diff --git a/gcloud/_version b/gcloud/_version index a40c9dd98..e24040d51 100644 --- a/gcloud/_version +++ b/gcloud/_version @@ -1,8 +1,8 @@ -Google Cloud SDK 422.0.0 -alpha 2023.03.10 -beta 2023.03.10 +Google Cloud SDK 423.0.0 +alpha 2023.03.17 +beta 2023.03.17 bq 2.0.88 bundled-python3-unix 3.9.16 -core 2023.03.10 +core 2023.03.17 gcloud-crc32c 1.0.0 gsutil 5.21 diff --git a/gcloud/ai-platform/jobs/submit/training b/gcloud/ai-platform/jobs/submit/training index 95e449d5b..59677f8d0 100644 --- a/gcloud/ai-platform/jobs/submit/training +++ b/gcloud/ai-platform/jobs/submit/training @@ -147,7 +147,7 @@ FLAGS type Type of the accelerator. Choices are - nvidia-tesla-a100,nvidia-tesla-k80,nvidia-tesla-p100,nvidia-tesla-p4,nvidia-tesla-t4,nvidia-tesla-v100,tpu-v2,tpu-v2-pod,tpu-v3,tpu-v3-pod,tpu-v4-pod + nvidia-tesla-a100,nvidia-tesla-k80,nvidia-tesla-p100,nvidia-tesla-p4,nvidia-tesla-t4,nvidia-tesla-v100,tpu-v2,tpu-v2-pod,tpu-v3,tpu-v3-pod,tpu-v4 count Number of accelerators to attach to each machine running the job. @@ -187,7 +187,7 @@ FLAGS type Type of the accelerator. Choices are - nvidia-tesla-a100,nvidia-tesla-k80,nvidia-tesla-p100,nvidia-tesla-p4,nvidia-tesla-t4,nvidia-tesla-v100,tpu-v2,tpu-v2-pod,tpu-v3,tpu-v3-pod,tpu-v4-pod + nvidia-tesla-a100,nvidia-tesla-k80,nvidia-tesla-p100,nvidia-tesla-p4,nvidia-tesla-t4,nvidia-tesla-v100,tpu-v2,tpu-v2-pod,tpu-v3,tpu-v3-pod,tpu-v4 count Number of accelerators to attach to each machine running the job. @@ -305,7 +305,7 @@ FLAGS type Type of the accelerator. Choices are - nvidia-tesla-a100,nvidia-tesla-k80,nvidia-tesla-p100,nvidia-tesla-p4,nvidia-tesla-t4,nvidia-tesla-v100,tpu-v2,tpu-v2-pod,tpu-v3,tpu-v3-pod,tpu-v4-pod + nvidia-tesla-a100,nvidia-tesla-k80,nvidia-tesla-p100,nvidia-tesla-p4,nvidia-tesla-t4,nvidia-tesla-v100,tpu-v2,tpu-v2-pod,tpu-v3,tpu-v3-pod,tpu-v4 count Number of accelerators to attach to each machine running the job. diff --git a/gcloud/alpha/ai-platform/jobs/submit/training b/gcloud/alpha/ai-platform/jobs/submit/training index 27a1284f9..037f81578 100644 --- a/gcloud/alpha/ai-platform/jobs/submit/training +++ b/gcloud/alpha/ai-platform/jobs/submit/training @@ -149,7 +149,7 @@ FLAGS type Type of the accelerator. Choices are - nvidia-tesla-a100,nvidia-tesla-k80,nvidia-tesla-p100,nvidia-tesla-p4,nvidia-tesla-t4,nvidia-tesla-v100,tpu-v2,tpu-v2-pod,tpu-v3,tpu-v3-pod,tpu-v4-pod + nvidia-tesla-a100,nvidia-tesla-k80,nvidia-tesla-p100,nvidia-tesla-p4,nvidia-tesla-t4,nvidia-tesla-v100,tpu-v2,tpu-v2-pod,tpu-v3,tpu-v3-pod,tpu-v4 count Number of accelerators to attach to each machine running the job. @@ -200,7 +200,7 @@ FLAGS type Type of the accelerator. Choices are - nvidia-tesla-a100,nvidia-tesla-k80,nvidia-tesla-p100,nvidia-tesla-p4,nvidia-tesla-t4,nvidia-tesla-v100,tpu-v2,tpu-v2-pod,tpu-v3,tpu-v3-pod,tpu-v4-pod + nvidia-tesla-a100,nvidia-tesla-k80,nvidia-tesla-p100,nvidia-tesla-p4,nvidia-tesla-t4,nvidia-tesla-v100,tpu-v2,tpu-v2-pod,tpu-v3,tpu-v3-pod,tpu-v4 count Number of accelerators to attach to each machine running the job. @@ -322,7 +322,7 @@ FLAGS type Type of the accelerator. Choices are - nvidia-tesla-a100,nvidia-tesla-k80,nvidia-tesla-p100,nvidia-tesla-p4,nvidia-tesla-t4,nvidia-tesla-v100,tpu-v2,tpu-v2-pod,tpu-v3,tpu-v3-pod,tpu-v4-pod + nvidia-tesla-a100,nvidia-tesla-k80,nvidia-tesla-p100,nvidia-tesla-p4,nvidia-tesla-t4,nvidia-tesla-v100,tpu-v2,tpu-v2-pod,tpu-v3,tpu-v3-pod,tpu-v4 count Number of accelerators to attach to each machine running the job. diff --git a/gcloud/alpha/batch/jobs/submit b/gcloud/alpha/batch/jobs/submit index afcac72be..d380652da 100644 --- a/gcloud/alpha/batch/jobs/submit +++ b/gcloud/alpha/batch/jobs/submit @@ -9,7 +9,8 @@ SYNOPSIS | --script-file-path=SCRIPT_FILE_PATH | --script-text=SCRIPT_TEXT) [--machine-type=MACHINE_TYPE] [--priority=PRIORITY] [--provisioning-model=PROVISIONING_MODEL] - [--network=NETWORK --subnetwork=SUBNETWORK] [GCLOUD_WIDE_FLAG ...] + [--network=NETWORK --subnetwork=SUBNETWORK : --no-external-ip-address] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) This command can fail for the following reasons: @@ -139,6 +140,11 @@ OPTIONAL FLAGS The URL for the subnetwork resource. Must specify network as well if subnetwork is specified + --no-external-ip-address + Required if no external public IP address is attached to the VM. If no + external public IP address, additional configuration is required to + allow the VM to access Google Services. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/blockchain-node-engine/nodes/delete b/gcloud/alpha/blockchain-node-engine/nodes/delete new file mode 100644 index 000000000..4e4958d0a --- /dev/null +++ b/gcloud/alpha/blockchain-node-engine/nodes/delete @@ -0,0 +1,74 @@ +NAME + gcloud alpha blockchain-node-engine nodes delete - delete a Blockchain Node + Engine node + +SYNOPSIS + gcloud alpha blockchain-node-engine nodes delete + (NODE_NAME : --location=LOCATION) [--async] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Delete a Blockchain Node Engine node. + + This command can fail for the following reasons: + ▪ The blockchain node specified does not exist. + ▪ The active account does not have permission to delete the given + blockchain node. + +EXAMPLES + To delete a blockchain node with the name my-node in your default region, + run: + + $ gcloud alpha blockchain-node-engine nodes delete my-node + +POSITIONAL ARGUMENTS + Node resource - Name of the blockchain node you want to delete. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument node_name on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + NODE_NAME + ID of the node or fully qualified identifier for the node. To set the + node_name attribute: + ▸ provide the argument node_name on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Location of the blockchain node resource. + + To set the location attribute: + ▸ provide the argument node_name on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property web3/location. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the blockchainnodeengine/v1alpha1 API. The full + documentation for this API can be found at: https://cloud.google.com/web3 + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/blockchain-node-engine/nodes/help b/gcloud/alpha/blockchain-node-engine/nodes/help index 5a97177a0..d707cbc95 100644 --- a/gcloud/alpha/blockchain-node-engine/nodes/help +++ b/gcloud/alpha/blockchain-node-engine/nodes/help @@ -16,6 +16,9 @@ GCLOUD WIDE FLAGS COMMANDS COMMAND is one of the following: + delete + (ALPHA) Delete a Blockchain Node Engine node. + describe (ALPHA) Describe a Blockchain Node Engine node. diff --git a/gcloud/alpha/bms/ssh-keys/add b/gcloud/alpha/bms/ssh-keys/add index 4c86f632a..278d3a01f 100644 --- a/gcloud/alpha/bms/ssh-keys/add +++ b/gcloud/alpha/bms/ssh-keys/add @@ -63,5 +63,7 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. + access allowlist. This variant is also available: + + $ gcloud bms ssh-keys add diff --git a/gcloud/alpha/bms/ssh-keys/help b/gcloud/alpha/bms/ssh-keys/help index ba79096f3..350916b83 100644 --- a/gcloud/alpha/bms/ssh-keys/help +++ b/gcloud/alpha/bms/ssh-keys/help @@ -28,5 +28,7 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. + access allowlist. This variant is also available: + + $ gcloud bms ssh-keys diff --git a/gcloud/alpha/bms/ssh-keys/list b/gcloud/alpha/bms/ssh-keys/list index 0aa11e70e..5065fae2b 100644 --- a/gcloud/alpha/bms/ssh-keys/list +++ b/gcloud/alpha/bms/ssh-keys/list @@ -39,5 +39,7 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. + access allowlist. This variant is also available: + + $ gcloud bms ssh-keys list diff --git a/gcloud/alpha/bms/ssh-keys/remove b/gcloud/alpha/bms/ssh-keys/remove index 5025a2264..cc3292d7c 100644 --- a/gcloud/alpha/bms/ssh-keys/remove +++ b/gcloud/alpha/bms/ssh-keys/remove @@ -45,5 +45,7 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. + access allowlist. This variant is also available: + + $ gcloud bms ssh-keys remove diff --git a/gcloud/alpha/builds/triggers/create/manual b/gcloud/alpha/builds/triggers/create/manual index d09d9c842..51fb63e2e 100644 --- a/gcloud/alpha/builds/triggers/create/manual +++ b/gcloud/alpha/builds/triggers/create/manual @@ -7,11 +7,12 @@ SYNOPSIS (--trigger-config=PATH | [(--build-config=PATH | --inline-config=PATH | [--dockerfile=DOCKERFILE : --dockerfile-dir=DOCKERFILE_DIR; default="/" --dockerfile-image=DOCKERFILE_IMAGE]) - : --description=DESCRIPTION - --github-enterprise-config=GITHUB_ENTERPRISE_CONFIG --name=NAME - --region=REGION --require-approval --service-account=SERVICE_ACCOUNT - --substitutions=[KEY=VALUE,...] - --repo=REPO --repo-type=REPO_TYPE (--branch=BRANCH | --tag=TAG)]) + : --description=DESCRIPTION --name=NAME --region=REGION + --require-approval --service-account=SERVICE_ACCOUNT + --substitutions=[KEY=VALUE,...] (--branch=BRANCH + | --tag=TAG) (--repository=REPOSITORY + | [--repo=REPO --repo-type=REPO_TYPE + : --github-enterprise-config=GITHUB_ENTERPRISE_CONFIG])]) [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -26,6 +27,14 @@ EXAMPLES --repo=https://www.github.com/owner/repo --repo-type=GITHUB \ --branch=my-branch + To create a manual trigger that builds off branch my-branch in a 2nd-gen + GitHub repository resource: + + $ gcloud alpha builds triggers create manual \ + --name=my-manual-trigger --build-config=cloudbuild.yaml \ + --repository=projects/my-proj/locations/us-west1/connections/\ + my-conn/repositories/my-repo --branch=my-branch + REQUIRED FLAGS Exactly one of these must be specified: @@ -39,12 +48,6 @@ REQUIRED FLAGS --description=DESCRIPTION Build trigger description. - --github-enterprise-config=GITHUB_ENTERPRISE_CONFIG - The resource name of the GitHub Enterprise config that should be - applied to this source. Format: - projects/{project}/locations/{location}/githubEnterpriseConfigs/{id} - or projects/{project}/githubEnterpriseConfigs/{id} - --name=NAME Build trigger name. @@ -128,21 +131,7 @@ REQUIRED FLAGS Use a build configuration (cloudbuild.yaml) file for building multiple images in a single trigger. - Flags for repository information - - --repo=REPO - URI of the repository. Currently only HTTP URIs for GitHub and - Cloud Source Repositories are supported. - - This flag argument must be specified if any of the other - arguments in this group are specified. - - --repo-type=REPO_TYPE - Type of the repository. Currently only GitHub and Cloud Source - Repository types are supported. - - This flag argument must be specified if any of the other - arguments in this group are specified. + Flags for repository and branch information Exactly one of these must be specified: @@ -152,6 +141,36 @@ REQUIRED FLAGS --tag=TAG Tag to build. + Flags for repository information + + Exactly one of these must be specified: + + --repository=REPOSITORY + Repository resource (2nd gen) to use, in the format + "projects/*/locations/*/connections/*/repositories/". + + 1st-gen repository settings. + + --repo=REPO + URI of the repository (1st gen). Currently only HTTP URIs for + GitHub and Cloud Source Repositories are supported. + + This flag argument must be specified if any of the other + arguments in this group are specified. + + --repo-type=REPO_TYPE + Type of the repository (1st gen). Currently only GitHub and + Cloud Source Repository types are supported. + + This flag argument must be specified if any of the other + arguments in this group are specified. + + --github-enterprise-config=GITHUB_ENTERPRISE_CONFIG + The resource name of the GitHub Enterprise config that should + be applied to this source (1st gen). Format: + projects/{project}/locations/{location}/githubEnterpriseConfigs/{id} + or projects/{project}/githubEnterpriseConfigs/{id} + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/builds/triggers/create/pubsub b/gcloud/alpha/builds/triggers/create/pubsub index 8703d6223..4ac43e3bf 100644 --- a/gcloud/alpha/builds/triggers/create/pubsub +++ b/gcloud/alpha/builds/triggers/create/pubsub @@ -8,12 +8,13 @@ SYNOPSIS | --inline-config=PATH | [--dockerfile=DOCKERFILE : --dockerfile-dir=DOCKERFILE_DIR; default="/" --dockerfile-image=DOCKERFILE_IMAGE]) - : --description=DESCRIPTION - --github-enterprise-config=GITHUB_ENTERPRISE_CONFIG --name=NAME - --region=REGION --require-approval --service-account=SERVICE_ACCOUNT + : --description=DESCRIPTION --name=NAME --region=REGION + --require-approval --service-account=SERVICE_ACCOUNT --subscription-filter=SUBSCRIPTION_FILTER - --substitutions=[KEY=VALUE,...] - --repo=REPO --repo-type=REPO_TYPE (--branch=BRANCH | --tag=TAG)]) + --substitutions=[KEY=VALUE,...] (--branch=BRANCH + | --tag=TAG) (--repository=REPOSITORY + | [--repo=REPO --repo-type=REPO_TYPE + : --github-enterprise-config=GITHUB_ENTERPRISE_CONFIG])]) [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -31,6 +32,16 @@ EXAMPLES --repo=https://www.github.com/owner/repo --repo-type=GITHUB \ --branch=my-branch + To create a Pub/Sub trigger that listens to topic my-topic and builds off + branch my-branch in a 2nd-gen GitHub repository resource: + + $ gcloud alpha builds triggers create pubsub \ + --name=my-pubsub-trigger \ + --service-account="projects/my-project/serviceAccounts/my-byosa@\ + my-project.iam.gserviceaccount.com" \ + --repository=projects/my-proj/locations/us-west1/connections/\ + my-conn/repositories/my-repo --branch=my-branch + REQUIRED FLAGS Exactly one of these must be specified: @@ -50,12 +61,6 @@ REQUIRED FLAGS --description=DESCRIPTION Build trigger description. - --github-enterprise-config=GITHUB_ENTERPRISE_CONFIG - The resource name of the GitHub Enterprise config that should be - applied to this source. Format: - projects/{project}/locations/{location}/githubEnterpriseConfigs/{id} - or projects/{project}/githubEnterpriseConfigs/{id} - --name=NAME Build trigger name. @@ -144,21 +149,7 @@ REQUIRED FLAGS Use a build configuration (cloudbuild.yaml) file for building multiple images in a single trigger. - Flags for repository information - - --repo=REPO - URI of the repository. Currently only HTTP URIs for GitHub and - Cloud Source Repositories are supported. - - This flag argument must be specified if any of the other - arguments in this group are specified. - - --repo-type=REPO_TYPE - Type of the repository. Currently only GitHub and Cloud Source - Repository types are supported. - - This flag argument must be specified if any of the other - arguments in this group are specified. + Flags for repository and branch information Exactly one of these must be specified: @@ -168,6 +159,36 @@ REQUIRED FLAGS --tag=TAG Tag to build. + Flags for repository information + + Exactly one of these must be specified: + + --repository=REPOSITORY + Repository resource (2nd gen) to use, in the format + "projects/*/locations/*/connections/*/repositories/". + + 1st-gen repository settings. + + --repo=REPO + URI of the repository (1st gen). Currently only HTTP URIs for + GitHub and Cloud Source Repositories are supported. + + This flag argument must be specified if any of the other + arguments in this group are specified. + + --repo-type=REPO_TYPE + Type of the repository (1st gen). Currently only GitHub and + Cloud Source Repository types are supported. + + This flag argument must be specified if any of the other + arguments in this group are specified. + + --github-enterprise-config=GITHUB_ENTERPRISE_CONFIG + The resource name of the GitHub Enterprise config that should + be applied to this source (1st gen). Format: + projects/{project}/locations/{location}/githubEnterpriseConfigs/{id} + or projects/{project}/githubEnterpriseConfigs/{id} + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/builds/triggers/create/webhook b/gcloud/alpha/builds/triggers/create/webhook index 5ddfdda5c..14bcd68d1 100644 --- a/gcloud/alpha/builds/triggers/create/webhook +++ b/gcloud/alpha/builds/triggers/create/webhook @@ -8,12 +8,13 @@ SYNOPSIS | --inline-config=PATH | [--dockerfile=DOCKERFILE : --dockerfile-dir=DOCKERFILE_DIR; default="/" --dockerfile-image=DOCKERFILE_IMAGE]) - : --description=DESCRIPTION - --github-enterprise-config=GITHUB_ENTERPRISE_CONFIG --name=NAME - --region=REGION --require-approval --service-account=SERVICE_ACCOUNT + : --description=DESCRIPTION --name=NAME --region=REGION + --require-approval --service-account=SERVICE_ACCOUNT --subscription-filter=SUBSCRIPTION_FILTER - --substitutions=[KEY=VALUE,...] - --repo=REPO --repo-type=REPO_TYPE (--branch=BRANCH | --tag=TAG)]) + --substitutions=[KEY=VALUE,...] (--branch=BRANCH + | --tag=TAG) (--repository=REPOSITORY + | [--repo=REPO --repo-type=REPO_TYPE + : --github-enterprise-config=GITHUB_ENTERPRISE_CONFIG])]) [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -32,6 +33,19 @@ EXAMPLES --repo=https://www.github.com/owner/repo --repo-type=GITHUB \ --branch=my-branch + To create a Webhook trigger that requires secret + projects/my-project/secrets/my-secret/versions/2 and builds off branch + my-branch in a 2nd-gen GitHub repository: + + $ gcloud alpha builds triggers create webhook \ + --name=my-webhook-trigger \ + --service-account="projects/my-project/serviceAccounts/my-byosa@\ + my-project.iam.gserviceaccount.com" \ + --secret=projects/my-project/secrets/my-secret/versions/2 \ + --branch=my-branch \ + --repository=projects/my-proj/locations/us-west1/connections/\ + my-conn/repositories/my-repo + REQUIRED FLAGS Exactly one of these must be specified: @@ -53,12 +67,6 @@ REQUIRED FLAGS --description=DESCRIPTION Build trigger description. - --github-enterprise-config=GITHUB_ENTERPRISE_CONFIG - The resource name of the GitHub Enterprise config that should be - applied to this source. Format: - projects/{project}/locations/{location}/githubEnterpriseConfigs/{id} - or projects/{project}/githubEnterpriseConfigs/{id} - --name=NAME Build trigger name. @@ -147,21 +155,7 @@ REQUIRED FLAGS Use a build configuration (cloudbuild.yaml) file for building multiple images in a single trigger. - Flags for repository information - - --repo=REPO - URI of the repository. Currently only HTTP URIs for GitHub and - Cloud Source Repositories are supported. - - This flag argument must be specified if any of the other - arguments in this group are specified. - - --repo-type=REPO_TYPE - Type of the repository. Currently only GitHub and Cloud Source - Repository types are supported. - - This flag argument must be specified if any of the other - arguments in this group are specified. + Flags for repository and branch information Exactly one of these must be specified: @@ -171,6 +165,36 @@ REQUIRED FLAGS --tag=TAG Tag to build. + Flags for repository information + + Exactly one of these must be specified: + + --repository=REPOSITORY + Repository resource (2nd gen) to use, in the format + "projects/*/locations/*/connections/*/repositories/". + + 1st-gen repository settings. + + --repo=REPO + URI of the repository (1st gen). Currently only HTTP URIs for + GitHub and Cloud Source Repositories are supported. + + This flag argument must be specified if any of the other + arguments in this group are specified. + + --repo-type=REPO_TYPE + Type of the repository (1st gen). Currently only GitHub and + Cloud Source Repository types are supported. + + This flag argument must be specified if any of the other + arguments in this group are specified. + + --github-enterprise-config=GITHUB_ENTERPRISE_CONFIG + The resource name of the GitHub Enterprise config that should + be applied to this source (1st gen). Format: + projects/{project}/locations/{location}/githubEnterpriseConfigs/{id} + or projects/{project}/githubEnterpriseConfigs/{id} + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/compute/disks/create b/gcloud/alpha/compute/disks/create index 6876f67e1..e3217e488 100644 --- a/gcloud/alpha/compute/disks/create +++ b/gcloud/alpha/compute/disks/create @@ -4,7 +4,8 @@ NAME SYNOPSIS gcloud alpha compute disks create DISK_NAME [DISK_NAME ...] [--architecture=ARCHITECTURE] [--csek-key-file=FILE] - [--description=DESCRIPTION] [--erase-windows-vss-signature] + [--description=DESCRIPTION] [--enable-confidential-compute] + [--erase-windows-vss-signature] [--guest-os-features=[GUEST_OS_FEATURE,...]] [--interface=INTERFACE] [--labels=[KEY=VALUE,...]] [--licenses=[LICENSE,...]] [--multi-writer] [--physical-block-size=PHYSICAL_BLOCK_SIZE; default="4096"] @@ -78,6 +79,10 @@ FLAGS --description=DESCRIPTION An optional, textual description for the disks being created. + --enable-confidential-compute + Create the disk in confidential compute mode, CMEK layer is required + and only applicable to HyperDisk series. + --erase-windows-vss-signature Specifies whether the disk restored from a source snapshot should erase Windows specific VSS signature. See diff --git a/gcloud/alpha/compute/instance-templates/create b/gcloud/alpha/compute/instance-templates/create index 42d7d07c1..a64b094c0 100644 --- a/gcloud/alpha/compute/instance-templates/create +++ b/gcloud/alpha/compute/instance-templates/create @@ -469,9 +469,6 @@ FLAGS --local-ssd=[device-name=DEVICE-NAME],[interface=INTERFACE],[size=SIZE] Attaches a local SSD to the instances. - This flag is currently in alpha and beta versions only and might change - without notice. - device-name Optional. A name that indicates the disk name the guest operating system will see. Can only be specified if interface is SCSI. If diff --git a/gcloud/alpha/compute/instance-templates/create-with-container b/gcloud/alpha/compute/instance-templates/create-with-container index 2b670de30..e246959c5 100644 --- a/gcloud/alpha/compute/instance-templates/create-with-container +++ b/gcloud/alpha/compute/instance-templates/create-with-container @@ -458,9 +458,6 @@ FLAGS --local-ssd=[device-name=DEVICE-NAME],[interface=INTERFACE],[size=SIZE] Attaches a local SSD to the instances. - This flag is currently in alpha and beta versions only and might change - without notice. - device-name Optional. A name that indicates the disk name the guest operating system will see. Can only be specified if interface is SCSI. If diff --git a/gcloud/alpha/compute/instances/bulk/create b/gcloud/alpha/compute/instances/bulk/create index b20f81c66..08cfbe7c2 100644 --- a/gcloud/alpha/compute/instances/bulk/create +++ b/gcloud/alpha/compute/instances/bulk/create @@ -437,9 +437,6 @@ OPTIONAL FLAGS --local-ssd=[device-name=DEVICE-NAME],[interface=INTERFACE],[size=SIZE] Attaches a local SSD to the instances. - This flag is currently in alpha and beta versions only and might change - without notice. - device-name Optional. A name that indicates the disk name the guest operating system will see. Can only be specified if interface is SCSI. If diff --git a/gcloud/alpha/compute/instances/create b/gcloud/alpha/compute/instances/create index 1c8038f68..065953d56 100644 --- a/gcloud/alpha/compute/instances/create +++ b/gcloud/alpha/compute/instances/create @@ -571,9 +571,6 @@ FLAGS --local-ssd=[device-name=DEVICE-NAME],[interface=INTERFACE],[size=SIZE] Attaches a local SSD to the instances. - This flag is currently in alpha and beta versions only and might change - without notice. - device-name Optional. A name that indicates the disk name the guest operating system will see. Can only be specified if interface is SCSI. If @@ -827,7 +824,7 @@ FLAGS --source-instance-template=SOURCE_INSTANCE_TEMPLATE The name of the instance template that the instance will be created - from. + from. An instance template can be a global/regional resource. Users can also override machine type and labels. Values of other flags will be ignored and --source-instance-template will be used instead. diff --git a/gcloud/alpha/compute/instances/create-with-container b/gcloud/alpha/compute/instances/create-with-container index 99e2487b7..89f0deaa8 100644 --- a/gcloud/alpha/compute/instances/create-with-container +++ b/gcloud/alpha/compute/instances/create-with-container @@ -496,9 +496,6 @@ FLAGS --local-ssd=[device-name=DEVICE-NAME],[interface=INTERFACE],[size=SIZE] Attaches a local SSD to the instances. - This flag is currently in alpha and beta versions only and might change - without notice. - device-name Optional. A name that indicates the disk name the guest operating system will see. Can only be specified if interface is SCSI. If diff --git a/gcloud/alpha/compute/queued-resources/create b/gcloud/alpha/compute/queued-resources/create index 7816baa06..8db5d5e9e 100644 --- a/gcloud/alpha/compute/queued-resources/create +++ b/gcloud/alpha/compute/queued-resources/create @@ -421,9 +421,6 @@ OPTIONAL FLAGS --local-ssd=[device-name=DEVICE-NAME],[interface=INTERFACE],[size=SIZE] Attaches a local SSD to the instances. - This flag is currently in alpha and beta versions only and might change - without notice. - device-name Optional. A name that indicates the disk name the guest operating system will see. Can only be specified if interface is SCSI. If diff --git a/gcloud/alpha/compute/sole-tenancy/node-groups/simulate-maintenance-event b/gcloud/alpha/compute/sole-tenancy/node-groups/simulate-maintenance-event index 5df016174..ebed48ecf 100644 --- a/gcloud/alpha/compute/sole-tenancy/node-groups/simulate-maintenance-event +++ b/gcloud/alpha/compute/sole-tenancy/node-groups/simulate-maintenance-event @@ -61,7 +61,9 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. This variant is also available: + access allowlist. These variants are also available: + + $ gcloud compute sole-tenancy node-groups simulate-maintenance-event $ gcloud beta compute sole-tenancy node-groups \ simulate-maintenance-event diff --git a/gcloud/alpha/config/get b/gcloud/alpha/config/get index 956c12b9c..506090054 100644 --- a/gcloud/alpha/config/get +++ b/gcloud/alpha/config/get @@ -426,6 +426,10 @@ AVAILABLE PROPERTIES Overrides API endpoint for gcloud active-directory command group. Defaults to https://managedidentities.googleapis.com/ + marketplacesolutions + Overrides API endpoint for gcloud mps command group. Defaults to + https://marketplacesolutions.googleapis.com/ + mediaasset Overrides API endpoint for gcloud media command group. Defaults to https://mediaasset.googleapis.com/ @@ -1048,6 +1052,10 @@ AVAILABLE PROPERTIES Engine jobs. Note that making it much faster than the default (60) will quickly use all of your quota. + mps + vendor + Id for Marketplace Solutions Vendor. + netapp location Default location to use when working with Cloud NetApp Files @@ -1268,6 +1276,9 @@ AVAILABLE PROPERTIES File operations above this size in bytes will use resumable instead of one-shot strategies. For example, a resumable download. + rsync_files_directory + Directory path to intermediary files created by rsync. + s3_endpoint_url If set, boto3 client will connect to this endpoint. Otherwise, boto3 selects a default endpoint based on the AWS service used. diff --git a/gcloud/alpha/config/help b/gcloud/alpha/config/help index 510c2d962..8f98e6d5c 100644 --- a/gcloud/alpha/config/help +++ b/gcloud/alpha/config/help @@ -458,6 +458,10 @@ AVAILABLE PROPERTIES Overrides API endpoint for gcloud active-directory command group. Defaults to https://managedidentities.googleapis.com/ + marketplacesolutions + Overrides API endpoint for gcloud mps command group. Defaults to + https://marketplacesolutions.googleapis.com/ + mediaasset Overrides API endpoint for gcloud media command group. Defaults to https://mediaasset.googleapis.com/ @@ -1080,6 +1084,10 @@ AVAILABLE PROPERTIES Engine jobs. Note that making it much faster than the default (60) will quickly use all of your quota. + mps + vendor + Id for Marketplace Solutions Vendor. + netapp location Default location to use when working with Cloud NetApp Files @@ -1300,6 +1308,9 @@ AVAILABLE PROPERTIES File operations above this size in bytes will use resumable instead of one-shot strategies. For example, a resumable download. + rsync_files_directory + Directory path to intermediary files created by rsync. + s3_endpoint_url If set, boto3 client will connect to this endpoint. Otherwise, boto3 selects a default endpoint based on the AWS service used. diff --git a/gcloud/alpha/config/list b/gcloud/alpha/config/list index 35ae7b318..129f8fb65 100644 --- a/gcloud/alpha/config/list +++ b/gcloud/alpha/config/list @@ -470,6 +470,10 @@ AVAILABLE PROPERTIES Overrides API endpoint for gcloud active-directory command group. Defaults to https://managedidentities.googleapis.com/ + marketplacesolutions + Overrides API endpoint for gcloud mps command group. Defaults to + https://marketplacesolutions.googleapis.com/ + mediaasset Overrides API endpoint for gcloud media command group. Defaults to https://mediaasset.googleapis.com/ @@ -1092,6 +1096,10 @@ AVAILABLE PROPERTIES Engine jobs. Note that making it much faster than the default (60) will quickly use all of your quota. + mps + vendor + Id for Marketplace Solutions Vendor. + netapp location Default location to use when working with Cloud NetApp Files @@ -1312,6 +1320,9 @@ AVAILABLE PROPERTIES File operations above this size in bytes will use resumable instead of one-shot strategies. For example, a resumable download. + rsync_files_directory + Directory path to intermediary files created by rsync. + s3_endpoint_url If set, boto3 client