From 5c08d21169341a0c3da7da79d5a34a10a81b3179 Mon Sep 17 00:00:00 2001 From: Automated Date: Tue, 18 Oct 2022 11:38:19 +0000 Subject: [PATCH] gcloud: Tue Oct 18 11:38:19 UTC 2022 --- gcloud/_version | 10 +- .../cloud-bindings/create | 43 +++--- .../cloud-bindings/help | 4 +- .../cloud-bindings/update | 55 ++++---- gcloud/active-directory/domains/extend-schema | 77 +++++++++++ gcloud/active-directory/domains/help | 3 + .../cloud-bindings/create | 45 +++--- .../cloud-bindings/help | 4 +- .../cloud-bindings/update | 56 ++++---- .../active-directory/domains/extend-schema | 8 +- gcloud/alpha/alloydb/clusters/help | 3 +- gcloud/alpha/alloydb/clusters/restore | 50 ++----- gcloud/alpha/asset/saved-queries/create | 15 +- gcloud/alpha/bms/instances/help | 3 + gcloud/alpha/bms/instances/stop | 67 +++++++++ gcloud/alpha/bms/nfs-shares/create | 123 +++++++++++++++++ gcloud/alpha/bms/nfs-shares/delete | 62 +++++++++ gcloud/alpha/bms/nfs-shares/help | 6 + gcloud/alpha/bms/nfs-shares/update | 52 +++++++ gcloud/alpha/bms/volumes/help | 10 ++ gcloud/alpha/bms/volumes/restore | 70 ++++++++++ gcloud/alpha/bms/volumes/snapshot | 69 ++++++++++ gcloud/alpha/bms/volumes/snapshots/delete | 66 +++++++++ gcloud/alpha/bms/volumes/snapshots/describe | 66 +++++++++ gcloud/alpha/bms/volumes/snapshots/help | 35 +++++ gcloud/alpha/bms/volumes/snapshots/list | 72 ++++++++++ gcloud/alpha/certificate-manager/help | 3 + .../issuance-configs/create | 108 +++++++++++++++ .../issuance-configs/delete | 72 ++++++++++ .../issuance-configs/describe | 67 +++++++++ .../certificate-manager/issuance-configs/help | 39 ++++++ .../certificate-manager/issuance-configs/list | 87 ++++++++++++ gcloud/alpha/composer/environments/create | 2 +- gcloud/alpha/compute/addresses/create | 10 +- .../compute/firewall-policies/rules/create | 43 +++++- .../compute/firewall-policies/rules/update | 44 +++++- .../alpha/compute/instance-templates/delete | 12 +- .../alpha/compute/instance-templates/describe | 12 +- .../network-firewall-policies/rules/create | 43 +++++- .../network-firewall-policies/rules/update | 43 +++++- .../os-config/os-policy-assignments/create | 9 +- .../os-config/os-policy-assignments/update | 9 +- gcloud/alpha/container/aws/clusters/create | 6 +- .../container/aws/clusters/get-credentials | 2 +- gcloud/alpha/container/azure/clusters/create | 6 +- .../container/azure/clusters/get-credentials | 3 +- .../alpha/container/azure/node-pools/create | 7 +- .../alpha/container/azure/node-pools/update | 15 +- gcloud/alpha/container/clusters/create | 13 +- gcloud/alpha/container/clusters/update | 6 +- gcloud/alpha/emulators/firestore/help | 12 +- gcloud/alpha/emulators/firestore/start | 22 ++- gcloud/alpha/emulators/help | 2 +- .../policy-based-routes/create | 4 +- .../policy-based-routes/delete | 4 +- .../policy-based-routes/describe | 4 +- .../policy-based-routes/help | 4 +- .../policy-based-routes/list | 9 +- gcloud/alpha/run/integrations/create | 2 +- gcloud/alpha/scc/notifications/create | 50 +++++-- gcloud/alpha/scc/notifications/delete | 40 ++++-- gcloud/alpha/scc/notifications/list | 32 +++-- gcloud/alpha/scc/notifications/update | 70 +++++++--- gcloud/alpha/spanner/instance-configs/create | 24 +--- gcloud/alpha/sql/instances/create | 18 ++- gcloud/alpha/sql/instances/patch | 19 ++- gcloud/alpha/storage/buckets/update | 11 +- gcloud/alpha/storage/cp | 12 +- gcloud/alpha/storage/mv | 12 +- gcloud/alpha/storage/objects/update | 31 +++-- gcloud/alpha/tasks/queues/create | 71 +++++++++- .../tasks/queues/create-app-engine-queue | 4 +- gcloud/alpha/tasks/queues/update | 4 +- .../tasks/queues/update-app-engine-queue | 4 +- gcloud/asset/saved-queries/create | 15 +- .../active-directory/domains/extend-schema | 10 +- gcloud/beta/alloydb/clusters/help | 3 +- gcloud/beta/alloydb/clusters/restore | 50 ++----- gcloud/beta/app/gen-config | 6 +- gcloud/beta/asset/saved-queries/create | 15 +- gcloud/beta/certificate-manager/help | 3 + .../issuance-configs/create | 106 ++++++++++++++ .../issuance-configs/delete | 70 ++++++++++ .../issuance-configs/describe | 65 +++++++++ .../certificate-manager/issuance-configs/help | 37 +++++ .../certificate-manager/issuance-configs/list | 84 +++++++++++ gcloud/beta/composer/environments/create | 2 +- gcloud/beta/compute/addresses/create | 10 +- .../compute/firewall-policies/rules/create | 44 +++++- .../compute/firewall-policies/rules/update | 44 +++++- .../network-firewall-policies/rules/create | 43 +++++- .../network-firewall-policies/rules/update | 43 +++++- gcloud/beta/container/clusters/create | 13 +- gcloud/beta/container/clusters/update | 6 +- gcloud/beta/datastream/streams/create | 43 ++++-- gcloud/beta/datastream/streams/update | 42 ++++-- gcloud/beta/emulators/firestore/help | 14 +- gcloud/beta/emulators/firestore/start | 24 +++- gcloud/beta/emulators/help | 2 +- gcloud/beta/scc/notifications/create | 50 +++++-- gcloud/beta/scc/notifications/delete | 40 ++++-- gcloud/beta/scc/notifications/list | 32 +++-- gcloud/beta/scc/notifications/update | 70 +++++++--- gcloud/beta/spanner/instance-configs/create | 24 +--- gcloud/beta/tasks/queues/create | 4 +- .../beta/tasks/queues/create-app-engine-queue | 4 +- gcloud/beta/tasks/queues/update | 4 +- .../beta/tasks/queues/update-app-engine-queue | 4 +- gcloud/bms/instances/help | 3 + gcloud/bms/instances/stop | 64 +++++++++ gcloud/bms/nfs-shares/create | 120 ++++++++++++++++ gcloud/bms/nfs-shares/delete | 59 ++++++++ gcloud/bms/nfs-shares/help | 6 + gcloud/bms/nfs-shares/update | 52 +++++++ gcloud/bms/volumes/help | 9 ++ gcloud/bms/volumes/restore | 66 +++++++++ gcloud/bms/volumes/snapshot | 65 +++++++++ gcloud/bms/volumes/snapshots/delete | 63 +++++++++ gcloud/bms/volumes/snapshots/describe | 63 +++++++++ gcloud/bms/volumes/snapshots/help | 32 +++++ gcloud/bms/volumes/snapshots/list | 69 ++++++++++ gcloud/components/update | 3 +- gcloud/composer/environments/create | 2 +- gcloud/compute/addresses/create | 10 +- .../os-config/os-policy-assignments/create | 9 +- .../os-config/os-policy-assignments/update | 9 +- gcloud/compute/tpus/tpu-vm/create | 8 +- gcloud/container/aws/clusters/create | 11 ++ gcloud/container/aws/clusters/get-credentials | 2 +- gcloud/container/aws/clusters/update | 14 +- gcloud/container/azure/clusters/create | 11 ++ .../container/azure/clusters/get-credentials | 3 +- gcloud/container/azure/clusters/update | 13 +- gcloud/container/azure/node-pools/create | 7 +- gcloud/container/azure/node-pools/update | 15 +- gcloud/container/clusters/create | 6 +- gcloud/container/clusters/update | 4 +- gcloud/datastream/streams/create | 43 ++++-- gcloud/datastream/streams/update | 42 ++++-- gcloud/emulators/firestore/help | 33 +++++ gcloud/emulators/firestore/start | 56 ++++++++ gcloud/emulators/help | 3 + gcloud/network-connectivity/help | 3 + .../policy-based-routes/create | 130 ++++++++++++++++++ .../policy-based-routes/delete | 56 ++++++++ .../policy-based-routes/describe | 51 +++++++ .../policy-based-routes/help | 36 +++++ .../policy-based-routes/list | 62 +++++++++ gcloud/scc/notifications/create | 51 +++++-- gcloud/scc/notifications/delete | 39 ++++-- gcloud/scc/notifications/list | 32 +++-- gcloud/scc/notifications/update | 68 ++++++--- gcloud/spanner/instance-configs/create | 25 ++-- gcloud/storage/buckets/update | 10 +- gcloud/storage/cp | 12 +- gcloud/storage/mv | 12 +- gcloud/storage/objects/update | 30 ++-- gcloud/tasks/queues/create | 4 +- gcloud/tasks/queues/update | 4 +- 159 files changed, 4170 insertions(+), 656 deletions(-) create mode 100644 gcloud/active-directory/domains/extend-schema create mode 100644 gcloud/alpha/bms/instances/stop create mode 100644 gcloud/alpha/bms/nfs-shares/create create mode 100644 gcloud/alpha/bms/nfs-shares/delete create mode 100644 gcloud/alpha/bms/volumes/restore create mode 100644 gcloud/alpha/bms/volumes/snapshot create mode 100644 gcloud/alpha/bms/volumes/snapshots/delete create mode 100644 gcloud/alpha/bms/volumes/snapshots/describe create mode 100644 gcloud/alpha/bms/volumes/snapshots/help create mode 100644 gcloud/alpha/bms/volumes/snapshots/list create mode 100644 gcloud/alpha/certificate-manager/issuance-configs/create create mode 100644 gcloud/alpha/certificate-manager/issuance-configs/delete create mode 100644 gcloud/alpha/certificate-manager/issuance-configs/describe create mode 100644 gcloud/alpha/certificate-manager/issuance-configs/help create mode 100644 gcloud/alpha/certificate-manager/issuance-configs/list create mode 100644 gcloud/beta/certificate-manager/issuance-configs/create create mode 100644 gcloud/beta/certificate-manager/issuance-configs/delete create mode 100644 gcloud/beta/certificate-manager/issuance-configs/describe create mode 100644 gcloud/beta/certificate-manager/issuance-configs/help create mode 100644 gcloud/beta/certificate-manager/issuance-configs/list create mode 100644 gcloud/bms/instances/stop create mode 100644 gcloud/bms/nfs-shares/create create mode 100644 gcloud/bms/nfs-shares/delete create mode 100644 gcloud/bms/volumes/restore create mode 100644 gcloud/bms/volumes/snapshot create mode 100644 gcloud/bms/volumes/snapshots/delete create mode 100644 gcloud/bms/volumes/snapshots/describe create mode 100644 gcloud/bms/volumes/snapshots/help create mode 100644 gcloud/bms/volumes/snapshots/list create mode 100644 gcloud/emulators/firestore/help create mode 100644 gcloud/emulators/firestore/start create mode 100644 gcloud/network-connectivity/policy-based-routes/create create mode 100644 gcloud/network-connectivity/policy-based-routes/delete create mode 100644 gcloud/network-connectivity/policy-based-routes/describe create mode 100644 gcloud/network-connectivity/policy-based-routes/help create mode 100644 gcloud/network-connectivity/policy-based-routes/list diff --git a/gcloud/_version b/gcloud/_version index cc29491a6..6e164c143 100644 --- a/gcloud/_version +++ b/gcloud/_version @@ -1,8 +1,8 @@ -Google Cloud SDK 405.0.1 -alpha 2022.10.14 -beta 2022.10.14 -bq 2.0.78 +Google Cloud SDK 406.0.0 +alpha 2022.10.17 +beta 2022.10.17 +bq 2.0.79 bundled-python3-unix 3.9.12 -core 2022.10.14 +core 2022.10.17 gcloud-crc32c 1.0.0 gsutil 5.14 diff --git a/gcloud/access-context-manager/cloud-bindings/create b/gcloud/access-context-manager/cloud-bindings/create index 1ff5083e5..309e5f49d 100644 --- a/gcloud/access-context-manager/cloud-bindings/create +++ b/gcloud/access-context-manager/cloud-bindings/create @@ -1,49 +1,37 @@ NAME - gcloud access-context-manager cloud-bindings create - create a new cloud - access binding + gcloud access-context-manager cloud-bindings create - create cloud access + bindings for a specific group SYNOPSIS gcloud access-context-manager cloud-bindings create --group-key=GROUP_KEY - (--level=LEVEL : --policy=POLICY) [--organization=ORGANIZATION] + --level=[LEVEL,...] [--organization=ORGANIZATION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - Create a new cloud access binding. + Create a new cloud access binding. The access level will be bound with the + group. The access level will be enforced when any user in the group tries + to access the Google cloud console or API. EXAMPLES To create a new cloud access binding, run: $ gcloud access-context-manager cloud-bindings create \ - --group-key=my-group-key --level=my-access-level + --group-key=my-group-key \ + --level=accessPolicies/123/accessLevels/abc REQUIRED FLAGS --group-key=GROUP_KEY Google Group id whose members are subject to the restrictions of this binding. - Level resource - The access level to create. The arguments in this group - can be used to specify the attributes of this resource. - - This must be specified. - - --level=LEVEL - ID of the level or fully qualified identifier for the level. To set - the level attribute: - ▸ provide the argument --level on the command line. - - This flag argument must be specified if any of the other arguments in - this group are specified. - - --policy=POLICY - The ID of the access policy. To set the policy attribute: - ▸ provide the argument --level on the command line with a fully - specified name; - ▸ provide the argument --policy on the command line; - ▸ set the property access_context_manager/policy. + --level=[LEVEL,...] + The access level that will bind to the given group. The input must be + the full identifier for the access level, such as + accessPolicies/123/accessLevels/abc. OPTIONAL FLAGS --organization=ORGANIZATION - The parent organization for the cloud access binding. + Parent organization for this binding. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, @@ -53,6 +41,11 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. +API REFERENCE + This command uses the accesscontextmanager/v1 API. The full documentation + for this API can be found at: + https://cloud.google.com/access-context-manager/docs/reference/rest/ + NOTES This variant is also available: diff --git a/gcloud/access-context-manager/cloud-bindings/help b/gcloud/access-context-manager/cloud-bindings/help index f56d88c4d..f9d7caa2b 100644 --- a/gcloud/access-context-manager/cloud-bindings/help +++ b/gcloud/access-context-manager/cloud-bindings/help @@ -18,7 +18,7 @@ COMMANDS COMMAND is one of the following: create - Create a new cloud access binding. + Create cloud access bindings for a specific group. delete Delete a cloud access binding. @@ -30,7 +30,7 @@ COMMANDS List cloud access bindings under an organization. update - Update an existing cloud access binding. + Update a existing cloud access binding under an organization. NOTES This variant is also available: diff --git a/gcloud/access-context-manager/cloud-bindings/update b/gcloud/access-context-manager/cloud-bindings/update index b0d1be512..3e0961d32 100644 --- a/gcloud/access-context-manager/cloud-bindings/update +++ b/gcloud/access-context-manager/cloud-bindings/update @@ -1,25 +1,31 @@ NAME - gcloud access-context-manager cloud-bindings update - update an existing - cloud access binding + gcloud access-context-manager cloud-bindings update - update a existing + cloud access binding under an organization SYNOPSIS - gcloud access-context-manager cloud-bindings update + gcloud access-context-manager cloud-bindings update --level=[LEVEL,...] (--binding=BINDING : --organization=ORGANIZATION) - (--level=LEVEL : --policy=POLICY) [GCLOUD_WIDE_FLAG ...] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION - Update an existing cloud access binding. + Update a existing cloud access binding. You can only update the level. EXAMPLES - To update an existing cloud access binding, run: + To update a existing cloud access binding, run: $ gcloud access-context-manager cloud-bindings update \ - --binding=my-binding-id --level=new-access-level + --binding=my-binding-id \ + --level=accessPolicies/123/accessLevels/new-abc REQUIRED FLAGS - Cloud access binding resource - The access binding to update. The - arguments in this group can be used to specify the attributes of this - resource. + --level=[LEVEL,...] + The access level that will replace the existing level for the given + binding. The input must be the full identifier for the access level, + such as accessPolicies/123/accessLevels/new-abc. + + Cloud access binding resource - The cloud access binding you want to + update. The arguments in this group can be used to specify the attributes + of this resource. This must be specified. @@ -32,32 +38,14 @@ REQUIRED FLAGS this group are specified. --organization=ORGANIZATION - The ID of the organization. To set the organization attribute: + The ID of the organization. + + To set the organization attribute: ▸ provide the argument --binding on the command line with a fully specified name; ▸ provide the argument --organization on the command line; ▸ set the property access_context_manager/organization. - Level resource - The access level to update. The arguments in this group - can be used to specify the attributes of this resource. - - This must be specified. - - --level=LEVEL - ID of the level or fully qualified identifier for the level. To set - the level attribute: - ▸ provide the argument --level on the command line. - - This flag argument must be specified if any of the other arguments in - this group are specified. - - --policy=POLICY - The ID of the access policy. To set the policy attribute: - ▸ provide the argument --level on the command line with a fully - specified name; - ▸ provide the argument --policy on the command line; - ▸ set the property access_context_manager/policy. - GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, @@ -66,6 +54,11 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. +API REFERENCE + This command uses the accesscontextmanager/v1 API. The full documentation + for this API can be found at: + https://cloud.google.com/access-context-manager/docs/reference/rest/ + NOTES This variant is also available: diff --git a/gcloud/active-directory/domains/extend-schema b/gcloud/active-directory/domains/extend-schema new file mode 100644 index 000000000..85e2229ba --- /dev/null +++ b/gcloud/active-directory/domains/extend-schema @@ -0,0 +1,77 @@ +NAME + gcloud active-directory domains extend-schema - initiate schema extension + for a Managed Microsoft AD domain + +SYNOPSIS + gcloud active-directory domains extend-schema DOMAIN + --description=DESCRIPTION --ldif-file=LDIF_FILE [--async] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Initiate schema extension for a Managed Microsoft AD domain. + + This command can fail for the following reasons: + ▪ The specified domain doesn't exist. + ▪ The specified domain is either being created or updated. + ▪ The specified domain is under maintenance. + ▪ The active account doesn't have permission to initiate schema + extension on the specified domain. + +EXAMPLES + The following command initiates a schema extension for the domain + my-domain.com in project my-project, with description Test Description, + using the LDIF file demo.ldif + + $ gcloud active-directory domains extend-schema my-domain.com \ + --description="Test Description" --ldif-file=demo.ldf \ + --project=my-project --async + +POSITIONAL ARGUMENTS + Domain resource - Name of the Managed Microsoft AD domain for which you + want to extend schema. This represents a Cloud resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. To set the project attribute: + ◆ provide the argument domain on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + DOMAIN + ID of the domain or fully qualified identifier for the domain. To set + the domain attribute: + ▸ provide the argument domain on the command line. + +REQUIRED FLAGS + --description=DESCRIPTION + Description of schema change. + + --ldif-file=LDIF_FILE + Local LDIF file path that contains commands for schema extension. The + file size can't be larger than 1 MB. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the managedidentities/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/managed-microsoft-ad/ + +NOTES + These variants are also available: + + $ gcloud alpha active-directory domains extend-schema + + $ gcloud beta active-directory domains extend-schema + diff --git a/gcloud/active-directory/domains/help b/gcloud/active-directory/domains/help index 453f76c50..953cb2906 100644 --- a/gcloud/active-directory/domains/help +++ b/gcloud/active-directory/domains/help @@ -36,6 +36,9 @@ COMMANDS describe-ldaps-settings Describe the LDAPS settings of a Managed Microsoft AD domain. + extend-schema + Initiate schema extension for a Managed Microsoft AD domain. + get-iam-policy Describe the IAM policy for a Managed Microsoft AD domain. diff --git a/gcloud/alpha/access-context-manager/cloud-bindings/create b/gcloud/alpha/access-context-manager/cloud-bindings/create index 4d17a4362..d2942b1ae 100644 --- a/gcloud/alpha/access-context-manager/cloud-bindings/create +++ b/gcloud/alpha/access-context-manager/cloud-bindings/create @@ -1,49 +1,37 @@ NAME - gcloud alpha access-context-manager cloud-bindings create - create a new - cloud access binding + gcloud alpha access-context-manager cloud-bindings create - create cloud + access bindings for a specific group SYNOPSIS gcloud alpha access-context-manager cloud-bindings create - --group-key=GROUP_KEY (--level=LEVEL : --policy=POLICY) - [--organization=ORGANIZATION] [GCLOUD_WIDE_FLAG ...] + --group-key=GROUP_KEY --level=[LEVEL,...] [--organization=ORGANIZATION] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Create a new cloud access binding. + (ALPHA) Create a new cloud access binding. The access level will be bound + with the group. The access level will be enforced when any user in the + group tries to access the Google cloud console or API. EXAMPLES To create a new cloud access binding, run: $ gcloud alpha access-context-manager cloud-bindings create \ - --group-key=my-group-key --level=my-access-level + --group-key=my-group-key \ + --level=accessPolicies/123/accessLevels/abc REQUIRED FLAGS --group-key=GROUP_KEY Google Group id whose members are subject to the restrictions of this binding. - Level resource - The access level to create. The arguments in this group - can be used to specify the attributes of this resource. - - This must be specified. - - --level=LEVEL - ID of the level or fully qualified identifier for the level. To set - the level attribute: - ▸ provide the argument --level on the command line. - - This flag argument must be specified if any of the other arguments in - this group are specified. - - --policy=POLICY - The ID of the access policy. To set the policy attribute: - ▸ provide the argument --level on the command line with a fully - specified name; - ▸ provide the argument --policy on the command line; - ▸ set the property access_context_manager/policy. + --level=[LEVEL,...] + The access level that will bind to the given group. The input must be + the full identifier for the access level, such as + accessPolicies/123/accessLevels/abc. OPTIONAL FLAGS --organization=ORGANIZATION - The parent organization for the cloud access binding. + Parent organization for this binding. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, @@ -53,6 +41,11 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. +API REFERENCE + This command uses the accesscontextmanager/v1alpha API. The full + documentation for this API can be found at: + https://cloud.google.com/access-context-manager/docs/reference/rest/ + NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct diff --git a/gcloud/alpha/access-context-manager/cloud-bindings/help b/gcloud/alpha/access-context-manager/cloud-bindings/help index 5e5dec196..be1d8d136 100644 --- a/gcloud/alpha/access-context-manager/cloud-bindings/help +++ b/gcloud/alpha/access-context-manager/cloud-bindings/help @@ -19,7 +19,7 @@ COMMANDS COMMAND is one of the following: create - (ALPHA) Create a new cloud access binding. + (ALPHA) Create cloud access bindings for a specific group. delete (ALPHA) Delete a cloud access binding. @@ -31,7 +31,7 @@ COMMANDS (ALPHA) List cloud access bindings under an organization. update - (ALPHA) Update an existing cloud access binding. + (ALPHA) Update a existing cloud access binding under an organization. NOTES This command is currently in alpha and might change without notice. If this diff --git a/gcloud/alpha/access-context-manager/cloud-bindings/update b/gcloud/alpha/access-context-manager/cloud-bindings/update index 8d0a7fc3c..0c0f3ff0b 100644 --- a/gcloud/alpha/access-context-manager/cloud-bindings/update +++ b/gcloud/alpha/access-context-manager/cloud-bindings/update @@ -1,25 +1,32 @@ NAME - gcloud alpha access-context-manager cloud-bindings update - update an - existing cloud access binding + gcloud alpha access-context-manager cloud-bindings update - update a + existing cloud access binding under an organization SYNOPSIS gcloud alpha access-context-manager cloud-bindings update - (--binding=BINDING : --organization=ORGANIZATION) - (--level=LEVEL : --policy=POLICY) [GCLOUD_WIDE_FLAG ...] + --level=[LEVEL,...] (--binding=BINDING : --organization=ORGANIZATION) + [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Update an existing cloud access binding. + (ALPHA) Update a existing cloud access binding. You can only update the + level. EXAMPLES - To update an existing cloud access binding, run: + To update a existing cloud access binding, run: $ gcloud alpha access-context-manager cloud-bindings update \ - --binding=my-binding-id --level=new-access-level + --binding=my-binding-id \ + --level=accessPolicies/123/accessLevels/new-abc REQUIRED FLAGS - Cloud access binding resource - The access binding to update. The - arguments in this group can be used to specify the attributes of this - resource. + --level=[LEVEL,...] + The access level that will replace the existing level for the given + binding. The input must be the full identifier for the access level, + such as accessPolicies/123/accessLevels/new-abc. + + Cloud access binding resource - The cloud access binding you want to + update. The arguments in this group can be used to specify the attributes + of this resource. This must be specified. @@ -32,32 +39,14 @@ REQUIRED FLAGS this group are specified. --organization=ORGANIZATION - The ID of the organization. To set the organization attribute: + The ID of the organization. + + To set the organization attribute: ▸ provide the argument --binding on the command line with a fully specified name; ▸ provide the argument --organization on the command line; ▸ set the property access_context_manager/organization. - Level resource - The access level to update. The arguments in this group - can be used to specify the attributes of this resource. - - This must be specified. - - --level=LEVEL - ID of the level or fully qualified identifier for the level. To set - the level attribute: - ▸ provide the argument --level on the command line. - - This flag argument must be specified if any of the other arguments in - this group are specified. - - --policy=POLICY - The ID of the access policy. To set the policy attribute: - ▸ provide the argument --level on the command line with a fully - specified name; - ▸ provide the argument --policy on the command line; - ▸ set the property access_context_manager/policy. - GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, @@ -66,6 +55,11 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. +API REFERENCE + This command uses the accesscontextmanager/v1alpha API. The full + documentation for this API can be found at: + https://cloud.google.com/access-context-manager/docs/reference/rest/ + NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct diff --git a/gcloud/alpha/active-directory/domains/extend-schema b/gcloud/alpha/active-directory/domains/extend-schema index 06de115da..ee13d24e7 100644 --- a/gcloud/alpha/active-directory/domains/extend-schema +++ b/gcloud/alpha/active-directory/domains/extend-schema @@ -19,8 +19,8 @@ DESCRIPTION EXAMPLES The following command initiates a schema extension for the domain - my-domain.com in project my-project, with description "Test Description", - using the LDIF file "demo.ldif" + my-domain.com in project my-project, with description Test Description, + using the LDIF file demo.ldif $ gcloud alpha active-directory domains extend-schema \ my-domain.com --description="Test Description" \ @@ -73,7 +73,9 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. This variant is also available: + access allowlist. These variants are also available: + + $ gcloud active-directory domains extend-schema $ gcloud beta active-directory domains extend-schema diff --git a/gcloud/alpha/alloydb/clusters/help b/gcloud/alpha/alloydb/clusters/help index cdb23f28f..26300ff81 100644 --- a/gcloud/alpha/alloydb/clusters/help +++ b/gcloud/alpha/alloydb/clusters/help @@ -30,8 +30,7 @@ COMMANDS (ALPHA) Lists AlloyDB clusters in a given project and region. restore - (ALPHA) Restores an AlloyDB cluster from a given backup or a source - cluster at a specific point in time. + (ALPHA) Restores an AlloyDB cluster from a given backup. update (ALPHA) Updates an AlloyDB cluster within a given project and region. diff --git a/gcloud/alpha/alloydb/clusters/restore b/gcloud/alpha/alloydb/clusters/restore index 34112383a..55c0ed1d8 100644 --- a/gcloud/alpha/alloydb/clusters/restore +++ b/gcloud/alpha/alloydb/clusters/restore @@ -1,19 +1,16 @@ NAME gcloud alpha alloydb clusters restore - restores an AlloyDB cluster from a - given backup or a source cluster at a specific point in time + given backup SYNOPSIS - gcloud alpha alloydb clusters restore CLUSTER --region=REGION [--async] - [--network=NETWORK] - [--backup=BACKUP - : --point-in-time=POINT_IN_TIME --source-cluster=SOURCE_CLUSTER] + gcloud alpha alloydb clusters restore CLUSTER --region=REGION + --backup=BACKUP [--async] [--network=NETWORK] [--kms-key=KMS_KEY : --kms-keyring=KMS_KEYRING --kms-location=KMS_LOCATION --kms-project=KMS_PROJECT] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Restores an AlloyDB cluster from a given backup or a source cluster - at a specific point in time. + (ALPHA) Restores an AlloyDB cluster from a given backup. EXAMPLES To restore a cluster from a backup, run: @@ -21,12 +18,6 @@ EXAMPLES $ gcloud alpha alloydb clusters restore my-cluster \ --region=us-central1 --backup=my-backup - To restore a cluster back to a point in time, run: - - $ gcloud alpha alloydb clusters restore my-cluster \ - --region=us-central1 --source-cluster=my-source-cluster \ - --point-in-time=2003-09-25T10:49:41.519Z - POSITIONAL ARGUMENTS CLUSTER AlloyDB cluster ID @@ -37,6 +28,15 @@ REQUIRED FLAGS regions at https://cloud.google.com/sql/docs/instance-locations. OPTIONAL FLAGS + RestoreCluster source types. + + At most one of these can be specified: + + Restore a cluster using a specific backup as the source. + + --backup=BACKUP + AlloyDB backup ID + --async Return immediately, without waiting for the operation in progress to complete. @@ -48,30 +48,6 @@ OPTIONAL FLAGS network, 'testsharednetwork', this would be of the form:--network=projects/testproject/global/networks/testsharednetwork - RestoreCluster source types. - - At most one of these can be specified: - - Restore a cluster using a specific backup as the source. - - --backup=BACKUP - AlloyDB backup ID - - Restore a cluster from a source cluster at a given point in time. - - --point-in-time=POINT_IN_TIME - Point in time to restore to, in RFC 3339 format. For example, - 2012-11-15T16:19:00.094Z. - - This flag argument must be specified if any of the other arguments - in this group are specified. - - --source-cluster=SOURCE_CLUSTER - Source cluster name. - - This flag argument must be specified if any of the other arguments - in this group are specified. - Key resource - The Cloud KMS (Key Management Service) cryptokey that will be used to protect the cluster. The 'AlloyDB Service Agent' service account must hold permission 'Cloud KMS CryptoKey Encrypter/Decrypter'. diff --git a/gcloud/alpha/asset/saved-queries/create b/gcloud/alpha/asset/saved-queries/create index ca67b0dce..afcbaf206 100644 --- a/gcloud/alpha/asset/saved-queries/create +++ b/gcloud/alpha/asset/saved-queries/create @@ -6,8 +6,8 @@ SYNOPSIS gcloud alpha asset saved-queries create QUERY_ID --query-file-path=QUERY_FILE_PATH (--folder=FOLDER_ID | --organization=ORGANIZATION_ID - | --project=PROJECT_ID) [--description=DESCRIPTION] [--labels=LABELS] - [GCLOUD_WIDE_FLAG ...] + | --project=PROJECT_ID) [--description=DESCRIPTION] + [--labels=[KEY=VALUE,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Create a new Cloud Asset Inventory saved query. @@ -56,10 +56,13 @@ OPTIONAL FLAGS --description=DESCRIPTION A string describing the query. - --labels=LABELS - A key/value pair to attach to the query, which can be used in search - and list operations. You can include up to 10 labels for each saved - query. + --labels=[KEY=VALUE,...] + List of label KEY=VALUE pairs to add. + + Keys must start with a lowercase character and contain only hyphens + (-), underscores (_), lowercase characters, and numbers. Values must + contain only hyphens (-), underscores (_), lowercase characters, and + numbers. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/bms/instances/help b/gcloud/alpha/bms/instances/help index 7d79566a3..d1454e7a2 100644 --- a/gcloud/alpha/bms/instances/help +++ b/gcloud/alpha/bms/instances/help @@ -36,6 +36,9 @@ COMMANDS start (ALPHA) Start a Bare Metal Solution instance. + stop + (ALPHA) Stop a Bare Metal Solution instance. + update (ALPHA) Update a Bare Metal Solution instance. diff --git a/gcloud/alpha/bms/instances/stop b/gcloud/alpha/bms/instances/stop new file mode 100644 index 000000000..8f12cda66 --- /dev/null +++ b/gcloud/alpha/bms/instances/stop @@ -0,0 +1,67 @@ +NAME + gcloud alpha bms instances stop - stop a Bare Metal Solution instance + +SYNOPSIS + gcloud alpha bms instances stop (INSTANCE : --region=REGION) [--async] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Stops a Bare Metal Solution instance. + +EXAMPLES + To stop an instance named test-instance, run: + + $ gcloud alpha bms instances stop test-instance + +POSITIONAL ARGUMENTS + Instance resource - Arguments and flags that specify the Bare Metal + Solution instance you want to stop. The arguments in this group can be + used to specify the attributes of this resource. (NOTE) Some attributes + are not given arguments in this group but can be set in other ways. To set + the project attribute: + ◆ provide the argument instance on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + INSTANCE + ID of the instance or fully qualified identifier for the instance. To + set the instance attribute: + ▸ provide the argument instance on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + Region of the resource. To set the region attribute: + ▸ provide the argument instance on the command line with a fully + specified name; + ▸ provide the argument --region on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the baremetalsolution/v2 API. The full documentation for + this API can be found at: https://cloud.google.com/bare-metal + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud bms instances stop + diff --git a/gcloud/alpha/bms/nfs-shares/create b/gcloud/alpha/bms/nfs-shares/create new file mode 100644 index 000000000..841f9fd4f --- /dev/null +++ b/gcloud/alpha/bms/nfs-shares/create @@ -0,0 +1,123 @@ +NAME + gcloud alpha bms nfs-shares create - create a Bare Metal Solution NFS share + +SYNOPSIS + gcloud alpha bms nfs-shares create (NFS_SHARE : --region=REGION) + --allowed-client=[PROPERTY=VALUE,...] --size-gib=SIZE_GIB + --storage-type=STORAGE_TYPE [--async] [--labels=[KEY=VALUE,...]] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Create a Bare Metal Solution NFS share. + +EXAMPLES + To create an NFS share called my-share in region us-central1, with + requested size of 256 Gib, SSD storage and 2 allowed clients, run: + + $ gcloud alpha bms nfs-shares create my-share --region=us-central1 \ + --size-gib=256 --storage-type=SSD \ + --allowed-client=network=my-network,\ + network-project-id=some-other-project,cidr=10.130.240.24/29,\ + mount-permissions=READ_ONLY,allow-dev=yes,allow-suid=no,\ + enable-root-squash=yes \ + --allowed-client=network=my-network2,cidr=10.130.240.26/28,\ + mount-permissions=READ_WRITE,allow-dev=yes,allow-suid=yes,\ + enable-root-squash=no + +POSITIONAL ARGUMENTS + Nfs share resource - nfs_share. The arguments in this group can be used to + specify the attributes of this resource. (NOTE) Some attributes are not + given arguments in this group but can be set in other ways. To set the + project attribute: + ◆ provide the argument nfs_share on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + NFS_SHARE + ID of the nfs_share or fully qualified identifier for the nfs_share. + To set the nfs_share attribute: + ▸ provide the argument nfs_share on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + Region of the resource. To set the region attribute: + ▸ provide the argument nfs_share on the command line with a fully + specified name; + ▸ provide the argument --region on the command line. + +REQUIRED FLAGS + --allowed-client=[PROPERTY=VALUE,...] + Adds an allowed client to the NFS share. This flag can be repeated to + specify multiple allowed clients. + + network + The name of the network to allow. + + network-project-id + The project ID of the allowed client network. If not present, the + project ID of the NFS share will be used. + + cidr + The subnet of IP addresses permitted to access the NFS share. + + mount-permissions + The mount permissions for the allowed client. MOUNT_PERMISSIONS + must be one of: READ_ONLY, READ_WRITE. + + allow-dev + If yes, allows creation of devices. + + allow-suid + If yes, allows SUID. + + enable-root-squash + If yes, enables root squashing which is a special mapping of the + remote superuser (root) identity when using identity authentication + . + + --size-gib=SIZE_GIB + The requested size of the NFS share in GiB + + --storage-type=STORAGE_TYPE + Specifies the storage type of the underlying volume which will be + created for the NFS share. STORAGE_TYPE must be one of: + + HDD + The storage type of the underlying volume will be HDD + SSD + The storage type of the underlying volume will be SSD + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --labels=[KEY=VALUE,...] + List of label KEY=VALUE pairs to add. + + Keys must start with a lowercase character and contain only hyphens + (-), underscores (_), lowercase characters, and numbers. Values must + contain only hyphens (-), underscores (_), lowercase characters, and + numbers. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud bms nfs-shares create + diff --git a/gcloud/alpha/bms/nfs-shares/delete b/gcloud/alpha/bms/nfs-shares/delete new file mode 100644 index 000000000..1f1d57bdb --- /dev/null +++ b/gcloud/alpha/bms/nfs-shares/delete @@ -0,0 +1,62 @@ +NAME + gcloud alpha bms nfs-shares delete - delete a Bare Metal Solution NFS share + +SYNOPSIS + gcloud alpha bms nfs-shares delete (NFS_SHARE : --region=REGION) [--async] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Delete a Bare Metal Solution NFS share. + +EXAMPLES + To delete an NFS share called my-share in region us-central1, run: + + $ gcloud alpha bms nfs-shares delete my-share --region=us-central1 + +POSITIONAL ARGUMENTS + Nfs share resource - nfs_share. The arguments in this group can be used to + specify the attributes of this resource. (NOTE) Some attributes are not + given arguments in this group but can be set in other ways. To set the + project attribute: + ◆ provide the argument nfs_share on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + NFS_SHARE + ID of the nfs_share or fully qualified identifier for the nfs_share. + To set the nfs_share attribute: + ▸ provide the argument nfs_share on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + Region of the resource. To set the region attribute: + ▸ provide the argument nfs_share on the command line with a fully + specified name; + ▸ provide the argument --region on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud bms nfs-shares delete + diff --git a/gcloud/alpha/bms/nfs-shares/help b/gcloud/alpha/bms/nfs-shares/help index 5bb8789b6..b33692962 100644 --- a/gcloud/alpha/bms/nfs-shares/help +++ b/gcloud/alpha/bms/nfs-shares/help @@ -15,6 +15,12 @@ GCLOUD WIDE FLAGS COMMANDS COMMAND is one of the following: + create + (ALPHA) Create a Bare Metal Solution NFS share. + + delete + (ALPHA) Delete a Bare Metal Solution NFS share. + describe (ALPHA) Describe a Bare Metal solution NFS share. diff --git a/gcloud/alpha/bms/nfs-shares/update b/gcloud/alpha/bms/nfs-shares/update index a70521047..9b5d186ae 100644 --- a/gcloud/alpha/bms/nfs-shares/update +++ b/gcloud/alpha/bms/nfs-shares/update @@ -4,6 +4,8 @@ NAME SYNOPSIS gcloud alpha bms nfs-shares update (NFS_SHARE : --region=REGION) [--async] [--update-labels=[KEY=VALUE,...]] + [--add-allowed-client=[PROPERTY=VALUE,...] | --clear-allowed-clients + | --remove-allowed-client=[PROPERTY=VALUE,...]] [--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -70,6 +72,56 @@ FLAGS contain only hyphens (-), underscores (_), lowercase characters, and numbers. + At most one of these can be specified: + + --add-allowed-client=[PROPERTY=VALUE,...] + Adds an allowed client to the NFS share. This flag can be repeated to + specify multiple allowed clients. + + network + The name of the network to allow. + + network-project-id + The project ID of the allowed client network. If not present, the + project ID of the NFS share will be used. + + cidr + The subnet of IP addresses permitted to access the NFS share. + + mount-permissions + The mount permissions for the allowed client. MOUNT_PERMISSIONS + must be one of: READ_ONLY, READ_WRITE. + + allow-dev + If yes, allows creation of devices. + + allow-suid + If yes, allows SUID. + + enable-root-squash + If yes, enables root squashing which is a special mapping of the + remote superuser (root) identity when using identity + authentication . + + --clear-allowed-clients + Removes all IP range reservations in the network. + + --remove-allowed-client=[PROPERTY=VALUE,...] + Removes an allowed client for the NFS share given its network name + and cidr. This flag can be repeated to remove multiple allowed + clients. + + network + The name of the network of the allowed client to remove. + + network-project-id + The project ID of the allowed client network. If not present, the + project ID of the NFS share will be used. + + cidr + The subnet of permitted IP addresses of the allowed client to + remove. + At most one of these can be specified: --clear-labels diff --git a/gcloud/alpha/bms/volumes/help b/gcloud/alpha/bms/volumes/help index c5abb92c7..3c38a62a0 100644 --- a/gcloud/alpha/bms/volumes/help +++ b/gcloud/alpha/bms/volumes/help @@ -19,6 +19,9 @@ GROUPS (ALPHA) Manage bare metal logical unit numbers (LUNs) in Bare Metal Solution. + snapshots + (ALPHA) Manage snapshots for Bare Metal Solution volumes. + COMMANDS COMMAND is one of the following: @@ -28,6 +31,13 @@ COMMANDS list (ALPHA) List Bare Metal Solution volumes in a project. + restore + (ALPHA) Restore a Bare Metal Solution boot volume from an existing + snapshot. + + snapshot + (ALPHA) Create a snapshot of a Bare Metal Solution boot volume. + update (ALPHA) Update a Bare Metal Solution volume. diff --git a/gcloud/alpha/bms/volumes/restore b/gcloud/alpha/bms/volumes/restore new file mode 100644 index 000000000..65994200e --- /dev/null +++ b/gcloud/alpha/bms/volumes/restore @@ -0,0 +1,70 @@ +NAME + gcloud alpha bms volumes restore - restore a Bare Metal Solution boot + volume from an existing snapshot + +SYNOPSIS + gcloud alpha bms volumes restore (VOLUME : --region=REGION) + --snapshot=SNAPSHOT [--async] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Restore a Bare Metal Solution boot volume from an existing + snapshot. + +EXAMPLES + To restore a boot volume named my-boot-volume in region us-central1 from + snapshot named my-snapshot, run: + + $ gcloud alpha bms volumes restore my-boot-volume \ + --region=us-central1 --snapshot=my-snapshot + +POSITIONAL ARGUMENTS + Volume resource - volume. The arguments in this group can be used to + specify the attributes of this resource. (NOTE) Some attributes are not + given arguments in this group but can be set in other ways. To set the + project attribute: + ◆ provide the argument volume on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + VOLUME + ID of the volume or fully qualified identifier for the volume. To set + the volume attribute: + ▸ provide the argument volume on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + Region of the resource. To set the region attribute: + ▸ provide the argument volume on the command line with a fully + specified name; + ▸ provide the argument --region on the command line. + +REQUIRED FLAGS + --snapshot=SNAPSHOT + Name of the snapshot to restore. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud bms volumes restore + diff --git a/gcloud/alpha/bms/volumes/snapshot b/gcloud/alpha/bms/volumes/snapshot new file mode 100644 index 000000000..241a18308 --- /dev/null +++ b/gcloud/alpha/bms/volumes/snapshot @@ -0,0 +1,69 @@ +NAME + gcloud alpha bms volumes snapshot - create a snapshot of a Bare Metal + Solution boot volume + +SYNOPSIS + gcloud alpha bms volumes snapshot (VOLUME : --region=REGION) + --description=DESCRIPTION --snapshot-name=SNAPSHOT_NAME + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Create a snapshot of a Bare Metal Solution boot volume. + +EXAMPLES + To create a snapshot of a boot volume named my-boot-volume in region + us-central1 with the name my-snapshot and description my-description, run: + + $ gcloud alpha bms volumes snapshot my-boot-volume \ + --region=us-central1 --snapshot-name=my-snapshot \ + --description=my-description + +POSITIONAL ARGUMENTS + Volume resource - volume. The arguments in this group can be used to + specify the attributes of this resource. (NOTE) Some attributes are not + given arguments in this group but can be set in other ways. To set the + project attribute: + ◆ provide the argument volume on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + VOLUME + ID of the volume or fully qualified identifier for the volume. To set + the volume attribute: + ▸ provide the argument volume on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + Region of the resource. To set the region attribute: + ▸ provide the argument volume on the command line with a fully + specified name; + ▸ provide the argument --region on the command line. + +REQUIRED FLAGS + --description=DESCRIPTION + Textual description of the created snapshot. + + --snapshot-name=SNAPSHOT_NAME + Name to assign to the created snapshot. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud bms volumes snapshot + diff --git a/gcloud/alpha/bms/volumes/snapshots/delete b/gcloud/alpha/bms/volumes/snapshots/delete new file mode 100644 index 000000000..339ce638f --- /dev/null +++ b/gcloud/alpha/bms/volumes/snapshots/delete @@ -0,0 +1,66 @@ +NAME + gcloud alpha bms volumes snapshots delete - delete a Bare Metal Solution + boot volume snapshot + +SYNOPSIS + gcloud alpha bms volumes snapshots delete + (SNAPSHOT : --region=REGION --volume=VOLUME) [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Delete a Bare Metal Solution boot volume snapshot. + +EXAMPLES + To delete a snapshot called my-snapshot on boot volume my-boot-volume in + region us-central1, run: + + $ gcloud alpha bms volumes snapshots delete my-snapshot \ + --region=us-central1 --volume=my-boot-volume + +POSITIONAL ARGUMENTS + Snapshot resource - snapshot. The arguments in this group can be used to + specify the attributes of this resource. (NOTE) Some attributes are not + given arguments in this group but can be set in other ways. To set the + project attribute: + ◆ provide the argument snapshot on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + SNAPSHOT + ID of the snapshot or fully qualified identifier for the snapshot. To + set the snapshot attribute: + ▸ provide the argument snapshot on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + Region of the resource. To set the region attribute: + ▸ provide the argument snapshot on the command line with a fully + specified name; + ▸ provide the argument --region on the command line. + + --volume=VOLUME + Bare Metal Solution volume. To set the volume attribute: + ▸ provide the argument snapshot on the command line with a fully + specified name; + ▸ provide the argument --volume on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud bms volumes snapshots delete + diff --git a/gcloud/alpha/bms/volumes/snapshots/describe b/gcloud/alpha/bms/volumes/snapshots/describe new file mode 100644 index 000000000..2c83ab03d --- /dev/null +++ b/gcloud/alpha/bms/volumes/snapshots/describe @@ -0,0 +1,66 @@ +NAME + gcloud alpha bms volumes snapshots describe - describe a Bare Metal + Solution boot volume snapshot + +SYNOPSIS + gcloud alpha bms volumes snapshots describe + (SNAPSHOT : --region=REGION --volume=VOLUME) [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Describe a Bare Metal Solution boot volume snapshot. + +EXAMPLES + To get a description of a snapshot called my-snapshot on boot volume + my-boot-volume in region us-central1, run: + + $ gcloud alpha bms volumes snapshots describe my-snapshot \ + --region=us-central1 --volume=my-boot-volume + +POSITIONAL ARGUMENTS + Snapshot resource - snapshot. The arguments in this group can be used to + specify the attributes of this resource. (NOTE) Some attributes are not + given arguments in this group but can be set in other ways. To set the + project attribute: + ◆ provide the argument snapshot on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + SNAPSHOT + ID of the snapshot or fully qualified identifier for the snapshot. To + set the snapshot attribute: + ▸ provide the argument snapshot on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + Region of the resource. To set the region attribute: + ▸ provide the argument snapshot on the command line with a fully + specified name; + ▸ provide the argument --region on the command line. + + --volume=VOLUME + Bare Metal Solution volume. To set the volume attribute: + ▸ provide the argument snapshot on the command line with a fully + specified name; + ▸ provide the argument --volume on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud bms volumes snapshots describe + diff --git a/gcloud/alpha/bms/volumes/snapshots/help b/gcloud/alpha/bms/volumes/snapshots/help new file mode 100644 index 000000000..a1b5af87a --- /dev/null +++ b/gcloud/alpha/bms/volumes/snapshots/help @@ -0,0 +1,35 @@ +NAME + gcloud alpha bms volumes snapshots - manage snapshots for Bare Metal + Solution volumes + +SYNOPSIS + gcloud alpha bms volumes snapshots COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Manage snapshots for Bare Metal Solution volumes. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + delete + (ALPHA) Delete a Bare Metal Solution boot volume snapshot. + + describe + (ALPHA) Describe a Bare Metal Solution boot volume snapshot. + + list + (ALPHA) List snapshots for a Bare Metal Solution boot volume. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud bms volumes snapshots + diff --git a/gcloud/alpha/bms/volumes/snapshots/list b/gcloud/alpha/bms/volumes/snapshots/list new file mode 100644 index 000000000..c3fbd7565 --- /dev/null +++ b/gcloud/alpha/bms/volumes/snapshots/list @@ -0,0 +1,72 @@ +NAME + gcloud alpha bms volumes snapshots list - list snapshots for a Bare Metal + Solution boot volume + +SYNOPSIS + gcloud alpha bms volumes snapshots list (--volume=VOLUME : --region=REGION) + [--filter=EXPRESSION] [--limit=LIMIT] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) List snapshots for a Bare Metal Solution boot volume. + +EXAMPLES + To list snapshots on boot volume my-boot-volume in region us-central1, run: + + $ gcloud alpha bms volumes snapshots list --region=us-central1 \ + --volume=my-boot-volume + +REQUIRED FLAGS + Volume resource - The Bare Metal Solution volume to list snapshots of. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument --volume on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + --volume=VOLUME + ID of the volume or fully qualified identifier for the volume. To set + the volume attribute: + ▸ provide the argument --volume on the command line. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --region=REGION + Region of the resource. To set the region attribute: + ▸ provide the argument --volume on the command line with a fully + specified name; + ▸ provide the argument --region on the command line. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --filter, --limit. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud bms volumes snapshots list + diff --git a/gcloud/alpha/certificate-manager/help b/gcloud/alpha/certificate-manager/help index 82a35895d..5f04f7f5a 100644 --- a/gcloud/alpha/certificate-manager/help +++ b/gcloud/alpha/certificate-manager/help @@ -22,6 +22,9 @@ GROUPS dns-authorizations (ALPHA) Manage Certificate Manager DNS authorizations. + issuance-configs + (ALPHA) Manage Certificate Manager Certificate Issuance Configs. + maps (ALPHA) Manage Certificate Manager certificate maps. diff --git a/gcloud/alpha/certificate-manager/issuance-configs/create b/gcloud/alpha/certificate-manager/issuance-configs/create new file mode 100644 index 000000000..283bfaf72 --- /dev/null +++ b/gcloud/alpha/certificate-manager/issuance-configs/create @@ -0,0 +1,108 @@ +NAME + gcloud alpha certificate-manager issuance-configs create - create a + Certificate Issuance Config + +SYNOPSIS + gcloud alpha certificate-manager issuance-configs create + (CERTIFICATE_ISSUANCE_CONFIG : --location=LOCATION) --ca-pool=CA_POOL + [--async] [--description=DESCRIPTION] + [--key-algorithm=KEY_ALGORITHM; default="rsa-2048"] + [--labels=[KEY=VALUE,...]] [--lifetime=LIFETIME; default="P30D"] + [--rotation-window-percentage=ROTATION_WINDOW_PERCENTAGE; default=66] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Create a new Certificate Issuance Config. + +EXAMPLES + To create a Certificate Issuance Config called my-cic, run: + + $ gcloud alpha certificate-manager issuance-configs create my-cic \ + --ca-pool=my-ca-pool + +POSITIONAL ARGUMENTS + CertificateIssuanceConfig resource - Name of the Certificate Issuance + Config to create. The arguments in this group can be used to specify the + attributes of this resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. To set the project + attribute: + ◆ provide the argument certificate_issuance_config on the command line + with a fully specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + CERTIFICATE_ISSUANCE_CONFIG + ID of the certificateIssuanceConfig or fully qualified identifier for + the certificateIssuanceConfig. To set the certificate_issuance_config + attribute: + ▸ provide the argument certificate_issuance_config on the command + line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Certificate Manager location. To set the location attribute: + ▸ provide the argument certificate_issuance_config on the command + line with a fully specified name; + ▸ provide the argument --location on the command line; + ▸ default value of location is [global]. + +REQUIRED FLAGS + --ca-pool=CA_POOL + CA Pool used for issuing certificates. For example: + + $ gcloud alpha certificate-manager issuance-configs create \ + --ca-pool=projects/test-project/locations/us-west1/caPools/\ + my-ca-pool + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --description=DESCRIPTION + Human-readable description of the resource. + + --key-algorithm=KEY_ALGORITHM; default="rsa-2048" + Key algorithm to use when generating the private key. Defaults to + rsa-2048. KEY_ALGORITHM must be one of: ecdsa-p256, rsa-2048. + + --labels=[KEY=VALUE,...] + List of label KEY=VALUE pairs to add. + + Keys must start with a lowercase character and contain only hyphens + (-), underscores (_), lowercase characters, and numbers. Values must + contain only hyphens (-), underscores (_), lowercase characters, and + numbers. + + --lifetime=LIFETIME; default="P30D" + Lifetime of issued certificates in ISO 8601 format. Use gcloud topic + datetimes for details. Defaults to P30D. + + --rotation-window-percentage=ROTATION_WINDOW_PERCENTAGE; default=66 + How long along the lifetime of the ceritificate to renew, expressed as + a percentage. Defaults to 66. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the certificatemanager/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/certificate-manager + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta certificate-manager issuance-configs create + diff --git a/gcloud/alpha/certificate-manager/issuance-configs/delete b/gcloud/alpha/certificate-manager/issuance-configs/delete new file mode 100644 index 000000000..eb7fd9ea7 --- /dev/null +++ b/gcloud/alpha/certificate-manager/issuance-configs/delete @@ -0,0 +1,72 @@ +NAME + gcloud alpha certificate-manager issuance-configs delete - delete a + Certificate Issuance Config + +SYNOPSIS + gcloud alpha certificate-manager issuance-configs delete + (CERTIFICATE_ISSUANCE_CONFIG : --location=LOCATION) [--async] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Delete a Certificate Issuance Config. + +EXAMPLES + To delete a Certificate Issuance Config called my-cic, run: + + $ gcloud alpha certificate-manager issuance-configs delete my-cic + +POSITIONAL ARGUMENTS + CertificateIssuanceConfig resource - Name of the CertificateIssuanceConfig + to delete. The arguments in this group can be used to specify the + attributes of this resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. To set the project + attribute: + ◆ provide the argument certificate_issuance_config on the command line + with a fully specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + CERTIFICATE_ISSUANCE_CONFIG + ID of the certificateIssuanceConfig or fully qualified identifier for + the certificateIssuanceConfig. To set the certificate_issuance_config + attribute: + ▸ provide the argument certificate_issuance_config on the command + line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Certificate Manager location. To set the location attribute: + ▸ provide the argument certificate_issuance_config on the command + line with a fully specified name; + ▸ provide the argument --location on the command line; + ▸ default value of location is [global]. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the certificatemanager/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/certificate-manager + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta certificate-manager issuance-configs delete + diff --git a/gcloud/alpha/certificate-manager/issuance-configs/describe b/gcloud/alpha/certificate-manager/issuance-configs/describe new file mode 100644 index 000000000..65175305c --- /dev/null +++ b/gcloud/alpha/certificate-manager/issuance-configs/describe @@ -0,0 +1,67 @@ +NAME + gcloud alpha certificate-manager issuance-configs describe - show details + about a Certificate Issuance Config + +SYNOPSIS + gcloud alpha certificate-manager issuance-configs describe + (CERTIFICATE_ISSUANCE_CONFIG : --location=LOCATION) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Show details about a Certificate Issuance Config. + +EXAMPLES + To show details about an existing Certificate Issuance Config my-cic, run: + + $ gcloud alpha certificate-manager issuance-configs describe my-cic + +POSITIONAL ARGUMENTS + CertificateIssuanceConfig resource - CertificateIssuanceConfig you want to + describe. The arguments in this group can be used to specify the + attributes of this resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. To set the project + attribute: + ◆ provide the argument certificate_issuance_config on the command line + with a fully specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + CERTIFICATE_ISSUANCE_CONFIG + ID of the certificateIssuanceConfig or fully qualified identifier for + the certificateIssuanceConfig. To set the certificate_issuance_config + attribute: + ▸ provide the argument certificate_issuance_config on the command + line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Certificate Manager location. To set the location attribute: + ▸ provide the argument certificate_issuance_config on the command + line with a fully specified name; + ▸ provide the argument --location on the command line; + ▸ default value of location is [global]. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the certificatemanager/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/certificate-manager + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta certificate-manager issuance-configs describe + diff --git a/gcloud/alpha/certificate-manager/issuance-configs/help b/gcloud/alpha/certificate-manager/issuance-configs/help new file mode 100644 index 000000000..4db44f335 --- /dev/null +++ b/gcloud/alpha/certificate-manager/issuance-configs/help @@ -0,0 +1,39 @@ +NAME + gcloud alpha certificate-manager issuance-configs - manage Certificate + Manager Certificate Issuance Configs + +SYNOPSIS + gcloud alpha certificate-manager issuance-configs COMMAND + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Commands for managing Certificate Issuance Configs. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + create + (ALPHA) Create a Certificate Issuance Config. + + delete + (ALPHA) Delete a Certificate Issuance Config. + + describe + (ALPHA) Show details about a Certificate Issuance Config. + + list + (ALPHA) List all Certificate Issuance Configs in a project. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta certificate-manager issuance-configs + diff --git a/gcloud/alpha/certificate-manager/issuance-configs/list b/gcloud/alpha/certificate-manager/issuance-configs/list new file mode 100644 index 000000000..42a72cb1a --- /dev/null +++ b/gcloud/alpha/certificate-manager/issuance-configs/list @@ -0,0 +1,87 @@ +NAME + gcloud alpha certificate-manager issuance-configs list - list all + Certificate Issuance Configs in a project + +SYNOPSIS + gcloud alpha certificate-manager issuance-configs list + [--location=LOCATION] [--filter=EXPRESSION] [--limit=LIMIT] + [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) List existing Certificate Issuance Configs. + +EXAMPLES + To list existing Certificate Issuance Configs, run: + + $ gcloud alpha certificate-manager issuance-configs list + +FLAGS + Location resource - Location (defaults to global) of the resources. This + represents a Cloud resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. To set the project + attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ default value of location is [global] with a fully specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. To + set the location attribute: + ▸ provide the argument --location on the command line; + ▸ default value of location is [global]. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the certificatemanager/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/certificate-manager + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta certificate-manager issuance-configs list + diff --git a/gcloud/alpha/composer/environments/create b/gcloud/alpha/composer/environments/create index fb1540275..49e83888b 100644 --- a/gcloud/alpha/composer/environments/create +++ b/gcloud/alpha/composer/environments/create @@ -116,7 +116,7 @@ FLAGS provide to the Airflow scheduler, worker, and webserver processes. NAME may contain upper and lowercase letters, digits, and underscores, but they may not begin with a digit. To include commas as part of a VALUE, - see gcloud topics escaping for information about overriding the + see gcloud topic escaping for information about overriding the delimiter. --environment-size=ENVIRONMENT_SIZE diff --git a/gcloud/alpha/compute/addresses/create b/gcloud/alpha/compute/addresses/create index 04b4f05e1..2c79c6f7c 100644 --- a/gcloud/alpha/compute/addresses/create +++ b/gcloud/alpha/compute/addresses/create @@ -94,11 +94,13 @@ FLAGS addresses can only use PREMIUM. --prefix-length=PREFIX_LENGTH - The prefix length of the IP range. It must be a value between 8 and 30 - inclusive. If not present, it means the address field is a single IP - address. + The prefix length of the IP range. If the address is an IPv4 address, + it must be a value between 8 and 30 inclusive. If the address is an + IPv6 address, the only allowed value is 96. If not present, it means + the address field is a single IP address. - This field is not applicable to external addresses. + This field is not applicable to external IPv4 addresses or global IPv6 + addresses. --purpose=PURPOSE The purpose of the address resource. This field is not applicable to diff --git a/gcloud/alpha/compute/firewall-policies/rules/create b/gcloud/alpha/compute/firewall-policies/rules/create index 3b8e8796c..7152a6cd8 100644 --- a/gcloud/alpha/compute/firewall-policies/rules/create +++ b/gcloud/alpha/compute/firewall-policies/rules/create @@ -5,10 +5,17 @@ NAME SYNOPSIS gcloud alpha compute firewall-policies rules create PRIORITY --action=ACTION --firewall-policy=FIREWALL_POLICY - [--description=DESCRIPTION] [--dest-ip-ranges=[DEST_IP_RANGE,...]] + [--description=DESCRIPTION] + [--dest-address-groups=[DEST_ADDRESS_GROUPS,...]] + [--dest-fqdns=[DEST_FQDNS,...]] [--dest-ip-ranges=[DEST_IP_RANGE,...]] + [--dest-region-codes=[DEST_REGION_CODES,...]] + [--dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...]] [--direction=DIRECTION] [--[no-]disabled] [--[no-]enable-logging] [--layer4-configs=[LAYER4_CONFIG,...]] [--organization=ORGANIZATION] - [--src-ip-ranges=[SRC_IP_RANGE,...]] + [--src-address-groups=[SOURCE_ADDRESS_GROUPS,...]] + [--src-fqdns=[SOURCE_FQDNS,...]] [--src-ip-ranges=[SRC_IP_RANGE,...]] + [--src-region-codes=[SOURCE_REGION_CODES,...]] + [--src-threat-intelligence=[SOURCE_THREAT_INTELLIGENCE_LISTS,...]] [--target-resources=[TARGET_RESOURCES,...]] [--target-service-accounts=[TARGET_SERVICE_ACCOUNTS,...]] [GCLOUD_WIDE_FLAG ...] @@ -42,10 +49,26 @@ OPTIONAL FLAGS --description=DESCRIPTION An optional, textual description for the rule. + --dest-address-groups=[DEST_ADDRESS_GROUPS,...] + Dest address groups to match for this rule. Can only be specified if + DIRECTION is egress. + + --dest-fqdns=[DEST_FQDNS,...] + Dest FQDNs to match for this rule. Can only be specified if DIRECTION + is egress. + --dest-ip-ranges=[DEST_IP_RANGE,...] Destination IP ranges to match for this rule. Can only be specified if DIRECTION is egress. + --dest-region-codes=[DEST_REGION_CODES,...] + Dest Region Code to match for this rule. Can only be specified if + DIRECTION is egress. + + --dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...] + Destination Threat Intelligence lists to match for this rule. Can only + be specified if DIRECTION is egress. + --direction=DIRECTION Direction of the traffic the rule is applied. The default is to apply on incoming traffic. DIRECTION must be one of: INGRESS, EGRESS. @@ -67,10 +90,26 @@ OPTIONAL FLAGS Organization which the organization firewall policy belongs to. Must be set if FIREWALL_POLICY is short name. + --src-address-groups=[SOURCE_ADDRESS_GROUPS,...] + Source address groups to match for this rule. Can only be specified if + DIRECTION is ingress. + + --src-fqdns=[SOURCE_FQDNS,...] + Source FQDNs to match for this rule. Can only be specified if DIRECTION + is ingress. + --src-ip-ranges=[SRC_IP_RANGE,...] Source IP ranges to match for this rule. Can only be specified if DIRECTION is ingress. + --src-region-codes=[SOURCE_REGION_CODES,...] + Source Region Code to match for this rule. Can only be specified if + DIRECTION is ingress. + + --src-threat-intelligence=[SOURCE_THREAT_INTELLIGENCE_LISTS,...] + Source Threat Intelligence lists to match for this rule. Can only be + specified if DIRECTION is ingress. + --target-resources=[TARGET_RESOURCES,...] List of URLs of target resources to which the rule is applied. diff --git a/gcloud/alpha/compute/firewall-policies/rules/update b/gcloud/alpha/compute/firewall-policies/rules/update index 1e98f8f5d..4865594e9 100644 --- a/gcloud/alpha/compute/firewall-policies/rules/update +++ b/gcloud/alpha/compute/firewall-policies/rules/update @@ -5,10 +5,18 @@ NAME SYNOPSIS gcloud alpha compute firewall-policies rules update PRIORITY --firewall-policy=FIREWALL_POLICY [--action=ACTION] - [--description=DESCRIPTION] [--dest-ip-ranges=[DEST_IP_RANGE,...]] + [--description=DESCRIPTION] + [--dest-address-groups=[DEST_ADDRESS_GROUPS,...]] + [--dest-fqdns=[DEST_FQDNS,...]] [--dest-ip-ranges=[DEST_IP_RANGE,...]] + [--dest-region-codes=[DEST_REGION_CODES,...]] + [--dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...]] [--direction=DIRECTION] [--[no-]disabled] [--[no-]enable-logging] [--layer4-configs=[LAYER4_CONFIG,...]] [--new-priority=NEW_PRIORITY] - [--organization=ORGANIZATION] [--src-ip-ranges=[SRC_IP_RANGE,...]] + [--organization=ORGANIZATION] + [--src-address-groups=[SOURCE_ADDRESS_GROUPS,...]] + [--src-fqdns=[SOURCE_FQDNS,...]] [--src-ip-ranges=[SRC_IP_RANGE,...]] + [--src-region-codes=[SOURCE_REGION_CODES,...]] + [--src-threat-intelligence=[SOURCE_THREAT_INTELLIGENCE_LISTS,...]] [--target-resources=[TARGET_RESOURCES,...]] [--target-service-accounts=[TARGET_SERVICE_ACCOUNTS,...]] [GCLOUD_WIDE_FLAG ...] @@ -43,10 +51,26 @@ OPTIONAL FLAGS --description=DESCRIPTION An optional, textual description for the rule. + --dest-address-groups=[DEST_ADDRESS_GROUPS,...] + Dest address groups to match for this rule. Can only be specified if + DIRECTION is egress. + + --dest-fqdns=[DEST_FQDNS,...] + Dest FQDNs to match for this rule. Can only be specified if DIRECTION + is egress. + --dest-ip-ranges=[DEST_IP_RANGE,...] Destination IP ranges to match for this rule. Can only be specified if DIRECTION is egress. + --dest-region-codes=[DEST_REGION_CODES,...] + Dest Region Code to match for this rule. Can only be specified if + DIRECTION is egress. + + --dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...] + Destination Threat Intelligence lists to match for this rule. Can only + be specified if DIRECTION is egress. + --direction=DIRECTION Direction of the traffic the rule is applied. The default is to apply on incoming traffic. DIRECTION must be one of: INGRESS, EGRESS. @@ -71,10 +95,26 @@ OPTIONAL FLAGS Organization which the organization firewall policy belongs to. Must be set if FIREWALL_POLICY is short name. + --src-address-groups=[SOURCE_ADDRESS_GROUPS,...] + Source address groups to match for this rule. Can only be specified if + DIRECTION is ingress. + + --src-fqdns=[SOURCE_FQDNS,...] + Source FQDNs to match for this rule. Can only be specified if DIRECTION + is ingress. + --src-ip-ranges=[SRC_IP_RANGE,...] Source IP ranges to match for this rule. Can only be specified if DIRECTION is ingress. + --src-region-codes=[SOURCE_REGION_CODES,...] + Source Region Code to match for this rule. Can only be specified if + DIRECTION is ingress. + + --src-threat-intelligence=[SOURCE_THREAT_INTELLIGENCE_LISTS,...] + Source Threat Intelligence lists to match for this rule. Can only be + specified if DIRECTION is ingress. + --target-resources=[TARGET_RESOURCES,...] List of URLs of target resources to which the rule is applied. diff --git a/gcloud/alpha/compute/instance-templates/delete b/gcloud/alpha/compute/instance-templates/delete index 39c2e8d14..a75a12bd7 100644 --- a/gcloud/alpha/compute/instance-templates/delete +++ b/gcloud/alpha/compute/instance-templates/delete @@ -4,7 +4,7 @@ NAME SYNOPSIS gcloud alpha compute instance-templates delete NAME [NAME ...] - [GCLOUD_WIDE_FLAG ...] + [--global | --region=REGION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) gcloud alpha compute instance-templates delete deletes one or more @@ -19,6 +19,16 @@ POSITIONAL ARGUMENTS NAME [NAME ...] Names of the instance templates to delete. +FLAGS + At most one of these can be specified: + + --global + If set, the instance templates are global. + + --region=REGION + Region of the instance templates to delete. Overrides the default + compute/region property value for this command invocation. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/compute/instance-templates/describe b/gcloud/alpha/compute/instance-templates/describe index 5382d71a8..7a368ca5c 100644 --- a/gcloud/alpha/compute/instance-templates/describe +++ b/gcloud/alpha/compute/instance-templates/describe @@ -4,7 +4,7 @@ NAME SYNOPSIS gcloud alpha compute instance-templates describe NAME - [GCLOUD_WIDE_FLAG ...] + [--global | --region=REGION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) gcloud alpha compute instance-templates describe displays all data @@ -19,6 +19,16 @@ POSITIONAL ARGUMENTS NAME Name of the instance template to describe. +FLAGS + At most one of these can be specified: + + --global + If set, the instance template is global. + + --region=REGION + Region of the instance template to describe. Overrides the default + compute/region property value for this command invocation. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/compute/network-firewall-policies/rules/create b/gcloud/alpha/compute/network-firewall-policies/rules/create index 745749766..c7de668fd 100644 --- a/gcloud/alpha/compute/network-firewall-policies/rules/create +++ b/gcloud/alpha/compute/network-firewall-policies/rules/create @@ -5,11 +5,18 @@ NAME SYNOPSIS gcloud alpha compute network-firewall-policies rules create PRIORITY --action=ACTION --firewall-policy=FIREWALL_POLICY - [--description=DESCRIPTION] [--dest-ip-ranges=[DEST_IP_RANGE,...]] + [--description=DESCRIPTION] + [--dest-address-groups=[DEST_ADDRESS_GROUPS,...]] + [--dest-fqdns=[DEST_FQDNS,...]] [--dest-ip-ranges=[DEST_IP_RANGE,...]] + [--dest-region-codes=[DEST_REGION_CODES,...]] + [--dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...]] [--direction=DIRECTION] [--[no-]disabled] [--[no-]enable-logging] [--layer4-configs=[LAYER4_CONFIG,...]] - [--src-ip-ranges=[SRC_IP_RANGE,...]] + [--src-address-groups=[SOURCE_ADDRESS_GROUPS,...]] + [--src-fqdns=[SOURCE_FQDNS,...]] [--src-ip-ranges=[SRC_IP_RANGE,...]] + [--src-region-codes=[SOURCE_REGION_CODES,...]] [--src-secure-tags=[SOURCE_SECURE_TAGS,...]] + [--src-threat-intelligence=[SOURCE_THREAT_INTELLIGENCE_LISTS,...]] [--target-secure-tags=[TARGET_SECURE_TAGS,...]] [--target-service-accounts=[TARGET_SERVICE_ACCOUNTS,...]] [--firewall-policy-region=FIREWALL_POLICY_REGION @@ -51,10 +58,26 @@ OPTIONAL FLAGS --description=DESCRIPTION An optional, textual description for the rule. + --dest-address-groups=[DEST_ADDRESS_GROUPS,...] + Dest address groups to match for this rule. Can only be specified if + DIRECTION is engress. + + --dest-fqdns=[DEST_FQDNS,...] + Dest FQDNs to match for this rule. Can only be specified if DIRECTION + is egress. + --dest-ip-ranges=[DEST_IP_RANGE,...] Destination IP ranges to match for this rule. Can only be specified if DIRECTION is egress. + --dest-region-codes=[DEST_REGION_CODES,...] + Dest Region Code to match for this rule. Can only be specified if + DIRECTION is egress. + + --dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...] + Destination Threat Intelligence lists to match for this rule. Can only + be specified if DIRECTION is egress. + --direction=DIRECTION Direction of the traffic the rule is applied. The default is to apply on incoming