific + environment. + run Run an Airflow sub-command remotely in a Cloud Composer environment. diff --git a/gcloud/composer/environments/list-upgrades b/gcloud/composer/environments/list-upgrades new file mode 100644 index 000000000..57d40dde5 --- /dev/null +++ b/gcloud/composer/environments/list-upgrades @@ -0,0 +1,92 @@ +NAME + gcloud composer environments list-upgrades - list the Cloud Composer image + version upgrades for a specific environment + +SYNOPSIS + gcloud composer environments list-upgrades + (ENVIRONMENT : --location=LOCATION) [--filter=EXPRESSION] + [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + gcloud composer environments list-upgrades prints a table listing the + suggested image-version upgrades with the following columns: + ▪ Image Version ID + ▪ Composer 'default' flag + ▪ List of supported python versions + +POSITIONAL ARGUMENTS + Environment resource - The environment to list upgrades. The arguments in + this group can be used to specify the attributes of this resource. (NOTE) + Some attributes are not given arguments in this group but can be set in + other ways. + + To set the project attribute: + ◆ provide the argument environment on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + ENVIRONMENT + ID of the environment or fully qualified identifier for the + environment. + + To set the environment attribute: + ▸ provide the argument environment on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Region where Composer environment runs or in which to create the + environment. + + To set the location attribute: + ▸ provide the argument environment on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property composer/location. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha composer environments list-upgrades + + $ gcloud beta composer environments list-upgrades + diff --git a/gcloud/compute/forwarding-rules/create b/gcloud/compute/forwarding-rules/create index 00d55b675..460da3fad 100644 --- a/gcloud/compute/forwarding-rules/create +++ b/gcloud/compute/forwarding-rules/create @@ -16,6 +16,8 @@ SYNOPSIS | --target-vpn-gateway=TARGET_VPN_GATEWAY) [--address=ADDRESS] [--allow-global-access] [--allow-psc-global-access] [--description=DESCRIPTION] [--disable-automate-dns-zone] + [--ip-collection=IP_COLLECTION] + [--ip-collection-region=IP_COLLECTION_REGION] [--ip-protocol=IP_PROTOCOL] [--ip-version=IP_VERSION] [--is-mirroring-collector] [--load-balancing-scheme=LOAD_BALANCING_SCHEME] [--network=NETWORK] @@ -217,6 +219,16 @@ OPTIONAL FLAGS (--target-service-attachment=SERVICE_ATTACHMENT) or Google APIs bundle (--target-google-apis-bundle=API_BUNDLE) + --ip-collection=IP_COLLECTION + Resource reference to a public delegated prefix. The + PublicDelegatedPrefix (PDP) must be a sub-prefix in + EXTERNAL_IPV6_FORWARDING_RULE_CREATION mode. + + --ip-collection-region=IP_COLLECTION_REGION + Region of the public delegated prefix to operate on. If not specified, + the region is set to the region of the forwarding rule. Overrides the + default compute/region property value for this command invocation. + --ip-protocol=IP_PROTOCOL IP protocol that the rule will serve. The default is TCP. diff --git a/gcloud/compute/os-config/os-policy-assignments/update b/gcloud/compute/os-config/os-policy-assignments/update index 64cdcd420..f39c32372 100644 --- a/gcloud/compute/os-config/os-policy-assignments/update +++ b/gcloud/compute/os-config/os-policy-assignments/update @@ -4,8 +4,8 @@ NAME SYNOPSIS gcloud compute os-config os-policy-assignments update - (OS_POLICY_ASSIGNMENT : --location=LOCATION) --file=FILE [--async] - [GCLOUD_WIDE_FLAG ...] + (OS_POLICY_ASSIGNMENT : --location=LOCATION) --file=FILE + [--allow-missing] [--async] [GCLOUD_WIDE_FLAG ...] DESCRIPTION Update an OS policy assignment @@ -62,6 +62,10 @@ REQUIRED FLAGS https://cloud.google.com/compute/docs/os-configuration-management/working-with-os-policies#os-policy-assignment. OPTIONAL FLAGS + --allow-missing + If set to true, and the OS policy assignment is not found, the new + policy assignment resource will be created. + --async Return immediately, without waiting for the operation in progress to complete. diff --git