will connect to this endpoint. Otherwise, boto3 selects a default endpoint based on the AWS service used. diff --git a/gcloud/alpha/config/set b/gcloud/alpha/config/set index a7437f0ab..16107fe2f 100644 --- a/gcloud/alpha/config/set +++ b/gcloud/alpha/config/set @@ -473,6 +473,10 @@ AVAILABLE PROPERTIES Overrides API endpoint for gcloud active-directory command group. Defaults to https://managedidentities.googleapis.com/ + marketplacesolutions + Overrides API endpoint for gcloud mps command group. Defaults to + https://marketplacesolutions.googleapis.com/ + mediaasset Overrides API endpoint for gcloud media command group. Defaults to https://mediaasset.googleapis.com/ @@ -1095,6 +1099,10 @@ AVAILABLE PROPERTIES Engine jobs. Note that making it much faster than the default (60) will quickly use all of your quota. + mps + vendor + Id for Marketplace Solutions Vendor. + netapp location Default location to use when working with Cloud NetApp Files @@ -1315,6 +1323,9 @@ AVAILABLE PROPERTIES File operations above this size in bytes will use resumable instead of one-shot strategies. For example, a resumable download. + rsync_files_directory + Directory path to intermediary files created by rsync. + s3_endpoint_url If set, boto3 client will connect to this endpoint. Otherwise, boto3 selects a default endpoint based on the AWS service used. diff --git a/gcloud/alpha/config/unset b/gcloud/alpha/config/unset index a0682ec37..6288e46ba 100644 --- a/gcloud/alpha/config/unset +++ b/gcloud/alpha/config/unset @@ -434,6 +434,10 @@ AVAILABLE PROPERTIES Overrides API endpoint for gcloud active-directory command group. Defaults to https://managedidentities.googleapis.com/ + marketplacesolutions + Overrides API endpoint for gcloud mps command group. Defaults to + https://marketplacesolutions.googleapis.com/ + mediaasset Overrides API endpoint for gcloud media command group. Defaults to https://mediaasset.googleapis.com/ @@ -1056,6 +1060,10 @@ AVAILABLE PROPERTIES Engine jobs. Note that making it much faster than the default (60) will quickly use all of your quota. + mps + vendor + Id for Marketplace Solutions Vendor. + netapp location Default location to use when working with Cloud NetApp Files @@ -1276,6 +1284,9 @@ AVAILABLE PROPERTIES File operations above this size in bytes will use resumable instead of one-shot strategies. For example, a resumable download. + rsync_files_directory + Directory path to intermediary files created by rsync. + s3_endpoint_url If set, boto3 client will connect to this endpoint. Otherwise, boto3 selects a default endpoint based on the AWS service used. diff --git a/gcloud/alpha/container/bare-metal/admin-clusters/create b/gcloud/alpha/container/bare-metal/admin-clusters/create new file mode 100644 index 000000000..29d875748 --- /dev/null +++ b/gcloud/alpha/container/bare-metal/admin-clusters/create @@ -0,0 +1,241 @@ +NAME + gcloud alpha container bare-metal admin-clusters create - create an Anthos + on bare metal admin cluster + +SYNOPSIS + gcloud alpha container bare-metal admin-clusters create + (ADMIN_CLUSTER : --location=LOCATION) --version=VERSION + (--control-plane-load-balancer-port=CONTROL_PLANE_LOAD_BALANCER_PORT + --control-plane-vip=CONTROL_PLANE_VIP : --enable-manual-lb) + ((((--control-plane-node-configs=[labels=LABELS],[node-ip=NODE-IP] + : --control-plane-node-labels=[KEY=VALUE,...] + --control-plane-node-taints=[KEY=VALUE:EFFECT,...]))) + : --api-server-args=[KEY=VALUE,...]) + (--island-mode-pod-address-cidr-blocks=POD_ADDRESS,[POD_ADDRESS,...] + --island-mode-service-address-cidr-blocks=SERVICE_ADDRESS,[...]) + ((--lvp-node-mounts-config-path=LVP_NODE_MOUNTS_CONFIG_PATH + --lvp-node-mounts-config-storage-class=LVP_NODE_MOUNTS_CONFIG_STORAGE_CLASS) ((--lvp-share-path=LVP_SHARE_PATH --lvp-share-storage-class=LVP_SHARE_STORAGE_CLASS) : --shared-path-pv-count=SHARED_PATH_PV_COUNT)) + [--annotations=[KEY=VALUE,...]] [--async] [--description=DESCRIPTION] + [--enable-application-logs] [--login-user=LOGIN_USER] + [--maintenance-address-cidr-blocks=[MAINTENANCE_ADDRESS_CIDR_BLOCKS, + ...]] [--max-pods-per-node=MAX_PODS_PER_NODE] [--validate-only] + [--uri=URI : --no-proxy=[NO_PROXY,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Create an Anthos on bare metal admin cluster. + +EXAMPLES + To create a cluster named my-cluster managed in location us-west1, run: + + $ gcloud alpha container bare-metal admin-clusters create \ + my-cluster --location=us-west1 + +POSITIONAL ARGUMENTS + Admin cluster resource - admin cluster to create The arguments in this + group can be used to specify the attributes of this resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. To set the project attribute: + ◆ provide the argument admin_cluster on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + ADMIN_CLUSTER + ID of the admin_cluster or fully qualified identifier for the + admin_cluster. To set the admin_cluster attribute: + ▸ provide the argument admin_cluster on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Google Cloud location for the admin_cluster. To set the location + attribute: + ▸ provide the argument admin_cluster on the command line with a + fully specified name; + ▸ provide the argument --location on the command line; + ▸ set the property container_bare_metal/location. + +REQUIRED FLAGS + --version=VERSION + Anthos cluster on bare metal version for the admin cluster resource. + + Anthos on bare metal admin cluster load balancer configuration. + + This must be specified. + + Control plane load balancer port configuration. + + This must be specified. + + --control-plane-load-balancer-port=CONTROL_PLANE_LOAD_BALANCER_PORT + Control plane load balancer port configuration. + + VIPs used by the load balancer. + + This must be specified. + + --control-plane-vip=CONTROL_PLANE_VIP + VIP for the Kubernetes API of this cluster. + + Manual load balancer configuration. + + --enable-manual-lb + ManualLB typed load balancers configuration. + + Anthos on bare metal cluster control plane configuration. + + At least one of these must be specified: + + --api-server-args=[KEY=VALUE,...] + API Server argument configuration. + + Anthos on bare metal cluster control plane node pool configuration. + + This must be specified. + + Anthos on bare metal node pool configuration for control plane nodes. + + This must be specified. + + Anthos on bare metal node configuration for control plane nodes. + + This must be specified. + + Populate control plane node config. + + Exactly one of these must be specified: + + --control-plane-node-configs=[labels=LABELS],[node-ip=NODE-IP] + Control plane node configuration. + + --control-plane-node-labels=[KEY=VALUE,...] + Labels assigned to nodes of a node pool. + + --control-plane-node-taints=[KEY=VALUE:EFFECT,...] + Node taint applied to every Kubernetes node in a node pool. + + Populate one of the network configs. + + This must be specified. + + Island mode CIDR network configuration. + + --island-mode-pod-address-cidr-blocks=POD_ADDRESS,[POD_ADDRESS,...] + IPv4 address range for all pods in the cluster. + + This flag argument must be specified if any of the other arguments + in this group are specified. + + --island-mode-service-address-cidr-blocks=SERVICE_ADDRESS,[...] + IPv4 address range for all services in the cluster. + + This flag argument must be specified if any of the other arguments + in this group are specified. + + Anthos on bare metal cluster storage configuration. + + This must be specified. + + LVP node mounts class and path used by the storage. + + This must be specified. + + --lvp-node-mounts-config-path=LVP_NODE_MOUNTS_CONFIG_PATH + Path for the LVP node mounts class. + + This flag argument must be specified if any of the other arguments + in this group are specified. + + --lvp-node-mounts-config-storage-class=LVP_NODE_MOUNTS_CONFIG_STORAGE_CLASS + Storage class for LVP node mounts. + + This flag argument must be specified if any of the other arguments + in this group are specified. + + LVP share configuration. + + At least one of these must be specified: + + --shared-path-pv-count=SHARED_PATH_PV_COUNT + Number of subdirectories to create under path. + + LVP share class and path used by the storage. + + This must be specified. + + --lvp-share-path=LVP_SHARE_PATH + Path for the LVP share class. + + This flag argument must be specified if any of the other + arguments in this group are specified. + + --lvp-share-storage-class=LVP_SHARE_STORAGE_CLASS + Storage class for LVP share. + + This flag argument must be specified if any of the other + arguments in this group are specified. + +OPTIONAL FLAGS + --annotations=[KEY=VALUE,...] + Annotations on the Anthos on bare metal resource. + + --async + Return immediately, without waiting for the operation in progress to + complete. + + --description=DESCRIPTION + Description for the resource. + + Anthos on bare metal cluster operations configuration. + + --enable-application-logs + Whether collection of application logs/metrics should be enabled (in + addition to system logs/metrics). + + Anthos on bare metal node access related settings for the admin cluster. + + --login-user=LOGIN_USER + User name used to access node machines. + + Anthos on bare metal cluster maintenance configuration. + + --maintenance-address-cidr-blocks=[MAINTENANCE_ADDRESS_CIDR_BLOCKS,...] + IPv4 addresses to be placed into maintenance mode. + + Anthos on bare metal admin cluster workload node configuration. + + --max-pods-per-node=MAX_PODS_PER_NODE + Maximum number of pods a node can run. + + --validate-only + If set, only validate the request, but do not actually perform the + operation. + + Anthos on bare metal cluster proxy configuration. + + --uri=URI + Address of the proxy server. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --no-proxy=[NO_PROXY,...] + List of IPs, hostnames, and domains that should skip the proxy. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/container/bare-metal/admin-clusters/help b/gcloud/alpha/container/bare-metal/admin-clusters/help index ab82a4b6f..29ad51cfc 100644 --- a/gcloud/alpha/container/bare-metal/admin-clusters/help +++ b/gcloud/alpha/container/bare-metal/admin-clusters/help @@ -17,6 +17,9 @@ GCLOUD WIDE FLAGS COMMANDS COMMAND is one of the following: + create + (ALPHA) Create an Anthos on bare metal admin cluster. + describe (ALPHA) Describe an Anthos on bare metal admin cluster. diff --git a/gcloud/alpha/container/bare-metal/node-pools/create b/gcloud/alpha/container/bare-metal/node-pools/create index 6054b8398..f65cafa55 100644 --- a/gcloud/alpha/container/bare-metal/node-pools/create +++ b/gcloud/alpha/container/bare-metal/node-pools/create @@ -6,7 +6,12 @@ SYNOPSIS gcloud alpha container bare-metal node-pools create (NODE_POOL : --cluster=CLUSTER --location=LOCATION) (--node-configs=[labels=LABELS],[node-ip=NODE-IP] - : --node-labels=[KEY=VALUE,...] --node-taints=[KEY=VALUE:EFFECT,...]) + : --node-labels=[KEY=VALUE,...] --node-taints=[KEY=VALUE:EFFECT,...] + --cpu-cfs-quota-period=CPU_CFS_QUOTA_PERIOD + --cpu-manager-policy=CPU_MANAGER_POLICY --disable-cpu-cfs-quota + --disable-serialize-image-pulls --feature-gates=[FEATURE=BOOL,...] + --pod-pids-limit=POD_PIDS_LIMIT --registry-burst=REGISTRY_BURST + --registry-pull-qps=REGISTRY_PULL_QPS) [--annotations=[KEY=VALUE,...]] [--async] [--display-name=DISPLAY_NAME] [--validate-only] [GCLOUD_WIDE_FLAG ...] @@ -72,6 +77,37 @@ REQUIRED FLAGS --node-taints=[KEY=VALUE:EFFECT,...] Node taint applied to every Kubernetes node in a node pool. + Sets the modifiable kubelet configurations for bare metal machines. + + --cpu-cfs-quota-period=CPU_CFS_QUOTA_PERIOD + CPU Completely Fair Scheduler (CFS) quota period value. Specify + with seconds as the time unit, such as 0.2s. + + --cpu-manager-policy=CPU_MANAGER_POLICY + The kubelet CPU manager policy. CPU_MANAGER_POLICY must be one of: + NONE, STATIC. + + --disable-cpu-cfs-quota + If set, disable CPU Completely Fair Scheduler (CFS) quota + enforcement for containers that specify CPU limits. + + --disable-serialize-image-pulls + If set, prevent the Kubelet from pulling multiple images at a time. + + --feature-gates=[FEATURE=BOOL,...] + A map of feature names to bools that enable or disable experimental + features. + + --pod-pids-limit=POD_PIDS_LIMIT + Maximum number of PIDs in any pod. + + --registry-burst=REGISTRY_BURST + Maximum size of bursty pulls, temporarily allows pulls to burst to + this number, while still not exceeding registry_pull_qps. + + --registry-pull-qps=REGISTRY_PULL_QPS + Limit of registry pulls per second. + OPTIONAL FLAGS --annotations=[KEY=VALUE,...] Annotations on the node pool. diff --git a/gcloud/alpha/container/bare-metal/node-pools/delete b/gcloud/alpha/container/bare-metal/node-pools/delete index 4c99e9a06..14be263ff 100644 --- a/gcloud/alpha/container/bare-metal/node-pools/delete +++ b/gcloud/alpha/container/bare-metal/node-pools/delete @@ -5,7 +5,7 @@ NAME SYNOPSIS gcloud alpha container bare-metal node-pools delete (NODE_POOL : --cluster=CLUSTER --location=LOCATION) [--allow-missing] - [--async] [--validate-only] [GCLOUD_WIDE_FLAG ...] + [--async] [--ignore-errors] [--validate-only] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Delete a node pool in an Anthos cluster on bare metal. @@ -60,6 +60,10 @@ FLAGS Return immediately, without waiting for the operation in progress to complete. + --ignore-errors + If set, the deletion of a Bare Metal Node Pool resource will succeed + even if errors occur during deletion. + --validate-only If set, only validate the request, but do not actually perform the operation. diff --git a/gcloud/alpha/container/bare-metal/node-pools/update b/gcloud/alpha/container/bare-metal/node-pools/update index df3f1cafc..94c28d72b 100644 --- a/gcloud/alpha/container/bare-metal/node-pools/update +++ b/gcloud/alpha/container/bare-metal/node-pools/update @@ -7,8 +7,14 @@ SYNOPSIS (NODE_POOL : --cluster=CLUSTER --location=LOCATION) [--allow-missing] [--async] [--display-name=DISPLAY_NAME] [--validate-only] [--node-configs=[labels=LABELS],[node-ip=NODE-IP] - --node-labels=[KEY=VALUE,...] --node-taints=[KEY=VALUE:EFFECT,...]] - [GCLOUD_WIDE_FLAG ...] + --node-labels=[KEY=VALUE,...] --node-taints=[KEY=VALUE:EFFECT,...] + --cpu-cfs-quota-period=CPU_CFS_QUOTA_PERIOD + --cpu-manager-policy=CPU_MANAGER_POLICY + --feature-gates=[FEATURE=BOOL,...] --pod-pids-limit=POD_PIDS_LIMIT + --registry-burst=REGISTRY_BURST + --registry-pull-qps=REGISTRY_PULL_QPS --disable-cpu-cfs-quota + | --enable-cpu-cfs-quota --disable-serialize-image-pulls + | --enable-serialize-image-pulls] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Update a node pool in an Anthos cluster on bare metal. @@ -86,6 +92,49 @@ FLAGS --node-taints=[KEY=VALUE:EFFECT,...] Node taint applied to every Kubernetes node in a node pool. + Sets the modifiable kubelet configurations for bare metal machines. + + --cpu-cfs-quota-period=CPU_CFS_QUOTA_PERIOD + CPU Completely Fair Scheduler (CFS) quota period value. Specify + with seconds as the time unit, such as 0.2s. + + --cpu-manager-policy=CPU_MANAGER_POLICY + The kubelet CPU manager policy. CPU_MANAGER_POLICY must be one of: + NONE, STATIC. + + --feature-gates=[FEATURE=BOOL,...] + A map of feature names to bools that enable or disable experimental + features. + + --pod-pids-limit=POD_PIDS_LIMIT + Maximum number of PIDs in any pod. + + --registry-burst=REGISTRY_BURST + Maximum size of bursty pulls, temporarily allows pulls to burst to + this number, while still not exceeding registry_pull_qps. + + --registry-pull-qps=REGISTRY_PULL_QPS + Limit of registry pulls per second. + + At most one of these can be specified: + + --disable-cpu-cfs-quota + If set, disable CPU Completely Fair Scheduler (CFS) quota + enforcement for containers that specify CPU limits. + + --enable-cpu-cfs-quota + If set, enable CPU Completely Fair Scheduler (CFS) quota + enforcement for containers that specify CPU limits. + + At most one of these can be specified: + + --disable-serialize-image-pulls + If set, prevent the Kubelet from pulling multiple images at a + time. + + --enable-serialize-image-pulls + If set, enable the Kubelet to pull multiple images at a time. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/container/clusters/create b/gcloud/alpha/container/clusters/create index 1bebc1624..13129bbe1 100644 --- a/gcloud/alpha/container/clusters/create +++ b/gcloud/alpha/container/clusters/create @@ -24,7 +24,7 @@ SYNOPSIS [--no-enable-autoupgrade] [--enable-cloud-logging] [--enable-cloud-monitoring] [--enable-cloud-run-alpha] [--enable-confidential-nodes] [--enable-cost-allocation] - [--enable-dataplane-v2] [--enable-gke-oidc] + [--enable-dataplane-v2] [--enable-fleet] [--enable-gke-oidc] [--enable-google-cloud-access] [--enable-gvnic] [--enable-identity-service] [--enable-image-streaming] [--enable-intra-node-visibility] [--enable-ip-alias] @@ -34,7 +34,8 @@ SYNOPSIS [--enable-master-global-access] [--enable-network-policy] [--enable-pod-security-policy] [--enable-service-externalips] [--enable-shielded-nodes] [--enable-stackdriver-kubernetes] - [--enable-vertical-pod-autoscaling] [--gateway-api=GATEWAY_API] + [--enable-vertical-pod-autoscaling] + [--fleet-project=PROJECT_ID_OR_NUMBER] [--gateway-api=GATEWAY_API] [--identity-provider=IDENTITY_PROVIDER] [--image-type=IMAGE_TYPE] [--ipv6-access-type=IPV6_ACCESS_TYPE] [--issue-client-certificate] [--istio-config=[auth=MTLS_PERMISSIVE,...]] [--labels=[KEY=VALUE,...]] @@ -417,6 +418,12 @@ FLAGS Enables the new eBPF dataplane for GKE clusters that is required for network security, scalability and visibility features. + --enable-fleet + Set cluster project as the fleet host project. This will register the + cluster to the same project. To register the cluster to a fleet in a + different project, please use --fleet-project=FLEET_HOST_PROJECT. + Example: $ gcloud alpha container clusters create --enable-fleet + --enable-gke-oidc (DEPRECATED) Enable GKE OIDC authentication on the cluster. @@ -547,6 +554,14 @@ FLAGS --enable-vertical-pod-autoscaling Enable vertical pod autoscaling for a cluster. + --fleet-project=PROJECT_ID_OR_NUMBER + Sets fleet host project for the cluster. If specified, the current + cluster will be registered as a fleet membership under the fleet host + project. + + Example: $ gcloud alpha container clusters create + --fleet-project=my-project + --gateway-api=GATEWAY_API Enables GKE Gateway controller in this cluster. The value of the flag specifies which Open Source Gateway API release channel will be used to diff --git a/gcloud/alpha/container/clusters/create-auto b/gcloud/alpha/container/clusters/create-auto index 00116f318..648fc7e22 100644 --- a/gcloud/alpha/container/clusters/create-auto +++ b/gcloud/alpha/container/clusters/create-auto @@ -10,11 +10,12 @@ SYNOPSIS [--cluster-secondary-range-name=NAME] [--cluster-version=CLUSTER_VERSION] [--create-subnetwork=[KEY=VALUE,...]] - [--database-encryption-key=DATABASE_ENCRYPTION_KEY] - [--enable-google-cloud-access] [--network=NETWORK] - [--private-endpoint-subnetwork=NAME] [--release-channel=CHANNEL] - [--security-group=SECURITY_GROUP] [--services-ipv4-cidr=CIDR] - [--services-secondary-range-name=NAME] [--subnetwork=SUBNETWORK] + [--database-encryption-key=DATABASE_ENCRYPTION_KEY] [--enable-fleet] + [--enable-google-cloud-access] [--fleet-project=PROJECT_ID_OR_NUMBER] + [--network=NETWORK] [--private-endpoint-subnetwork=NAME] + [--release-channel=CHANNEL] [--security-group=SECURITY_GROUP] + [--services-ipv4-cidr=CIDR] [--services-secondary-range-name=NAME] + [--subnetwork=SUBNETWORK] [--binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE --binauthz-policy=BINAUTHZ_POLICY] [--enable-master-authorized-networks @@ -149,11 +150,25 @@ FLAGS For more information, see https://cloud.google.com/kubernetes-engine/docs/how-to/encrypting-secrets. + --enable-fleet + Set cluster project as the fleet host project. This will register the + cluster to the same project. To register the cluster to a fleet in a + different project, please use --fleet-project=FLEET_HOST_PROJECT. + Example: $ gcloud alpha container clusters create-auto --enable-fleet + --enable-google-cloud-access When you enable Google Cloud Access, any public IP addresses owned by Google Cloud can reach the public control plane endpoint of your cluster. + --fleet-project=PROJECT_ID_OR_NUMBER + Sets fleet host project for the cluster. If specified, the current + cluster will be registered as a fleet membership under the fleet host + project. + + Example: $ gcloud alpha container clusters create-auto \ + --fleet-project=my-project + --network=NETWORK The Compute Engine Network that the cluster will connect to. Google Kubernetes Engine will use this network when creating routes and diff --git a/gcloud/alpha/container/clusters/update b/gcloud/alpha/container/clusters/update index b0ff1d6e1..67789d2aa 100644 --- a/gcloud/alpha/container/clusters/update +++ b/gcloud/alpha/container/clusters/update @@ -5,12 +5,12 @@ NAME SYNOPSIS gcloud alpha container clusters update NAME (--autoprovisioning-network-tags=[TAGS,...] - | --autoscaling-profile=AUTOSCALING_PROFILE + | --autoscaling-profile=AUTOSCALING_PROFILE | --clear-fleet-project | --complete-credential-rotation | --complete-ip-rotation | --database-encryption-key=DATABASE_ENCRYPTION_KEY | --disable-database-encryption | --disable-default-snat | --disable-workload-identity | --enable-autoscaling - | --enable-cost-allocation | --enable-gke-oidc + | --enable-cost-allocation | --enable-fleet | --enable-gke-oidc | --enable-google-cloud-access | --enable-identity-service | --enable-image-streaming | --enable-intra-node-visibility | --enable-l4-ilb-subsetting | --enable-legacy-authorization @@ -19,7 +19,8 @@ SYNOPSIS | --enable-network-policy | --enable-pod-security-policy | --enable-private-endpoint | --enable-service-externalips | --enable-shielded-nodes | --enable-stackdriver-kubernetes - | --enable-vertical-pod-autoscaling | --gateway-api=GATEWAY_API + | --enable-vertical-pod-autoscaling + | --fleet-project=PROJECT_ID_OR_NUMBER | --gateway-api=GATEWAY_API | --generate-password | --identity-provider=IDENTITY_PROVIDER | --logging-variant=LOGGING_VARIANT | --maintenance-window=START_TIME | --notification-config=[pubsub=ENABLED|DISABLED, @@ -117,6 +118,10 @@ REQUIRED FLAGS Set autoscaling behaviour, choices are 'optimize-utilization' and 'balanced'. Default is 'balanced'. + --clear-fleet-project + Remove the cluster from current fleet host project. Example: $ gcloud + alpha container clusters update --clear-fleet-project + --complete-credential-rotation Complete the IP and credential rotation for this cluster. For example: @@ -200,6 +205,12 @@ REQUIRED FLAGS Use --no-enable-cost-allocation to disable this feature. + --enable-fleet + Set cluster project as the fleet host project. This will register the + cluster to the same project. To register the cluster to a fleet in a + different project, please use --fleet-project=FLEET_HOST_PROJECT. + Example: $ gcloud alpha container clusters update --enable-fleet + --enable-gke-oidc (DEPRECATED) Enable GKE OIDC authentication on the cluster. @@ -323,6 +334,14 @@ REQUIRED FLAGS --enable-vertical-pod-autoscaling Enable vertical pod autoscaling for a cluster. + --fleet-project=PROJECT_ID_OR_NUMBER + Sets fleet host project for the cluster. If specified, the current + cluster will be registered as a fleet membership under the fleet host + project. + + Example: $ gcloud alpha container clusters update + --fleet-project=my-project + --gateway-api=GATEWAY_API Enables GKE Gateway controller in this cluster. The value of the flag specifies which Open Source Gateway API release channel will be used diff --git a/gcloud/alpha/container/vmware/node-pools/enroll b/gcloud/alpha/container/vmware/node-pools/enroll new file mode 100644 index 000000000..8e13c7a4f --- /dev/null +++ b/gcloud/alpha/container/vmware/node-pools/enroll @@ -0,0 +1,72 @@ +NAME + gcloud alpha container vmware node-pools enroll - enroll a node pool in an + Anthos cluster on VMware + +SYNOPSIS + gcloud alpha container vmware node-pools enroll + (NODE_POOL : --cluster=CLUSTER --location=LOCATION) [--async] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Enroll a node pool in an Anthos cluster on VMware. + +EXAMPLES + To enroll a node pool named my-node-pool in a cluster named my-cluster + managed in location us-west1, run: + + $ gcloud alpha container vmware node-pools enroll my-node-pool \ + --cluster=my-cluster --location=us-west1 + +POSITIONAL ARGUMENTS + Node pool resource - node pool to enroll The arguments in this group can + be used to specify the attributes of this resource. (NOTE) Some attributes + are not given arguments in this group but can be set in other ways. To set + the project attribute: + ◆ provide the argument node_pool on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + NODE_POOL + ID of the node_pool or fully qualified identifier for the node_pool. + To set the node_pool attribute: + ▸ provide the argument node_pool on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --cluster=CLUSTER + cluster of the node_pool. To set the cluster attribute: + ▸ provide the argument node_pool on the command line with a fully + specified name; + ▸ provide the argument --cluster on the command line. + + --location=LOCATION + Google Cloud location for the node_pool. To set the location + attribute: + ▸ provide the argument node_pool on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property container_vmware/location. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/container/vmware/node-pools/help b/gcloud/alpha/container/vmware/node-pools/help index 4aaf38572..0b6522467 100644 --- a/gcloud/alpha/container/vmware/node-pools/help +++ b/gcloud/alpha/container/vmware/node-pools/help @@ -25,6 +25,9 @@ COMMANDS describe (ALPHA) Describe a node pool in an Anthos cluster on VMware. + enroll + (ALPHA) Enroll a node pool in an Anthos cluster on VMware. + list (ALPHA) List node pools in an Anthos cluster on VMware. diff --git a/gcloud/alpha/database-migration/connection-profiles/create/cloudsql b/gcloud/alpha/database-migration/connection-profiles/create/cloudsql index 9423bf54f..28c2d0282 100644 --- a/gcloud/alpha/database-migration/connection-profiles/create/cloudsql +++ b/gcloud/alpha/database-migration/connection-profiles/create/cloudsql @@ -8,11 +8,13 @@ SYNOPSIS --database-version=DATABASE_VERSION --source-id=SOURCE_ID --tier=TIER [--activation-policy=ACTIVATION_POLICY] [--no-async] [--authorized-networks=NETWORK,[NETWORK,...]] - [--no-auto-storage-increase] [--data-disk-size=DATA_DISK_SIZE] - [--data-disk-type=DATA_DISK_TYPE] [--database-flags=[FLAG=VALUE,...]] - [--display-name=DISPLAY_NAME] [--no-enable-ip-v4] - [--labels=[KEY=VALUE,...]] [--private-network=PRIVATE_NETWORK] - [--provider=PROVIDER] [--require-ssl] [--root-password=ROOT_PASSWORD] + [--no-auto-storage-increase] [--availability-type=AVAILABILITY_TYPE] + [--data-disk-size=DATA_DISK_SIZE] [--data-disk-type=DATA_DISK_TYPE] + [--database-flags=[FLAG=VALUE,...]] [--display-name=DISPLAY_NAME] + [--no-enable-ip-v4] [--labels=[KEY=VALUE,...]] + [--private-network=PRIVATE_NETWORK] [--provider=PROVIDER] + [--require-ssl] [--root-password=ROOT_PASSWORD] + [--secondary-zone=SECONDARY_ZONE] [--storage-auto-resize-limit=STORAGE_AUTO_RESIZE_LIMIT] [--user-labels=[KEY=VALUE,...]] [--zone=ZONE] [GCLOUD_WIDE_FLAG ...] @@ -125,6 +127,10 @@ OPTIONAL FLAGS Default: ON. Enabled by default, use --no-auto-storage-increase to disable. + --availability-type=AVAILABILITY_TYPE + Cloud SQL availability type. AVAILABILITY_TYPE must be one of: + REGIONAL, ZONAL. + --data-disk-size=DATA_DISK_SIZE Storage capacity available to the database, in GB. The minimum (and default) size is 10GB. @@ -173,6 +179,11 @@ OPTIONAL FLAGS --root-password=ROOT_PASSWORD Root Cloud SQL user's password. + --secondary-zone=SECONDARY_ZONE + Google Cloud Platform zone where the failover Cloud SQL database + instance is located. Used when the Cloud SQL database availability type + is REGIONAL (i.e. multiple zones / highly available). + --storage-auto-resize-limit=STORAGE_AUTO_RESIZE_LIMIT Maximum size to which storage capacity can be automatically increased. The default value is 0, which specifies that there is no limit. @@ -183,7 +194,7 @@ OPTIONAL FLAGS containing a list of "key": "value" pairs. --zone=ZONE - Google Cloud Platform zone where your Cloud SQL datdabse instance is + Google Cloud Platform zone where your Cloud SQL database instance is located. GCLOUD WIDE FLAGS diff --git a/gcloud/alpha/edge-cloud/networking/routers/add-bgp-peer b/gcloud/alpha/edge-cloud/networking/routers/add-bgp-peer index 01a1bc50c..6e67ea586 100644 --- a/gcloud/alpha/edge-cloud/networking/routers/add-bgp-peer +++ b/gcloud/alpha/edge-cloud/networking/routers/add-bgp-peer @@ -5,8 +5,9 @@ NAME SYNOPSIS gcloud alpha edge-cloud networking routers add-bgp-peer (ROUTER : --location=LOCATION --zone=ZONE) --interface=INTERFACE - --peer-asn=PEER_ASN --peer-ipv4-range=PEER_IPV4_RANGE - --peer-name=PEER_NAME [--async] [GCLOUD_WIDE_FLAG ...] + --peer-asn=PEER_ASN --peer-name=PEER_NAME + (--peer-ipv4-range=PEER_IPV4_RANGE | --peer-ipv6-range=PEER_IPV6_RANGE) + [--async] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Create a BGP peer to a Distributed Cloud Edge Network router @@ -20,6 +21,12 @@ EXAMPLES --peer-name=peer1 --peer-ipv4-range=208.117.254.232/31 \ --location=us-central1 --zone=us-central1-edge-den1 + $ gcloud alpha edge-cloud networking routers add-bgp-peer \ + my-router --interface=my-int-r1 --peer-asn=33333 \ + --peer-name=peer1 \ + --peer-ipv6-range=2001:0db8:85a3:0000:0000:8a2e:0370:7334/126 \ + --location=us-central1 --zone=us-central1-edge-den1 + POSITIONAL ARGUMENTS Router resource - The router to which we add a bgp peer. The arguments in this group can be used to specify the attributes of this resource. (NOTE) @@ -61,12 +68,17 @@ REQUIRED FLAGS 16-bit or 32-bit private ASN as defined in https://tools.ietf.org/html/rfc6996, for example --asn=64512. - --peer-ipv4-range=PEER_IPV4_RANGE - The link-local address range of the peer router. - --peer-name=PEER_NAME The name of the new BGP peer being added. + Exactly one of these must be specified: + + --peer-ipv4-range=PEER_IPV4_RANGE + The IPv4 link-local address range of the peer router. + + --peer-ipv6-range=PEER_IPV6_RANGE + The IPv6 link-local address range of the peer router. + OPTIONAL FLAGS --async Return immediately, without waiting for the operation in progress to diff --git a/gcloud/alpha/edge-cloud/networking/routers/add-interface b/gcloud/alpha/edge-cloud/networking/routers/add-interface index ffc1dc01e..92f56d7c4 100644 --- a/gcloud/alpha/edge-cloud/networking/routers/add-interface +++ b/gcloud/alpha/edge-cloud/networking/routers/add-interface @@ -80,18 +80,18 @@ REQUIRED FLAGS The argument group for adding southbound interfaces to edge router. --subnetwork=SUBNETWORK - The subnetwork of the interface being added. + Subnetwork of the interface being added. The argument group for adding northbound interfaces to edge router. --interconnect-attachment=INTERCONNECT_ATTACHMENT - The interconnect attachment of the interface being added. + Interconnect attachment of the interface being added. --ip-address=IP_ADDRESS - The link local address of the router for this interface. + Link-local address of the router for this interface. --ip-mask-length=IP_MASK_LENGTH - The subnet mask for the link-local IP range of the interface. The + Subnet mask for the link-local IP range of the interface. The interface IP address and BGP peer IP address must be selected from the subnet defined by this link-local range. diff --git a/gcloud/alpha/functions/help b/gcloud/alpha/functions/help index e8d97c3e1..32c0942f1 100644 --- a/gcloud/alpha/functions/help +++ b/gcloud/alpha/functions/help @@ -66,6 +66,9 @@ COMMANDS set-iam-policy (ALPHA) Sets IAM policy for a Google Cloud Function. + upgrade + (ALPHA) Upgrade a 1st gen Cloud Function to the 2nd gen environment. + NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct diff --git a/gcloud/alpha/functions/upgrade b/gcloud/alpha/functions/upgrade new file mode 100644 index 000000000..e46dd9a28 --- /dev/null +++ b/gcloud/alpha/functions/upgrade @@ -0,0 +1,104 @@ +NAME + gcloud alpha functions upgrade - upgrade a 1st gen Cloud Function to the + 2nd gen environment + +SYNOPSIS + gcloud alpha functions upgrade (NAME : --region=REGION) + [--abort | --commit | --redirect-traffic | --rollback-traffic + | --setup-config] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Upgrade a 1st gen Cloud Function to the 2nd gen environment. + +EXAMPLES + To start the upgrade process for a 1st gen function foo and create a 2nd + gen function copy, run: + + $ gcloud alpha functions upgrade foo + + Once you are ready to redirect production traffic to the 2nd gen function + copy, run: + + $ gcloud alpha functions upgrade foo --redirect-traffic + + Once you're ready to finish upgrading and delete the 1st gen function copy, + run: + + $ gcloud alpha functions upgrade foo --commit + + Before committing, if you find you need to do more local testing you can + rollback production traffic to the 1st gen function copy: + + $ gcloud alpha functions upgrade foo --rollback-traffic + + With traffic going to the 1st gen function copy, you can abort the + generation upgrade process by running: + + $ gcloud alpha functions upgrade foo --abort + +POSITIONAL ARGUMENTS + Function resource - The Cloud function name to upgrade. The arguments in + this group can be used to specify the attributes of this resource. (NOTE) + Some attributes are not given arguments in this group but can be set in + other ways. To set the project attribute: + ◆ provide the argument NAME on the command line with a fully specified + name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + NAME + ID of the function or fully qualified identifier for the function. To + set the function attribute: + ▸ provide the argument NAME on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + The Cloud region for the function. Overrides the default + functions/region property value for this command invocation. To set + the region attribute: + ▸ provide the argument NAME on the command line with a fully + specified name; + ▸ provide the argument --region on the command line; + ▸ set the property functions/region. + +FLAGS + At most one of these can be specified: + + --abort + Undoes all steps of the upgrade process done so far. All traffic will + point to the original 1st gen function copy and the 2nd gen function + copy will be deleted. + + --commit + Finishes the upgrade process and permanently deletes the original 1st + gen copy of the function. + + --redirect-traffic + Redirects production traffic to the 2nd gen copy of the function. + + --rollback-traffic + Rolls back production traffic to the original 1st gen copy of the + function. The 2nd gen copy will still be available for testing. + + --setup-config + Sets up the function upgrade config by creating a 2nd gen copy of the + function's code and configuration. This is the default action. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/healthcare/fhir-stores/help b/gcloud/alpha/healthcare/fhir-stores/help index 950ac97a0..3a2801daf 100644 --- a/gcloud/alpha/healthcare/fhir-stores/help +++ b/gcloud/alpha/healthcare/fhir-stores/help @@ -47,6 +47,9 @@ COMMANDS list (ALPHA) List Cloud Healthcare API FHIR stores. + metrics + (ALPHA) Gets the metrics for a Cloud Healthcare API FHIR store. + remove-iam-policy-binding (ALPHA) Remove an IAM policy binding from a Cloud Healthcare API FHIR store. diff --git a/gcloud/alpha/healthcare/fhir-stores/metrics b/gcloud/alpha/healthcare/fhir-stores/metrics new file mode 100644 index 000000000..f08d37caf --- /dev/null +++ b/gcloud/alpha/healthcare/fhir-stores/metrics @@ -0,0 +1,73 @@ +NAME + gcloud alpha healthcare fhir-stores metrics - gets the metrics for a Cloud + Healthcare API FHIR store + +SYNOPSIS + gcloud alpha healthcare fhir-stores metrics + (FHIR_STORE : --dataset=DATASET --location=LOCATION) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Gets the metrics for a Cloud Healthcare API FHIR store. + +EXAMPLES + To get metrics for the FHIR store 'test-fhir-store', run: + + $ gcloud alpha healthcare fhir-stores metrics test-fhir-store \ + --dataset=test-dataset + +POSITIONAL ARGUMENTS + FhirStore resource - Cloud Healthcare API FHIR store to get metrics for. + The arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument fhir_store on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + FHIR_STORE + ID of the fhirStore or fully qualified identifier for the fhirStore. + To set the fhir_store attribute: + ▸ provide the argument fhir_store on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --dataset=DATASET + Cloud Healthcare dataset. To set the dataset attribute: + ▸ provide the argument fhir_store on the command line with a fully + specified name; + ▸ provide the argument --dataset on the command line. + + --location=LOCATION + Google Cloud location. To set the location attribute: + ▸ provide the argument fhir_store on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property healthcare/location. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the healthcare/v1alpha2 API. The full documentation for + this API can be found at: https://cloud.google.com/healthcare + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud healthcare fhir-stores metrics + + $ gcloud beta healthcare fhir-stores metrics + diff --git a/gcloud/alpha/kms/ekm-config/add-iam-policy-binding b/gcloud/alpha/kms/ekm-config/add-iam-policy-binding new file mode 100644 index 000000000..7e230b816 --- /dev/null +++ b/gcloud/alpha/kms/ekm-config/add-iam-policy-binding @@ -0,0 +1,126 @@ +NAME + gcloud alpha kms ekm-config add-iam-policy-binding - add IAM policy binding + to an EkmConfig + +SYNOPSIS + gcloud alpha kms ekm-config add-iam-policy-binding --location=LOCATION + --member=PRINCIPAL --role=ROLE + [--condition=[KEY=VALUE,...] + | --condition-from-file=CONDITION_FROM_FILE] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Adds a policy binding to the IAM policy of a kms EkmConfig. A + binding consists of at least one member, a role, and an optional condition. + +EXAMPLES + To add an IAM policy binding for the role of 'roles/editor' for the user + test-user@gmail.com on the EkmConfig with location us-central1, run: + + $ gcloud alpha kms ekm-config add-iam-policy-binding \ + --location='us-central1' --member='user:test-user@gmail.com' \ + --role='roles/editor' + + To add an IAM policy binding which expires at the end of the year 2022 for + the role of 'roles/editor' and the user test-user@gmail.com and location + us-central1, run: + + $ gcloud alpha kms ekm-config add-iam-policy-binding \ + --location='us-central1' --member='user:test-user@gmail.com' \ + --role='roles/editor' --condition='expression=request.time < + timestamp("2023-01-01T00:00:00Z"),title=expires_end_of_2022,description=Expires + at midnight on 2022-12-31' + + See https://cloud.google.com/iam/docs/managing-policies for details of + policy role and member types. + +REQUIRED FLAGS + Location resource - The KMS location resource. This represents a Cloud + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ set the property core/project. + + This must be specified. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. To + set the location attribute: + ▸ provide the argument --location on the command line. + + --member=PRINCIPAL + The principal to add the binding for. Should be of the form + user|group|serviceAccount:email or domain:domain. + + Examples: user:test-user@gmail.com, group:admins@example.com, + serviceAccount:test123@example.domain.com, or + domain:example.domain.com. + + Some resources also accept the following special values: + ◆ allUsers - Special identifier that represents anyone who is on the + internet, with or without a Google account. + ◆ allAuthenticatedUsers - Special identifier that represents anyone + who is authenticated with a Google account or a service account. + + --role=ROLE + Role name to assign to the principal. The role name is the complete + path of a predefined role, such as roles/logging.viewer, or the role ID + for a custom role, such as + organizations/{ORGANIZATION_ID}/roles/logging.viewer. + +OPTIONAL FLAGS + At most one of these can be specified: + + --condition=[KEY=VALUE,...] + A condition to include in the binding. When the condition is + explicitly specified as None (--condition=None), a binding without a + condition is added. When the condition is specified and is not None, + --role cannot be a basic role. Basic roles are roles/editor, + roles/owner, and roles/viewer. For more on conditions, refer to the + conditions overview guide: + https://cloud.google.com/iam/docs/conditions-overview + + When using the --condition flag, include the following key-value + pairs: + + expression + (Required) Condition expression that evaluates to True or False. + This uses a subset of Common Expression Language syntax. + + If the condition expression includes a comma, use a different + delimiter to separate the key-value pairs. Specify the delimiter + before listing the key-value pairs. For example, to specify a + colon (:) as the delimiter, do the following: + --condition=^:^title=TITLE:expression=EXPRESSION. For more + information, see + https://cloud.google.com/sdk/gcloud/reference/topic/escaping. + + title + (Required) A short string describing the purpose of the + expression. + + description + (Optional) Additional description for the expression. + + --condition-from-file=CONDITION_FROM_FILE + Path to a local JSON or YAML file that defines the condition. To see + available fields, see the help for --condition. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud kms ekm-config add-iam-policy-binding + + $ gcloud beta kms ekm-config add-iam-policy-binding + diff --git a/gcloud/alpha/kms/ekm-config/describe b/gcloud/alpha/kms/ekm-config/describe new file mode 100644 index 000000000..1a103c7b8 --- /dev/null +++ b/gcloud/alpha/kms/ekm-config/describe @@ -0,0 +1,56 @@ +NAME + gcloud alpha kms ekm-config describe - describe the EkmConfig + +SYNOPSIS + gcloud alpha kms ekm-config describe --location=LOCATION + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) gcloud alpha kms ekm-config describe can be used to retrieve the + EkmConfig. + +EXAMPLES + The following command retrieves the EkmConfig in us-east1 for the current + project: + + $ gcloud alpha kms ekm-config describe --location=us-east1 + + The following command retrieves the EkmConfig for its project foo and + location us-east1: + + $ gcloud alpha kms ekm-config describe \ + --location="projects/foo/locations/us-east1" + +REQUIRED FLAGS + Location resource - The KMS location resource. This represents a Cloud + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ set the property core/project. + + This must be specified. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. To + set the location attribute: + ▸ provide the argument --location on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud kms ekm-config describe + + $ gcloud beta kms ekm-config describe + diff --git a/gcloud/alpha/kms/ekm-config/get-iam-policy b/gcloud/alpha/kms/ekm-config/get-iam-policy new file mode 100644 index 000000000..682cc185a --- /dev/null +++ b/gcloud/alpha/kms/ekm-config/get-iam-policy @@ -0,0 +1,79 @@ +NAME + gcloud alpha kms ekm-config get-iam-policy - get the IAM policy for an + EkmConfig + +SYNOPSIS + gcloud alpha kms ekm-config get-iam-policy --location=LOCATION + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Gets the IAM policy for the given location. + + Returns an empty policy if the resource does not have a policy set. + +EXAMPLES + The following command gets the IAM policy for the EkmConfig within the + location us-central1: + + $ gcloud alpha kms ekm-config get-iam-policy --location=us-central1 + +REQUIRED FLAGS + Location resource - The KMS location resource. This represents a Cloud + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ set the property core/project. + + This must be specified. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. To + set the location attribute: + ▸ provide the argument --location on the command line. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud kms ekm-config get-iam-policy + + $ gcloud beta kms ekm-config get-iam-policy + diff --git a/gcloud/alpha/kms/ekm-config/help b/gcloud/alpha/kms/ekm-config/help new file mode 100644 index 000000000..cace13c88 --- /dev/null +++ b/gcloud/alpha/kms/ekm-config/help @@ -0,0 +1,47 @@ +NAME + gcloud alpha kms ekm-config - update and retrieve the EkmConfig + +SYNOPSIS + gcloud alpha kms ekm-config COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) EkmConfig is a singleton resource that represents configuration + parameters that apply to all CryptoKeys and CryptoKeyVersions of + EXTERNAL_VPC protecion level. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + add-iam-policy-binding + (ALPHA) Add IAM policy binding to an EkmConfig. + + describe + (ALPHA) Describe the EkmConfig. + + get-iam-policy + (ALPHA) Get the IAM policy for an EkmConfig. + + remove-iam-policy-binding + (ALPHA) Remove IAM policy binding from an EkmConfig. + + set-iam-policy + (ALPHA) Set the IAM policy for an EkmConfig. + + update + (ALPHA) Update the EkmConfig. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud kms ekm-config + + $ gcloud beta kms ekm-config + diff --git a/gcloud/alpha/kms/ekm-config/remove-iam-policy-binding b/gcloud/alpha/kms/ekm-config/remove-iam-policy-binding new file mode 100644 index 000000000..754f813fe --- /dev/null +++ b/gcloud/alpha/kms/ekm-config/remove-iam-policy-binding @@ -0,0 +1,141 @@ +NAME + gcloud alpha kms ekm-config remove-iam-policy-binding - remove IAM policy + binding from an EkmConfig + +SYNOPSIS + gcloud alpha kms ekm-config remove-iam-policy-binding --location=LOCATION + --member=PRINCIPAL --role=ROLE + [--all | --condition=[KEY=VALUE,...] + | --condition-from-file=CONDITION_FROM_FILE] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Removes a policy binding from the IAM policy of a kms EkmConfig. A + binding consists of at least one member, a role, and an optional condition. + +EXAMPLES + To remove an IAM policy binding for the role of 'roles/editor' for the user + 'test-user@gmail.com' on the EkmConfig with location us-central1, run: + + $ gcloud alpha kms ekm-config remove-iam-policy-binding \ + --location='us-central1' --member='user:test-user@gmail.com' \ + --role='roles/editor' + + To remove an IAM policy binding with a condition of + expression='request.time < timestamp("2023-01-01T00:00:00Z")', + title='expires_end_of_2022', and description='Expires at midnight on + 2022-12-31' for the role of 'roles/editor' for the user + 'test-user@gmail.com' on the EkmConfig with location us-central1, run: + + $ gcloud alpha kms ekm-config remove-iam-policy-binding \ + --location='us-central1' --member='user:test-user@gmail.com' \ + --role='roles/editor' --condition='expression=request.time < + timestamp("2023-01-01T00:00:00Z"),title=expires_end_of_2022,description=Expires + at midnight on 2022-12-31' + + To remove all IAM policy bindings regardless of the condition for the role + of 'roles/editor' and for the user 'test-user@gmail.com' on the EkmConfig + with location us-central1, run: + + $ gcloud alpha kms ekm-config remove-iam-policy-binding laplace \ + --location='us-central1' --member='user:test-user@gmail.com' \ + --role='roles/editor' --all + + See https://cloud.google.com/iam/docs/managing-policies for details of + policy role and member types. + +REQUIRED FLAGS + Location resource - The KMS location resource. This represents a Cloud + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ set the property core/project. + + This must be specified. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. To + set the location attribute: + ▸ provide the argument --location on the command line. + + --member=PRINCIPAL + The principal to remove the binding for. Should be of the form + user|group|serviceAccount:email or domain:domain. + + Examples: user:test-user@gmail.com, group:admins@example.com, + serviceAccount:test123@example.domain.com, or + domain:example.domain.com. + + Deleted principals have an additional deleted: prefix and a ?uid=UID + suffix, where UID is a unique identifier for the principal. Example: + deleted:user:test-user@gmail.com?uid=123456789012345678901. + + Some resources also accept the following special values: + ◆ allUsers - Special identifier that represents anyone who is on the + internet, with or without a Google account. + ◆ allAuthenticatedUsers - Special identifier that represents anyone + who is authenticated with a Google account or a service account. + + --role=ROLE + The role to remove the principal from. + +OPTIONAL FLAGS + At most one of these can be specified: + + --all + Remove all bindings with this role and principal, irrespective of any + conditions. + + --condition=[KEY=VALUE,...] + The condition of the binding that you want to remove. When the + condition is explicitly specified as None (--condition=None), a + binding without a condition is removed. Otherwise, only a binding + with a condition that exactly matches the specified condition + (including the optional description) is removed. For more on + conditions, refer to the conditions overview guide: + https://cloud.google.com/iam/docs/conditions-overview + + When using the --condition flag, include the following key-value + pairs: + + expression + (Required) Condition expression that evaluates to True or False. + This uses a subset of Common Expression Language syntax. + + If the condition expression includes a comma, use a different + delimiter to separate the key-value pairs. Specify the delimiter + before listing the key-value pairs. For example, to specify a + colon (:) as the delimiter, do the following: + --condition=^:^title=TITLE:expression=EXPRESSION. For more + information, see + https://cloud.google.com/sdk/gcloud/reference/topic/escaping. + + title + (Required) A short string describing the purpose of the + expression. + + description + (Optional) Additional description for the expression. + + --condition-from-file=CONDITION_FROM_FILE + Path to a local JSON or YAML file that defines the condition. To see + available fields, see the help for --condition. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud kms ekm-config remove-iam-policy-binding + + $ gcloud beta kms ekm-config remove-iam-policy-binding + diff --git a/gcloud/alpha/kms/ekm-config/set-iam-policy b/gcloud/alpha/kms/ekm-config/set-iam-policy new file mode 100644 index 000000000..bca88010e --- /dev/null +++ b/gcloud/alpha/kms/ekm-config/set-iam-policy @@ -0,0 +1,59 @@ +NAME + gcloud alpha kms ekm-config set-iam-policy - set the IAM policy for an + EkmConfig + +SYNOPSIS + gcloud alpha kms ekm-config set-iam-policy POLICY_FILE --location=LOCATION + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Sets the IAM policy for the EkmConfig in a location as defined in a + JSON or YAML file. + + See https://cloud.google.com/iam/docs/managing-policies for details of the + policy file format and contents. + +EXAMPLES + The following command will read am IAM policy defined in a JSON file + 'policy.json' and set it for the EkmConfig with location us-central1: + + $ gcloud alpha kms ekm-config set-iam-policy policy.json \ + --location=us-central1 + +POSITIONAL ARGUMENTS + POLICY_FILE + JSON or YAML file with the IAM policy + +REQUIRED FLAGS + Location resource - The KMS location resource. This represents a Cloud + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ set the property core/project. + + This must be specified. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. To + set the location attribute: + ▸ provide the argument --location on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud kms ekm-config set-iam-policy + + $ gcloud beta kms ekm-config set-iam-policy + diff --git a/gcloud/alpha/kms/ekm-config/update b/gcloud/alpha/kms/ekm-config/update new file mode 100644 index 000000000..77fb629fc --- /dev/null +++ b/gcloud/alpha/kms/ekm-config/update @@ -0,0 +1,66 @@ +NAME + gcloud alpha kms ekm-config update - update the EkmConfig + +SYNOPSIS + gcloud alpha kms ekm-config update --location=LOCATION + [--default-ekm-connection=DEFAULT_EKM_CONNECTION] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) gcloud alpha kms ekm-config update can be used to update the + EkmConfig. Applies to all CryptoKeys and CryptoKeyVersions with a + protection level of external vpc. + +EXAMPLES + The following command sets the default ekm-connection to laplace for its + project foo and location us-east1: + + $ gcloud alpha kms ekm-config update --location=us-east1 \ + --default-ekm-connection="projects/foo/locations/us-east1/ekmCon\ + nections/laplace" + + The following command removes the default-ekm-connection in us-east1 for + the current project: + + $ gcloud alpha kms ekm-config update --location=us-east1 \ + --default-ekm-connection="" + +REQUIRED FLAGS + Location resource - The KMS location resource. This represents a Cloud + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ set the property core/project. + + This must be specified. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. To + set the location attribute: + ▸ provide the argument --location on the command line. + +OPTIONAL FLAGS + --default-ekm-connection=DEFAULT_EKM_CONNECTION + The resource name of the EkmConnection to be used as the default + EkmConnection for all external-vpc CryptoKeys in a project and + location. Can be an empty string to remove the default EkmConnection. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud kms ekm-config update + + $ gcloud beta kms ekm-config update + diff --git a/gcloud/alpha/kms/ekm-connections/create b/gcloud/alpha/kms/ekm-connections/create index f6ce7eeac..2a736dbdd 100644 --- a/gcloud/alpha/kms/ekm-connections/create +++ b/gcloud/alpha/kms/ekm-connections/create @@ -6,7 +6,9 @@ SYNOPSIS (EKM_CONNECTION : --location=LOCATION) --hostname=HOSTNAME --server-certificates-files=[SERVER_CERTIFICATES,...] --service-directory-service=SERVICE_DIRECTORY_SERVICE - [--endpoint-filter=ENDPOINT_FILTER] [GCLOUD_WIDE_FLAG ...] + [--endpoint-filter=ENDPOINT_FILTER] + [--crypto-space-path=CRYPTO_SPACE_PATH + --key-management-mode=KEY_MANAGEMENT_MODE] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Creates a new connection within the given location. @@ -20,6 +22,16 @@ EXAMPLES --endpoint-filter="foo > bar" --hostname="hostname.foo" \ --server-certificates-files=foo.pem,bar.pem + The following command creates an ekm connection named laplace within the + location us-central1 in cloud-kms key management mode with the required + crypto-space-path : + + $ gcloud alpha kms ekm-connections create laplace \ + --location=us-central1 --service-directory-service="foo" \ + --endpoint-filter="foo > bar" --hostname="hostname.foo" \ + --key-management-mode=cloud-kms --crypto-space-path="foo" \ + --server-certificates-files=foo.pem,bar.pem + POSITIONAL ARGUMENTS Ekmconnection resource - The KMS ekm connection resource. The arguments in this group can be used to specify the attributes of this resource. (NOTE) @@ -64,6 +76,22 @@ OPTIONAL FLAGS The filter applied to the endpoints of the resolved service. If no filter is specified, all endpoints will be considered. + Specifies the key management mode for the EkmConnection and associated + fields. + + --crypto-space-path=CRYPTO_SPACE_PATH + Crypto space path for the EkmConnection. Required during + EkmConnection creation if --key-management-mode=cloud-kms. + + --key-management-mode=KEY_MANAGEMENT_MODE + Key management mode of the ekm connection. An EkmConnection in + cloud-kms mode means Cloud KMS will attempt to create and manage the + key material that resides on the EKM for crypto keys created with + this EkmConnection. An EkmConnection in manual mode means the + external key material will not be managed by Cloud KMS. Omitting the + flag defaults to manual. KEY_MANAGEMENT_MODE must be one of: manual, + cloud-kms. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/kms/ekm-connections/update b/gcloud/alpha/kms/ekm-connections/update index 172234f1e..99a0237eb 100644 --- a/gcloud/alpha/kms/ekm-connections/update +++ b/gcloud/alpha/kms/ekm-connections/update @@ -7,7 +7,8 @@ SYNOPSIS [--endpoint-filter=ENDPOINT_FILTER] [--hostname=HOSTNAME] [--server-certificates-files=[SERVER_CERTIFICATES,...]] [--service-directory-service=SERVICE_DIRECTORY_SERVICE] - [GCLOUD_WIDE_FLAG ...] + [--crypto-space-path=CRYPTO_SPACE_PATH + --key-management-mode=KEY_MANAGEMENT_MODE] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) gcloud alpha kms ekm-connections update can be used to update the @@ -19,7 +20,7 @@ EXAMPLES resolver's hostname within location us-east1: $ gcloud alpha kms ekm-connections update laplace \ - --location=us-east1 --hostname=newhostname.foo \ + --location=us-east1 --hostname=newhostname.foo The following command updates an ekm-connection named laplace service resolver's service_directory_service, endpoint_filter, hostname, and @@ -30,6 +31,12 @@ EXAMPLES --endpoint-filter="foo > bar" --hostname="newhostname.foo" \ --server-certificates-files=foo.pem,bar.pem + The following command updates an ekm-connection named laplace + key_management_mode within location us-east1: + + $ gcloud alpha kms ekm-connections update laplace \ + --location=us-east1 --key-management-mode=manual + POSITIONAL ARGUMENTS Ekmconnection resource - The KMS ekm connection resource. The arguments in this group can be used to specify the attributes of this resource. (NOTE) @@ -73,6 +80,22 @@ FLAGS The resource name of the Service Directory service pointing to an EKM replica. + Specifies the key management mode for the EkmConnection and associated + fields. + + --crypto-space-path=CRYPTO_SPACE_PATH + Crypto space path for the EkmConnection. Required during + EkmConnection creation if --key-management-mode=cloud-kms. + + --key-management-mode=KEY_MANAGEMENT_MODE + Key management mode of the ekm connection. An EkmConnection in + cloud-kms mode means Cloud KMS will attempt to create and manage the + key material that resides on the EKM for crypto keys created with + this EkmConnection. An EkmConnection in manual mode means the + external key material will not be managed by Cloud KMS. Omitting the + flag defaults to manual. KEY_MANAGEMENT_MODE must be one of: manual, + cloud-kms. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/kms/help b/gcloud/alpha/kms/help index e032189d3..72b37ffd6 100644 --- a/gcloud/alpha/kms/help +++ b/gcloud/alpha/kms/help @@ -28,6 +28,9 @@ GCLOUD WIDE FLAGS GROUPS GROUP is one of the following: + ekm-config + (ALPHA) Update and retrieve the EkmConfig. + ekm-connections (ALPHA) Create and manage ekm connections. diff --git a/gcloud/alpha/ml-engine/jobs/submit/training b/gcloud/alpha/ml-engine/jobs/submit/training index 82223575b..19d689661 100644 --- a/gcloud/alpha/ml-engine/jobs/submit/training +++ b/gcloud/alpha/ml-engine/jobs/submit/training @@ -149,7 +149,7 @@ FLAGS type Type of the accelerator. Choices are - nvidia-tesla-a100,nvidia-tesla-k80,nvidia-tesla-p100,nvidia-tesla-p4,nvidia-tesla-t4,nvidia-tesla-v100,tpu-v2,tpu-v2-pod,tpu-v3,tpu-v3-pod,tpu-v4-pod + nvidia-tesla-a100,nvidia-tesla-k80,nvidia-tesla-p100,nvidia-tesla-p4,nvidia-tesla-t4,nvidia-tesla-v100,tpu-v2,tpu-v2-pod,tpu-v3,tpu-v3-pod,tpu-v4 count Number of accelerators to attach to each machine running the job. @@ -200,7 +200,7 @@ FLAGS type Type of the accelerator. Choices are - nvidia-tesla-a100,nvidia-tesla-k80,nvidia-tesla-p100,nvidia-tesla-p4,nvidia-tesla-t4,nvidia-tesla-v100,tpu-v2,tpu-v2-pod,tpu-v3,tpu-v3-pod,tpu-v4-pod + nvidia-tesla-a100,nvidia-tesla-k80,nvidia-tesla-p100,nvidia-tesla-p4,nvidia-tesla-t4,nvidia-tesla-v100,tpu-v2,tpu-v2-pod,tpu-v3,tpu-v3-pod,tpu-v4 count Number of accelerators to attach to each machine running the job. @@ -322,7 +322,7 @@ FLAGS type Type of the accelerator. Choices are - nvidia-tesla-a100,nvidia-tesla-k80,nvidia-tesla-p100,nvidia-tesla-p4,nvidia-tesla-t4,nvidia-tesla-v100,tpu-v2,tpu-v2-pod,tpu-v3,tpu-v3-pod,tpu-v4-pod + nvidia-tesla-a100,nvidia-tesla-k80,nvidia-tesla-p100,nvidia-tesla-p4,nvidia-tesla-t4,nvidia-tesla-v100,tpu-v2,tpu-v2-pod,tpu-v3,tpu-v3-pod,tpu-v4 count Number of accelerators to attach to each machine running the job. diff --git a/gcloud/alpha/ml/speech/recognizers/create b/gcloud/alpha/ml/speech/recognizers/create index a4c73b0aa..2d99c69be 100644 --- a/gcloud/alpha/ml/speech/recognizers/create +++ b/gcloud/alpha/ml/speech/recognizers/create @@ -5,15 +5,17 @@ NAME SYNOPSIS gcloud alpha ml speech recognizers create (RECOGNIZER : --location=LOCATION) --language-codes=[LANGUAGE_CODE,...] - --model=MODEL [--async] [--display-name=DISPLAY_NAME] + --model=MODEL [--async] [--audio-channel-count=AUDIO_CHANNEL_COUNT] + [--display-name=DISPLAY_NAME] [--enable-automatic-punctuation=ENABLE_AUTOMATIC_PUNCTUATION] [--enable-spoken-emojis=ENABLE_SPOKEN_EMOJIS] [--enable-spoken-punctuation=ENABLE_SPOKEN_PUNCTUATION] [--enable-word-confidence=ENABLE_WORD_CONFIDENCE] [--enable-word-time-offsets=ENABLE_WORD_TIME_OFFSETS] - [--max-speaker-count=MAX_SPEAKER_COUNT] + [--encoding=ENCODING] [--max-speaker-count=MAX_SPEAKER_COUNT] [--min-speaker-count=MIN_SPEAKER_COUNT] - [--profanity-filter=PROFANITY_FILTER] [GCLOUD_WIDE_FLAG ...] + [--profanity-filter=PROFANITY_FILTER] [--sample-rate=SAMPLE_RATE] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Create a speech-to-text recognizer. @@ -60,6 +62,10 @@ OPTIONAL FLAGS Return immediately, without waiting for the operation in progress to complete. The default is False. + --audio-channel-count=AUDIO_CHANNEL_COUNT + Number of channels present in the audio data sent for recognition. + Supported for LINEAR16, MULAW, ALAW. + --display-name=DISPLAY_NAME Name of this recognizer as it appears in UIs. @@ -80,6 +86,10 @@ OPTIONAL FLAGS --enable-word-time-offsets=ENABLE_WORD_TIME_OFFSETS If true, the top result includes a list of words and their timestamps. + --encoding=ENCODING + Encoding format of the provided audio. For headerless formats, must be + set to LINEAR16, MULAW, or ALAW. For other formats, set to AUTO. + --max-speaker-count=MAX_SPEAKER_COUNT Maximum number of speakers in the conversation. @@ -89,6 +99,10 @@ OPTIONAL FLAGS --profanity-filter=PROFANITY_FILTER If true, the server will censor profanities. + --sample-rate=SAMPLE_RATE + Sample rate in Hertz of the audio data sent for recognition. Required + if using explicit decoding. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/ml/speech/recognizers/update b/gcloud/alpha/ml/speech/recognizers/update index c44f899c6..c41d2d08b 100644 --- a/gcloud/alpha/ml/speech/recognizers/update +++ b/gcloud/alpha/ml/speech/recognizers/update @@ -5,16 +5,18 @@ NAME SYNOPSIS gcloud alpha ml speech recognizers update (RECOGNIZER : --location=LOCATION) [--async] + [--audio-channel-count=AUDIO_CHANNEL_COUNT] [--display-name=DISPLAY_NAME] [--enable-automatic-punctuation=ENABLE_AUTOMATIC_PUNCTUATION] [--enable-spoken-emojis=ENABLE_SPOKEN_EMOJIS] [--enable-spoken-punctuation=ENABLE_SPOKEN_PUNCTUATION] [--enable-word-confidence=ENABLE_WORD_CONFIDENCE] [--enable-word-time-offsets=ENABLE_WORD_TIME_OFFSETS] - [--language-codes=[LANGUAGE_CODE,...]] + [--encoding=ENCODING] [--language-codes=[LANGUAGE_CODE,...]] [--max-speaker-count=MAX_SPEAKER_COUNT] [--min-speaker-count=MIN_SPEAKER_COUNT] [--model=MODEL] - [--profanity-filter=PROFANITY_FILTER] [GCLOUD_WIDE_FLAG ...] + [--profanity-filter=PROFANITY_FILTER] [--sample-rate=SAMPLE_RATE] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Update a Speech-to-text recognizer. @@ -52,6 +54,10 @@ FLAGS Return immediately, without waiting for the operation in progress to complete. The default is False. + --audio-channel-count=AUDIO_CHANNEL_COUNT + Number of channels present in the audio data sent for recognition. + Supported for LINEAR16, MULAW, ALAW. + --display-name=DISPLAY_NAME Name of this recognizer as it appears in UIs. @@ -72,6 +78,10 @@ FLAGS --enable-word-time-offsets=ENABLE_WORD_TIME_OFFSETS If true, the top result includes a list of words and their timestamps. + --encoding=ENCODING + Encoding format of the provided audio. For headerless formats, must be + set to LINEAR16, MULAW, or ALAW. For other formats, set to AUTO. + --language-codes=[LANGUAGE_CODE,...] Language code is one of en-US, en-GB, fr-FR. Check documentation (https://cloud.google.com/speech-to-text/docs/multiple-languages) for @@ -89,6 +99,10 @@ FLAGS --profanity-filter=PROFANITY_FILTER If true, the server will censor profanities. + --sample-rate=SAMPLE_RATE + Sample rate in Hertz of the audio data sent for recognition. Required + if using explicit decoding. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/mps/help b/gcloud/alpha/mps/help new file mode 100644 index 000000000..1b2d90eed --- /dev/null +++ b/gcloud/alpha/mps/help @@ -0,0 +1,26 @@ +NAME + gcloud alpha mps - manage Marketplace Solutions resources + +SYNOPSIS + gcloud alpha mps GROUP [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Manage Marketplace Solutions resources. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +GROUPS + GROUP is one of the following: + + instances + (ALPHA) Manage instances in MarketplaceSolutions. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/mps/instances/help b/gcloud/alpha/mps/instances/help new file mode 100644 index 000000000..1a642b8e4 --- /dev/null +++ b/gcloud/alpha/mps/instances/help @@ -0,0 +1,20 @@ +NAME + gcloud alpha mps instances - manage instances in MarketplaceSolutions + +SYNOPSIS + gcloud alpha mps instances COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Manage instances in MarketplaceSolutions. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/app/instances/scp b/gcloud/app/instances/scp index 444de4631..d7a3447fb 100644 --- a/gcloud/app/instances/scp +++ b/gcloud/app/instances/scp @@ -5,7 +5,7 @@ NAME SYNOPSIS gcloud app instances scp [INSTANCE:]SRC [[INSTANCE:]SRC ...] [INSTANCE:]DEST [--compress] [--recurse] [--service=SERVICE] - [--version=VERSION] [GCLOUD_WIDE_FLAG ...] + [--tunnel-through-iap] [--version=VERSION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION gcloud app instances scp lets you remotely copy files to or from an App @@ -54,6 +54,13 @@ FLAGS --service=SERVICE The service ID. + --tunnel-through-iap + Tunnel the ssh connection through Identity-Aware Proxy for TCP + forwarding. + + To learn more, see the IAP for TCP forwarding documentation + (https://cloud.google.com/iap/docs/tcp-forwarding-overview). + --version=VERSION The version ID. diff --git a/gcloud/app/instances/ssh b/gcloud/app/instances/ssh index 1b3892f9d..89604a7bf 100644 --- a/gcloud/app/instances/ssh +++ b/gcloud/app/instances/ssh @@ -4,8 +4,8 @@ NAME SYNOPSIS gcloud app instances ssh INSTANCE [--container=CONTAINER] - [--service=SERVICE] [--version=VERSION] [GCLOUD_WIDE_FLAG ...] - [-- COMMAND ...] + [--service=SERVICE] [--tunnel-through-iap] [--version=VERSION] + [GCLOUD_WIDE_FLAG ...] [-- COMMAND ...] DESCRIPTION gcloud app instances ssh lets you remotely log in to your running App @@ -59,6 +59,13 @@ FLAGS --service=SERVICE The service ID. + --tunnel-through-iap + Tunnel the ssh connection through Identity-Aware Proxy for TCP + forwarding. + + To learn more, see the IAP for TCP forwarding documentation + (https://cloud.google.com/iap/docs/tcp-forwarding-overview). + --version=VERSION The version ID. diff --git a/gcloud/artifacts/repositories/create b/gcloud/artifacts/repositories/create index 8f3355a5b..733ca969a 100644 --- a/gcloud/artifacts/repositories/create +++ b/gcloud/artifacts/repositories/create @@ -5,9 +5,9 @@ NAME SYNOPSIS gcloud artifacts repositories create (REPOSITORY : --location=LOCATION) --repository-format=REPOSITORY_FORMAT [--allow-snapshot-overwrites] - [--async] [--description=DESCRIPTION] [--kms-key=KMS_KEY] - [--labels=[KEY=VALUE,...]] [--mode=MODE; default="NONE"] - [--remote-docker-repo=REMOTE_DOCKER_REPO] + [--async] [--description=DESCRIPTION] [--immutable-tags] + [--kms-key=KMS_KEY] [--labels=[KEY=VALUE,...]] + [--mode=MODE; default="NONE"] [--remote-docker-repo=REMOTE_DOCKER_REPO] [--remote-mvn-repo=REMOTE_MVN_REPO] [--remote-npm-repo=REMOTE_NPM_REPO] [--remote-python-repo=REMOTE_PYTHON_REPO] [--remote-repo-config-desc=REMOTE_REPO_CONFIG_DESC] @@ -98,6 +98,11 @@ OPTIONAL FLAGS --description=DESCRIPTION Description for the repository. + --immutable-tags + (Docker only) Prevent changes to tagged images in the repository. Tags + cannot be deleted or moved to a different image digest, and tagged + images cannot be deleted. + --kms-key=KMS_KEY Name of the encryption key that's used for encrypting the contents of the repository. diff --git a/gcloud/artifacts/repositories/update b/gcloud/artifacts/repositories/update index 215b7ab03..a3a54444b 100644 --- a/gcloud/artifacts/repositories/update +++ b/gcloud/artifacts/repositories/update @@ -4,8 +4,8 @@ NAME SYNOPSIS gcloud artifacts repositories update (REPOSITORY : --location=LOCATION) - [--description=DESCRIPTION] [--update-labels=[KEY=VALUE,...]] - [--upstream-policy-file=FILE] + [--description=DESCRIPTION] [--immutable-tags] + [--update-labels=[KEY=VALUE,...]] [--upstream-policy-file=FILE] [--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -57,6 +57,11 @@ FLAGS --description=DESCRIPTION Description for the repository. + --immutable-tags + (Docker only) Prevent changes to tagged images in the repository. Tags + cannot be deleted or moved to a different image digest, and tagged + images cannot be deleted. + --update-labels=[KEY=VALUE,...] List of label KEY=VALUE pairs to update. If a label exists, its value is modified. Otherwise, a new label is created. diff --git a/gcloud/beta/ai-platform/jobs/submit/training b/gcloud/beta/ai-platform/jobs/submit/training index 7c09018f6..eaf8f3d0c 100644 --- a/gcloud/beta/ai-platform/jobs/submit/training +++ b/gcloud/beta/ai-platform/jobs/submit/training @@ -149,7 +149,7 @@ FLAGS type Type of the accelerator. Choices are - nvidia-tesla-a100,nvidia-tesla-k80,nvidia-tesla-p100,nvidia-tesla-p4,nvidia-tesla-t4,nvidia-tesla-v100,tpu-v2,tpu-v2-pod,tpu-v3,tpu-v3-pod,tpu-v4-pod + nvidia-tesla-a100,nvidia-tesla-k80,nvidia-tesla-p100,nvidia-tesla-p4,nvidia-tesla-t4,nvidia-tesla-v100,tpu-v2,tpu-v2-pod,tpu-v3,tpu-v3-pod,tpu-v4 count Number of accelerators to attach to each machine running the job. @@ -200,7 +200,7 @@ FLAGS type Type of the accelerator. Choices are - nvidia-tesla-a100,nvidia-tesla-k80,nvidia-tesla-p100,nvidia-tesla-p4,nvidia-tesla-t4,nvidia-tesla-v100,tpu-v2,tpu-v2-pod,tpu-v3,tpu-v3-pod,tpu-v4-pod + nvidia-tesla-a100,nvidia-tesla-k80,nvidia-tesla-p100,nvidia-tesla-p4,nvidia-tesla-t4,nvidia-tesla-v100,tpu-v2,tpu-v2-pod,tpu-v3,tpu-v3-pod,tpu-v4 count Number of accelerators to attach to each machine running the job. @@ -322,7 +322,7 @@ FLAGS type Type of the accelerator. Choices are - nvidia-tesla-a100,nvidia-tesla-k80,nvidia-tesla-p100,nvidia-tesla-p4,nvidia-tesla-t4,nvidia-tesla-v100,tpu-v2,tpu-v2-pod,tpu-v3,tpu-v3-pod,tpu-v4-pod + nvidia-tesla-a100,nvidia-tesla-k80,nvidia-tesla-p100,nvidia-tesla-p4,nvidia-tesla-t4,nvidia-tesla-v100,tpu-v2,tpu-v2-pod,tpu-v3,tpu-v3-pod,tpu-v4 count Number of accelerators to attach to each machine running the job. diff --git a/gcloud/beta/builds/triggers/create/manual b/gcloud/beta/builds/triggers/create/manual index 111ebe229..ed2ba8e55 100644 --- a/gcloud/beta/builds/triggers/create/manual +++ b/gcloud/beta/builds/triggers/create/manual @@ -7,11 +7,12 @@ SYNOPSIS (--trigger-config=PATH | [(--build-config=PATH | --inline-config=PATH | [--dockerfile=DOCKERFILE : --dockerfile-dir=DOCKERFILE_DIR; default="/" --dockerfile-image=DOCKERFILE_IMAGE]) - : --description=DESCRIPTION - --github-enterprise-config=GITHUB_ENTERPRISE_CONFIG --name=NAME - --region=REGION --require-approval --service-account=SERVICE_ACCOUNT - --substitutions=[KEY=VALUE,...] - --repo=REPO --repo-type=REPO_TYPE (--branch=BRANCH | --tag=TAG)]) + : --description=DESCRIPTION --name=NAME --region=REGION + --require-approval --service-account=SERVICE_ACCOUNT + --substitutions=[KEY=VALUE,...] (--branch=BRANCH + | --tag=TAG) (--repository=REPOSITORY + | [--repo=REPO --repo-type=REPO_TYPE + : --github-enterprise-config=GITHUB_ENTERPRISE_CONFIG])]) [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -26,6 +27,14 @@ EXAMPLES --repo=https://www.github.com/owner/repo --repo-type=GITHUB \ --branch=my-branch + To create a manual trigger that builds off branch my-branch in a 2nd-gen + GitHub repository resource: + + $ gcloud beta builds triggers create manual \ + --name=my-manual-trigger --build-config=cloudbuild.yaml \ + --repository=projects/my-proj/locations/us-west1/connections/\ + my-conn/repositories/my-repo --branch=my-branch + REQUIRED FLAGS Exactly one of these must be specified: @@ -39,12 +48,6 @@ REQUIRED FLAGS --description=DESCRIPTION Build trigger description. - --github-enterprise-config=GITHUB_ENTERPRISE_CONFIG - The resource name of the GitHub Enterprise config that should be - applied to this source. Format: - projects/{project}/locations/{location}/githubEnterpriseConfigs/{id} - or projects/{project}/githubEnterpriseConfigs/{id} - --name=NAME Build trigger name. @@ -128,21 +131,7 @@ REQUIRED FLAGS Use a build configuration (cloudbuild.yaml) file for building multiple images in a single trigger. - Flags for repository information - - --repo=REPO - URI of the repository. Currently only HTTP URIs for GitHub and - Cloud Source Repositories are supported. - - This flag argument must be specified if any of the other - arguments in this group are specified. - - --repo-type=REPO_TYPE - Type of the repository. Currently only GitHub and Cloud Source - Repository types are supported. - - This flag argument must be specified if any of the other - arguments in this group are specified. + Flags for repository and branch information Exactly one of these must be specified: @@ -152,6 +141,36 @@ REQUIRED FLAGS --tag=TAG Tag to build. + Flags for repository information + + Exactly one of these must be specified: + + --repository=REPOSITORY + Repository resource (2nd gen) to use, in the format + "projects/*/locations/*/connections/*/repositories/". + + 1st-gen repository settings. + + --repo=REPO + URI of the repository (1st gen). Currently only HTTP URIs for + GitHub and Cloud Source Repositories are supported. + + This flag argument must be specified if any of the other + arguments in this group are specified. + + --repo-type=REPO_TYPE + Type of the repository (1st gen). Currently only GitHub and + Cloud Source Repository types are supported. + + This flag argument must be specified if any of the other + arguments in this group are specified. + + --github-enterprise-config=GITHUB_ENTERPRISE_CONFIG + The resource name of the GitHub Enterprise config that should + be applied to this source (1st gen). Format: + projects/{project}/locations/{location}/githubEnterpriseConfigs/{id} + or projects/{project}/githubEnterpriseConfigs/{id} + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/beta/builds/triggers/create/pubsub b/gcloud/beta/builds/triggers/create/pubsub index 8b0c834df..b98d0f074 100644 --- a/gcloud/beta/builds/triggers/create/pubsub +++ b/gcloud/beta/builds/triggers/create/pubsub @@ -8,12 +8,13 @@ SYNOPSIS | --inline-config=PATH | [--dockerfile=DOCKERFILE : --dockerfile-dir=DOCKERFILE_DIR; default="/" --dockerfile-image=DOCKERFILE_IMAGE]) - : --description=DESCRIPTION - --github-enterprise-config=GITHUB_ENTERPRISE_CONFIG --name=NAME - --region=REGION --require-approval --service-account=SERVICE_ACCOUNT + : --description=DESCRIPTION --name=NAME --region=REGION + --require-approval --service-account=SERVICE_ACCOUNT --subscription-filter=SUBSCRIPTION_FILTER - --substitutions=[KEY=VALUE,...] - --repo=REPO --repo-type=REPO_TYPE (--branch=BRANCH | --tag=TAG)]) + --substitutions=[KEY=VALUE,...] (--branch=BRANCH + | --tag=TAG) (--repository=REPOSITORY + | [--repo=REPO --repo-type=REPO_TYPE + : --github-enterprise-config=GITHUB_ENTERPRISE_CONFIG])]) [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -31,6 +32,16 @@ EXAMPLES --repo=https://www.github.com/owner/repo --repo-type=GITHUB \ --branch=my-branch + To create a Pub/Sub trigger that listens to topic my-topic and builds off + branch my-branch in a 2nd-gen GitHub repository resource: + + $ gcloud beta builds triggers create pubsub \ + --name=my-pubsub-trigger \ + --service-account="projects/my-project/serviceAccounts/my-byosa@\ + my-project.iam.gserviceaccount.com" \ + --repository=projects/my-proj/locations/us-west1/connections/\ + my-conn/repositories/my-repo --branch=my-branch + REQUIRED FLAGS Exactly one of these must be specified: @@ -50,12 +61,6 @@ REQUIRED FLAGS --description=DESCRIPTION Build trigger description. - --github-enterprise-config=GITHUB_ENTERPRISE_CONFIG - The resource name of the GitHub Enterprise config that should be - applied to this source. Format: - projects/{project}/locations/{location}/githubEnterpriseConfigs/{id} - or projects/{project}/githubEnterpriseConfigs/{id} - --name=NAME Build trigger name. @@ -144,21 +149,7 @@ REQUIRED FLAGS Use a build configuration (cloudbuild.yaml) file for building multiple images in a single trigger. - Flags for repository information - - --repo=REPO - URI of the repository. Currently only HTTP URIs for GitHub and - Cloud Source Repositories are supported. - - This flag argument must be specified if any of the other - arguments in this group are specified. - - --repo-type=REPO_TYPE - Type of the repository. Currently only GitHub and Cloud Source - Repository types are supported. - - This flag argument must be specified if any of the other - arguments in this group are specified. + Flags for repository and branch information Exactly one of these must be specified: @@ -168,6 +159,36 @@ REQUIRED FLAGS --tag=TAG Tag to build. + Flags for repository information + + Exactly one of these must be specified: + + --repository=REPOSITORY + Repository resource (2nd gen) to use, in the format + "projects/*/locations/*/connections/*/repositories/". + + 1st-gen repository settings. + + --repo=REPO + URI of the repository (1st gen). Currently only HTTP URIs for + GitHub and Cloud Source Repositories are supported. + + This flag argument must be specified if any of the other + arguments in this group are specified. + + --repo-type=REPO_TYPE + Type of the repository (1st gen). Currently only GitHub and + Cloud Source Repository types are supported. + + This flag argument must be specified if any of the other + arguments in this group are specified. + + --github-enterprise-config=GITHUB_ENTERPRISE_CONFIG + The resource name of the GitHub Enterprise config that should + be applied to this source (1st gen). Format: + projects/{project}/locations/{location}/githubEnterpriseConfigs/{id} + or projects/{project}/githubEnterpriseConfigs/{id} + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/beta/builds/triggers/create/webhook b/gcloud/beta/builds/triggers/create/webhook index 5d30f9f2b..756e6dd35 100644 --- a/gcloud/beta/builds/triggers/create/webhook +++ b/gcloud/beta/builds/triggers/create/webhook @@ -8,12 +8,13 @@ SYNOPSIS | --inline-config=PATH | [--dockerfile=DOCKERFILE : --dockerfile-dir=DOCKERFILE_DIR; default="/" --dockerfile-image=DOCKERFILE_IMAGE]) - : --description=DESCRIPTION - --github-enterprise-config=GITHUB_ENTERPRISE_CONFIG --name=NAME - --region=REGION --require-approval --service-account=SERVICE_ACCOUNT + : --description=DESCRIPTION --name=NAME --region=REGION + --require-approval --service-account=SERVICE_ACCOUNT --subscription-filter=SUBSCRIPTION_FILTER - --substitutions=[KEY=VALUE,...] - --repo=REPO --repo-type=REPO_TYPE (--branch=BRANCH | --tag=TAG)]) + --substitutions=[KEY=VALUE,...] (--branch=BRANCH + | --tag=TAG) (--repository=REPOSITORY + | [--repo=REPO --repo-type=REPO_TYPE + : --github-enterprise-config=GITHUB_ENTERPRISE_CONFIG])]) [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -32,6 +33,19 @@ EXAMPLES --repo=https://www.github.com/owner/repo --repo-type=GITHUB \ --branch=my-branch + To create a Webhook trigger that requires secret + projects/my-project/secrets/my-secret/versions/2 and builds off branch + my-branch in a 2nd-gen GitHub repository: + + $ gcloud beta builds triggers create webhook \ + --name=my-webhook-trigger \ + --service-account="projects/my-project/serviceAccounts/my-byosa@\ + my-project.iam.gserviceaccount.com" \ + --secret=projects/my-project/secrets/my-secret/versions/2 \ + --branch=my-branch \ + --repository=projects/my-proj/locations/us-west1/connections/\ + my-conn/repositories/my-repo + REQUIRED FLAGS Exactly one of these must be specified: @@ -53,12 +67,6 @@ REQUIRED FLAGS --description=DESCRIPTION Build trigger description. - --github-enterprise-config=GITHUB_ENTERPRISE_CONFIG - The resource name of the GitHub Enterprise config that should be - applied to this source. Format: - projects/{project}/locations/{location}/githubEnterpriseConfigs/{id} - or projects/{project}/githubEnterpriseConfigs/{id} - --name=NAME Build trigger name. @@ -147,21 +155,7 @@ REQUIRED FLAGS Use a build configuration (cloudbuild.yaml) file for building multiple images in a single trigger. - Flags for repository information - - --repo=REPO - URI of the repository. Currently only HTTP URIs for GitHub and - Cloud Source Repositories are supported. - - This flag argument must be specified if any of the other - arguments in this group are specified. - - --repo-type=REPO_TYPE - Type of the repository. Currently only GitHub and Cloud Source - Repository types are supported. - - This flag argument must be specified if any of the other - arguments in this group are specified. + Flags for repository and branch information Exactly one of these must be specified: @@ -171,6 +165,36 @@ REQUIRED FLAGS --tag=TAG Tag to build. + Flags for repository information + + Exactly one of these must be specified: + + --repository=REPOSITORY + Repository resource (2nd gen) to use, in the format + "projects/*/locations/*/connections/*/repositories/". + + 1st-gen repository settings. + + --repo=REPO + URI of the repository (1st gen). Currently only HTTP URIs for + GitHub and Cloud Source Repositories are supported. + + This flag argument must be specified if any of the other + arguments in this group are specified. + + --repo-type=REPO_TYPE + Type of the repository (1st gen). Currently only GitHub and + Cloud Source Repository types are supported. + + This flag argument must be specified if any of the other + arguments in this group are specified. + + --github-enterprise-config=GITHUB_ENTERPRISE_CONFIG + The resource name of the GitHub Enterprise config that should + be applied to this source (1st gen). Format: + projects/{project}/locations/{location}/githubEnterpriseConfigs/{id} + or projects/{project}/githubEnterpriseConfigs/{id} + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/beta/compute/disks/create b/gcloud/beta/compute/disks/create index 3deccbb68..c0bd975b9 100644 --- a/gcloud/beta/compute/disks/create +++ b/gcloud/beta/compute/disks/create @@ -81,7 +81,8 @@ FLAGS their boot disks. See the descriptions of supported features at: https://cloud.google.com/compute/docs/images/create-delete-deprecate-private-images#guest-os-features. GUEST_OS_FEATURE must be one of: GVNIC, MULTI_IP_SUBNET, SEV_CAPABLE, - SEV_SNP_CAPABLE, UEFI_COMPATIBLE, VIRTIO_SCSI_MULTIQUEUE, WINDOWS. + SEV_LIVE_MIGRATABLE, SEV_SNP_CAPABLE, UEFI_COMPATIBLE, + VIRTIO_SCSI_MULTIQUEUE, WINDOWS. --interface=INTERFACE Specifies the disk interface to use for attaching this disk. Valid diff --git a/gcloud/beta/compute/images/create b/gcloud/beta/compute/images/create index 0a2b9f85c..66c97b4b8 100644 --- a/gcloud/beta/compute/images/create +++ b/gcloud/beta/compute/images/create @@ -152,7 +152,8 @@ OPTIONAL FLAGS their boot disks. See the descriptions of supported features at: https://cloud.google.com/compute/docs/images/create-delete-deprecate-private-images#guest-os-features. GUEST_OS_FEATURE must be one of: GVNIC, MULTI_IP_SUBNET, SEV_CAPABLE, - SEV_SNP_CAPABLE, UEFI_COMPATIBLE, VIRTIO_SCSI_MULTIQUEUE, WINDOWS. + SEV_LIVE_MIGRATABLE, SEV_SNP_CAPABLE, UEFI_COMPATIBLE, + VIRTIO_SCSI_MULTIQUEUE, WINDOWS. --key-exchange-key-file=[KEK_VALUE,...] Comma-separated list of file paths that point to X.509 certificates in diff --git a/gcloud/beta/compute/instance-templates/create b/gcloud/beta/compute/instance-templates/create index b1939c9df..556e54194 100644 --- a/gcloud/beta/compute/instance-templates/create +++ b/gcloud/beta/compute/instance-templates/create @@ -22,8 +22,9 @@ SYNOPSIS [--internal-ipv6-prefix-length=INTERNAL_IPV6_PREFIX_LENGTH] [--ipv6-network-tier=IPV6_NETWORK_TIER] [--key-revocation-action-type=POLICY] [--labels=[KEY=VALUE,...]] - [--local-ssd=[device-name=DEVICE-NAME],[interface=INTERFACE]] - [--machine-type=MACHINE_TYPE] [--maintenance-policy=MAINTENANCE_POLICY] + [--local-ssd=[device-name=DEVICE-NAME], + [interface=INTERFACE],[size=SIZE]] [--machine-type=MACHINE_TYPE] + [--maintenance-policy=MAINTENANCE_POLICY] [--max-run-duration=MAX_RUN_DURATION] [--mesh=[gke-cluster=GKE-CLUSTER],[workload=WORKLOAD]] [--metadata=KEY=VALUE,[KEY=VALUE,...]] @@ -426,7 +427,7 @@ FLAGS contain only hyphens (-), underscores (_), lowercase characters, and numbers. - --local-ssd=[device-name=DEVICE-NAME],[interface=INTERFACE] + --local-ssd=[device-name=DEVICE-NAME],[interface=INTERFACE],[size=SIZE] Attaches a local SSD to the instances. device-name @@ -440,6 +441,12 @@ FLAGS supported by more guest operating systems. NVME might provide higher performance. + size + Optional. The only valid value is 375GB. Specify the --local-ssd + flag multiple times if you need multiple 375GB local SSD + partitions. You can specify a maximum of 24 local SSDs for a + maximum of 9TB attached to an instance. + --machine-type=MACHINE_TYPE Specifies the machine type used for the instances. To get a list of available machine types, run 'gcloud compute machine-types list'. If diff --git a/gcloud/beta/compute/instances/bulk/create b/gcloud/beta/compute/instances/bulk/create index 48e6cb608..7b5b13f57 100644 --- a/gcloud/beta/compute/instances/bulk/create +++ b/gcloud/beta/compute/instances/bulk/create @@ -20,7 +20,8 @@ SYNOPSIS [--host-error-timeout-seconds=HOST_ERROR_TIMEOUT_SECONDS] [--instance-termination-action=INSTANCE_TERMINATION_ACTION] [--labels=[KEY=VALUE,...]] - [--local-ssd=[device-name=DEVICE-NAME],[interface=INTERFACE]] + [--local-ssd=[device-name=DEVICE-NAME], + [interface=INTERFACE],[size=SIZE]] [--location-policy=[ZONE=POLICY,...]] [--machine-type=MACHINE_TYPE] [--max-run-duration=MAX_RUN_DURATION] [--metadata=KEY=VALUE,[KEY=VALUE,...]] @@ -425,7 +426,7 @@ OPTIONAL FLAGS contain only hyphens (-), underscores (_), lowercase characters, and numbers. - --local-ssd=[device-name=DEVICE-NAME],[interface=INTERFACE] + --local-ssd=[device-name=DEVICE-NAME],[interface=INTERFACE],[size=SIZE] Attaches a local SSD to the instances. device-name @@ -439,6 +440,12 @@ OPTIONAL FLAGS supported