traffic. DIRECTION must be one of: INGRESS, EGRESS. @@ -72,6 +95,14 @@ OPTIONAL FLAGS A list of destination protocols and ports to which the firewall rule will apply. + --src-address-groups=[SOURCE_ADDRESS_GROUPS,...] + Source address groups to match for this rule. Can only be specified if + DIRECTION is ingress. + + --src-fqdns=[SOURCE_FQDNS,...] + Source FQDNs to match for this rule. Can only be specified if DIRECTION + is ingress. + --src-ip-ranges=[SRC_IP_RANGE,...] A list of IP address blocks that are allowed to make inbound connections that match the firewall rule to the instances on the @@ -84,6 +115,10 @@ OPTIONAL FLAGS --src-secure-tags.Multiple IP address blocks can be specified if they are separated by commas. + --src-region-codes=[SOURCE_REGION_CODES,...] + Source Region Code to match for this rule. Can only be specified if + DIRECTION is ingress. + --src-secure-tags=[SOURCE_SECURE_TAGS,...] A list of instance secure tags indicating the set of instances on the network to which the rule applies if all other fields match. Either @@ -94,6 +129,10 @@ OPTIONAL FLAGS --src-secure-tags. Secure Tags can be assigned to instances during instance creation. + --src-threat-intelligence=[SOURCE_THREAT_INTELLIGENCE_LISTS,...] + Source Threat Intelligence lists to match for this rule. Can only be + specified if DIRECTION is ingress. + --target-secure-tags=[TARGET_SECURE_TAGS,...] An optional, list of target secure tags with a name of the format tagValues/ or full namespaced name diff --git a/gcloud/alpha/compute/network-firewall-policies/rules/update b/gcloud/alpha/compute/network-firewall-policies/rules/update index 6947fa93f..d4f507c4e 100644 --- a/gcloud/alpha/compute/network-firewall-policies/rules/update +++ b/gcloud/alpha/compute/network-firewall-policies/rules/update @@ -5,11 +5,18 @@ NAME SYNOPSIS gcloud alpha compute network-firewall-policies rules update PRIORITY --firewall-policy=FIREWALL_POLICY [--action=ACTION] - [--description=DESCRIPTION] [--dest-ip-ranges=[DEST_IP_RANGE,...]] + [--description=DESCRIPTION] + [--dest-address-groups=[DEST_ADDRESS_GROUPS,...]] + [--dest-fqdns=[DEST_FQDNS,...]] [--dest-ip-ranges=[DEST_IP_RANGE,...]] + [--dest-region-codes=[DEST_REGION_CODES,...]] + [--dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...]] [--direction=DIRECTION] [--[no-]disabled] [--[no-]enable-logging] [--layer4-configs=[LAYER4_CONFIG,...]] [--new-priority=NEW_PRIORITY] - [--src-ip-ranges=[SRC_IP_RANGE,...]] + [--src-address-groups=[SOURCE_ADDRESS_GROUPS,...]] + [--src-fqdns=[SOURCE_FQDNS,...]] [--src-ip-ranges=[SRC_IP_RANGE,...]] + [--src-region-codes=[SOURCE_REGION_CODES,...]] [--src-secure-tags=[SOURCE_SECURE_TAGS,...]] + [--src-threat-intelligence=[SOURCE_THREAT_INTELLIGENCE_LISTS,...]] [--target-secure-tags=[TARGET_SECURE_TAGS,...]] [--target-service-accounts=[TARGET_SERVICE_ACCOUNTS,...]] [--firewall-policy-region=FIREWALL_POLICY_REGION @@ -44,10 +51,26 @@ OPTIONAL FLAGS --description=DESCRIPTION An optional, textual description for the rule. + --dest-address-groups=[DEST_ADDRESS_GROUPS,...] + Dest address groups to match for this rule. Can only be specified if + DIRECTION is engress. + + --dest-fqdns=[DEST_FQDNS,...] + Dest FQDNs to match for this rule. Can only be specified if DIRECTION + is egress. + --dest-ip-ranges=[DEST_IP_RANGE,...] Destination IP ranges to match for this rule. Can only be specified if DIRECTION is egress. + --dest-region-codes=[DEST_REGION_CODES,...] + Dest Region Code to match for this rule. Can only be specified if + DIRECTION is egress. + + --dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...] + Destination Threat Intelligence lists to match for this rule. Can only + be specified if DIRECTION is egress. + --direction=DIRECTION Direction of the traffic the rule is applied. The default is to apply on incoming traffic. DIRECTION must be one of: INGRESS, EGRESS. @@ -68,6 +91,14 @@ OPTIONAL FLAGS --new-priority=NEW_PRIORITY New priority for the rule to update. Valid in [0, 65535]. + --src-address-groups=[SOURCE_ADDRESS_GROUPS,...] + Source address groups to match for this rule. Can only be specified if + DIRECTION is ingress. + + --src-fqdns=[SOURCE_FQDNS,...] + Source FQDNs to match for this rule. Can only be specified if DIRECTION + is ingress. + --src-ip-ranges=[SRC_IP_RANGE,...] A list of IP address blocks that are allowed to make inbound connections that match the firewall rule to the instances on the @@ -80,6 +111,10 @@ OPTIONAL FLAGS --src-secure-tags.Multiple IP address blocks can be specified if they are separated by commas. + --src-region-codes=[SOURCE_REGION_CODES,...] + Source Region Code to match for this rule. Can only be specified if + DIRECTION is ingress. + --src-secure-tags=[SOURCE_SECURE_TAGS,...] A list of instance secure tags indicating the set of instances on the network to which the rule applies if all other fields match. Either @@ -90,6 +125,10 @@ OPTIONAL FLAGS --src-secure-tags. Secure Tags can be assigned to instances during instance creation. + --src-threat-intelligence=[SOURCE_THREAT_INTELLIGENCE_LISTS,...] + Source Threat Intelligence lists to match for this rule. Can only be + specified if DIRECTION is ingress. + --target-secure-tags=[TARGET_SECURE_TAGS,...] An optional, list of target secure tags with a name of the format tagValues/ or full namespaced name diff --git a/gcloud/alpha/compute/os-config/os-policy-assignments/create b/gcloud/alpha/compute/os-config/os-policy-assignments/create index 7190f5d5c..fcb486b48 100644 --- a/gcloud/alpha/compute/os-config/os-policy-assignments/create +++ b/gcloud/alpha/compute/os-config/os-policy-assignments/create @@ -50,8 +50,13 @@ POSITIONAL ARGUMENTS REQUIRED FLAGS --file=FILE - Absolute path to OS policy assignment file on your local client. File - must be in either JSON or YAML format. + Absolute path to the OS policy assignment file on your local client. + File must be in either JSON or YAML format. This file defines the OS + policies that you want to apply to your VMs, the target VMs that you + want to apply the policies to, and the rollout rate at which to apply + the OS policies. For more information about this resource and sample OS + policy assignment files, see + https://cloud.google.com/compute/docs/os-configuration-management/working-with-os-policies#os-policy-assignment. OPTIONAL FLAGS --async diff --git a/gcloud/alpha/compute/os-config/os-policy-assignments/update b/gcloud/alpha/compute/os-config/os-policy-assignments/update index 1f6526573..d7628e5a6 100644 --- a/gcloud/alpha/compute/os-config/os-policy-assignments/update +++ b/gcloud/alpha/compute/os-config/os-policy-assignments/update @@ -49,8 +49,13 @@ POSITIONAL ARGUMENTS REQUIRED FLAGS --file=FILE - Absolute path to OS policy assignment file on your local client. File - must be in either JSON or YAML format. + Absolute path to the OS policy assignment file on your local client. + File must be in either JSON or YAML format. This file defines the OS + policies that you want to apply to your VMs, the target VMs that you + want to apply the policies to, and the rollout rate at which to apply + the OS policies. For more information about this resource and sample OS + policy assignment files, see + https://cloud.google.com/compute/docs/os-configuration-management/working-with-os-policies#os-policy-assignment. OPTIONAL FLAGS --async diff --git a/gcloud/alpha/container/aws/clusters/create b/gcloud/alpha/container/aws/clusters/create index 8d6c38fb0..97b856771 100644 --- a/gcloud/alpha/container/aws/clusters/create +++ b/gcloud/alpha/container/aws/clusters/create @@ -14,7 +14,8 @@ SYNOPSIS --subnet-ids=[SUBNET_ID,...] --vpc-id=VPC_ID [--admin-users=USER,[USER,...]] [--annotations=ANNOTATION,[ANNOTATION,...]] [--async] - [--description=DESCRIPTION] [--instance-placement=INSTANCE_PLACEMENT] + [--description=DESCRIPTION] [--enable-managed-prometheus] + [--instance-placement=INSTANCE_PLACEMENT] [--instance-type=INSTANCE_TYPE] [--logging=COMPONENT,[COMPONENT,...]] [--main-volume-iops=MAIN_VOLUME_IOPS] [--main-volume-kms-key-arn=MAIN_VOLUME_KMS_KEY_ARN] @@ -128,6 +129,9 @@ OPTIONAL FLAGS --description=DESCRIPTION Description for the cluster. + --enable-managed-prometheus + Enable managed collection for Managed Service for Prometheus. + --instance-placement=INSTANCE_PLACEMENT Type of the tenancy. INSTANCE_PLACEMENT must be one of: dedicated, default, host. diff --git a/gcloud/alpha/container/aws/clusters/get-credentials b/gcloud/alpha/container/aws/clusters/get-credentials index 13ee464f4..e6c1918e3 100644 --- a/gcloud/alpha/container/aws/clusters/get-credentials +++ b/gcloud/alpha/container/aws/clusters/get-credentials @@ -11,7 +11,7 @@ DESCRIPTION (ALPHA) Fetch credentials for a running Anthos cluster on AWS. This command updates a kubeconfig file with appropriate credentials and - endpoint information to point kubectl at a specific cluster on AWS. + endpoint information to point kubectl at a specific Anthos cluster on AWS. By default, credentials are written to HOME/.kube/config. You can provide an alternate path by setting the KUBECONFIG environment variable. If diff --git a/gcloud/alpha/container/azure/clusters/create b/gcloud/alpha/container/azure/clusters/create index e71fa357a..a436ae4a6 100644 --- a/gcloud/alpha/container/azure/clusters/create +++ b/gcloud/alpha/container/azure/clusters/create @@ -16,7 +16,8 @@ SYNOPSIS [--config-encryption-key-id=CONFIG_ENCRYPTION_KEY_ID] [--config-encryption-public-key=CONFIG_ENCRYPTION_PUBLIC_KEY] [--database-encryption-key-id=DATABASE_ENCRYPTION_KEY_ID] - [--description=DESCRIPTION] [--endpoint-subnet-id=ENDPOINT_SUBNET_ID] + [--description=DESCRIPTION] [--enable-managed-prometheus] + [--endpoint-subnet-id=ENDPOINT_SUBNET_ID] [--logging=COMPONENT,[COMPONENT,...]] [--main-volume-size=MAIN_VOLUME_SIZE] [--replica-placements=[REPLICA_PLACEMENT,...]] @@ -143,6 +144,9 @@ OPTIONAL FLAGS --description=DESCRIPTION Description for the cluster. + --enable-managed-prometheus + Enable managed collection for Managed Service for Prometheus. + --endpoint-subnet-id=ENDPOINT_SUBNET_ID ARM ID of the subnet where the control plane load balancer is deployed. When unspecified, it defaults to the control plane subnet ID. diff --git a/gcloud/alpha/container/azure/clusters/get-credentials b/gcloud/alpha/container/azure/clusters/get-credentials index 13421730a..d439a676a 100644 --- a/gcloud/alpha/container/azure/clusters/get-credentials +++ b/gcloud/alpha/container/azure/clusters/get-credentials @@ -11,7 +11,8 @@ DESCRIPTION (ALPHA) Fetch credentials for a running Anthos cluster on Azure. This command updates a kubeconfig file with appropriate credentials and - endpoint information to point kubectl at a specific cluster on Azure. + endpoint information to point kubectl at a specific Anthos cluster on + Azure. By default, credentials are written to HOME/.kube/config. You can provide an alternate path by setting the KUBECONFIG environment variable. If diff --git a/gcloud/alpha/container/azure/node-pools/create b/gcloud/alpha/container/azure/node-pools/create index 27ed88651..adcee2aeb 100644 --- a/gcloud/alpha/container/azure/node-pools/create +++ b/gcloud/alpha/container/azure/node-pools/create @@ -6,8 +6,8 @@ SYNOPSIS gcloud alpha container azure node-pools create (NODE_POOL : --cluster=CLUSTER --location=LOCATION) --node-version=NODE_VERSION --ssh-public-key=SSH_PUBLIC_KEY - --subnet-id=SUBNET_ID [--async] - [--azure-availability-zone=AZURE_AVAILABILITY_ZONE] + --subnet-id=SUBNET_ID [--annotations=ANNOTATION,[ANNOTATION,...]] + [--async] [--azure-availability-zone=AZURE_AVAILABILITY_ZONE] [--config-encryption-key-id=CONFIG_ENCRYPTION_KEY_ID] [--config-encryption-public-key=CONFIG_ENCRYPTION_PUBLIC_KEY] [--image-type=IMAGE_TYPE] [--max-pods-per-node=MAX_PODS_PER_NODE] @@ -76,6 +76,9 @@ REQUIRED FLAGS Subnet ID of an existing VNET to use for the node pool. OPTIONAL FLAGS + --annotations=ANNOTATION,[ANNOTATION,...] + Annotations for the node pool. + --async Return immediately, without waiting for the operation in progress to complete. diff --git a/gcloud/alpha/container/azure/node-pools/update b/gcloud/alpha/container/azure/node-pools/update index 87863c6dc..10d666a38 100644 --- a/gcloud/alpha/container/azure/node-pools/update +++ b/gcloud/alpha/container/azure/node-pools/update @@ -6,8 +6,9 @@ SYNOPSIS gcloud alpha container azure node-pools update (NODE_POOL : --cluster=CLUSTER --location=LOCATION) [--async] [--node-version=NODE_VERSION] [--ssh-public-key=SSH_PUBLIC_KEY] - [--validate-only] [--max-nodes=MAX_NODES --min-nodes=MIN_NODES] - [GCLOUD_WIDE_FLAG ...] + [--validate-only] + [--annotations=ANNOTATION,[ANNOTATION,...] | --clear-annotations] + [--max-nodes=MAX_NODES --min-nodes=MIN_NODES] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Update a node pool in an Anthos cluster on Azure. @@ -68,6 +69,16 @@ FLAGS --validate-only Validate the update of the node pool, but don't actually perform it. + Annotations + + At most one of these can be specified: + + --annotations=ANNOTATION,[ANNOTATION,...] + Annotations for the node pool. + + --clear-annotations + Clear the annotations for the node pool. + Node pool autoscaling --max-nodes=MAX_NODES diff --git a/gcloud/alpha/container/clusters/create b/gcloud/alpha/container/clusters/create index 699e2f37f..933cc8802 100644 --- a/gcloud/alpha/container/clusters/create +++ b/gcloud/alpha/container/clusters/create @@ -162,13 +162,12 @@ FLAGS are additional Kubernetes cluster components. Addons specified by this flag will be enabled. The others will be disabled. Default addons: HttpLoadBalancing, HorizontalPodAutoscaling. The Istio addon is - deprecated and will be removed in an upcoming release. For more - information and migration, see + deprecated and removed. For more information and migration, see https://cloud.google.com/istio/docs/istio-on-gke/migrate-to-anthos-service-mesh. ADDON must be one of: HttpLoadBalancing, HorizontalPodAutoscaling, KubernetesDashboard, NetworkPolicy, NodeLocalDNS, ConfigConnector, - GcePersistentDiskCsiDriver, GcpFilestoreCsiDriver, Istio, - ApplicationManager, BackupRestore, CloudBuild, CloudRun. + GcePersistentDiskCsiDriver, GcpFilestoreCsiDriver, BackupRestore, + Istio, ApplicationManager, CloudBuild, CloudRun. --allow-route-overlap Allows the provided cluster CIDRs to overlap with existing routes that @@ -568,7 +567,7 @@ FLAGS client certificates are disabled by default. --istio-config=[auth=MTLS_PERMISSIVE,...] - (DEPRECATED) Configurations for Istio addon, requires --addons contains + (REMOVED) Configurations for Istio addon, requires --addons contains Istio for create, or --update-addons Istio=ENABLED for update. auth @@ -579,8 +578,8 @@ FLAGS $ gcloud alpha container clusters create example-cluster \ --istio-config=auth=MTLS_PERMISSIVE - The --istio-config flag is deprecated and will be removed in an - upcoming release. For