a/gcloud/database-migration/connection-profiles/create/cloudsql b/gcloud/database-migration/connection-profiles/create/cloudsql index f3eb2fe9b..11945399f 100644 --- a/gcloud/database-migration/connection-profiles/create/cloudsql +++ b/gcloud/database-migration/connection-profiles/create/cloudsql @@ -81,7 +81,7 @@ REQUIRED FLAGS MYSQL_8_0_27, MYSQL_8_0_28, MYSQL_8_0_30, MYSQL_8_0_31, MYSQL_8_0_32, MYSQL_8_0_33, MYSQL_8_0_34, MYSQL_8_0_35, MYSQL_8_0_36, POSTGRES_9_6, POSTGRES_10, POSTGRES_11, POSTGRES_12, POSTGRES_13, POSTGRES_14, - POSTGRES_15. + POSTGRES_15, POSTGRES_16. Connection profile resource - Database Migration Service source connection profile ID. This represents a Cloud resource. (NOTE) Some attributes are diff --git a/gcloud/edge-cloud/container/clusters/update b/gcloud/edge-cloud/container/clusters/update index dca47143a..fb5f88fd6 100644 --- a/gcloud/edge-cloud/container/clusters/update +++ b/gcloud/edge-cloud/container/clusters/update @@ -6,9 +6,7 @@ SYNOPSIS gcloud edge-cloud container clusters update (CLUSTER : --location=LOCATION) [--async] [--release-channel=RELEASE_CHANNEL] [--clear-maintenance-window - | --maintenance-window-end=MAINTENANCE_WINDOW_END - --maintenance-window-recurrence=MAINTENANCE_WINDOW_RECURRENCE - --maintenance-window-start=MAINTENANCE_WINDOW_START] + | --remove-maintenance-exclusion-window=REMOVE_MAINTENANCE_EXCLUSION_WINDOW | --add-maintenance-exclusion-end=ADD_MAINTENANCE_EXCLUSION_END --add-maintenance-exclusion-name=ADD_MAINTENANCE_EXCLUSION_NAME --add-maintenance-exclusion-start=ADD_MAINTENANCE_EXCLUSION_START | --maintenance-window-end=MAINTENANCE_WINDOW_END --maintenance-window-recurrence=MAINTENANCE_WINDOW_RECURRENCE --maintenance-window-start=MAINTENANCE_WINDOW_START] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -74,6 +72,28 @@ FLAGS any exclusion windows exist, they must be removed beforehand as a maintenance policy cannot exist without a maintenance window. + --remove-maintenance-exclusion-window=REMOVE_MAINTENANCE_EXCLUSION_WINDOW + Name of the maintenance exclusion to remove. + + Add a maintenance exclusion window (all flags must be specified to add a + valid maintenance exclusion window). There can be a maximum of 3 + exclusion windows set at a given time. A maintenance exclusion window + cannot be added in the absence of a maintenance window. + + --add-maintenance-exclusion-end=ADD_MAINTENANCE_EXCLUSION_END + End time of the maintenance exclusion window in the RFC 3339 + (https://www.ietf.org/rfc/rfc3339.txt) format. E.g. + "2021-01-01T00:00:00Z" or "2021-01-01T00:00:00-05:00". + + --add-maintenance-exclusion-name=ADD_MAINTENANCE_EXCLUSION_NAME + Unique name (per cluster) of the maintenance exclusion window that + can be used to remove it. + + --add-maintenance-exclusion-start=ADD_MAINTENANCE_EXCLUSION_START + Start time of the maintenance exclusion window (can occur in the + past) in the RFC 3339 (https://www.ietf.org/rfc/rfc3339.txt) + format. E.g. "2021-01-01T00:00:00Z" or "2021-01-01T00:00:00-05:00". + Updates cluster maintenance window setting (more than one flags can be specified from this group) diff --git a/gcloud/iam/workforce-pools/providers/create-oidc b/gcloud/iam/workforce-pools/providers/create-oidc index 5c7ffc580..90a28e1d5 100644 --- a/gcloud/iam/workforce-pools/providers/create-oidc +++ b/gcloud/iam/workforce-pools/providers/create-oidc @@ -285,8 +285,8 @@ OPTIONAL FLAGS --extra-attributes-type=EXTRA_ATTRIBUTES_TYPE Represents the identity provider and type of claims that should be - fetched. EXTRA_ATTRIBUTES_TYPE must be one of: - attributes-type-unspecified, azure-ad-groups-id, azure-ad-groups-mail. + fetched. EXTRA_ATTRIBUTES_TYPE must be (only one value is supported): + azure-ad-groups-mail. --extra-attributes-filter=EXTRA_ATTRIBUTES_FILTER The filter used to request specific records from IdP. In case of diff --git a/gcloud/iam/workforce-pools/providers/update-oidc b/gcloud/iam/workforce-pools/providers/update-oidc index b5578b893..3dbc060d3 100644 --- a/gcloud/iam/workforce-pools/providers/update-oidc +++ b/gcloud/iam/workforce-pools/providers/update-oidc @@ -259,7 +259,7 @@ FLAGS At most one of these can be specified: --clear-extra-attributes-config - Clear the extra attributes configuration + Clear the extra attributes configuration. --extra-attributes-client-id=EXTRA_ATTRIBUTES_CLIENT_ID The OAuth 2.0 client ID for retrieving extra attributes from the @@ -286,8 +286,7 @@ FLAGS --extra-attributes-type=EXTRA_ATTRIBUTES_TYPE Represents the identity provider and type of claims that should be - fetched. EXTRA_ATTRIBUTES_TYPE must be one of: - attributes-type-unspecified, azure-ad-groups-id, + fetched. EXTRA_ATTRIBUTES_TYPE must be (only one value is supported): azure-ad-groups-mail. GCLOUD WIDE FLAGS diff --git a/gcloud/infra-manager/deployments/apply b/gcloud/infra-manager/deployments/apply index c8d5acb2a..ef81d02bd 100644 --- a/gcloud/infra-manager/deployments/apply +++ b/gcloud/infra-manager/deployments/apply @@ -229,7 +229,7 @@ FLAGS --local-source=LOCAL_SOURCE Local storage path where config files are stored. When using this - option, terraform config file referecnes outside this storage path is + option, Terraform config file references outside this storage path is not supported. e.g. ./path/to/blueprint Examples: diff --git a/gcloud/infra-manager/previews/create b/gcloud/infra-manager/previews/create index 41fd95546..e929d19ac 100644 --- a/gcloud/infra-manager/previews/create +++ b/gcloud/infra-manager/previews/create @@ -176,7 +176,7 @@ FLAGS --local-source=LOCAL_SOURCE Local storage path where config files are stored. When using this - option, terraform config file referecnes outside this storage path is + option, Terraform config file references outside this storage path is not supported. e.g. ./path/to/blueprint Examples: diff --git a/gcloud/netapp/active-directories/create b/gcloud/netapp/active-directories/create index 40b6d782b..553f73eab 100644 --- a/gcloud/netapp/active-directories/create +++ b/gcloud/netapp/active-directories/create @@ -6,7 +6,7 @@ SYNOPSIS gcloud netapp active-directories create (ACTIVE_DIRECTORY : --location=LOCATION) --dns=DNS --domain=DOMAIN --net-bios-prefix=NET_BIOS_PREFIX --password=PASSWORD - --username=USERNAME [--async] + --username=USERNAME [--administrators=[ADMINISTRATOR,...]] [--async] [--backup-operators=[BACKUP_OPERATOR,...]] [--description=DESCRIPTION] [--enable-aes=ENABLE_AES] [--enable-ldap-signing=ENABLE_LDAP_SIGNING] [--encrypt-dc-connections=ENCRYPT_DC_CONNECTIONS] @@ -81,6 +81,9 @@ REQUIRED FLAGS Username of the Active Directory domain administrator. OPTIONAL FLAGS + --administrators=[ADMINISTRATOR,...] + Members of the Active Directory built-in Administrators group. + --async Return immediately, without waiting for the operation in progress to complete. diff --git a/gcloud/netapp/active-directories/update b/gcloud/netapp/active-directories/update index 13fa48b87..2b22c330b 100644 --- a/gcloud/netapp/active-directories/update +++ b/gcloud/netapp/active-directories/update @@ -6,7 +6,7 @@ SYNOPSIS gcloud netapp active-directories update (ACTIVE_DIRECTORY : --location=LOCATION) --dns=DNS --domain=DOMAIN --net-bios-prefix=NET_BIOS_PREFIX --password=PASSWORD - --username=USERNAME [--async] + --username=USERNAME [--administrators=[ADMINISTRATOR,...]] [--async] [--backup-operators=[BACKUP_OPERATOR,...]] [--description=DESCRIPTION] [--enable-aes=ENABLE_AES] [--enable-ldap-signing=ENABLE_LDAP_SIGNING] [--encrypt-dc-connections=ENCRYPT_DC_CONNECTIONS] @@ -28,9 +28,11 @@ EXAMPLES --location=us-central1 --domain=new-domain.com --dns=1.1.1.1 \ --site=new_site --net-bios-prefix=new_prefix \ --organizational-unit=ou2 --enable-aes=true --username=user2 \ - --password="secure2" --backup-operators=backup_op3 \ - --security-operators=secure_op3 --enable-ldap-signing=true \ - --encrypt-dc-connections=yes --kdc-hostname=kdc-host1 + --password="secure2" --backup-operators=backup_op1,backup_op2 \ + --security-operators=secure_op1,secure_op2 \ + --administrators=admin_op1,admin_op2 \ + --enable-ldap-signing=true --encrypt-dc-connections=yes \ + --kdc-hostname=kdc-host1 POSITIONAL ARGUMENTS Active directory resource - The Active Directory to update. The arguments @@ -83,6 +85,9 @@ REQUIRED FLAGS Username of the Active Directory domain administrator. OPTIONAL FLAGS + --administrators=[ADMINISTRATOR,...] + Members