by more guest operating systems. NVME might provide higher performance. + size + Optional. The only valid value is 375GB. Specify the --local-ssd + flag multiple times if you need multiple 375GB local SSD + partitions. You can specify a maximum of 24 local SSDs for a + maximum of 9TB attached to an instance. + --location-policy=[ZONE=POLICY,...] Policy for which zones to include or exclude during bulk instance creation within a region. Policy is defined as a list of key-value diff --git a/gcloud/beta/compute/instances/create b/gcloud/beta/compute/instances/create index 4e3240dcd..ceadec359 100644 --- a/gcloud/beta/compute/instances/create +++ b/gcloud/beta/compute/instances/create @@ -26,8 +26,9 @@ SYNOPSIS [--ipv6-network-tier=IPV6_NETWORK_TIER] [--ipv6-public-ptr-domain=IPV6_PUBLIC_PTR_DOMAIN] [--key-revocation-action-type=POLICY] [--labels=[KEY=VALUE,...]] - [--local-ssd=[device-name=DEVICE-NAME],[interface=INTERFACE]] - [--machine-type=MACHINE_TYPE] [--maintenance-policy=MAINTENANCE_POLICY] + [--local-ssd=[device-name=DEVICE-NAME], + [interface=INTERFACE],[size=SIZE]] [--machine-type=MACHINE_TYPE] + [--maintenance-policy=MAINTENANCE_POLICY] [--max-run-duration=MAX_RUN_DURATION] [--metadata=KEY=VALUE,[KEY=VALUE,...]] [--metadata-from-file=KEY=LOCAL_FILE_PATH,[...]] @@ -492,7 +493,7 @@ FLAGS contain only hyphens (-), underscores (_), lowercase characters, and numbers. - --local-ssd=[device-name=DEVICE-NAME],[interface=INTERFACE] + --local-ssd=[device-name=DEVICE-NAME],[interface=INTERFACE],[size=SIZE] Attaches a local SSD to the instances. device-name @@ -506,6 +507,12 @@ FLAGS supported by more guest operating systems. NVME might provide higher performance. + size + Optional. The only valid value is 375GB. Specify the --local-ssd + flag multiple times if you need multiple 375GB local SSD + partitions. You can specify a maximum of 24 local SSDs for a + maximum of 9TB attached to an instance. + --machine-type=MACHINE_TYPE Specifies the machine type used for the instances. To get a list of available machine types, run 'gcloud compute machine-types list'. If diff --git a/gcloud/beta/compute/sole-tenancy/node-groups/simulate-maintenance-event b/gcloud/beta/compute/sole-tenancy/node-groups/simulate-maintenance-event index da64a623c..65f88a11a 100644 --- a/gcloud/beta/compute/sole-tenancy/node-groups/simulate-maintenance-event +++ b/gcloud/beta/compute/sole-tenancy/node-groups/simulate-maintenance-event @@ -58,8 +58,10 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud compute sole-tenancy node-groups simulate-maintenance-event $ gcloud alpha compute sole-tenancy node-groups \ simulate-maintenance-event diff --git a/gcloud/beta/config/get b/gcloud/beta/config/get index 4d60e9ff1..26210298d 100644 --- a/gcloud/beta/config/get +++ b/gcloud/beta/config/get @@ -426,6 +426,10 @@ AVAILABLE PROPERTIES Overrides API endpoint for gcloud active-directory command group. Defaults to https://managedidentities.googleapis.com/ + marketplacesolutions + Overrides API endpoint for gcloud mps command group. Defaults to + https://marketplacesolutions.googleapis.com/ + mediaasset Overrides API endpoint for gcloud media command group. Defaults to https://mediaasset.googleapis.com/ @@ -1048,6 +1052,10 @@ AVAILABLE PROPERTIES Engine jobs. Note that making it much faster than the default (60) will quickly use all of your quota. + mps + vendor + Id for Marketplace Solutions Vendor. + netapp location Default location to use when working with Cloud NetApp Files @@ -1268,6 +1276,9 @@ AVAILABLE PROPERTIES File operations above this size in bytes will use resumable instead of one-shot strategies. For example, a resumable download. + rsync_files_directory + Directory path to intermediary files created by rsync. + s3_endpoint_url If set, boto3 client will connect to this endpoint. Otherwise, boto3 selects a default endpoint based on the AWS service used. diff --git a/gcloud/beta/config/help b/gcloud/beta/config/help index 6ba02e885..288d49ee3 100644 --- a/gcloud/beta/config/help +++ b/gcloud/beta/config/help @@ -458,6 +458,10 @@ AVAILABLE PROPERTIES Overrides API endpoint for gcloud active-directory command group. Defaults to https://managedidentities.googleapis.com/ + marketplacesolutions + Overrides API endpoint for gcloud mps command group. Defaults to + https://marketplacesolutions.googleapis.com/ + mediaasset Overrides API endpoint for gcloud media command group. Defaults to https://mediaasset.googleapis.com/ @@ -1080,6 +1084,10 @@ AVAILABLE PROPERTIES Engine jobs. Note that making it much faster than the default (60) will quickly use all of your quota. + mps + vendor + Id for Marketplace Solutions Vendor. + netapp location Default location to use when working with Cloud NetApp Files @@ -1300,6 +1308,9 @@ AVAILABLE PROPERTIES File operations above this size in bytes will use resumable instead of one-shot strategies. For example, a resumable download. + rsync_files_directory + Directory path to intermediary files created by rsync. + s3_endpoint_url If set, boto3 client will connect to this endpoint. Otherwise, boto3 selects a default endpoint based on the AWS service used. diff --git a/gcloud/beta/config/list b/gcloud/beta/config/list index d04fa608a..af9881050 100644 --- a/gcloud/beta/config/list +++ b/gcloud/beta/config/list @@ -470,6 +470,10 @@ AVAILABLE PROPERTIES Overrides API endpoint for gcloud active-directory command group. Defaults to https://managedidentities.googleapis.com/ + marketplacesolutions + Overrides API endpoint for gcloud mps command group. Defaults to + https://marketplacesolutions.googleapis.com/ + mediaasset Overrides API endpoint for gcloud media command group. Defaults to https://mediaasset.googleapis.com/ @@ -1092,6 +1096,10 @@ AVAILABLE PROPERTIES Engine jobs. Note that making it much faster than the default (60) will quickly use all of your quota. + mps + vendor + Id for Marketplace Solutions Vendor. + netapp location Default location to use when working with Cloud NetApp Files @@ -1312,6 +1320,9 @@ AVAILABLE PROPERTIES File operations above this size in bytes will use resumable instead of one-shot strategies. For example, a resumable download. + rsync_files_directory + Directory path to intermediary files created by rsync. + s3_endpoint_url If set, boto3 client will connect to this endpoint. Otherwise, boto3 selects a default endpoint based on the AWS service used. diff --git a/gcloud/beta/config/set b/gcloud/beta/config/set index 2a253c3bb..da3481275 100644 --- a/gcloud/beta/config/set +++ b/gcloud/beta/config/set @@ -473,6 +473,10 @@ AVAILABLE PROPERTIES Overrides API endpoint for gcloud active-directory command group. Defaults to https://managedidentities.googleapis.com/ + marketplacesolutions + Overrides API endpoint for gcloud mps command group. Defaults to + https://marketplacesolutions.googleapis.com/ + mediaasset Overrides API endpoint for gcloud media command group. Defaults to https://mediaasset.googleapis.com/ @@ -1095,6 +1099,10 @@ AVAILABLE PROPERTIES Engine jobs. Note that making it much faster than the default (60) will quickly use all of your quota. + mps + vendor + Id for Marketplace Solutions Vendor. + netapp location Default location to use when working with Cloud NetApp Files @@ -1315,6 +1323,9 @@ AVAILABLE PROPERTIES File operations above this size in bytes will use resumable instead of one-shot strategies. For example, a resumable download. + rsync_files_directory + Directory path to intermediary files created by rsync. + s3_endpoint_url If set, boto3 client will connect to this endpoint. Otherwise, boto3 selects a default endpoint based on the AWS service used. diff --git a/gcloud/beta/config/unset b/gcloud/beta/config/unset index d74b04068..203186883 100644 --- a/gcloud/beta/config/unset +++ b/gcloud/beta/config/unset @@ -434,6 +434,10 @@ AVAILABLE PROPERTIES Overrides API endpoint for gcloud active-directory command group. Defaults to https://managedidentities.googleapis.com/ + marketplacesolutions + Overrides API endpoint for gcloud mps command group. Defaults to + https://marketplacesolutions.googleapis.com/ + mediaasset Overrides API endpoint for gcloud media command group. Defaults to https://mediaasset.googleapis.com/ @@ -1056,6 +1060,10 @@ AVAILABLE PROPERTIES Engine jobs. Note that making it much faster than the default (60) will quickly use all of your quota. + mps + vendor + Id for Marketplace Solutions Vendor. + netapp location Default location to use when working with Cloud NetApp Files @@ -1276,6 +1284,9 @@ AVAILABLE PROPERTIES File operations above this size in bytes will use resumable instead of one-shot strategies. For example, a resumable download. + rsync_files_directory + Directory path to intermediary files created by rsync. + s3_endpoint_url If set, boto3 client will connect to this endpoint. Otherwise, boto3 selects a default endpoint based on the AWS service used. diff --git a/gcloud/beta/container/clusters/create b/gcloud/beta/container/clusters/create index d16e45e3e..7717160a9 100644 --- a/gcloud/beta/container/clusters/create +++ b/gcloud/beta/container/clusters/create @@ -24,7 +24,7 @@ SYNOPSIS [--no-enable-autoupgrade] [--enable-cloud-logging] [--enable-cloud-monitoring] [--enable-cloud-run-alpha] [--enable-confidential-nodes] [--enable-cost-allocation] - [--enable-dataplane-v2] [--enable-gke-oidc] + [--enable-dataplane-v2] [--enable-fleet] [--enable-gke-oidc] [--enable-google-cloud-access] [--enable-gvnic] [--enable-identity-service] [--enable-image-streaming] [--enable-intra-node-visibility] [--enable-ip-alias] @@ -34,7 +34,8 @@ SYNOPSIS [--enable-master-global-access] [--enable-network-policy] [--enable-pod-security-policy] [--enable-service-externalips] [--enable-shielded-nodes] [--enable-stackdriver-kubernetes] - [--enable-vertical-pod-autoscaling] [--gateway-api=GATEWAY_API] + [--enable-vertical-pod-autoscaling] + [--fleet-project=PROJECT_ID_OR_NUMBER] [--gateway-api=GATEWAY_API] [--identity-provider=IDENTITY_PROVIDER] [--image-type=IMAGE_TYPE] [--ipv6-access-type=IPV6_ACCESS_TYPE] [--issue-client-certificate] [--istio-config=[auth=MTLS_PERMISSIVE,...]] [--labels=[KEY=VALUE,...]] @@ -412,6 +413,12 @@ FLAGS Enables the new eBPF dataplane for GKE clusters that is required for network security, scalability and visibility features. + --enable-fleet + Set cluster project as the fleet host project. This will register the + cluster to the same project. To register the cluster to a fleet in a + different project, please use --fleet-project=FLEET_HOST_PROJECT. + Example: $ gcloud beta container clusters create --enable-fleet + --enable-gke-oidc (DEPRECATED) Enable GKE OIDC authentication on the cluster. @@ -542,6 +549,14 @@ FLAGS --enable-vertical-pod-autoscaling Enable vertical pod autoscaling for a cluster. + --fleet-project=PROJECT_ID_OR_NUMBER + Sets fleet host project for the cluster. If specified, the current + cluster will be registered as a fleet membership under the fleet host + project. + + Example: $ gcloud beta container clusters create + --fleet-project=my-project + --gateway-api=GATEWAY_API Enables GKE Gateway controller in this cluster. The value of the flag specifies which Open Source Gateway API release channel will be used to diff --git a/gcloud/beta/container/clusters/create-auto b/gcloud/beta/container/clusters/create-auto index b67c7dbfb..adc6bfca2 100644 --- a/gcloud/beta/container/clusters/create-auto +++ b/gcloud/beta/container/clusters/create-auto @@ -10,11 +10,12 @@ SYNOPSIS [--cluster-secondary-range-name=NAME] [--cluster-version=CLUSTER_VERSION] [--create-subnetwork=[KEY=VALUE,...]] - [--database-encryption-key=DATABASE_ENCRYPTION_KEY] - [--enable-google-cloud-access] [--network=NETWORK] - [--private-endpoint-subnetwork=NAME] [--release-channel=CHANNEL] - [--security-group=SECURITY_GROUP] [--services-ipv4-cidr=CIDR] - [--services-secondary-range-name=NAME] [--subnetwork=SUBNETWORK] + [--database-encryption-key=DATABASE_ENCRYPTION_KEY] [--enable-fleet] + [--enable-google-cloud-access] [--fleet-project=PROJECT_ID_OR_NUMBER] + [--network=NETWORK] [--private-endpoint-subnetwork=NAME] + [--release-channel=CHANNEL] [--security-group=SECURITY_GROUP] + [--services-ipv4-cidr=CIDR] [--services-secondary-range-name=NAME] + [--subnetwork=SUBNETWORK] [--binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE --binauthz-policy=BINAUTHZ_POLICY] [--enable-master-authorized-networks @@ -149,11 +150,25 @@ FLAGS For more information, see https://cloud.google.com/kubernetes-engine/docs/how-to/encrypting-secrets. + --enable-fleet + Set cluster project as the fleet host project. This will register the + cluster to the same project. To register the cluster to a fleet in a + different project, please use --fleet-project=FLEET_HOST_PROJECT. + Example: $ gcloud beta container clusters create-auto --enable-fleet + --enable-google-cloud-access When you enable Google Cloud Access, any public IP addresses owned by Google Cloud can reach the public control plane endpoint of your cluster. + --fleet-project=PROJECT_ID_OR_NUMBER + Sets fleet host project for the cluster. If specified, the current + cluster will be registered as a fleet membership under the fleet host + project. + + Example: $ gcloud beta container clusters create-auto \ + --fleet-project=my-project + --network=NETWORK The Compute Engine Network that the cluster will connect to. Google Kubernetes Engine will use this network when creating routes and diff --git a/gcloud/beta/container/clusters/update b/gcloud/beta/container/clusters/update index a8434cdfd..59342363e 100644 --- a/gcloud/beta/container/clusters/update +++ b/gcloud/beta/container/clusters/update @@ -5,12 +5,12 @@ NAME SYNOPSIS gcloud beta container clusters update NAME (--autoprovisioning-network-tags=[TAGS,...] - | --autoscaling-profile=AUTOSCALING_PROFILE + | --autoscaling-profile=AUTOSCALING_PROFILE | --clear-fleet-project | --complete-credential-rotation | --complete-ip-rotation | --database-encryption-key=DATABASE_ENCRYPTION_KEY | --disable-database-encryption | --disable-default-snat | --disable-workload-identity | --enable-autoscaling - | --enable-cost-allocation | --enable-gke-oidc + | --enable-cost-allocation | --enable-fleet | --enable-gke-oidc | --enable-google-cloud-access | --enable-identity-service | --enable-image-streaming | --enable-intra-node-visibility | --enable-l4-ilb-subsetting | --enable-legacy-authorization @@ -19,7 +19,8 @@ SYNOPSIS | --enable-network-policy | --enable-pod-security-policy | --enable-private-endpoint | --enable-service-externalips | --enable-shielded-nodes | --enable-stackdriver-kubernetes - | --enable-vertical-pod-autoscaling | --gateway-api=GATEWAY_API + | --enable-vertical-pod-autoscaling + | --fleet-project=PROJECT_ID_OR_NUMBER | --gateway-api=GATEWAY_API | --generate-password | --identity-provider=IDENTITY_PROVIDER | --logging-variant=LOGGING_VARIANT | --maintenance-window=START_TIME | --notification-config=[pubsub=ENABLED|DISABLED, @@ -116,6 +117,10 @@ REQUIRED FLAGS Set autoscaling behaviour, choices are 'optimize-utilization' and 'balanced'. Default is 'balanced'. + --clear-fleet-project + Remove the cluster from current fleet host project. Example: $ gcloud + beta container clusters update --clear-fleet-project + --complete-credential-rotation Complete the IP and credential rotation for this cluster. For example: @@ -199,6 +204,12 @@ REQUIRED FLAGS Use --no-enable-cost-allocation to disable this feature. + --enable-fleet + Set cluster project as the fleet host project. This will register the + cluster to the same project. To register the cluster to a fleet in a + different project, please use --fleet-project=FLEET_HOST_PROJECT. + Example: $ gcloud beta container clusters update --enable-fleet + --enable-gke-oidc (DEPRECATED) Enable GKE OIDC authentication on the cluster. @@ -322,6 +333,14 @@ REQUIRED FLAGS --enable-vertical-pod-autoscaling Enable vertical pod autoscaling for a cluster. + --fleet-project=PROJECT_ID_OR_NUMBER + Sets fleet host project for the cluster. If specified, the current + cluster will be registered as a fleet membership under the fleet host + project. + + Example: $ gcloud beta container clusters update + --fleet-project=my-project + --gateway-api=GATEWAY_API Enables GKE Gateway controller in this cluster. The value of the flag specifies which Open Source Gateway API release channel will be used diff --git a/gcloud/beta/dataproc/batches/submit/help b/gcloud/beta/dataproc/batches/submit/help index eaf7d3597..4e475744a 100644 --- a/gcloud/beta/dataproc/batches/submit/help +++ b/gcloud/beta/dataproc/batches/submit/help @@ -8,7 +8,7 @@ SYNOPSIS [--labels=[KEY=VALUE,...]] [--metastore-service=METASTORE_SERVICE] [--properties=[PROPERTY=VALUE,...]] [--region=REGION] [--request-id=REQUEST_ID] [--service-account=SERVICE_ACCOUNT] - [--tags=[TAGS,...]] [--version=VERSION] + [--tags=[TAGS,...]] [--ttl=TTL] [--version=VERSION] [--network=NETWORK | --subnet=SUBNET] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -115,6 +115,12 @@ FLAGS --tags=[TAGS,...] Network tags for traffic control. + --ttl=TTL + The duration after the workload will be unconditionally terminated, for + example, '20m' or '1h'. Run gcloud topic datetimes + (https://cloud.google.com/sdk/gcloud/reference/topic/datetimes) for + information on duration formats. + --version=VERSION Optional runtime version. If not specified, a default version will be used. diff --git a/gcloud/beta/dataproc/batches/submit/pyspark b/gcloud/beta/dataproc/batches/submit/pyspark index fb4a0c28c..dc7fd36ec 100644 --- a/gcloud/beta/dataproc/batches/submit/pyspark +++ b/gcloud/beta/dataproc/batches/submit/pyspark @@ -10,7 +10,7 @@ SYNOPSIS [--metastore-service=METASTORE_SERVICE] [--properties=[PROPERTY=VALUE,...]] [--py-files=[PY,...]] [--region=REGION] [--request-id=REQUEST_ID] - [--service-account=SERVICE_ACCOUNT] [--tags=[TAGS,...]] + [--service-account=SERVICE_ACCOUNT] [--tags=[TAGS,...]] [--ttl=TTL] [--version=VERSION] [--network=NETWORK | --subnet=SUBNET] [GCLOUD_WIDE_FLAG ...] [-- JOB_ARG ...] @@ -131,6 +131,12 @@ FLAGS --tags=[TAGS,...] Network tags for traffic control. + --ttl=TTL + The duration after the workload will be unconditionally terminated, for + example, '20m' or '1h'. Run gcloud topic datetimes + (https://cloud.google.com/sdk/gcloud/reference/topic/datetimes) for + information on duration formats. + --version=VERSION Optional runtime version. If not specified, a default version will be used. diff --git a/gcloud/beta/dataproc/batches/submit/spark b/gcloud/beta/dataproc/batches/submit/spark index 23d33ce52..7855593ac 100644 --- a/gcloud/beta/dataproc/batches/submit/spark +++ b/gcloud/beta/dataproc/batches/submit/spark @@ -11,7 +11,7 @@ SYNOPSIS [--metastore-service=METASTORE_SERVICE] [--properties=[PROPERTY=VALUE,...]] [--region=REGION] [--request-id=REQUEST_ID] [--service-account=SERVICE_ACCOUNT] - [--tags=[TAGS,...]] [--version=VERSION] + [--tags=[TAGS,...]] [--ttl=TTL] [--version=VERSION] [--network=NETWORK | --subnet=SUBNET] [GCLOUD_WIDE_FLAG ...] [-- JOB_ARG ...] @@ -146,6 +146,12 @@ OPTIONAL FLAGS --tags=[TAGS,...] Network tags for traffic control. + --ttl=TTL + The duration after the workload will be unconditionally terminated, for + example, '20m' or '1h'. Run gcloud topic datetimes + (https://cloud.google.com/sdk/gcloud/reference/topic/datetimes) for + information on duration formats. + --version=VERSION Optional runtime version. If not specified, a default version will be used. diff --git a/gcloud/beta/dataproc/batches/submit/spark-r b/gcloud/beta/dataproc/batches/submit/spark-r index 143c12f3d..13147fea8 100644 --- a/gcloud/beta/dataproc/batches/submit/spark-r +++ b/gcloud/beta/dataproc/batches/submit/spark-r @@ -10,7 +10,7 @@ SYNOPSIS [--metastore-service=METASTORE_SERVICE] [--properties=[PROPERTY=VALUE,...]] [--region=REGION] [--request-id=REQUEST_ID] [--service-account=SERVICE_ACCOUNT] - [--tags=[TAGS,...]] [--version=VERSION] + [--tags=[TAGS,...]] [--ttl=TTL] [--version=VERSION] [--network=NETWORK | --subnet=SUBNET] [GCLOUD_WIDE_FLAG ...] [-- JOB_ARG ...] @@ -123,6 +123,12 @@ FLAGS --tags=[TAGS,...] Network tags for traffic control. + --ttl=TTL + The duration after the workload will be unconditionally terminated, for + example, '20m' or '1h'. Run gcloud topic datetimes + (https://cloud.google.com/sdk/gcloud/reference/topic/datetimes) for + information on duration formats. + --version=VERSION Optional runtime version. If not specified, a default version will be used. diff --git a/gcloud/beta/dataproc/batches/submit/spark-sql b/gcloud/beta/dataproc/batches/submit/spark-sql index bfe77ff2b..d1fe6fc02 100644 --- a/gcloud/beta/dataproc/batches/submit/spark-sql +++ b/gcloud/beta/dataproc/batches/submit/spark-sql @@ -11,8 +11,9 @@ SYNOPSIS [--metastore-service=METASTORE_SERVICE] [--properties=[PROPERTY=VALUE,...]] [--region=REGION] [--request-id=REQUEST_ID] [--service-account=SERVICE_ACCOUNT] - [--tags=[TAGS,...]] [--vars=[NAME=VALUE,...]] [--version=VERSION] - [--network=NETWORK | --subnet=SUBNET] [GCLOUD_WIDE_FLAG ...] + [--tags=[TAGS,...]] [--ttl=TTL] [--vars=[NAME=VALUE,...]] + [--version=VERSION] [--network=NETWORK | --subnet=SUBNET] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) Submit a Spark SQL batch job. @@ -113,6 +114,12 @@ FLAGS --tags=[TAGS,...] Network tags for traffic control. + --ttl=TTL + The duration after the workload will be unconditionally terminated, for + example, '20m' or '1h'. Run gcloud topic datetimes + (https://cloud.google.com/sdk/gcloud/reference/topic/datetimes) for + information on duration formats. + --vars=[NAME=VALUE,...] Mapping of query variable names to values (equivalent to the Spark SQL command: SET name="value";). diff --git a/gcloud/beta/datastream/streams/update b/gcloud/beta/datastream/streams/update index c6bcba334..6e78a3460 100644 --- a/gcloud/beta/datastream/streams/update +++ b/gcloud/beta/datastream/streams/update @@ -290,6 +290,7 @@ FLAGS } ] }, + "replicationSlot": "SAMPLE_REPLICATION_SLOT", "publication": "SAMPLE_PUBLICATION" } diff --git a/gcloud/beta/healthcare/fhir-stores/help b/gcloud/beta/healthcare/fhir-stores/help index 43e01f59b..9ea568347 100644 --- a/gcloud/beta/healthcare/fhir-stores/help +++ b/gcloud/beta/healthcare/fhir-stores/help @@ -47,6 +47,9 @@ COMMANDS list (BETA) List Cloud Healthcare API FHIR stores. + metrics + (BETA) Gets the metrics for a Cloud Healthcare API FHIR store. + remove-iam-policy-binding (BETA) Remove an IAM policy binding from a Cloud Healthcare API FHIR store. diff --git a/gcloud/beta/healthcare/fhir-stores/metrics b/gcloud/beta/healthcare/fhir-stores/metrics new file mode 100644 index 000000000..e19f00f34 --- /dev/null +++ b/gcloud/beta/healthcare/fhir-stores/metrics @@ -0,0 +1,71 @@ +NAME + gcloud beta healthcare fhir-stores metrics - gets the metrics for a Cloud + Healthcare API FHIR store + +SYNOPSIS + gcloud beta healthcare fhir-stores metrics + (FHIR_STORE : --dataset=DATASET --location=LOCATION) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Gets the metrics for a Cloud Healthcare API FHIR store. + +EXAMPLES + To get metrics for the FHIR store 'test-fhir-store', run: + + $ gcloud beta healthcare fhir-stores metrics test-fhir-store \ + --dataset=test-dataset + +POSITIONAL ARGUMENTS + FhirStore resource - Cloud Healthcare API FHIR store to get metrics for. + The arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument fhir_store on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + FHIR_STORE + ID of the fhirStore or fully qualified identifier for the fhirStore. + To set the fhir_store attribute: + ▸ provide the argument fhir_store on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --dataset=DATASET + Cloud Healthcare dataset. To set the dataset attribute: + ▸ provide the argument fhir_store on the command line with a fully + specified name; + ▸ provide the argument --dataset on the command line. + + --location=LOCATION + Google Cloud location. To set the location attribute: + ▸ provide the argument fhir_store on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property healthcare/location. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the healthcare/v1beta1 API. The full documentation for + this API can be found at: https://cloud.google.com/healthcare + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud healthcare fhir-stores metrics + + $ gcloud alpha healthcare fhir-stores metrics + diff --git a/gcloud/beta/kms/ekm-config/add-iam-policy-binding b/gcloud/beta/kms/ekm-config/add-iam-policy-binding new file mode 100644 index 000000000..528281f05 --- /dev/null +++ b/gcloud/beta/kms/ekm-config/add-iam-policy-binding @@ -0,0 +1,124 @@ +NAME + gcloud beta kms ekm-config add-iam-policy-binding - add IAM policy binding + to an EkmConfig + +SYNOPSIS + gcloud beta kms ekm-config add-iam-policy-binding --location=LOCATION + --member=PRINCIPAL --role=ROLE + [--condition=[KEY=VALUE,...] + | --condition-from-file=CONDITION_FROM_FILE] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Adds a policy binding to the IAM policy of a kms EkmConfig. A + binding consists of at least one member, a role, and an optional condition. + +EXAMPLES + To add an IAM policy binding for the role of 'roles/editor' for the user + test-user@gmail.com on the EkmConfig with location us-central1, run: + + $ gcloud beta kms ekm-config add-iam-policy-binding \ + --location='us-central1' --member='user:test-user@gmail.com' \ + --role='roles/editor' + + To add an IAM policy binding which expires at the end of the year 2022 for + the role of 'roles/editor' and the user test-user@gmail.com and location + us-central1, run: + + $ gcloud beta kms ekm-config add-iam-policy-binding \ + --location='us-central1' --member='user:test-user@gmail.com' \ + --role='roles/editor' --condition='expression=request.time < + timestamp("2023-01-01T00:00:00Z"),title=expires_end_of_2022,description=Expires + at midnight on 2022-12-31' + + See https://cloud.google.com/iam/docs/managing-policies for details of + policy role and member types. + +REQUIRED FLAGS + Location resource - The KMS location resource. This represents a Cloud + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ set the property core/project. + + This must be specified. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. To + set the location attribute: + ▸ provide the argument --location on the command line. + + --member=PRINCIPAL + The principal to add the binding for. Should be of the form + user|group|serviceAccount:email or domain:domain. + + Examples: user:test-user@gmail.com, group:admins@example.com, + serviceAccount:test123@example.domain.com, or + domain:example.domain.com. + + Some resources also accept the following special values: + ◆ allUsers - Special identifier that represents anyone who is on the + internet, with or without a Google account. + ◆ allAuthenticatedUsers - Special identifier that represents anyone + who is authenticated with a Google account or a service account. + + --role=ROLE + Role name to assign to the principal. The role name is the complete + path of a predefined role, such as roles/logging.viewer, or the role ID + for a custom role, such as + organizations/{ORGANIZATION_ID}/roles/logging.viewer. + +OPTIONAL FLAGS + At most one of these can be specified: + + --condition=[KEY=VALUE,...] + A condition to include in the binding. When the condition is + explicitly specified as None (--condition=None), a binding without a + condition is added. When the condition is specified and is not None, + --role cannot be a basic role. Basic roles are roles/editor, + roles/owner, and roles/viewer. For more on conditions, refer to the + conditions overview guide: + https://cloud.google.com/iam/docs/conditions-overview + + When using the --condition flag, include the following key-value + pairs: + + expression + (Required) Condition expression that evaluates to True or False. + This uses a subset of Common Expression Language syntax. + + If the condition expression includes a comma, use a different + delimiter to separate the key-value pairs. Specify the delimiter + before listing the key-value pairs. For example, to specify a + colon (:) as the delimiter, do the following: + --condition=^:^title=TITLE:expression=EXPRESSION. For more + information, see + https://cloud.google.com/sdk/gcloud/reference/topic/escaping. + + title + (Required) A short string describing the purpose of the + expression. + + description + (Optional) Additional description for the expression. + + --condition-from-file=CONDITION_FROM_FILE + Path to a local JSON or YAML file that defines the condition. To see + available fields, see the help for --condition. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud kms ekm-config add-iam-policy-binding + + $ gcloud alpha kms ekm-config add-iam-policy-binding + diff --git a/gcloud/beta/kms/ekm-config/describe b/gcloud/beta/kms/ekm-config/describe new file mode 100644 index 000000000..690b28588 --- /dev/null +++ b/gcloud/beta/kms/ekm-config/describe @@ -0,0 +1,54 @@ +NAME + gcloud beta kms ekm-config describe - describe the EkmConfig + +SYNOPSIS + gcloud beta kms ekm-config describe --location=LOCATION + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) gcloud beta kms ekm-config describe can be used to retrieve the + EkmConfig. + +EXAMPLES + The following command retrieves the EkmConfig in us-east1 for the current + project: + + $ gcloud beta kms ekm-config describe --location=us-east1 + + The following command retrieves the EkmConfig for its project foo and + location us-east1: + + $ gcloud beta kms ekm-config describe \ + --location="projects/foo/locations/us-east1" + +REQUIRED FLAGS + Location resource - The KMS location resource. This represents a Cloud + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ set the property core/project. + + This must be specified. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. To + set the location attribute: + ▸ provide the argument --location on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud kms ekm-config describe + + $ gcloud alpha kms ekm-config describe + diff --git a/gcloud/beta/kms/ekm-config/get-iam-policy b/gcloud/beta/kms/ekm-config/get-iam-policy new file mode 100644 index 000000000..56d847732 --- /dev/null +++ b/gcloud/beta/kms/ekm-config/get-iam-policy @@ -0,0 +1,77 @@ +NAME + gcloud beta kms ekm-config get-iam-policy - get the IAM policy for an + EkmConfig + +SYNOPSIS + gcloud beta kms ekm-config get-iam-policy --location=LOCATION + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Gets the IAM policy for the given location. + + Returns an empty policy if the resource does not have a policy set. + +EXAMPLES + The following command gets the IAM policy for the EkmConfig within the + location us-central1: + + $ gcloud beta kms ekm-config get-iam-policy --location=us-central1 + +REQUIRED FLAGS + Location resource - The KMS location resource. This represents a Cloud + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ set the property core/project. + + This must be specified. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. To + set the location attribute: + ▸ provide the argument --location on the command line. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud kms ekm-config get-iam-policy + + $ gcloud alpha kms ekm-config get-iam-policy + diff --git a/gcloud/beta/kms/ekm-config/help b/gcloud/beta/kms/ekm-config/help new file mode 100644 index 000000000..8537685c7 --- /dev/null +++ b/gcloud/beta/kms/ekm-config/help @@ -0,0 +1,45 @@ +NAME + gcloud beta kms ekm-config - update and retrieve the EkmConfig + +SYNOPSIS + gcloud beta kms ekm-config COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) EkmConfig is a singleton resource that represents configuration + parameters that apply to all CryptoKeys and CryptoKeyVersions of + EXTERNAL_VPC protecion level. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + add-iam-policy-binding + (BETA) Add IAM policy binding to an EkmConfig. + + describe + (BETA) Describe the EkmConfig. + + get-iam-policy + (BETA) Get the IAM policy for an EkmConfig. + + remove-iam-policy-binding + (BETA) Remove IAM policy binding from an EkmConfig. + + set-iam-policy + (BETA) Set the IAM policy for an EkmConfig. + + update + (BETA) Update the EkmConfig. + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud kms ekm-config + + $ gcloud alpha kms ekm-config + diff --git a/gcloud/beta/kms/ekm-config/remove-iam-policy-binding b/gcloud/beta/kms/ekm-config/remove-iam-policy-binding new file mode 100644 index 000000000..143b0722e --- /dev/null +++ b/gcloud/beta/kms/ekm-config/remove-iam-policy-binding @@ -0,0 +1,139 @@ +NAME + gcloud beta kms ekm-config remove-iam-policy-binding - remove IAM policy + binding from an EkmConfig + +SYNOPSIS + gcloud beta kms ekm-config remove-iam-policy-binding --location=LOCATION + --member=PRINCIPAL --role=ROLE + [--all | --condition=[KEY=VALUE,...] + | --condition-from-file=CONDITION_FROM_FILE] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Removes a policy binding from the IAM policy of a kms EkmConfig. A + binding consists of at least one member, a role, and an optional condition. + +EXAMPLES + To remove an IAM policy binding for the role of 'roles/editor' for the user + 'test-user@gmail.com' on the EkmConfig with location us-central1, run: + + $ gcloud beta kms ekm-config remove-iam-policy-binding \ + --location='us-central1' --member='user:test-user@gmail.com' \ + --role='roles/editor' + + To remove an IAM policy binding with a condition of + expression='request.time < timestamp("2023-01-01T00:00:00Z")', + title='expires_end_of_2022', and description='Expires at midnight on + 2022-12-31' for the role of 'roles/editor' for the user + 'test-user@gmail.com' on the EkmConfig with location us-central1, run: + + $ gcloud beta kms ekm-config remove-iam-policy-binding \ + --location='us-central1' --member='user:test-user@gmail.com' \ + --role='roles/editor' --condition='expression=request.time < + timestamp("2023-01-01T00:00:00Z"),title=expires_end_of_2022,description=Expires + at midnight on 2022-12-31' + + To remove all IAM policy bindings regardless of the condition for the role + of 'roles/editor' and for the user 'test-user@gmail.com' on the EkmConfig + with location us-central1, run: + + $ gcloud beta kms ekm-config remove-iam-policy-binding laplace \ + --location='us-central1' --member='user:test-user@gmail.com' \ + --role='roles/editor' --all + + See https://cloud.google.com/iam/docs/managing-policies for details of + policy role and member types. + +REQUIRED FLAGS + Location resource - The KMS location resource. This represents a Cloud + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ set the property core/project. + + This must be specified. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. To + set the location attribute: + ▸ provide the argument --location on the command line. + + --member=PRINCIPAL + The principal to remove the binding for. Should be of the form + user|group|serviceAccount:email or domain:domain. + + Examples: user:test-user@gmail.com, group:admins@example.com, + serviceAccount:test123@example.domain.com, or + domain:example.domain.com. + + Deleted principals have an additional deleted: prefix and a ?uid=UID + suffix, where UID is a unique identifier for the principal. Example: + deleted:user:test-user@gmail.com?uid=123456789012345678901. + + Some resources also accept the following special values: + ◆ allUsers - Special identifier that represents anyone who is on the + internet, with or without a Google account. + ◆ allAuthenticatedUsers - Special identifier that represents anyone + who is authenticated with a Google account or a service account. + + --role=ROLE + The role to remove the principal from. + +OPTIONAL FLAGS + At most one of these can be specified: + + --all + Remove all bindings with this role and principal, irrespective of any + conditions. + + --condition=[KEY=VALUE,...] + The condition of the binding that you want to remove. When the + condition is explicitly specified as None (--condition=None), a + binding without a condition is removed. Otherwise, only a binding + with a condition that exactly matches the specified condition + (including the optional description) is removed. For more on + conditions, refer to the conditions overview guide: + https://cloud.google.com/iam/docs/conditions-overview + + When using the --condition flag, include the following key-value + pairs: + + expression + (Required) Condition expression that evaluates to True or False. + This uses a subset of Common Expression Language syntax. + + If the condition expression includes a comma, use a different + delimiter to separate the key-value pairs. Specify the delimiter + before listing the key-value pairs. For example, to specify a + colon (:) as the delimiter, do the following: + --condition=^:^title=TITLE:expression=EXPRESSION. For more + information, see + https://cloud.google.com/sdk/gcloud/reference/topic/escaping. + + title + (Required) A short string describing the purpose of the + expression. + + description + (Optional) Additional description for the expression. + + --condition-from-file=CONDITION_FROM_FILE + Path to a local JSON or YAML file that defines the condition. To see + available fields, see the help for --condition. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud kms ekm-config remove-iam-policy-binding + + $ gcloud alpha kms ekm-config remove-iam-policy-binding + diff --git a/gcloud/beta/kms/ekm-config/set-iam-policy b/gcloud/beta/kms/ekm-config/set-iam-policy new file mode 100644 index 000000000..874fbd5cb --- /dev/null +++ b/gcloud/beta/kms/ekm-config/set-iam-policy @@ -0,0 +1,57 @@ +NAME + gcloud beta kms ekm-config set-iam-policy - set the IAM policy for an + EkmConfig + +SYNOPSIS + gcloud beta kms ekm-config set-iam-policy POLICY_FILE --location=LOCATION + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Sets the IAM policy for the EkmConfig in a location as defined in a + JSON or YAML file. + + See https://cloud.google.com/iam/docs/managing-policies for details of the + policy file format and contents. + +EXAMPLES + The following command will read am IAM policy defined in a JSON file + 'policy.json' and set it for the EkmConfig with location us-central1: + + $ gcloud beta kms ekm-config set-iam-policy policy.json \ + --location=us-central1 + +POSITIONAL ARGUMENTS + POLICY_FILE + JSON or YAML file with the IAM policy + +REQUIRED FLAGS + Location resource - The KMS location resource. This represents a Cloud + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ set the property core/project. + + This must be specified. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. To + set the location attribute: + ▸ provide the argument --location on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud kms ekm-config set-iam-policy + + $ gcloud alpha kms ekm-config set-iam-policy + diff --git a/gcloud/beta/kms/ekm-config/update b/gcloud/beta/kms/ekm-config/update new file mode 100644 index 000000000..b16a761df --- /dev/null +++ b/gcloud/beta/kms/ekm-config/update @@ -0,0 +1,64 @@ +NAME + gcloud beta kms ekm-config update - update the EkmConfig + +SYNOPSIS + gcloud beta kms ekm-config update --location=LOCATION + [--default-ekm-connection=DEFAULT_EKM_CONNECTION] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) gcloud beta kms ekm-config update can be used to update the + EkmConfig. Applies to all CryptoKeys and CryptoKeyVersions with a + protection level of external vpc. + +EXAMPLES + The following command sets the default ekm-connection to laplace for its + project foo and location us-east1: + + $ gcloud beta kms ekm-config update --location=us-east1 \ + --default-ekm-connection="projects/foo/locations/us-east1/ekmCon\ + nections/laplace" + + The following command removes the default-ekm-connection in us-east1 for + the current project: + + $ gcloud beta kms ekm-config update --location=us-east1 \ + --default-ekm-connection="" + +REQUIRED FLAGS + Location resource - The KMS location resource. This represents a Cloud + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ set the property core/project. + + This must be specified. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. To + set the location attribute: + ▸ provide the argument --location on the command line. + +OPTIONAL FLAGS + --default-ekm-connection=DEFAULT_EKM_CONNECTION + The resource name of the EkmConnection to be used as the default + EkmConnection for all external-vpc CryptoKeys in a project and + location. Can be an empty string to remove the default EkmConnection. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud kms ekm-config update + + $ gcloud alpha kms ekm-config update + diff --git a/gcloud/beta/kms/ekm-connections/create b/gcloud/beta/kms/ekm-connections/create index c4d0f9c81..944722d48 100644 --- a/gcloud/beta/kms/ekm-connections/create +++ b/gcloud/beta/kms/ekm-connections/create @@ -6,7 +6,9 @@ SYNOPSIS (EKM_CONNECTION : --location=LOCATION) --hostname=HOSTNAME --server-certificates-files=[SERVER_CERTIFICATES,...] --service-directory-service=SERVICE_DIRECTORY_SERVICE - [--endpoint-filter=ENDPOINT_FILTER] [GCLOUD_WIDE_FLAG ...] + [--endpoint-filter=ENDPOINT_FILTER] + [--crypto-space-path=CRYPTO_SPACE_PATH + --key-management-mode=KEY_MANAGEMENT_MODE] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) Creates a new connection within the given location. @@ -20,6 +22,16 @@ EXAMPLES --endpoint-filter="foo > bar" --hostname="hostname.foo" \ --server-certificates-files=foo.pem,bar.pem + The following command creates an ekm connection named laplace within the + location us-central1 in cloud-kms key management mode with the required + crypto-space-path : + + $ gcloud beta kms ekm-connections create laplace \ + --location=us-central1 --service-directory-service="foo" \ + --endpoint-filter="foo > bar" --hostname="hostname.foo" \ + --key-management-mode=cloud-kms --crypto-space-path="foo" \ + --server-certificates-files=foo.pem,bar.pem + POSITIONAL ARGUMENTS Ekmconnection resource - The KMS ekm connection resource. The arguments in this group can be used to specify the attributes of this resource. (NOTE) @@ -64,6 +76,22 @@ OPTIONAL FLAGS The filter applied to the endpoints of the resolved service. If no filter is specified, all endpoints will be considered. + Specifies the key management mode for the EkmConnection and associated + fields. + + --crypto-space-path=CRYPTO_SPACE_PATH + Crypto space path for the EkmConnection. Required during + EkmConnection creation if --key-management-mode=cloud-kms. + + --key-management-mode=KEY_MANAGEMENT_MODE + Key management mode of the ekm connection. An EkmConnection in + cloud-kms mode means Cloud KMS will attempt to create and manage the + key material that resides on the EKM for crypto keys created with + this EkmConnection. An EkmConnection in manual mode means the + external key material will not be managed by Cloud KMS. Omitting the + flag defaults to manual. KEY_MANAGEMENT_MODE must be one of: manual, + cloud-kms. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/beta/kms/ekm-connections/update b/gcloud/beta/kms/ekm-connections/update index 918929953..762c4e893 100644 --- a/gcloud/beta/kms/ekm-connections/update +++ b/gcloud/beta/kms/ekm-connections/update @@ -7,7 +7,8 @@ SYNOPSIS [--endpoint-filter=ENDPOINT_FILTER] [--hostname=HOSTNAME] [--server-certificates-files=[SERVER_CERTIFICATES,...]] [--service-directory-service=SERVICE_DIRECTORY_SERVICE] - [GCLOUD_WIDE_FLAG ...] + [--crypto-space-path=CRYPTO_SPACE_PATH + --key-management-mode=KEY_MANAGEMENT_MODE] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) gcloud beta kms ekm-connections update can be used to update the @@ -19,7 +20,7 @@ EXAMPLES resolver's hostname within location us-east1: $ gcloud beta kms ekm-connections update laplace \ - --location=us-east1 --hostname=newhostname.foo \ + --location=us-east1 --hostname=newhostname.foo The following command updates an ekm-connection named laplace service resolver's service_directory_service, endpoint_filter, hostname, and @@ -30,6 +31,12 @@ EXAMPLES --endpoint-filter="foo > bar" --hostname="newhostname.foo" \ --server-certificates-files=foo.pem,bar.pem + The following command updates an ekm-connection named laplace + key_management_mode within location us-east1: + + $ gcloud beta kms ekm-connections update laplace \ + --location=us-east1 --key-management-mode=manual + POSITIONAL ARGUMENTS Ekmconnection resource - The KMS ekm connection resource. The arguments in this group can be used to specify the attributes of this resource. (NOTE) @@ -73,6 +80,22 @@ FLAGS The resource name of the Service Directory service pointing to an EKM replica. + Specifies the key management mode for the EkmConnection and associated + fields. + + --crypto-space-path=CRYPTO_SPACE_PATH + Crypto space path for the EkmConnection. Required during + EkmConnection creation if --key-management-mode=cloud-kms. + + --key-management-mode=KEY_MANAGEMENT_MODE + Key management mode of the ekm connection. An EkmConnection in + cloud-kms mode means Cloud KMS will attempt to create and manage the + key material that resides on the EKM for crypto keys created with + this EkmConnection. An EkmConnection in manual mode means the + external key material will not be managed by Cloud KMS. Omitting the + flag defaults to manual. KEY_MANAGEMENT_MODE must be one of: manual, + cloud-kms. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/beta/kms/help b/gcloud/beta/kms/help index d3b0a5616..0f03d9dba 100644 --- a/gcloud/beta/kms/help +++ b/gcloud/beta/kms/help @@ -28,6 +28,9 @@ GCLOUD WIDE FLAGS GROUPS GROUP is one of the following: + ekm-config + (BETA) Update and retrieve the EkmConfig. + ekm-connections (BETA) Create and manage ekm connections. diff --git a/gcloud/beta/ml-engine/jobs/submit/training b/gcloud/beta/ml-engine/jobs/submit/training index e467bd809..4fbdf362e 100644 --- a/gcloud/beta/ml-engine/jobs/submit/training +++ b/gcloud/beta/ml-engine/jobs/submit/training @@ -149,7 +149,7 @@ FLAGS type Type of the accelerator. Choices are - nvidia-tesla-a100,nvidia-tesla-k80,nvidia-tesla-p100,nvidia-tesla-p4,nvidia-tesla-t4,nvidia-tesla-v100,tpu-v2,tpu-v2-pod,tpu-v3,tpu-v3-pod,tpu-v4-pod + nvidia-tesla-a100,nvidia-tesla-k80,nvidia-tesla-p100,nvidia-tesla-p4,nvidia-tesla-t4,nvidia-tesla-v100,tpu-v2,tpu-v2-pod,tpu-v3,tpu-v3-pod,tpu-v4 count Number of accelerators to attach to each machine running the job. @@ -200,7 +200,7 @@ FLAGS type Type of the accelerator. Choices are - nvidia-tesla-a100,nvidia-tesla-k80,nvidia-tesla-p100,nvidia-tesla-p4,nvidia-tesla-t4,nvidia-tesla-v100,tpu-v2,tpu-v2-pod,tpu-v3,tpu-v3-pod,tpu-v4-pod + nvidia-tesla-a100,nvidia-tesla-k80,nvidia-tesla-p100,nvidia-tesla-p4,nvidia-tesla-t4,nvidia-tesla-v100,tpu-v2,tpu-v2-pod,tpu-v3,tpu-v3-pod,tpu-v4 count Number of accelerators to attach to each machine running the job. @@ -322,7 +322,7 @@ FLAGS type Type of the accelerator. Choices are - nvidia-tesla-a100,nvidia-tesla-k80,nvidia-tesla-p100,nvidia-tesla-p4,nvidia-tesla-t4,nvidia-tesla-v100,tpu-v2,tpu-v2-pod,tpu-v3,tpu-v3-pod,tpu-v4-pod + nvidia-tesla-a100,nvidia-tesla-k80,nvidia-tesla-p100,nvidia-tesla-p4,nvidia-tesla-t4,nvidia-tesla-v100,tpu-v2,tpu-v2-pod,tpu-v3,tpu-v3-pod,tpu-v4 count Number of accelerators to attach to each machine running the job. diff --git a/gcloud/bms/help b/gcloud/bms/help index c94bec74a..f0171ac8f 100644 --- a/gcloud/bms/help +++ b/gcloud/bms/help @@ -27,6 +27,9 @@ GROUPS operations Manage operations in Bare Metal Solution. + ssh-keys + Manage SSH keys for Bare Metal Solution. + volumes Manage bare metal volumes in Bare Metal Solution. diff --git a/gcloud/bms/ssh-keys/add b/gcloud/bms/ssh-keys/add new file mode 100644 index 000000000..bd8f410ce --- /dev/null +++ b/gcloud/bms/ssh-keys/add @@ -0,0 +1,66 @@ +NAME + gcloud bms ssh-keys add - add a public SSH key to the project in Bare Metal + Solution + +SYNOPSIS + gcloud bms ssh-keys add SSH_KEY (--key=KEY | --key-file=KEY_FILE) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Add a public SSH key to the project in Bare Metal Solution. + +EXAMPLES + To add an SSH key called my-ssh-key in project my-project with a public key + ABC6695 + + $ gcloud bms ssh-keys add my-ssh-key --project=my-project \ + --key=ABC6695 + + To add an SSH key called my-ssh-key in project my-project with a public key + stored in /home/user/.ssh/id_rsa.pub + + $ gcloud bms ssh-keys add my-ssh-key --project=my-project \ + --key-file=/home/user/.ssh/id_rsa.pub + +POSITIONAL ARGUMENTS + SSH key resource - ssh_key. This represents a Cloud resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. To set the project attribute: + ◆ provide the argument ssh_key on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. To set the region + attribute: + ◆ provide the argument ssh_key on the command line with a fully + specified name; + ◆ global is the only supported location. + + This must be specified. + + SSH_KEY + ID of the SSH key or fully qualified identifier for the SSH key. To + set the ssh_key attribute: + ▸ provide the argument ssh_key on the command line. + +REQUIRED FLAGS + Exactly one of these must be specified: + + --key=KEY + The SSH public key to add + + --key-file=KEY_FILE + The path to a file containing an SSH public key to add + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This variant is also available: + + $ gcloud alpha bms ssh-keys add + diff --git a/gcloud/bms/ssh-keys/help b/gcloud/bms/ssh-keys/help new file mode 100644 index 000000000..5c6b7985a --- /dev/null +++ b/gcloud/bms/ssh-keys/help @@ -0,0 +1,31 @@ +NAME + gcloud bms ssh-keys - manage SSH keys for Bare Metal Solution + +SYNOPSIS + gcloud bms ssh-keys COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Manage SSH keys for Bare Metal Solution. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + add + Add a public SSH key to the project in Bare Metal Solution. + + list + List the SSH keys added to the project in Bare Metal Solution. + + remove + Remove an SSH key in Bare Metal Solution given its name. + +NOTES + This variant is also available: + + $ gcloud alpha bms ssh-keys + diff --git a/gcloud/bms/ssh-keys/list b/gcloud/bms/ssh-keys/list new file mode 100644 index 000000000..f23a1208c --- /dev/null +++ b/gcloud/bms/ssh-keys/list @@ -0,0 +1,42 @@ +NAME + gcloud bms ssh-keys list - list the SSH keys added to the project in Bare + Metal Solution + +SYNOPSIS + gcloud bms ssh-keys list [--filter=EXPRESSION] [--limit=LIMIT] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + List the SSH keys added to the project in Bare Metal Solution. + +EXAMPLES + To list all SSH keys within the project, run: + + $ gcloud bms ssh-keys list + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --filter, --limit. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This variant is also available: + + $ gcloud alpha bms ssh-keys list + diff --git a/gcloud/bms/ssh-keys/remove b/gcloud/bms/ssh-keys/remove new file mode 100644 index 000000000..b5f75e3f4 --- /dev/null +++ b/gcloud/bms/ssh-keys/remove @@ -0,0 +1,48 @@ +NAME + gcloud bms ssh-keys remove - remove an SSH key in Bare Metal Solution given + its name + +SYNOPSIS + gcloud bms ssh-keys remove SSH_KEY [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Remove an SSH key in Bare Metal Solution given its name. + +EXAMPLES + To remove an SSH key called my-ssh-key run: + + $ gcloud bms ssh-keys remove my-ssh-key + +POSITIONAL ARGUMENTS + SSH key resource - ssh_key. This represents a Cloud resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. To set the project attribute: + ◆ provide the argument ssh_key on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. To set the region + attribute: + ◆ provide the argument ssh_key on the command line with a fully + specified name; + ◆ global is the only supported location. + + This must be specified. + + SSH_KEY + ID of the SSH key or fully qualified identifier for the SSH key. To + set the ssh_key attribute: + ▸ provide the argument ssh_key on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This variant is also available: + + $ gcloud alpha bms ssh-keys remove + diff --git a/gcloud/builds/triggers/create/manual b/gcloud/builds/triggers/create/manual index fe6eb6e2b..22f8f2315 100644 --- a/gcloud/builds/triggers/create/manual +++ b/gcloud/builds/triggers/create/manual @@ -7,11 +7,12 @@ SYNOPSIS (--trigger-config=PATH | [(--build-config=PATH | --inline-config=PATH | [--dockerfile=DOCKERFILE : --dockerfile-dir=DOCKERFILE_DIR; default="/" --dockerfile-image=DOCKERFILE_IMAGE]) - : --description=DESCRIPTION - --github-enterprise-config=GITHUB_ENTERPRISE_CONFIG --name=NAME - --region=REGION --require-approval --service-account=SERVICE_ACCOUNT - --substitutions=[KEY=VALUE,...] - --repo=REPO --repo-type=REPO_TYPE (--branch=BRANCH | --tag=TAG)]) + : --description=DESCRIPTION --name=NAME --region=REGION + --require-approval --service-account=SERVICE_ACCOUNT + --substitutions=[KEY=VALUE,...] (--branch=BRANCH + | --tag=TAG) (--repository=REPOSITORY + | [--repo=REPO --repo-type=REPO_TYPE + : --github-enterprise-config=GITHUB_ENTERPRISE_CONFIG])]) [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -26,6 +27,14 @@ EXAMPLES --repo=https://www.github.com/owner/repo --repo-type=GITHUB \ --branch=my-branch + To create a manual trigger that builds off branch my-branch in a 2nd-gen + GitHub repository resource: + + $ gcloud builds triggers create manual --name=my-manual-trigger \ + --build-config=cloudbuild.yaml \ + --repository=projects/my-proj/locations/us-west1/connections/\ + my-conn/repositories/my-repo --branch=my-branch + REQUIRED FLAGS Exactly one of these must be specified: @@ -39,12 +48,6 @@ REQUIRED FLAGS --description=DESCRIPTION Build trigger description. - --github-enterprise-config=GITHUB_ENTERPRISE_CONFIG - The resource name of the GitHub Enterprise config that should be - applied to this source. Format: - projects/{project}/locations/{location}/githubEnterpriseConfigs/{id} - or projects/{project}/githubEnterpriseConfigs/{id} - --name=NAME Build trigger name. @@ -128,21 +131,7 @@ REQUIRED FLAGS Use a build configuration (cloudbuild.yaml) file for building multiple images in a single trigger. - Flags for repository information - - --repo=REPO - URI of the repository. Currently only HTTP URIs for GitHub and - Cloud Source Repositories are supported. - - This flag argument must be specified if any of the other - arguments in this group are specified. - - --repo-type=REPO_TYPE - Type of the repository. Currently only GitHub and Cloud Source - Repository types are supported. - - This flag argument must be specified if any of the other - arguments in this group are specified. + Flags for repository and branch information Exactly one of these must be specified: @@ -152,6 +141,36 @@ REQUIRED FLAGS --tag=TAG Tag to build. + Flags for repository information + + Exactly one of these must be specified: + + --repository=REPOSITORY + Repository resource (2nd gen) to use, in the format + "projects/*/locations/*/connections/*/repositories/". + + 1st-gen repository settings. + + --repo=REPO + URI of the repository (1st gen). Currently only HTTP URIs for + GitHub and Cloud Source Repositories are supported. + + This flag argument must be specified if any of the other + arguments in this group are specified. + + --repo-type=REPO_TYPE + Type of the repository (1st gen). Currently only GitHub and + Cloud Source Repository types are supported. + + This flag argument must be specified if any of the other + arguments in this group are specified. + + --github-enterprise-config=GITHUB_ENTERPRISE_CONFIG + The resource name of the GitHub Enterprise config that should + be applied to this source (1st gen). Format: + projects/{project}/locations/{location}/githubEnterpriseConfigs/{id} + or projects/{project}/githubEnterpriseConfigs/{id} + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/builds/triggers/create/pubsub b/gcloud/builds/triggers/create/pubsub index 7a0d6a6b3..7518e2de1 100644 --- a/gcloud/builds/triggers/create/pubsub +++ b/gcloud/builds/triggers/create/pubsub @@ -8,12 +8,13 @@ SYNOPSIS | --inline-config=PATH | [--dockerfile=DOCKERFILE : --dockerfile-dir=DOCKERFILE_DIR; default="/" --dockerfile-image=DOCKERFILE_IMAGE]) - : --description=DESCRIPTION - --github-enterprise-config=GITHUB_ENTERPRISE_CONFIG --name=NAME - --region=REGION --require-approval --service-account=SERVICE_ACCOUNT + : --description=DESCRIPTION --name=NAME --region=REGION + --require-approval --service-account=SERVICE_ACCOUNT --subscription-filter=SUBSCRIPTION_FILTER - --substitutions=[KEY=VALUE,...] - --repo=REPO --repo-type=REPO_TYPE (--branch=BRANCH | --tag=TAG)]) + --substitutions=[KEY=VALUE,...] (--branch=BRANCH + | --tag=TAG) (--repository=REPOSITORY + | [--repo=REPO --repo-type=REPO_TYPE + : --github-enterprise-config=GITHUB_ENTERPRISE_CONFIG])]) [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -30,6 +31,15 @@ EXAMPLES --repo=https://www.github.com/owner/repo --repo-type=GITHUB \ --branch=my-branch + To create a Pub/Sub trigger that listens to topic my-topic and builds off + branch my-branch in a 2nd-gen GitHub repository resource: + + $ gcloud builds triggers create pubsub --name=my-pubsub-trigger \ + --service-account="projects/my-project/serviceAccounts/my-byosa@\ + my-project.iam.gserviceaccount.com" \ + --repository=projects/my-proj/locations/us-west1/connections/\ + my-conn/repositories/my-repo --branch=my-branch + REQUIRED FLAGS Exactly one of these must be specified: @@ -49,12 +59,6 @@ REQUIRED FLAGS --description=DESCRIPTION Build trigger description. - --github-enterprise-config=GITHUB_ENTERPRISE_CONFIG - The resource name of the GitHub Enterprise config that should be - applied to this source. Format: - projects/{project}/locations/{location}/githubEnterpriseConfigs/{id} - or projects/{project}/githubEnterpriseConfigs/{id} - --name=NAME Build trigger name. @@ -143,21 +147,7 @@ REQUIRED FLAGS Use a build configuration (cloudbuild.yaml) file for building multiple images in a single trigger. - Flags for repository information - - --repo=REPO - URI of the repository. Currently only HTTP URIs for GitHub and - Cloud Source Repositories