of the Active Directory built-in Administrators group. + --async Return immediately, without waiting for the operation in progress to complete. diff --git a/gcloud/scc/notifications/create b/gcloud/scc/notifications/create index 3e009edc0..e42bcaa18 100644 --- a/gcloud/scc/notifications/create +++ b/gcloud/scc/notifications/create @@ -69,15 +69,14 @@ OPTIONAL FLAGS Filter to be used for notification config. --location=LOCATION; default="global" - When data residency controls are enabled, this attribute specifies the - location in which the resource is located and applicable. The location - attribute can be provided as part of the fully specified resource name - or with the --location argument on the command line. The default - location is global. + If data residency is enabled, specify the Security Command Center + location in which to create the notification. The resulting + notificationConfig resource is stored only in this location. Only + findings that are issued in this location are sent to Pub/Sub. - The default location on this command is unrelated to the default - location that is specified when data residency controls are enabled for - Security Command Center. + If data residency is not enabled, specifying the --location flag + creates the notification by using Security Command Center API v2, and + the only valid value for the flag is global. At most one of these can be specified: diff --git a/gcloud/scc/notifications/delete b/gcloud/scc/notifications/delete index 4fa7bfcd8..a64c23630 100644 --- a/gcloud/scc/notifications/delete +++ b/gcloud/scc/notifications/delete @@ -50,15 +50,16 @@ POSITIONAL ARGUMENTS FLAGS --location=LOCATION; default="global" - When data residency controls are enabled, this attribute specifies the - location in which the resource is located and applicable. The location - attribute can be provided as part of the fully specified resource name - or with the --location argument on the command line. The default - location is global. + Required if either data residency is enabled or the notificationConfig + was created by using the API v2. - The default location on this command is unrelated to the default - location that is specified when data residency controls are enabled for - Security Command Center. + If data residency is enabled, specify the Security Command Center + location in which the notification is stored. + + If data residency is not enabled, include /locations/``LOCATION'' in + the full name or specify the --location flag only if the + notificationConfig was created by using the Security Command Center API + v2, in which case, the only valid location is global. At most one of these can be specified: diff --git a/gcloud/scc/notifications/describe b/gcloud/scc/notifications/describe index 10c6d203b..59d111173 100644 --- a/gcloud/scc/notifications/describe +++ b/gcloud/scc/notifications/describe @@ -44,15 +44,16 @@ POSITIONAL ARGUMENTS FLAGS --location=LOCATION; default="global" - When data residency controls are enabled, this attribute specifies the - location in which the resource is located and applicable. The location - attribute can be provided as part of the fully specified resource name - or with the --location argument on the command line. The default - location is global. + Required if either data residency is enabled or the notificationConfig + resources were created by using the API v2. - The default location on this command is unrelated to the default - location that is specified when data residency controls are enabled for - Security Command Center. + If data residency is enabled, specify the Security Command Center + location in which the notifications are stored. + + If data residency is not enabled, include /locations/``LOCATION'' only + if the notificationConfig resource was created by using the Security + Command Center API v2, in which case, the only valid location is + global. At most one of these can be specified: diff --git a/gcloud/scc/notifications/list b/gcloud/scc/notifications/list index 271054ff2..d4eca0d74 100644 --- a/gcloud/scc/notifications/list +++ b/gcloud/scc/notifications/list @@ -51,15 +51,16 @@ POSITIONAL ARGUMENTS