are supported. - - This flag argument must be specified if any of the other - arguments in this group are specified. - - --repo-type=REPO_TYPE - Type of the repository. Currently only GitHub and Cloud Source - Repository types are supported. - - This flag argument must be specified if any of the other - arguments in this group are specified. + Flags for repository and branch information Exactly one of these must be specified: @@ -167,6 +157,36 @@ REQUIRED FLAGS --tag=TAG Tag to build. + Flags for repository information + + Exactly one of these must be specified: + + --repository=REPOSITORY + Repository resource (2nd gen) to use, in the format + "projects/*/locations/*/connections/*/repositories/". + + 1st-gen repository settings. + + --repo=REPO + URI of the repository (1st gen). Currently only HTTP URIs for + GitHub and Cloud Source Repositories are supported. + + This flag argument must be specified if any of the other + arguments in this group are specified. + + --repo-type=REPO_TYPE + Type of the repository (1st gen). Currently only GitHub and + Cloud Source Repository types are supported. + + This flag argument must be specified if any of the other + arguments in this group are specified. + + --github-enterprise-config=GITHUB_ENTERPRISE_CONFIG + The resource name of the GitHub Enterprise config that should + be applied to this source (1st gen). Format: + projects/{project}/locations/{location}/githubEnterpriseConfigs/{id} + or projects/{project}/githubEnterpriseConfigs/{id} + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/builds/triggers/create/webhook b/gcloud/builds/triggers/create/webhook index f92e1605b..0080aaedd 100644 --- a/gcloud/builds/triggers/create/webhook +++ b/gcloud/builds/triggers/create/webhook @@ -8,12 +8,13 @@ SYNOPSIS | --inline-config=PATH | [--dockerfile=DOCKERFILE : --dockerfile-dir=DOCKERFILE_DIR; default="/" --dockerfile-image=DOCKERFILE_IMAGE]) - : --description=DESCRIPTION - --github-enterprise-config=GITHUB_ENTERPRISE_CONFIG --name=NAME - --region=REGION --require-approval --service-account=SERVICE_ACCOUNT + : --description=DESCRIPTION --name=NAME --region=REGION + --require-approval --service-account=SERVICE_ACCOUNT --subscription-filter=SUBSCRIPTION_FILTER - --substitutions=[KEY=VALUE,...] - --repo=REPO --repo-type=REPO_TYPE (--branch=BRANCH | --tag=TAG)]) + --substitutions=[KEY=VALUE,...] (--branch=BRANCH + | --tag=TAG) (--repository=REPOSITORY + | [--repo=REPO --repo-type=REPO_TYPE + : --github-enterprise-config=GITHUB_ENTERPRISE_CONFIG])]) [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -31,6 +32,18 @@ EXAMPLES --repo=https://www.github.com/owner/repo --repo-type=GITHUB \ --branch=my-branch + To create a Webhook trigger that requires secret + projects/my-project/secrets/my-secret/versions/2 and builds off branch + my-branch in a 2nd-gen GitHub repository: + + $ gcloud builds triggers create webhook --name=my-webhook-trigger \ + --service-account="projects/my-project/serviceAccounts/my-byosa@\ + my-project.iam.gserviceaccount.com" \ + --secret=projects/my-project/secrets/my-secret/versions/2 \ + --branch=my-branch \ + --repository=projects/my-proj/locations/us-west1/connections/\ + my-conn/repositories/my-repo + REQUIRED FLAGS Exactly one of these must be specified: @@ -52,12 +65,6 @@ REQUIRED FLAGS --description=DESCRIPTION Build trigger description. - --github-enterprise-config=GITHUB_ENTERPRISE_CONFIG - The resource name of the GitHub Enterprise config that should be - applied to this source. Format: - projects/{project}/locations/{location}/githubEnterpriseConfigs/{id} - or projects/{project}/githubEnterpriseConfigs/{id} - --name=NAME Build trigger name. @@ -146,21 +153,7 @@ REQUIRED FLAGS Use a build configuration (cloudbuild.yaml) file for building multiple images in a single trigger. - Flags for repository information - - --repo=REPO - URI of the repository. Currently only HTTP URIs for GitHub and - Cloud Source Repositories are supported. - - This flag argument must be specified if any of the other - arguments in this group are specified. - - --repo-type=REPO_TYPE - Type of the repository. Currently only GitHub and Cloud Source - Repository types are supported. - - This flag argument must be specified if any of the other - arguments in this group are specified. + Flags for repository and branch information Exactly one of these must be specified: @@ -170,6 +163,36 @@ REQUIRED FLAGS --tag=TAG Tag to build. + Flags for repository information + + Exactly one of these must be specified: + + --repository=REPOSITORY + Repository resource (2nd gen) to use, in the format + "projects/*/locations/*/connections/*/repositories/". + + 1st-gen repository settings. + + --repo=REPO + URI of the repository (1st gen). Currently only HTTP URIs for + GitHub and Cloud Source Repositories are supported. + + This flag argument must be specified if any of the other + arguments in this group are specified. + + --repo-type=REPO_TYPE + Type of the repository (1st gen). Currently only GitHub and + Cloud Source Repository types are supported. + + This flag argument must be specified if any of the other + arguments in this group are specified. + + --github-enterprise-config=GITHUB_ENTERPRISE_CONFIG + The resource name of the GitHub Enterprise config that should + be applied to this source (1st gen). Format: + projects/{project}/locations/{location}/githubEnterpriseConfigs/{id} + or projects/{project}/githubEnterpriseConfigs/{id} + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/compute/disks/create b/gcloud/compute/disks/create index 690f09efd..946c8e0bf 100644 --- a/gcloud/compute/disks/create +++ b/gcloud/compute/disks/create @@ -73,7 +73,8 @@ FLAGS their boot disks. See the descriptions of supported features at: https://cloud.google.com/compute/docs/images/create-delete-deprecate-private-images#guest-os-features. GUEST_OS_FEATURE must be one of: GVNIC, MULTI_IP_SUBNET, SEV_CAPABLE, - SEV_SNP_CAPABLE, UEFI_COMPATIBLE, VIRTIO_SCSI_MULTIQUEUE, WINDOWS. + SEV_LIVE_MIGRATABLE, SEV_SNP_CAPABLE, UEFI_COMPATIBLE, + VIRTIO_SCSI_MULTIQUEUE, WINDOWS. --labels=[KEY=VALUE,...] List of label KEY=VALUE pairs to add. diff --git a/gcloud/compute/images/create b/gcloud/compute/images/create index ac2af477e..ebee73c8a 100644 --- a/gcloud/compute/images/create +++ b/gcloud/compute/images/create @@ -144,7 +144,8 @@ OPTIONAL FLAGS their boot disks. See the descriptions of supported features at: https://cloud.google.com/compute/docs/images/create-delete-deprecate-private-images#guest-os-features. GUEST_OS_FEATURE must be one of: GVNIC, MULTI_IP_SUBNET, SEV_CAPABLE, - SEV_SNP_CAPABLE, UEFI_COMPATIBLE, VIRTIO_SCSI_MULTIQUEUE, WINDOWS. + SEV_LIVE_MIGRATABLE, SEV_SNP_CAPABLE, UEFI_COMPATIBLE, + VIRTIO_SCSI_MULTIQUEUE, WINDOWS. --key-exchange-key-file=[KEK_VALUE,...] Comma-separated list of file paths that point to X.509 certificates in diff --git a/gcloud/compute/images/import b/gcloud/compute/images/import index 8f819dce6..90967db29 100644 --- a/gcloud/compute/images/import +++ b/gcloud/compute/images/import @@ -3,8 +3,13 @@ NAME SYNOPSIS gcloud compute images import IMAGE_NAME - (--source-file=SOURCE_FILE | --source-image=SOURCE_IMAGE) - [--no-address] [--async] + (--aws-access-key-id=AWS_ACCESS_KEY_ID --aws-region=AWS_REGION + --aws-secret-access-key=AWS_SECRET_ACCESS_KEY + --aws-session-token=AWS_SESSION_TOKEN + (--aws-source-ami-file-path=AWS_SOURCE_AMI_FILE_PATH + | --aws-ami-export-location=AWS_AMI_EXPORT_LOCATION + --aws-ami-id=AWS_AMI_ID) | --source-file=SOURCE_FILE + | --source-image=SOURCE_IMAGE) [--no-address] [--async] [--compute-service-account=COMPUTE_SERVICE_ACCOUNT] [--description=DESCRIPTION] [--family=FAMILY] [--no-guest-environment] [--guest-os-features=[GUEST_OS_FEATURE,...]] @@ -54,14 +59,73 @@ POSITIONAL ARGUMENTS REQUIRED FLAGS Exactly one of these must be specified: - --source-file=SOURCE_FILE - A local file, or the Cloud Storage URI of the virtual disk file to - import. For example: gs://my-bucket/my-image.vmdk or - ./my-local-image.vmdk. For more information about Cloud Storage URIs, - see https://cloud.google.com/storage/docs/request-endpoints#json-api. + Image import from AWS. - --source-image=SOURCE_IMAGE - An existing Compute Engine image from which to import. + --aws-access-key-id=AWS_ACCESS_KEY_ID + Access key ID for a temporary AWS credential. This ID must be + generated using the AWS Security Token Service. + + This flag argument must be specified if any of the other arguments + in this group are specified. + + --aws-region=AWS_REGION + AWS region of the image that you want to import. + + This flag argument must be specified if any of the other arguments + in this group are specified. + + --aws-secret-access-key=AWS_SECRET_ACCESS_KEY + Secret access key for a temporary AWS credential. This key must be + generated using the AWS Security Token Service. + + This flag argument must be specified if any of the other arguments + in this group are specified. + + --aws-session-token=AWS_SESSION_TOKEN + Session token for a temporary AWS credential. This session token + must be generated using the AWS Security Token Service. + + This flag argument must be specified if any of the other arguments + in this group are specified. + + Specify whether to import from an AMI or disk image. + + Exactly one of these must be specified: + + If importing a disk image, specify the following: + + --aws-source-ami-file-path=AWS_SOURCE_AMI_FILE_PATH + S3 resource path of the exported image file that you want to + import. + + If importing an AMI, specify the following two flags: + + --aws-ami-export-location=AWS_AMI_EXPORT_LOCATION + An AWS S3 bucket location where the converted image file can be + temporarily exported to before the import to Cloud Storage. + + This flag argument must be specified if any of the other + arguments in this group are specified. + + --aws-ami-id=AWS_AMI_ID + AWS AMI ID of the image to import. + + This flag argument must be specified if any of the other + arguments in this group are specified. + + Image import from local file, Cloud Storage or Compute Engine image. + + At most one of these can be specified: + + --source-file=SOURCE_FILE + A local file, or the Cloud Storage URI of the virtual disk file to + import. For example: gs://my-bucket/my-image.vmdk or + ./my-local-image.vmdk. For more information about Cloud Storage + URIs, see + https://cloud.google.com/storage/docs/request-endpoints#json-api. + + --source-image=SOURCE_IMAGE + An existing Compute Engine image from which to import. OPTIONAL FLAGS --no-address diff --git a/gcloud/compute/instance-templates/create b/gcloud/compute/instance-templates/create index b46bb67fd..6814cb5d3 100644 --- a/gcloud/compute/instance-templates/create +++ b/gcloud/compute/instance-templates/create @@ -21,8 +21,9 @@ SYNOPSIS [--internal-ipv6-prefix-length=INTERNAL_IPV6_PREFIX_LENGTH] [--ipv6-network-tier=IPV6_NETWORK_TIER] [--key-revocation-action-type=POLICY] [--labels=[KEY=VALUE,...]] - [--local-ssd=[device-name=DEVICE-NAME],[interface=INTERFACE]] - [--machine-type=MACHINE_TYPE] [--maintenance-policy=MAINTENANCE_POLICY] + [--local-ssd=[device-name=DEVICE-NAME], + [interface=INTERFACE],[size=SIZE]] [--machine-type=MACHINE_TYPE] + [--maintenance-policy=MAINTENANCE_POLICY] [--metadata=KEY=VALUE,[KEY=VALUE,...]] [--metadata-from-file=KEY=LOCAL_FILE_PATH,[...]] [--min-cpu-platform=PLATFORM] [--min-node-cpu=MIN_NODE_CPU] @@ -404,7 +405,7 @@ FLAGS contain only hyphens (-), underscores (_), lowercase characters, and numbers. - --local-ssd=[device-name=DEVICE-NAME],[interface=INTERFACE] + --local-ssd=[device-name=DEVICE-NAME],[interface=INTERFACE],[size=SIZE] Attaches a local SSD to the instances. device-name @@ -418,6 +419,12 @@ FLAGS supported by more guest operating systems. NVME might provide higher performance. + size + Optional. The only valid value is 375GB. Specify the --local-ssd + flag multiple times if you need multiple 375GB local SSD + partitions. You can specify a maximum of 24 local SSDs for a + maximum of 9TB attached to an instance. + --machine-type=MACHINE_TYPE Specifies the machine type used for the instances. To get a list of available machine types, run 'gcloud compute machine-types list'. If diff --git a/gcloud/compute/instances/bulk/create b/gcloud/compute/instances/bulk/create index bfad6283e..be209a7ef 100644 --- a/gcloud/compute/instances/bulk/create +++ b/gcloud/compute/instances/bulk/create @@ -19,7 +19,8 @@ SYNOPSIS [--erase-windows-vss-signature] [--instance-termination-action=INSTANCE_TERMINATION_ACTION] [--labels=[KEY=VALUE,...]] - [--local-ssd=[device-name=DEVICE-NAME],[interface=INTERFACE]] + [--local-ssd=[device-name=DEVICE-NAME], + [interface=INTERFACE],[size=SIZE]] [--location-policy=[ZONE=POLICY,...]] [--machine-type=MACHINE_TYPE] [--metadata=KEY=VALUE,[KEY=VALUE,...]] [--metadata-from-file=KEY=LOCAL_FILE_PATH,[...]] @@ -413,7 +414,7 @@ OPTIONAL FLAGS contain only hyphens (-), underscores (_), lowercase characters, and numbers. - --local-ssd=[device-name=DEVICE-NAME],[interface=INTERFACE] + --local-ssd=[device-name=DEVICE-NAME],[interface=INTERFACE],[size=SIZE] Attaches a local SSD to the instances. device-name @@ -427,6 +428,12 @@ OPTIONAL FLAGS supported by more guest operating systems. NVME might provide higher performance. + size + Optional. The only valid value is 375GB. Specify the --local-ssd + flag multiple times if you need multiple 375GB local SSD + partitions. You can specify a maximum of 24 local SSDs for a + maximum of 9TB attached to an instance. + --location-policy=[ZONE=POLICY,...] Policy for which zones to include or exclude during bulk instance creation within a region. Policy is defined as a list of key-value diff --git a/gcloud/compute/instances/create b/gcloud/compute/instances/create index eab3ae70c..c43e1fa67 100644 --- a/gcloud/compute/instances/create +++ b/gcloud/compute/instances/create @@ -25,8 +25,9 @@ SYNOPSIS [--ipv6-network-tier=IPV6_NETWORK_TIER] [--ipv6-public-ptr-domain=IPV6_PUBLIC_PTR_DOMAIN] [--key-revocation-action-type=POLICY] [--labels=[KEY=VALUE,...]] - [--local-ssd=[device-name=DEVICE-NAME],[interface=INTERFACE]] - [--machine-type=MACHINE_TYPE] [--maintenance-policy=MAINTENANCE_POLICY] + [--local-ssd=[device-name=DEVICE-NAME], + [interface=INTERFACE],[size=SIZE]] [--machine-type=MACHINE_TYPE] + [--maintenance-policy=MAINTENANCE_POLICY] [--metadata=KEY=VALUE,[KEY=VALUE,...]] [--metadata-from-file=KEY=LOCAL_FILE_PATH,[...]] [--min-cpu-platform=PLATFORM] [--min-node-cpu=MIN_NODE_CPU] @@ -477,7 +478,7 @@ FLAGS contain only hyphens (-), underscores (_), lowercase characters, and numbers. - --local-ssd=[device-name=DEVICE-NAME],[interface=INTERFACE] + --local-ssd=[device-name=DEVICE-NAME],[interface=INTERFACE],[size=SIZE] Attaches a local SSD to the instances. device-name @@ -491,6 +492,12 @@ FLAGS supported by more guest operating systems. NVME might provide higher performance. + size + Optional. The only valid value is 375GB. Specify the --local-ssd + flag multiple times if you need multiple 375GB local SSD + partitions. You can specify a maximum of 24 local SSDs for a + maximum of 9TB attached to an instance. + --machine-type=MACHINE_TYPE Specifies the machine type used for the instances. To get a list of available machine types, run 'gcloud compute machine-types list'. If diff --git a/gcloud/compute/sole-tenancy/node-groups/help b/gcloud/compute/sole-tenancy/node-groups/help index 7fdb61b93..33fb92ead 100644 --- a/gcloud/compute/sole-tenancy/node-groups/help +++ b/gcloud/compute/sole-tenancy/node-groups/help @@ -43,6 +43,9 @@ COMMANDS set-iam-policy Set the IAM policy for a Compute Engine node group. + simulate-maintenance-event + Simulate maintenance of a Compute Engine node group. + update Update a Compute Engine node group. diff --git a/gcloud/compute/sole-tenancy/node-groups/simulate-maintenance-event b/gcloud/compute/sole-tenancy/node-groups/simulate-maintenance-event new file mode 100644 index 000000000..05f0d0771 --- /dev/null +++ b/gcloud/compute/sole-tenancy/node-groups/simulate-maintenance-event @@ -0,0 +1,67 @@ +NAME + gcloud compute sole-tenancy node-groups simulate-maintenance-event - + simulate maintenance of a Compute Engine node group + +SYNOPSIS + gcloud compute sole-tenancy node-groups simulate-maintenance-event NAME + [--async] [--nodes=[NODE,...]] [--zone=ZONE] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Simulate maintenance of a Compute Engine node group. + +EXAMPLES + To simulate maintenance of a node group, run: + + $ gcloud compute sole-tenancy node-groups \ + simulate-maintenance-event my-node-group --nodes=example-nodes + +POSITIONAL ARGUMENTS + NAME + Name of the node group to operate on. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --nodes=[NODE,...] + The names of the nodes to simulate maintenance event. + + --zone=ZONE + Zone of the node group to operate on. If not specified and the + compute/zone property isn't set, you might be prompted to select a zone + (interactive mode only). + + To avoid prompting when this flag is omitted, you can set the + compute/zone property: + + $ gcloud config set compute/zone ZONE + + A list of zones can be fetched by running: + + $ gcloud compute zones list + + To unset the property, run: + + $ gcloud config unset compute/zone + + Alternatively, the zone can be stored in the environment variable + CLOUDSDK_COMPUTE_ZONE. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha compute sole-tenancy node-groups \ + simulate-maintenance-event + + $ gcloud beta compute sole-tenancy node-groups \ + simulate-maintenance-event + diff --git a/gcloud/config/get b/gcloud/config/get index 802e38207..be97bf498 100644 --- a/gcloud/config/get +++ b/gcloud/config/get @@ -426,6 +426,10 @@ AVAILABLE PROPERTIES Overrides API endpoint for gcloud active-directory command group. Defaults to https://managedidentities.googleapis.com/ + marketplacesolutions + Overrides API endpoint for gcloud mps command group. Defaults to + https://marketplacesolutions.googleapis.com/ + mediaasset Overrides API endpoint for gcloud media command group. Defaults to https://mediaasset.googleapis.com/ @@ -1048,6 +1052,10 @@ AVAILABLE PROPERTIES Engine jobs. Note that making it much faster than the default (60) will quickly use all of your quota. + mps + vendor + Id for Marketplace Solutions Vendor. + netapp location Default location to use when working with Cloud NetApp Files @@ -1268,6 +1276,9 @@ AVAILABLE PROPERTIES File operations above this size in bytes will use resumable instead of one-shot strategies. For example, a resumable download. + rsync_files_directory + Directory path to intermediary files created by rsync. + s3_endpoint_url If set, boto3 client will connect to this endpoint. Otherwise, boto3 selects a default endpoint based on the AWS service used. diff --git a/gcloud/config/help b/gcloud/config/help index 3573a4160..d51a2d72b 100644 --- a/gcloud/config/help +++ b/gcloud/config/help @@ -458,6 +458,10 @@ AVAILABLE PROPERTIES Overrides API endpoint for gcloud active-directory command group. Defaults to https://managedidentities.googleapis.com/ + marketplacesolutions + Overrides API endpoint for gcloud mps command group. Defaults to + https://marketplacesolutions.googleapis.com/ + mediaasset Overrides API endpoint for gcloud media command group. Defaults to https://mediaasset.googleapis.com/ @@ -1080,6 +1084,10 @@ AVAILABLE PROPERTIES Engine jobs. Note that making it much faster than the default (60) will quickly use all of your quota. + mps + vendor + Id for Marketplace Solutions Vendor. + netapp location Default location to use when working with Cloud NetApp Files @@ -1300,6 +1308,9 @@ AVAILABLE PROPERTIES File operations above this size in bytes will use resumable instead of one-shot strategies. For example, a resumable download. + rsync_files_directory + Directory path to intermediary files created by rsync. + s3_endpoint_url If set, boto3 client will connect to this endpoint. Otherwise, boto3 selects a default endpoint based on the AWS service used. diff --git a/gcloud/config/list b/gcloud/config/list index 26fec789d..587e1f0cb 100644 --- a/gcloud/config/list +++ b/gcloud/config/list @@ -470,6 +470,10 @@ AVAILABLE PROPERTIES Overrides API endpoint for gcloud active-directory command group. Defaults to https://managedidentities.googleapis.com/ + marketplacesolutions + Overrides API endpoint for gcloud mps command group. Defaults to + https://marketplacesolutions.googleapis.com/ + mediaasset Overrides API endpoint for gcloud media command group. Defaults to https://mediaasset.googleapis.com/ @@ -1092,6 +1096,10 @@ AVAILABLE PROPERTIES Engine jobs. Note that making it much faster than the default (60) will quickly use all of your quota. + mps + vendor + Id for Marketplace Solutions Vendor. + netapp location Default location to use when working with Cloud NetApp Files @@ -1312,6 +1320,9 @@ AVAILABLE PROPERTIES File operations above this size in bytes will use resumable instead of one-shot strategies. For example, a resumable download. + rsync_files_directory + Directory path to intermediary files created by rsync. + s3_endpoint_url If set, boto3 client will connect to this endpoint. Otherwise, boto3 selects a default endpoint based on the AWS service used. diff --git a/gcloud/config/set b/gcloud/config/set index dcd47d5c1..5acb4aa0f 100644 --- a/gcloud/config/set +++ b/gcloud/config/set @@ -473,6 +473,10 @@ AVAILABLE PROPERTIES Overrides API endpoint for gcloud active-directory command group. Defaults to https://managedidentities.googleapis.com/ + marketplacesolutions + Overrides API endpoint for gcloud mps command group. Defaults to + https://marketplacesolutions.googleapis.com/ + mediaasset Overrides API endpoint for gcloud media command group. Defaults to https://mediaasset.googleapis.com/ @@ -1095,6 +1099,10 @@ AVAILABLE PROPERTIES Engine jobs. Note that making it much faster than the default (60) will quickly use all of your quota. + mps + vendor + Id for Marketplace Solutions Vendor. + netapp location Default location to use when working with Cloud NetApp Files @@ -1315,6 +1323,9 @@ AVAILABLE PROPERTIES File operations above this size in bytes will use resumable instead of one-shot strategies. For example, a resumable download. + rsync_files_directory + Directory path to intermediary files created by rsync. + s3_endpoint_url If set, boto3 client will connect to this endpoint. Otherwise, boto3 selects a default endpoint based on the AWS service used. diff --git a/gcloud/config/unset b/gcloud/config/unset index aab6c6f33..6a825cf31 100644 --- a/gcloud/config/unset +++ b/gcloud/config/unset @@ -434,6 +434,10 @@ AVAILABLE PROPERTIES Overrides API endpoint for gcloud active-directory command group. Defaults to https://managedidentities.googleapis.com/ + marketplacesolutions + Overrides API endpoint for gcloud mps command group. Defaults to + https://marketplacesolutions.googleapis.com/ + mediaasset Overrides API endpoint for gcloud media command group. Defaults to https://mediaasset.googleapis.com/ @@ -1056,6 +1060,10 @@ AVAILABLE PROPERTIES Engine jobs. Note that making it much faster than the default (60) will quickly use all of your quota. + mps + vendor + Id for Marketplace Solutions Vendor. + netapp location Default location to use when working with Cloud NetApp Files @@ -1276,6 +1284,9 @@ AVAILABLE PROPERTIES File operations above this size in bytes will use resumable instead of one-shot strategies. For example, a resumable download. + rsync_files_directory + Directory path to intermediary files created by rsync. + s3_endpoint_url If set, boto3 client will connect to this endpoint. Otherwise, boto3 selects a default endpoint based on the AWS service used. diff --git a/gcloud/database-migration/connection-profiles/create/cloudsql b/gcloud/database-migration/connection-profiles/create/cloudsql index 5f29c5d3a..c15945754 100644 --- a/gcloud/database-migration/connection-profiles/create/cloudsql +++ b/gcloud/database-migration/connection-profiles/create/cloudsql @@ -8,11 +8,13 @@ SYNOPSIS --database-version=DATABASE_VERSION --source-id=SOURCE_ID --tier=TIER [--activation-policy=ACTIVATION_POLICY] [--no-async] [--authorized-networks=NETWORK,[NETWORK,...]] - [--no-auto-storage-increase] [--data-disk-size=DATA_DISK_SIZE] - [--data-disk-type=DATA_DISK_TYPE] [--database-flags=[FLAG=VALUE,...]] - [--display-name=DISPLAY_NAME] [--no-enable-ip-v4] - [--labels=[KEY=VALUE,...]] [--private-network=PRIVATE_NETWORK] - [--provider=PROVIDER] [--require-ssl] [--root-password=ROOT_PASSWORD] + [--no-auto-storage-increase] [--availability-type=AVAILABILITY_TYPE] + [--data-disk-size=DATA_DISK_SIZE] [--data-disk-type=DATA_DISK_TYPE] + [--database-flags=[FLAG=VALUE,...]] [--display-name=DISPLAY_NAME] + [--no-enable-ip-v4] [--labels=[KEY=VALUE,...]] + [--private-network=PRIVATE_NETWORK] [--provider=PROVIDER] + [--require-ssl] [--root-password=ROOT_PASSWORD] + [--secondary-zone=SECONDARY_ZONE] [--storage-auto-resize-limit=STORAGE_AUTO_RESIZE_LIMIT] [--user-labels=[KEY=VALUE,...]] [--zone=ZONE] [GCLOUD_WIDE_FLAG ...] @@ -123,6 +125,10 @@ OPTIONAL FLAGS Default: ON. Enabled by default, use --no-auto-storage-increase to disable. + --availability-type=AVAILABILITY_TYPE + Cloud SQL availability type. AVAILABILITY_TYPE must be one of: + REGIONAL, ZONAL. + --data-disk-size=DATA_DISK_SIZE Storage capacity available to the database, in GB. The minimum (and default) size is 10GB. @@ -171,6 +177,11 @@ OPTIONAL FLAGS --root-password=ROOT_PASSWORD Root Cloud SQL user's password. + --secondary-zone=SECONDARY_ZONE + Google Cloud Platform zone where the failover Cloud SQL database + instance is located. Used when the Cloud SQL database availability type + is REGIONAL (i.e. multiple zones / highly available). + --storage-auto-resize-limit=STORAGE_AUTO_RESIZE_LIMIT Maximum size to which storage capacity can be automatically increased. The default value is 0, which specifies that there is no limit. @@ -181,7 +192,7 @@ OPTIONAL FLAGS containing a list of "key": "value" pairs. --zone=ZONE - Google Cloud Platform zone where your Cloud SQL datdabse instance is + Google Cloud Platform zone where your Cloud SQL database instance is located. GCLOUD WIDE FLAGS diff --git a/gcloud/dataproc/batches/submit/help b/gcloud/dataproc/batches/submit/help index 499ed9446..3b761ac7e 100644 --- a/gcloud/dataproc/batches/submit/help +++ b/gcloud/dataproc/batches/submit/help @@ -8,7 +8,7 @@ SYNOPSIS [--labels=[KEY=VALUE,...]] [--metastore-service=METASTORE_SERVICE] [--properties=[PROPERTY=VALUE,...]] [--region=REGION] [--request-id=REQUEST_ID] [--service-account=SERVICE_ACCOUNT] - [--tags=[TAGS,...]] [--version=VERSION] + [--tags=[TAGS,...]] [--ttl=TTL] [--version=VERSION] [--network=NETWORK | --subnet=SUBNET] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -115,6 +115,12 @@ FLAGS --tags=[TAGS,...] Network tags for traffic control. + --ttl=TTL + The duration after the workload will be unconditionally terminated, for + example, '20m' or '1h'. Run gcloud topic datetimes + (https://cloud.google.com/sdk/gcloud/reference/topic/datetimes) for + information on duration formats. + --version=VERSION Optional runtime version. If not specified, a default version will be used. diff --git a/gcloud/dataproc/batches/submit/pyspark b/gcloud/dataproc/batches/submit/pyspark index 4e1ccc228..24f1d868b 100644 --- a/gcloud/dataproc/batches/submit/pyspark +++ b/gcloud/dataproc/batches/submit/pyspark @@ -10,7 +10,7 @@ SYNOPSIS [--metastore-service=METASTORE_SERVICE] [--properties=[PROPERTY=VALUE,...]] [--py-files=[PY,...]] [--region=REGION] [--request-id=REQUEST_ID] - [--service-account=SERVICE_ACCOUNT] [--tags=[TAGS,...]] + [--service-account=SERVICE_ACCOUNT] [--tags=[TAGS,...]] [--ttl=TTL] [--version=VERSION] [--network=NETWORK | --subnet=SUBNET] [GCLOUD_WIDE_FLAG ...] [-- JOB_ARG ...] @@ -131,6 +131,12 @@ FLAGS --tags=[TAGS,...] Network tags for traffic control. + --ttl=TTL + The duration after the workload will be unconditionally terminated, for + example, '20m' or '1h'. Run gcloud topic datetimes + (https://cloud.google.com/sdk/gcloud/reference/topic/datetimes) for + information on duration formats. + --version=VERSION Optional runtime version. If not specified, a default version will be used. diff --git a/gcloud/dataproc/batches/submit/spark b/gcloud/dataproc/batches/submit/spark index 6bf9a5da1..91c5163b5 100644 --- a/gcloud/dataproc/batches/submit/spark +++ b/gcloud/dataproc/batches/submit/spark @@ -10,7 +10,7 @@ SYNOPSIS [--metastore-service=METASTORE_SERVICE] [--properties=[PROPERTY=VALUE,...]] [--region=REGION] [--request-id=REQUEST_ID] [--service-account=SERVICE_ACCOUNT] - [--tags=[TAGS,...]] [--version=VERSION] + [--tags=[TAGS,...]] [--ttl=TTL] [--version=VERSION] [--network=NETWORK | --subnet=SUBNET] [GCLOUD_WIDE_FLAG ...] [-- JOB_ARG ...] @@ -145,6 +145,12 @@ OPTIONAL FLAGS --tags=[TAGS,...] Network tags for traffic control. + --ttl=TTL + The duration after the workload will be unconditionally terminated, for + example, '20m' or '1h'. Run gcloud topic datetimes + (https://cloud.google.com/sdk/gcloud/reference/topic/datetimes) for + information on duration formats. + --version=VERSION Optional runtime version. If not specified, a default version will be used. diff --git a/gcloud/dataproc/batches/submit/spark-r b/gcloud/dataproc/batches/submit/spark-r index 7aeb98bd5..91ff4a85b 100644 --- a/gcloud/dataproc/batches/submit/spark-r +++ b/gcloud/dataproc/batches/submit/spark-r @@ -10,7 +10,7 @@ SYNOPSIS [--metastore-service=METASTORE_SERVICE] [--properties=[PROPERTY=VALUE,...]] [--region=REGION] [--request-id=REQUEST_ID] [--service-account=SERVICE_ACCOUNT] - [--tags=[TAGS,...]] [--version=VERSION] + [--tags=[TAGS,...]] [--ttl=TTL] [--version=VERSION] [--network=NETWORK | --subnet=SUBNET] [GCLOUD_WIDE_FLAG ...] [-- JOB_ARG ...] @@ -123,6 +123,12 @@ FLAGS --tags=[TAGS,...] Network tags for traffic control. + --ttl=TTL + The duration after the workload will be unconditionally terminated, for + example, '20m' or '1h'. Run gcloud topic datetimes + (https://cloud.google.com/sdk/gcloud/reference/topic/datetimes) for + information on duration formats. + --version=VERSION Optional runtime version. If not specified, a default version will be used. diff --git a/gcloud/dataproc/batches/submit/spark-sql b/gcloud/dataproc/batches/submit/spark-sql index 8257aa95d..f7a63caea 100644 --- a/gcloud/dataproc/batches/submit/spark-sql +++ b/gcloud/dataproc/batches/submit/spark-sql @@ -10,8 +10,9 @@ SYNOPSIS [--metastore-service=METASTORE_SERVICE] [--properties=[PROPERTY=VALUE,...]] [--region=REGION] [--request-id=REQUEST_ID] [--service-account=SERVICE_ACCOUNT] - [--tags=[TAGS,...]] [--vars=[NAME=VALUE,...]] [--version=VERSION] - [--network=NETWORK | --subnet=SUBNET] [GCLOUD_WIDE_FLAG ...] + [--tags=[TAGS,...]] [--ttl=TTL] [--vars=[NAME=VALUE,...]] + [--version=VERSION] [--network=NETWORK | --subnet=SUBNET] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION Submit a Spark SQL batch job. @@ -112,6 +113,12 @@ FLAGS --tags=[TAGS,...] Network tags for traffic control. + --ttl=TTL + The duration after the workload will be unconditionally terminated, for + example, '20m' or '1h'. Run gcloud topic datetimes + (https://cloud.google.com/sdk/gcloud/reference/topic/datetimes) for + information on duration formats. + --vars=[NAME=VALUE,...] Mapping of query variable names to values (equivalent to the Spark SQL command: SET name="value";). diff --git a/gcloud/datastream/streams/update b/gcloud/datastream/streams/update index 518f0bd01..ca088b8af 100644 --- a/gcloud/datastream/streams/update +++ b/gcloud/datastream/streams/update @@ -286,6 +286,7 @@ FLAGS } ] }, + "replicationSlot": "SAMPLE_REPLICATION_SLOT", "publication": "SAMPLE_PUBLICATION" } diff --git a/gcloud/edge-cloud/networking/routers/add-bgp-peer b/gcloud/edge-cloud/networking/routers/add-bgp-peer index 3c107b9ec..1a5b7e948 100644 --- a/gcloud/edge-cloud/networking/routers/add-bgp-peer +++ b/gcloud/edge-cloud/networking/routers/add-bgp-peer @@ -62,7 +62,7 @@ REQUIRED FLAGS https://tools.ietf.org/html/rfc6996, for example --asn=64512. --peer-ipv4-range=PEER_IPV4_RANGE - The link-local address range of the peer router. + The IPv4 link-local address range of the peer router. --peer-name=PEER_NAME The name of the new BGP peer being added. diff --git a/gcloud/edge-cloud/networking/routers/add-interface b/gcloud/edge-cloud/networking/routers/add-interface index 2ffe5e553..73740537f 100644 --- a/gcloud/edge-cloud/networking/routers/add-interface +++ b/gcloud/edge-cloud/networking/routers/add-interface @@ -80,18 +80,18 @@ REQUIRED FLAGS The argument group for adding southbound interfaces to edge router. --subnetwork=SUBNETWORK - The subnetwork of the interface being added. + Subnetwork of the interface being added. The argument group for adding northbound interfaces to edge router. --interconnect-attachment=INTERCONNECT_ATTACHMENT - The interconnect attachment of the interface being added. + Interconnect attachment of the interface being added. --ip-address=IP_ADDRESS - The link local address of the router for this interface. + Link-local address of the router for this interface. --ip-mask-length=IP_MASK_LENGTH - The subnet mask for the link-local IP range of the interface. The + Subnet mask for the link-local IP range of the interface. The interface IP address and BGP peer IP address must be selected from the subnet defined by this link-local range. diff --git a/gcloud/healthcare/fhir-stores/help b/gcloud/healthcare/fhir-stores/help index 839ada3dd..2660ec04e 100644 --- a/gcloud/healthcare/fhir-stores/help +++ b/gcloud/healthcare/fhir-stores/help @@ -46,6 +46,9 @@ COMMANDS list List Cloud Healthcare API FHIR stores. + metrics + Gets the metrics for a Cloud Healthcare API FHIR store. + remove-iam-policy-binding Remove an IAM policy binding from a Cloud Healthcare API FHIR store. diff --git a/gcloud/healthcare/fhir-stores/metrics b/gcloud/healthcare/fhir-stores/metrics new file mode 100644 index 000000000..eea281244 --- /dev/null +++ b/gcloud/healthcare/fhir-stores/metrics @@ -0,0 +1,70 @@ +NAME + gcloud healthcare fhir-stores metrics - gets the metrics for a Cloud + Healthcare API FHIR store + +SYNOPSIS + gcloud healthcare fhir-stores metrics + (FHIR_STORE : --dataset=DATASET --location=LOCATION) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Gets the metrics for a Cloud Healthcare API FHIR store. + +EXAMPLES + To get metrics for the FHIR store 'test-fhir-store', run: + + $ gcloud healthcare fhir-stores metrics test-fhir-store \ + --dataset=test-dataset + +POSITIONAL ARGUMENTS + FhirStore resource - Cloud Healthcare API FHIR store to get metrics for. + The arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument fhir_store on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + FHIR_STORE + ID of the fhirStore or fully qualified identifier for the fhirStore. + To set the fhir_store attribute: + ▸ provide the argument fhir_store on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --dataset=DATASET + Cloud Healthcare dataset. To set the dataset attribute: + ▸ provide the argument fhir_store on the command line with a fully + specified name; + ▸ provide the argument --dataset on the command line. + + --location=LOCATION + Google Cloud location. To set the location attribute: + ▸ provide the argument fhir_store on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property healthcare/location. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the healthcare/v1 API. The full documentation for this + API can be found at: https://cloud.google.com/healthcare + +NOTES + These variants are also available: + + $ gcloud alpha healthcare fhir-stores metrics + + $ gcloud beta healthcare fhir-stores metrics + diff --git a/gcloud/kms/ekm-config/add-iam-policy-binding b/gcloud/kms/ekm-config/add-iam-policy-binding new file mode 100644 index 000000000..f2f83e9e2 --- /dev/null +++ b/gcloud/kms/ekm-config/add-iam-policy-binding @@ -0,0 +1,123 @@ +NAME + gcloud kms ekm-config add-iam-policy-binding - add IAM policy binding to an + EkmConfig + +SYNOPSIS + gcloud kms ekm-config add-iam-policy-binding --location=LOCATION + --member=PRINCIPAL --role=ROLE + [--condition=[KEY=VALUE,...] + | --condition-from-file=CONDITION_FROM_FILE] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Adds a policy binding to the IAM policy of a kms EkmConfig. A binding + consists of at least one member, a role, and an optional condition. + +EXAMPLES + To add an IAM policy binding for the role of 'roles/editor' for the user + test-user@gmail.com on the EkmConfig with location us-central1, run: + + $ gcloud kms ekm-config add-iam-policy-binding \ + --location='us-central1' --member='user:test-user@gmail.com' \ + --role='roles/editor' + + To add an IAM policy binding which expires at the end of the year 2022 for + the role of 'roles/editor' and the user test-user@gmail.com and location + us-central1, run: + + $ gcloud kms ekm-config add-iam-policy-binding \ + --location='us-central1' --member='user:test-user@gmail.com' \ + --role='roles/editor' --condition='expression=request.time < + timestamp("2023-01-01T00:00:00Z"),title=expires_end_of_2022,description=Expires + at midnight on 2022-12-31' + + See https://cloud.google.com/iam/docs/managing-policies for details of + policy role and member types. + +REQUIRED FLAGS + Location resource - The KMS location resource. This represents a Cloud + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ set the property core/project. + + This must be specified. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. To + set the location attribute: + ▸ provide the argument --location on the command line. + + --member=PRINCIPAL + The principal to add the binding for. Should be of the form + user|group|serviceAccount:email or domain:domain. + + Examples: user:test-user@gmail.com, group:admins@example.com, + serviceAccount:test123@example.domain.com, or + domain:example.domain.com. + + Some resources also accept the following special values: + ◆ allUsers - Special identifier that represents anyone who is on the + internet, with or without a Google account. + ◆ allAuthenticatedUsers - Special identifier that represents anyone + who is authenticated with a Google account or a service account. + + --role=ROLE + Role name to assign to the principal. The role name is the complete + path of a predefined role, such as roles/logging.viewer, or the role ID + for a custom role, such as + organizations/{ORGANIZATION_ID}/roles/logging.viewer. + +OPTIONAL FLAGS + At most one of these can be specified: + + --condition=[KEY=VALUE,...] + A condition to include in the binding. When the condition is + explicitly specified as None (--condition=None), a binding without a + condition is added. When the condition is specified and is not None, + --role cannot be a basic role. Basic roles are roles/editor, + roles/owner, and roles/viewer. For more on conditions, refer to the + conditions overview guide: + https://cloud.google.com/iam/docs/conditions-overview + + When using the --condition flag, include the following key-value + pairs: + + expression + (Required) Condition expression that evaluates to True or False. + This uses a subset of Common Expression Language syntax. + + If the condition expression includes a comma, use a different + delimiter to separate the key-value pairs. Specify the delimiter + before listing the key-value pairs. For example, to specify a + colon (:) as the delimiter, do the following: + --condition=^:^title=TITLE:expression=EXPRESSION. For more + information, see + https://cloud.google.com/sdk/gcloud/reference/topic/escaping. + + title + (Required) A short string describing the purpose of the + expression. + + description + (Optional) Additional description for the expression. + + --condition-from-file=CONDITION_FROM_FILE + Path to a local JSON or YAML file that defines the condition. To see + available fields, see the help for --condition. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha kms ekm-config add-iam-policy-binding + + $ gcloud beta kms ekm-config add-iam-policy-binding + diff --git a/gcloud/kms/ekm-config/describe b/gcloud/kms/ekm-config/describe new file mode 100644 index 000000000..5be84f360 --- /dev/null +++ b/gcloud/kms/ekm-config/describe @@ -0,0 +1,51 @@ +NAME + gcloud kms ekm-config describe - describe the EkmConfig + +SYNOPSIS + gcloud kms ekm-config describe --location=LOCATION [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + gcloud kms ekm-config describe can be used to retrieve the EkmConfig. + +EXAMPLES + The following command retrieves the EkmConfig in us-east1 for the current + project: + + $ gcloud kms ekm-config describe --location=us-east1 + + The following command retrieves the EkmConfig for its project foo and + location us-east1: + + $ gcloud kms ekm-config describe \ + --location="projects/foo/locations/us-east1" + +REQUIRED FLAGS + Location resource - The KMS location resource. This represents a Cloud + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ set the property core/project. + + This must be specified. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. To + set the location attribute: + ▸ provide the argument --location on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha kms ekm-config describe + + $ gcloud beta kms ekm-config describe + diff --git a/gcloud/kms/ekm-config/get-iam-policy b/gcloud/kms/ekm-config/get-iam-policy new file mode 100644 index 000000000..1ed454aad --- /dev/null +++ b/gcloud/kms/ekm-config/get-iam-policy @@ -0,0 +1,75 @@ +NAME + gcloud kms ekm-config get-iam-policy - get the IAM policy for an EkmConfig + +SYNOPSIS + gcloud kms ekm-config get-iam-policy --location=LOCATION + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Gets the IAM policy for the given location. + + Returns an empty policy if the resource does not have a policy set. + +EXAMPLES + The following command gets the IAM policy for the EkmConfig within the + location us-central1: + + $ gcloud kms ekm-config get-iam-policy --location=us-central1 + +REQUIRED FLAGS + Location resource - The KMS location resource. This represents a Cloud + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ set the property core/project. + + This must be specified. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. To + set the location attribute: + ▸ provide the argument --location on the command line. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha kms ekm-config get-iam-policy + + $ gcloud beta kms ekm-config get-iam-policy + diff --git a/gcloud/kms/ekm-config/help b/gcloud/kms/ekm-config/help new file mode 100644 index 000000000..2c2896ba3 --- /dev/null +++ b/gcloud/kms/ekm-config/help @@ -0,0 +1,44 @@ +NAME + gcloud kms ekm-config - update and retrieve the EkmConfig + +SYNOPSIS + gcloud kms ekm-config COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + EkmConfig is a singleton resource that represents configuration parameters + that apply to all CryptoKeys and CryptoKeyVersions of EXTERNAL_VPC + protecion level. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + add-iam-policy-binding + Add IAM policy binding to an EkmConfig. + + describe + Describe the EkmConfig. + + get-iam-policy + Get the IAM policy for an EkmConfig. + + remove-iam-policy-binding + Remove IAM policy binding from an EkmConfig. + + set-iam-policy + Set the IAM policy for an EkmConfig. + + update + Update the EkmConfig. + +NOTES + These variants are also available: + + $ gcloud alpha kms ekm-config + + $ gcloud beta kms ekm-config + diff --git a/gcloud/kms/ekm-config/remove-iam-policy-binding b/gcloud/kms/ekm-config/remove-iam-policy-binding new file mode 100644 index 000000000..e5f2fac76 --- /dev/null +++ b/gcloud/kms/ekm-config/remove-iam-policy-binding @@ -0,0 +1,138 @@ +NAME + gcloud kms ekm-config remove-iam-policy-binding - remove IAM policy binding + from an EkmConfig + +SYNOPSIS + gcloud kms ekm-config remove-iam-policy-binding --location=LOCATION + --member=PRINCIPAL --role=ROLE + [--all | --condition=[KEY=VALUE,...] + | --condition-from-file=CONDITION_FROM_FILE] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Removes a policy binding from the IAM policy of a kms EkmConfig. A binding + consists of at least one member, a role, and an optional condition. + +EXAMPLES + To remove an IAM policy binding for the role of 'roles/editor' for the user + 'test-user@gmail.com' on the EkmConfig with location us-central1, run: + + $ gcloud kms ekm-config remove-iam-policy-binding \ + --location='us-central1' --member='user:test-user@gmail.com' \ + --role='roles/editor' + + To remove an IAM policy binding with a condition of + expression='request.time < timestamp("2023-01-01T00:00:00Z")', + title='expires_end_of_2022', and description='Expires at midnight on + 2022-12-31' for the role of 'roles/editor' for the user + 'test-user@gmail.com' on the EkmConfig with location us-central1, run: + + $ gcloud kms ekm-config remove-iam-policy-binding \ + --location='us-central1' --member='user:test-user@gmail.com' \ + --role='roles/editor' --condition='expression=request.time < + timestamp("2023-01-01T00:00:00Z"),title=expires_end_of_2022,description=Expires + at midnight on 2022-12-31' + + To remove all IAM policy bindings regardless of the condition for the role + of 'roles/editor' and for the user 'test-user@gmail.com' on the EkmConfig + with location us-central1, run: + + $ gcloud kms ekm-config remove-iam-policy-binding laplace \ + --location='us-central1' --member='user:test-user@gmail.com' \ + --role='roles/editor' --all + + See https://cloud.google.com/iam/docs/managing-policies for details of + policy role and member types. + +REQUIRED FLAGS + Location resource - The KMS location resource. This represents a Cloud + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ set the property core/project. + + This must be specified. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. To + set the location attribute: + ▸ provide the argument --location on the command line. + + --member=PRINCIPAL + The principal to remove the binding for. Should be of the form + user|group|serviceAccount:email or domain:domain. + + Examples: user:test-user@gmail.com, group:admins@example.com, + serviceAccount:test123@example.domain.com, or + domain:example.domain.com. + + Deleted principals have an additional deleted: prefix and a ?uid=UID + suffix, where UID is a unique identifier for the principal. Example: + deleted:user:test-user@gmail.com?uid=123456789012345678901. + + Some resources also accept the following special values: + ◆ allUsers - Special identifier that represents anyone who is on the + internet, with or without a Google account. + ◆ allAuthenticatedUsers - Special identifier that represents anyone + who is authenticated with a Google account or a service account. + + --role=ROLE + The role to remove the principal from. + +OPTIONAL FLAGS + At most one of these can be specified: + + --all + Remove all bindings with this role and principal, irrespective of any + conditions. + + --condition=[KEY=VALUE,...] + The condition of the binding that you want to remove. When the + condition is explicitly specified as None (--condition=None), a + binding without a condition is removed. Otherwise, only a binding + with a condition that exactly matches the specified condition + (including the optional description) is removed. For more on + conditions, refer to the conditions overview guide: + https://cloud.google.com/iam/docs/conditions-overview + + When using the --condition flag, include the following key-value + pairs: + + expression + (Required) Condition expression that evaluates to True or False. + This uses a subset of Common Expression Language syntax. + + If the condition expression includes a comma, use a different + delimiter to separate the key-value pairs. Specify the delimiter + before listing the key-value pairs. For example, to specify a + colon (:) as the delimiter, do the following: + --condition=^:^title=TITLE:expression=EXPRESSION. For more + information, see + https://cloud.google.com/sdk/gcloud/reference/topic/escaping. + + title + (Required) A short string describing the purpose of the + expression. + + description + (Optional) Additional description for the expression. + + --condition-from-file=CONDITION_FROM_FILE + Path to a local JSON or YAML file that defines the condition. To see + available fields, see the help for --condition. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha kms ekm-config remove-iam-policy-binding + + $ gcloud beta kms ekm-config remove-iam-policy-binding + diff --git a/gcloud/kms/ekm-config/set-iam-policy b/gcloud/kms/ekm-config/set-iam-policy new file mode 100644 index 000000000..83fc06c46 --- /dev/null +++ b/gcloud/kms/ekm-config/set-iam-policy @@ -0,0 +1,55 @@ +NAME + gcloud kms ekm-config set-iam-policy - set the IAM policy for an EkmConfig + +SYNOPSIS + gcloud kms ekm-config set-iam-policy POLICY_FILE --location=LOCATION + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Sets the IAM policy for the EkmConfig in a location as defined in a JSON or + YAML file. + + See https://cloud.google.com/iam/docs/managing-policies for details of the + policy file format and contents. + +EXAMPLES + The following command will read am IAM policy defined in a JSON file + 'policy.json' and set it for the EkmConfig with location us-central1: + + $ gcloud kms ekm-config set-iam-policy policy.json \ + --location=us-central1 + +POSITIONAL ARGUMENTS + POLICY_FILE + JSON or YAML file with the IAM policy + +REQUIRED FLAGS + Location resource - The KMS location resource. This represents a Cloud + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ set the property core/project. + + This must be specified. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. To + set the location attribute: + ▸ provide the argument --location on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha kms ekm-config set-iam-policy + + $ gcloud beta kms ekm-config set-iam-policy + diff --git a/gcloud/kms/ekm-config/update b/gcloud/kms/ekm-config/update new file mode 100644 index 000000000..d9b98ffbd --- /dev/null +++ b/gcloud/kms/ekm-config/update @@ -0,0 +1,63 @@ +NAME + gcloud kms ekm-config update - update the EkmConfig + +SYNOPSIS + gcloud kms ekm-config update --location=LOCATION + [--default-ekm-connection=DEFAULT_EKM_CONNECTION] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + gcloud kms ekm-config update can be used to update the EkmConfig. Applies + to all CryptoKeys and CryptoKeyVersions with a protection level of external + vpc. + +EXAMPLES + The following command sets the default ekm-connection to laplace for its + project foo and location us-east1: + + $ gcloud kms ekm-config update --location=us-east1 \ + --default-ekm-connection="projects/foo/locations/us-east1/ekmCon\ + nections/laplace" + + The following command removes the default-ekm-connection in us-east1 for + the current project: + + $ gcloud kms ekm-config update --location=us-east1 \ + --default-ekm-connection="" + +REQUIRED FLAGS + Location resource - The KMS location resource. This represents a Cloud + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ set the property core/project. + + This must be specified. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. To + set the location attribute: + ▸ provide the argument --location on the command line. + +OPTIONAL FLAGS + --default-ekm-connection=DEFAULT_EKM_CONNECTION + The resource name of the EkmConnection to be used as the default + EkmConnection for all external-vpc CryptoKeys in a project and + location. Can be an empty string to remove the default EkmConnection. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha kms ekm-config update + + $ gcloud beta kms ekm-config update + diff --git a/gcloud/kms/ekm-connections/create b/gcloud/kms/ekm-connections/create index d2b97b5c3..70c56eff6 100644 --- a/gcloud/kms/ekm-connections/create +++ b/gcloud/kms/ekm-connections/create @@ -6,7 +6,9 @@ SYNOPSIS --hostname=HOSTNAME --server-certificates-files=[SERVER_CERTIFICATES,...] --service-directory-service=SERVICE_DIRECTORY_SERVICE - [--endpoint-filter=ENDPOINT_FILTER] [GCLOUD_WIDE_FLAG ...] + [--endpoint-filter=ENDPOINT_FILTER] + [--crypto-space-path=CRYPTO_SPACE_PATH + --key-management-mode=KEY_MANAGEMENT_MODE] [GCLOUD_WIDE_FLAG ...] DESCRIPTION Creates a new connection within the given location. @@ -20,6 +22,16 @@ EXAMPLES --endpoint-filter="foo > bar" --hostname="hostname.foo" \ --server-certificates-files=foo.pem,bar.pem + The following command creates an ekm connection named laplace within the + location us-central1 in cloud-kms key management mode with the required + crypto-space-path : + + $ gcloud kms ekm-connections create laplace --location=us-central1 \ + --service-directory-service="foo" \ + --endpoint-filter="foo > bar" --hostname="hostname.foo" \ + --key-management-mode=cloud-kms --crypto-space-path="foo" \ + --server-certificates-files=foo.pem,bar.pem + POSITIONAL ARGUMENTS Ekmconnection resource - The KMS ekm connection resource. The arguments in this group can be used to specify the attributes of this resource. (NOTE) @@ -64,6 +76,22 @@ OPTIONAL FLAGS The filter applied to the endpoints of the resolved service. If no filter is specified, all endpoints will be considered. + Specifies the key management mode for the EkmConnection and associated + fields. + + --crypto-space-path=CRYPTO_SPACE_PATH + Crypto space path for the EkmConnection. Required during + EkmConnection creation if --key-management-mode=cloud-kms. + + --key-management-mode=KEY_MANAGEMENT_MODE + Key management mode of the ekm connection. An EkmConnection in + cloud-kms mode means Cloud KMS will attempt to create and manage the + key material that resides on the EKM for crypto keys created with + this EkmConnection. An EkmConnection in manual mode means the + external key material will not be managed by Cloud KMS. Omitting the + flag defaults to manual. KEY_MANAGEMENT_MODE must be one of: manual, + cloud-kms. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/kms/ekm-connections/update b/gcloud/kms/ekm-connections/update index 76c044450..d65bd506c 100644 --- a/gcloud/kms/ekm-connections/update +++ b/gcloud/kms/ekm-connections/update @@ -6,7 +6,8 @@ SYNOPSIS [--endpoint-filter=ENDPOINT_FILTER] [--hostname=HOSTNAME] [--server-certificates-files=[SERVER_CERTIFICATES,...]] [--service-directory-service=SERVICE_DIRECTORY_SERVICE] - [GCLOUD_WIDE_FLAG ...] + [--crypto-space-path=CRYPTO_SPACE_PATH + --key-management-mode=KEY_MANAGEMENT_MODE] [GCLOUD_WIDE_FLAG ...] DESCRIPTION gcloud kms ekm-connections update can be used to update the ekmconnection. @@ -17,7 +18,7 @@ EXAMPLES resolver's hostname within location us-east1: $ gcloud kms ekm-connections update laplace --location=us-east1 \ - --hostname=newhostname.foo \ + --hostname=newhostname.foo The following command updates an ekm-connection named laplace service resolver's service_directory_service, endpoint_filter, hostname, and @@ -28,6 +29,12 @@ EXAMPLES --endpoint-filter="foo > bar" --hostname="newhostname.foo" \ --server-certificates-files=foo.pem,bar.pem + The following command updates an ekm-connection named laplace + key_management_mode within location us-east1: + + $ gcloud kms ekm-connections update laplace --location=us-east1 \ + --key-management-mode=manual + POSITIONAL ARGUMENTS Ekmconnection resource - The KMS ekm connection resource. The arguments in this group can be used to specify the attributes of this resource. (NOTE) @@ -71,6 +78,22 @@ FLAGS The resource name of the Service Directory service pointing to an EKM replica. + Specifies the key management mode for the EkmConnection and associated + fields. + + --crypto-space-path=CRYPTO_SPACE_PATH + Crypto space path for the EkmConnection. Required during + EkmConnection creation if --key-management-mode=cloud-kms. + + --key-management-mode=KEY_MANAGEMENT_MODE + Key management mode of the ekm connection. An EkmConnection in + cloud-kms mode means Cloud KMS will attempt to create and manage the + key material that resides on the EKM for crypto keys created with + this EkmConnection. An EkmConnection in manual mode means the + external key material will not be managed by Cloud KMS. Omitting the + flag defaults to manual. KEY_MANAGEMENT_MODE must be one of: manual, + cloud-kms. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/kms/help b/gcloud/kms/help index 5708428e9..414a71ba9 100644 --- a/gcloud/kms/help +++ b/gcloud/kms/help @@ -28,6 +28,9 @@ GCLOUD WIDE FLAGS GROUPS GROUP is one of the following: + ekm-config + Update and retrieve the EkmConfig. + ekm-connections Create and manage ekm connections. diff --git a/gcloud/ml-engine/jobs/submit/training b/gcloud/ml-engine/jobs/submit/training index 8056a011e..53135411c 100644 --- a/gcloud/ml-engine/jobs/submit/training +++ b/gcloud/ml-engine/jobs/submit/training @@ -146,7 +146,7 @@ FLAGS type Type of the accelerator. Choices are - nvidia-tesla-a100,nvidia-tesla-k80,nvidia-tesla-p100,nvidia-tesla-p4,nvidia-tesla-t4,nvidia-tesla-v100,tpu-v2,tpu-v2-pod,tpu-v3,tpu-v3-pod,tpu-v4-pod + nvidia-tesla-a100,nvidia-tesla-k80,nvidia-tesla-p100,nvidia-tesla-p4,nvidia-tesla-t4,nvidia-tesla-v100,tpu-v2,tpu-v2-pod,tpu-v3,tpu-v3-pod,tpu-v4 count Number of accelerators to attach to each machine running the job. @@ -186,7 +186,7 @@ FLAGS type Type of the accelerator. Choices are - nvidia-tesla-a100,nvidia-tesla-k80,nvidia-tesla-p100,nvidia-tesla-p4,nvidia-tesla-t4,nvidia-tesla-v100,tpu-v2,tpu-v2-pod,tpu-v3,tpu-v3-pod,tpu-v4-pod + nvidia-tesla-a100,nvidia-tesla-k80,nvidia-tesla-p100,nvidia-tesla-p4,nvidia-tesla-t4,nvidia-tesla-v100,tpu-v2,tpu-v2-pod,tpu-v3,tpu-v3-pod,tpu-v4 count Number of accelerators to attach to each machine running the job. @@ -304,7 +304,7 @@ FLAGS type Type of the accelerator. Choices are - nvidia-tesla-a100,nvidia-tesla-k80,nvidia-tesla-p100,nvidia-tesla-p4,nvidia-tesla-t4,nvidia-tesla-v100,tpu-v2,tpu-v2-pod,tpu-v3,tpu-v3-pod,tpu-v4-pod + nvidia-tesla-a100,nvidia-tesla-k80,nvidia-tesla-p100,nvidia-tesla-p4,nvidia-tesla-t4,nvidia-tesla-v100,tpu-v2,tpu-v2-pod,tpu-v3,tpu-v3-pod,tpu-v4 count Number of accelerators to attach to each machine running the job.