FLAGS --location=LOCATION; default="global" - When data residency controls are enabled, this attribute specifies the - location in which the resource is located and applicable. The location - attribute can be provided as part of the fully specified resource name - or with the --location argument on the command line. The default - location is global. + Required if either data residency is enabled or the notificationConfig + resources were created by using the API v2. - The default location on this command is unrelated to the default - location that is specified when data residency controls are enabled for - Security Command Center. + If data residency is enabled, specify the Security Command Center + location in which the notifications are stored. + + If data residency is not enabled, including /locations/``LOCATION'' in + the name or the --location flag in the command lists only the + notificationConfig resources that were created by using the Security + Command Center API v2 and the only valid location is global. LIST COMMAND FLAGS --filter=EXPRESSION diff --git a/gcloud/scc/notifications/update b/gcloud/scc/notifications/update index 77fbb50eb..4e6857b62 100644 --- a/gcloud/scc/notifications/update +++ b/gcloud/scc/notifications/update @@ -78,15 +78,16 @@ FLAGS notification configuration. --location=LOCATION; default="global" - When data residency controls are enabled, this attribute specifies the - location in which the resource is located and applicable. The location - attribute can be provided as part of the fully specified resource name - or with the --location argument on the command line. The default - location is global. + Required if either data residency is enabled or the notificationConfig + was created by using the API v2. - The default location on this command is unrelated to the default - location that is specified when data residency controls are enabled for - Security Command Center. + If data residency is enabled, specify the Security Command Center + location in which the notification is stored. + + If data residency is not enabled, include /locations/``LOCATION'' in + the full name or specify the --location flag only if the + notificationConfig resource was created by using the Security Command + Center API v2, in which case, the only valid location is global. --pubsub-topic=PUBSUB_TOPIC The Pub/Sub topic which will receive notifications. Its format is diff --git a/gcloud/sql/instances/clone b/gcloud/sql/instances/clone index 74891fe8a..8211b1293 100644 --- a/gcloud/sql/instances/clone +++ b/gcloud/sql/instances/clone @@ -3,10 +3,11 @@ NAME SYNOPSIS gcloud sql instances clone SOURCE DESTINATION [--async] + [--preferred-secondary-zone=PREFERRED_SECONDARY_ZONE] + [--preferred-zone=PREFERRED_ZONE] [--bin-log-file-name=BIN_LOG_FILE_NAME --bin-log-position=BIN_LOG_POSITION | [--point-in-time=POINT_IN_TIME - : --preferred-zone=PREFERRED_ZONE - --restore-database-name=RESTORE_DATABASE_NAME]] + : --restore-database-name=RESTORE_DATABASE_NAME]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -67,6 +68,17 @@ FLAGS Return immediately, without waiting for the operation in progress to complete. + --preferred-secondary-zone=PREFERRED_SECONDARY_ZONE + The preferred secondary zone for the cloned regional instance. If you + specify a value for this flag, then the destination instance uses the + value as the secondary zone. The secondary zone can't be the same as + the primary zone. + + --preferred-zone=PREFERRED_ZONE + The preferred zone for the cloned instance. If you specify a value for + this flag, then the destination instance uses the value as the primary + zone. + At most one of these can be specified: Binary log coordinates for point-in-time recovery. @@ -106,10 +118,6 @@ FLAGS This flag argument must be specified if any of the other arguments in this group are specified. - --preferred-zone=PREFERRED_ZONE - The preferred zone for the cloned instance. If set, the destination - instance will be created in this zone. - --restore-database-name=RESTORE_DATABASE_NAME The name of the database to be restored for a point-in-time restore. If set, the destination instance will only restore the specified