more information and migration, see + The --istio-config flag is no longer supported. For more + information and migration, see https://cloud.google.com/istio/docs/istio-on-gke/migrate-to-anthos-service-mesh. --labels=[KEY=VALUE,...] diff --git a/gcloud/alpha/container/clusters/update b/gcloud/alpha/container/clusters/update index f4d38228b..c0257c69c 100644 --- a/gcloud/alpha/container/clusters/update +++ b/gcloud/alpha/container/clusters/update @@ -1114,7 +1114,7 @@ OPTIONAL FLAGS --cloud-run-config=load-balancer-type=INTERNAL --istio-config=[auth=MTLS_PERMISSIVE,...] - (DEPRECATED) Configurations for Istio addon, requires --addons contains + (REMOVED) Configurations for Istio addon, requires --addons contains Istio for create, or --update-addons Istio=ENABLED for update. auth @@ -1125,8 +1125,8 @@ OPTIONAL FLAGS $ gcloud alpha container clusters update example-cluster \ --istio-config=auth=MTLS_PERMISSIVE - The --istio-config flag is deprecated and will be removed in an - upcoming release. For more information and migration, see + The --istio-config flag is no longer supported. For more + information and migration, see https://cloud.google.com/istio/docs/istio-on-gke/migrate-to-anthos-service-mesh. --master-authorized-networks=NETWORK,[NETWORK,...] diff --git a/gcloud/alpha/emulators/firestore/help b/gcloud/alpha/emulators/firestore/help index 7888439e9..75dc62a20 100644 --- a/gcloud/alpha/emulators/firestore/help +++ b/gcloud/alpha/emulators/firestore/help @@ -1,15 +1,15 @@ NAME - gcloud alpha emulators firestore - manage your local firestore emulator + gcloud alpha emulators firestore - manage your local Firestore emulator SYNOPSIS gcloud alpha emulators firestore COMMAND [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) This set of commands allows you to start and use a local firestore + (ALPHA) This set of commands allows you to start and use a local Firestore emulator. EXAMPLES - To start a local firestore emulator, run: + To start the local Firestore emulator, run: $ gcloud alpha emulators firestore start @@ -22,13 +22,15 @@ COMMANDS COMMAND is one of the following: start - (ALPHA) Start a local firestore emulator. + (ALPHA) Start a local Firestore emulator. NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. This variant is also available: + access allowlist. These variants are also available: + + $ gcloud emulators firestore $ gcloud beta emulators firestore diff --git a/gcloud/alpha/emulators/firestore/start b/gcloud/alpha/emulators/firestore/start index 4c2e3ac8a..b23d58aa9 100644 --- a/gcloud/alpha/emulators/firestore/start +++ b/gcloud/alpha/emulators/firestore/start @@ -1,18 +1,26 @@ NAME - gcloud alpha emulators firestore start - start a local firestore emulator + gcloud alpha emulators firestore start - start a local Firestore emulator SYNOPSIS gcloud alpha emulators firestore start [--host-port=HOST_PORT] [--rules=RULES] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) This command starts a local firestore emulator. + (ALPHA) This command starts a local Firestore emulator. EXAMPLES - To start a local firestore emulator, run: + To start the local Firestore emulator, run: $ gcloud alpha emulators firestore start + To bind to a specific host and port, run: + + $ gcloud alpha emulators firestore start --host-port=0.0.0.0:8080 + + To run the local Firestore emulator with a Firebase Rules set, run: + + $ gcloud alpha emulators firestore start --rules=firestore.rules + FLAGS --host-port=HOST_PORT The host:port to which the emulator should be bound. Can take the form @@ -27,7 +35,9 @@ FLAGS The default value is localhost:8080. --rules=RULES - If set, all projects will use the security rules in this file + If set, all projects will use the security rules in this file. More + information on Firebase Rules and the syntax for this file is available + at https://firebase.google.com/docs/rules. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, @@ -41,7 +51,9 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. This variant is also available: + access allowlist. These variants are also available: + + $ gcloud emulators firestore start $ gcloud beta emulators firestore start diff --git a/gcloud/alpha/emulators/help b/gcloud/alpha/emulators/help index 80e7a2ecf..8b4cc26ca 100644 --- a/gcloud/alpha/emulators/help +++ b/gcloud/alpha/emulators/help @@ -23,7 +23,7 @@ GROUPS (ALPHA) Manage your local datastore emulator. firestore - (ALPHA) Manage your local firestore emulator. + (ALPHA) Manage your local Firestore emulator. pubsub (ALPHA) Manage your local pubsub emulator. diff --git a/gcloud/alpha/network-connectivity/policy-based-routes/create b/gcloud/alpha/network-connectivity/policy-based-routes/create index 899c805ae..93dd24544 100644 --- a/gcloud/alpha/network-connectivity/policy-based-routes/create +++ b/gcloud/alpha/network-connectivity/policy-based-routes/create @@ -127,5 +127,7 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. + access allowlist. This variant is also available: + + $ gcloud network-connectivity policy-based-routes create diff --git a/gcloud/alpha/network-connectivity/policy-based-routes/delete b/gcloud/alpha/network-connectivity/policy-based-routes/delete index b7631c18e..7454151dd 100644 --- a/gcloud/alpha/network-connectivity/policy-based-routes/delete +++ b/gcloud/alpha/network-connectivity/policy-based-routes/delete @@ -53,5 +53,7 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. + access allowlist. This variant is also available: + + $ gcloud network-connectivity policy-based-routes delete diff --git a/gcloud/alpha/network-connectivity/policy-based-routes/describe b/gcloud/alpha/network-connectivity/policy-based-routes/describe index 0c4f8562d..305ee2b5c 100644 --- a/gcloud/alpha/network-connectivity/policy-based-routes/describe +++ b/gcloud/alpha/network-connectivity/policy-based-routes/describe @@ -49,5 +49,7 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. + access allowlist. This variant is also available: + + $ gcloud network-connectivity policy-based-routes describe diff --git a/gcloud/alpha/network-connectivity/policy-based-routes/help b/gcloud/alpha/network-connectivity/policy-based-routes/help index 8cfab399d..0d1971534 100644 --- a/gcloud/alpha/network-connectivity/policy-based-routes/help +++ b/gcloud/alpha/network-connectivity/policy-based-routes/help @@ -33,5 +33,7 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. + access allowlist. This variant is also available: + + $ gcloud network-connectivity policy-based-routes diff --git a/gcloud/alpha/network-connectivity/policy-based-routes/list b/gcloud/alpha/network-connectivity/policy-based-routes/list index 7c63e4934..537d97340 100644 --- a/gcloud/alpha/network-connectivity/policy-based-routes/list +++ b/gcloud/alpha/network-connectivity/policy-based-routes/list @@ -11,6 +11,11 @@ DESCRIPTION (ALPHA) Retrieve and display a list of all policy based routes in the specified project. +EXAMPLES + To display details about a policy based route named my-pbr, run: + + $ gcloud alpha network-connectivity policy-based-routes list my-pbr + LIST COMMAND FLAGS --filter=EXPRESSION Apply a Boolean filter EXPRESSION to each resource item to be listed. @@ -54,5 +59,7 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. + access allowlist. This variant is also available: + + $ gcloud network-connectivity policy-based-routes list diff --git a/gcloud/alpha/run/integrations/create b/gcloud/alpha/run/integrations/create index 27f708c87..bc7b2b6dd 100644 --- a/gcloud/alpha/run/integrations/create +++ b/gcloud/alpha/run/integrations/create @@ -17,7 +17,7 @@ EXAMPLES To attach a custom domain to a Cloud Run service - $ gcloud alpha run integrations create --type=domain-routing \ + $ gcloud alpha run integrations create --type=custom-domains \ --parameters='set-mapping=example.com/*:myservice' REQUIRED FLAGS diff --git a/gcloud/alpha/scc/notifications/create b/gcloud/alpha/scc/notifications/create index cac8a84c4..0f749ff12 100644 --- a/gcloud/alpha/scc/notifications/create +++ b/gcloud/alpha/scc/notifications/create @@ -5,23 +5,48 @@ NAME SYNOPSIS gcloud alpha scc notifications create NOTIFICATION_CONFIG_ID --pubsub-topic=PUBSUB_TOPIC [--description=DESCRIPTION] - [--filter=FILTER] [--organization=ORGANIZATION] [GCLOUD_WIDE_FLAG ...] + [--filter=FILTER] + [--folder=FOLDER | --organization=ORGANIZATION | --project=PROJECT] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Create a Cloud Security Command Center notification config. EXAMPLES - Create a notification config test-config under organization 123456 for + Create a notification config test-config under organization 123 for findings for pubsub-topic projects/test-project/topics/notification-test with a filter on resource name: $ gcloud alpha scc notifications create test-config \ - --organization=123456 \ + --organization=123 \ + --pubsub-topic=projects/test-project/topics/notification-test \ + --filter="resource_name: \"a\"" + $ gcloud alpha scc notifications create \ + organizations/123/notificationConfigs/test-config \ --pubsub-topic=projects/test-project/topics/notification-test \ --filter="resource_name: \"a\"" + Create a notification config test-config under folder 456 for findings for + pubsub-topic projects/test-project/topics/notification-test with a filter + on resource name: + + $ gcloud alpha scc notifications create test-config --folder=456 \ + --pubsub-topic=projects/test-project/topics/notification-test \ + --filter="resource_name: \"a\"" $ gcloud alpha scc notifications create \ - organizations/123456/notificationConfigs/test-config \ + folders/456/notificationConfigs/test-config \ + --pubsub-topic=projects/test-project/topics/notification-test \ + --filter="resource_name: \"a\"" + + Create a notification config test-config under project 789 for findings for + pubsub-topic projects/test-project/topics/notification-test with a filter + on resource name: + + $ gcloud alpha scc notifications create test-config --project=789 \ + --pubsub-topic=projects/test-project/topics/notification-test \ + --filter="resource_name: \"a\"" + $ gcloud alpha scc notifications create \ + projects/789/notificationConfigs/test-config \ --pubsub-topic=projects/test-project/topics/notification-test \ --filter="resource_name: \"a\"" @@ -42,10 +67,19 @@ OPTIONAL FLAGS --filter=FILTER Filter to be used for notification config. - --organization=ORGANIZATION - The organization where the notification config resides. Formatted as - "organizations/123" or just "123". Required if notificationConfigId - does not contain organization information. + At most one of these can be specified: + + --folder=FOLDER + Folder where the notification config resides. Formatted as + folders/456 or just 456. + + --organization=ORGANIZATION + Organization where the notification config resides. Formatted as + organizations/123 or just 123. + + --project=PROJECT + Project (ID or number) where the notification config resides. + Formatted as projects/789 or just 789. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/scc/notifications/delete b/gcloud/alpha/scc/notifications/delete index f0e7ec0f9..5a0df7569 100644 --- a/gcloud/alpha/scc/notifications/delete +++ b/gcloud/alpha/scc/notifications/delete @@ -4,19 +4,30 @@ NAME SYNOPSIS gcloud alpha scc notifications delete NOTIFICATION_CONFIG_ID - [--organization=ORGANIZATION] [GCLOUD_WIDE_FLAG ...] + [--folder=FOLDER | --organization=ORGANIZATION | --project=PROJECT] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Delete a Cloud Security Command Center notification config. EXAMPLES - Delete notification config 'my-config' from organization 123456 - - $ gcloud alpha scc notifications delete my-config \ - --organization=123456 + Delete notification config 'my-config' from organization 123 + $ gcloud alpha scc notifications delete my-config --organization=123 $ gcloud alpha scc notifications delete \ - organization/123456/notificationConfigs/my-config + organizations/123/notificationConfigs/my-config + + Delete notification config 'my-config' from folder 456 + + $ gcloud alpha scc notifications delete my-config --folder=456 + $ gcloud alpha scc notifications delete \ + folders/456/notificationConfigs/my-config + + Delete notification config 'my-config' from project 789 + + $ gcloud alpha scc notifications delete my-config --project=789 + $ gcloud alpha scc notifications delete \ + projects/789/notificationConfigs/my-config POSITIONAL ARGUMENTS NOTIFICATION_CONFIG_ID @@ -24,10 +35,19 @@ POSITIONAL ARGUMENTS "organizations/123/notificationConfigs/456" or just "456". FLAGS - --organization=ORGANIZATION - The organization where the notification config resides. Formatted as - "organizations/123" or just "123". Required if notificationConfigId - does not contain organization information. + At most one of these can be specified: + + --folder=FOLDER + Folder where the notification config resides. Formatted as + folders/456 or just 456. + + --organization=ORGANIZATION + Organization where the notification config resides. Formatted as + organizations/123 or just 123. + + --project=PROJECT + Project (ID or number) where the notification config resides. + Formatted as projects/789 or just 789. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/scc/notifications/list b/gcloud/alpha/scc/notifications/list index 315d53bfd..429a02d50 100644 --- a/gcloud/alpha/scc/notifications/list +++ b/gcloud/alpha/scc/notifications/list @@ -3,7 +3,7 @@ NAME notification configs SYNOPSIS - gcloud alpha scc notifications list [ORGANIZATION] [--filter=EXPRESSION] + gcloud alpha scc notifications list [PARENT] [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] @@ -11,23 +11,29 @@ DESCRIPTION (ALPHA) List Cloud Security Command Center notification configs. EXAMPLES - List notification configs from organization 123456 + List notification configs from organization 123 - $ gcloud alpha scc notifications list 123456 + $ gcloud alpha scc notifications list 123 + $ gcloud alpha scc notifications list organizations/123 - $ gcloud alpha scc notifications list organizations/123456 + List notification configs from folder 456 + + $ gcloud alpha scc notifications list folders/456 + + List notification configs from project 789 + + $ gcloud alpha scc notifications list projects/789 POSITIONAL ARGUMENTS - Organization resource - The organization to be used for the SCC (Security - Command Center) command. This represents a Cloud resource. + Parent resource - The parent to be used for the SCC (Security Command + Center) command. This represents a Cloud resource. - [ORGANIZATION] - ID of the organization or fully qualified identifier for the - organization. To set the organization attribute: - ▸ provide the argument organization on the command line; - ▸ Set the organization property in configuration using gcloud - config set scc/organization if it is not specified in command - line.. + [PARENT] + ID of the parent or fully qualified identifier for the parent. To set + the organization attribute: + ▸ provide the argument parent on the command line; + ▸ Set the parent property in configuration using gcloud config set + scc/parent if it is not specified in command line.. LIST COMMAND FLAGS --filter=EXPRESSION diff --git a/gcloud/alpha/scc/notifications/update b/gcloud/alpha/scc/notifications/update index 2af55c14a..29a162aa0 100644 --- a/gcloud/alpha/scc/notifications/update +++ b/gcloud/alpha/scc/notifications/update @@ -5,51 +5,76 @@ NAME SYNOPSIS gcloud alpha scc notifications update NOTIFICATION_CONFIG_ID [--description=DESCRIPTION] [--filter=FILTER] - [--organization=ORGANIZATION] [--pubsub-topic=PUBSUB_TOPIC] + [--pubsub-topic=PUBSUB_TOPIC] + [--folder=FOLDER | --organization=ORGANIZATION | --project=PROJECT] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Update a Cloud Security Command Center notification config. EXAMPLES - Update all mutable fields in my-config (description + pubsub topic + - filter): + Update all mutable fields under an organization parent my-config + (description + pubsub topic + filter): - $ gcloud alpha scc notifications update my-config \ - --organization=123456 --description="New description" \ + $ gcloud alpha scc notifications update scc notifications update \ + my-config --organization=123 --description="New description" \ --pubsub-topic="projects/22222/topics/newtopic" - $ gcloud alpha scc notifications update \ - organizations/123456/notificationConfigs/my-config \ + $ gcloud alpha scc notifications update scc notifications update \ + organizations/123/notificationConfigs/my-config \ + --description="New description" \ + --pubsub-topic="projects/22222/topics/newtopic" + + Update all mutable fields under a folder parent my-config (description + + pubsub topic + filter): + + $ gcloud alpha scc notifications update scc notifications update \ + my-config --folder=456 --description="New description" \ + --pubsub-topic="projects/22222/topics/newtopic" + + $ gcloud alpha scc notifications update scc notifications update \ + folders/456/notificationConfigs/my-config \ + --description="New description" \ + --pubsub-topic="projects/22222/topics/newtopic" + + Update all mutable fields under a project parent my-config (description + + pubsub topic + filter): + + $ gcloud alpha scc notifications update scc notifications update \ + my-config --project=789 --description="New description" \ + --pubsub-topic="projects/22222/topics/newtopic" + + $ gcloud alpha scc notifications update scc notifications update \ + projects/789/notificationConfigs/my-config \ --description="New description" \ --pubsub-topic="projects/22222/topics/newtopic" Update my-config's description $ gcloud alpha scc notifications update my-config \ - --organization=123456 --description="New description" + --organization=123 --description="New description" $ gcloud alpha scc notifications update \ - organizations/123456/notificationConfigs/my-config \ + organizations/123/notificationConfigs/my-config \ --description="New description" Update my-config's pubsub-topic $ gcloud alpha scc notifications update my-config \ - --organization=123456 \ + --organization=123 \ --pubsub-topic="projects/22222/topics/newtopic" $ gcloud alpha scc notifications update \ - organizations/123456/notificationConfigs/my-config \ + organizations/123/notificationConfigs/my-config \ --pubsub-topic="projects/22222/topics/newtopic" Update my-config's filter $ gcloud alpha scc notifications update my-config \ - --organization=123456 --filter='state = \"ACTIVE\"' + --organization=123 --filter='state = \"ACTIVE\"' $ gcloud alpha scc notifications update \ - organizations/123456/notificationConfigs/my-config \ + organizations/123/notificationConfigs/my-config \ --filter='state = \"ACTIVE\"' POSITIONAL ARGUMENTS @@ -65,15 +90,24 @@ FLAGS The filter string which will applied to events of findings of a notification configuration. - --organization=ORGANIZATION - The organization where the notification config resides. Formatted as - "organizations/123" or just "123". Required if notificationConfigId - does not contain organization information. - --pubsub-topic=PUBSUB_TOPIC The Pub/Sub topic which will receive notifications. Its format is "projects/[project_id]/topics/[topic]". + At most one of these can be specified: + + --folder=FOLDER + Folder where the notification config resides. Formatted as + folders/456 or just 456. + + --organization=ORGANIZATION + Organization where the notification config resides. Formatted as + organizations/123 or just 123. + + --project=PROJECT + Project (ID or number) where the notification config resides. + Formatted as projects/789 or just 789. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/spanner/instance-configs/create b/gcloud/alpha/spanner/instance-configs/create index c067cd434..a615a4980 100644 --- a/gcloud/alpha/spanner/instance-configs/create +++ b/gcloud/alpha/spanner/instance-configs/create @@ -15,16 +15,6 @@ DESCRIPTION (ALPHA) Create a Cloud Spanner instance configuration. EXAMPLES - To create a custom Cloud Spanner instance configuration, run: - - $ gcloud alpha spanner instance-configs create \ - custom-instance-config \ - --display-name=custom-instance-config-name --base-config=nam3 \ - --replicas=location=us-east4,type=READ_WRITE:location=us-east4,\ - type=READ_WRITE:location=us-east1,\ - type=READ_WRITE:location=us-east1,\ - type=READ_WRITE:location=us-central1,type=WITNESS - To create a custom Cloud Spanner instance configuration based on an existing Google-managed configuration (nam3) by adding a 'READ_ONLY' type replica in location 'us-east4', run: @@ -33,15 +23,15 @@ EXAMPLES custom-instance-config --clone-config=nam3 \ --add-replicas=location=us-east4,type=READ_ONLY - To create a custom Cloud Spanner instance configuration based on an - existing Google-managed configuration (nam3) by adding a 'READ_ONLY' type - replica in location 'us-east4' and removing a 'READ_ONLY' type replica in - location 'us-central1', run: + To create a custom Cloud Spanner instance configuration based on another + custom configuration (custom-instance-config) by adding a 'READ_ONLY' type + replica in location 'us-east1' and removing a 'READ_ONLY' type replica in + location 'us-east4', run: $ gcloud alpha spanner instance-configs create \ - custom-instance-config --clone-config=nam3 \ - --add-replicas=location=us-east4,type=READ_ONLY \ - --skip-replicas=location=us-central1,type=READ_ONLY + custom-instance-config1 --clone-config=custom-instance-config \ + --add-replicas=location=us-east1,type=READ_ONLY \ + --skip-replicas=location=us-east4,type=READ_ONLY POSITIONAL ARGUMENTS INSTANCE_CONFIG diff --git a/gcloud/alpha/sql/instances/create b/gcloud/alpha/sql/instances/create index f73e8daa4..1e87f621f 100644 --- a/gcloud/alpha/sql/instances/create +++ b/gcloud/alpha/sql/instances/create @@ -13,7 +13,8 @@ SYNOPSIS [--availability-type=AVAILABILITY_TYPE] [--no-backup] [--backup-location=BACKUP_LOCATION] [--backup-start-time=BACKUP_START_TIME] [--collation=COLLATION] - [--cpu=CPU] [--database-flags=FLAG=VALUE,[FLAG=VALUE,...]] + [--connector-enforcement=CONNECTOR_ENFORCEMENT] [--cpu=CPU] + [--database-flags=FLAG=VALUE,[FLAG=VALUE,...]] [--database-version=DATABASE_VERSION; default="MYSQL_8_0"] [--[no-]deletion-protection] [--deny-maintenance-period-end-date=DENY_MAINTENANCE_PERIOD_END_DATE] @@ -166,6 +167,21 @@ FLAGS Cloud SQL server-level collation setting, which specifies the set of rules for comparing characters in a character set. + --connector-enforcement=CONNECTOR_ENFORCEMENT + Cloud SQL Connector enforcement mode. It determines how Cloud SQL + Connectors are used in the connection. See the list of modes here + (https://cloud.google.com/sql/docs/mysql/admin-api/rest/v1beta4/instances#connectorenforcement). + CONNECTOR_ENFORCEMENT must be one of: + + CONNECTOR_ENFORCEMENT_UNSPECIFIED + The requirement for Cloud SQL connectors is unknown. + NOT_REQUIRED + Does not require Cloud SQL connectors. + REQUIRED + Requires all connections to use Cloud SQL connectors, including the + Cloud SQL Auth Proxy and Cloud SQL Java, Python, and Go connectors. + Note: This disables all existing authorized networks. + --cpu=CPU Whole number value indicating how many cores are desired in the machine. Both --cpu and --memory must be specified if a custom machine diff --git a/gcloud/alpha/sql/instances/patch b/gcloud/alpha/sql/instances/patch index 5edfb143e..3e2ef353f 100644 --- a/gcloud/alpha/sql/instances/patch +++ b/gcloud/alpha/sql/instances/patch @@ -11,8 +11,8 @@ SYNOPSIS [--audit-retention-interval=AUDIT_RETENTION_INTERVAL] [--audit-upload-interval=AUDIT_UPLOAD_INTERVAL] [--availability-type=AVAILABILITY_TYPE] [--clear-password-policy] - [--cpu=CPU] [--database-version=DATABASE_VERSION] - [--[no-]deletion-protection] + [--connector-enforcement=CONNECTOR_ENFORCEMENT] [--cpu=CPU] + [--database-version=DATABASE_VERSION] [--[no-]deletion-protection] [--deny-maintenance-period-end-date=DENY_MAINTENANCE_PERIOD_END_DATE] [--deny-maintenance-period-start-date=DENY_MAINTENANCE_PERIOD_START_DATE] [--deny-maintenance-period-time=DENY_MAINTENANCE_PERIOD_TIME] [--diff] @@ -116,6 +116,21 @@ FLAGS Clear the existing password policy. This flag is only available for Postgres. + --connector-enforcement=CONNECTOR_ENFORCEMENT + Cloud SQL Connector enforcement mode. It determines how Cloud SQL + Connectors are used in the connection. See the list of modes here + (https://cloud.google.com/sql/docs/mysql/admin-api/rest/v1beta4/instances#connectorenforcement). + CONNECTOR_ENFORCEMENT must be one of: + + CONNECTOR_ENFORCEMENT_UNSPECIFIED + The requirement for Cloud SQL connectors is unknown. + NOT_REQUIRED + Does not require Cloud SQL connectors. + REQUIRED + Requires all connections to use Cloud SQL connectors, including the + Cloud SQL Auth Proxy and Cloud SQL Java, Python, and Go connectors. + Note: This disables all existing authorized networks. + --cpu=CPU Whole number value indicating how many cores are desired in the machine. Both --cpu and --memory must be specified if a custom machine diff --git a/gcloud/alpha/storage/buckets/update b/gcloud/alpha/storage/buckets/update index 977327d41..9387be0c7 100644 --- a/gcloud/alpha/storage/buckets/update +++ b/gcloud/alpha/storage/buckets/update @@ -2,8 +2,10 @@ NAME gcloud alpha storage buckets update - update bucket settings SYNOPSIS - gcloud alpha storage buckets update URL [URL ...] [--continue-on-error, -c] - [--[no-]default-event-based-hold] + gcloud alpha storage buckets update URL [URL ...] + [--canned-acl=PREDEFINED_ACL, + --predefined-acl=PREDEFINED_ACL, -a PREDEFINED_ACL] + [--continue-on-error, -c] [--[no-]default-event-based-hold] [--default-storage-class=DEFAULT_STORAGE_CLASS] [--[no-]lock-retention-period] [--[no-]requester-pays] [--[no-]uniform-bucket-level-access] [--[no-]versioning] @@ -43,6 +45,11 @@ POSITIONAL ARGUMENTS URLs of the buckets to update. FLAGS + --canned-acl=PREDEFINED_ACL, --predefined-acl=PREDEFINED_ACL, -a PREDEFINED_ACL + Applies predefined, or "canned," ACLs to a resource. See docs for a + list of predefined ACL constants: + https://cloud.google.com/storage/docs/access-control/lists#predefined-acl + --continue-on-error, -c If any operations are unsuccessful, the command will exit with a non-zero exit status after completing the remaining operations. This diff --git a/gcloud/alpha/storage/cp b/gcloud/alpha/storage/cp index 5b683c31e..913d6da21 100644 --- a/gcloud/alpha/storage/cp +++ b/gcloud/alpha/storage/cp @@ -12,7 +12,7 @@ SYNOPSIS [--storage-class=STORAGE_CLASS, -s STORAGE_CLASS] [--canned-acl=PREDEFINED_ACL, --predefined-acl=PREDEFINED_ACL, -a PREDEFINED_ACL - | --preserve-acl, -p] + | --[no-]preserve-acl, -p] [--gzip-in-flight=[FILE_EXTENSIONS,...], -j [FILE_EXTENSIONS,...] | --gzip-in-flight-all, -J | --gzip-local=[FILE_EXTENSIONS,...], -z [FILE_EXTENSIONS,...] @@ -174,16 +174,18 @@ FLAGS At most one of these can be specified: --canned-acl=PREDEFINED_ACL, --predefined-acl=PREDEFINED_ACL, -a PREDEFINED_ACL - Applies predefined, or "canned," ACLs to a copied object. See docs - for a list of predefined ACL constants: + Applies predefined, or "canned," ACLs to a resource. See docs for a + list of predefined ACL constants: https://cloud.google.com/storage/docs/access-control/lists#predefined-acl - --preserve-acl, -p + --[no-]preserve-acl, -p Preserves ACLs when copying in the cloud. This option is Google Cloud Storage-only, and you need OWNER access to all copied objects. If all objects in the destination bucket should have the same ACL, you can also set a default object ACL on that bucket instead of using this - flag. + flag. Preserving ACLs is the default behavior for updating existing + objects. Use --preserve-acl to enable and --no-preserve-acl to + disable. At most one of these can be specified: diff --git a/gcloud/alpha/storage/mv b/gcloud/alpha/storage/mv index a5a92ca96..3ea3e4a80 100644 --- a/gcloud/alpha/storage/mv +++ b/gcloud/alpha/storage/mv @@ -11,7 +11,7 @@ SYNOPSIS [--storage-class=STORAGE_CLASS, -s STORAGE_CLASS] [--canned-acl=PREDEFINED_ACL, --predefined-acl=PREDEFINED_ACL, -a PREDEFINED_ACL - | --preserve-acl, -p] + | --[no-]preserve-acl, -p] [--gzip-in-flight=[FILE_EXTENSIONS,...], -j [FILE_EXTENSIONS,...] | --gzip-in-flight-all, -J | --gzip-local=[FILE_EXTENSIONS,...], -z [FILE_EXTENSIONS,...] @@ -181,16 +181,18 @@ FLAGS At most one of these can be specified: --canned-acl=PREDEFINED_ACL, --predefined-acl=PREDEFINED_ACL, -a PREDEFINED_ACL - Applies predefined, or "canned," ACLs to a copied object. See docs - for a list of predefined ACL constants: + Applies predefined, or "canned," ACLs to a resource. See docs for a + list of predefined ACL constants: https://cloud.google.com/storage/docs/access-control/lists#predefined-acl - --preserve-acl, -p + --[no-]preserve-acl, -p Preserves ACLs when copying in the cloud. This option is Google Cloud Storage-only, and you need OWNER access to all copied objects. If all objects in the destination bucket should have the same ACL, you can also set a default object ACL on that bucket instead of using this - flag. + flag. Preserving ACLs is the default behavior for updating existing + objects. Use --preserve-acl to enable and --no-preserve-acl to + disable. At most one of these can be specified: diff --git a/gcloud/alpha/storage/objects/update b/gcloud/alpha/storage/objects/update index 64193e56e..0d1ce3ef3 100644 --- a/gcloud/alpha/storage/objects/update +++ b/gcloud/alpha/storage/objects/update @@ -3,10 +3,12 @@ NAME SYNOPSIS gcloud alpha storage objects update [URL ...] [--continue-on-error, -c] - [--[no-]event-based-hold] [--preserve-acl, -p] - [--read-paths-from-stdin, -I] [--recursive, -R, -r] - [--storage-class=STORAGE_CLASS, -s STORAGE_CLASS] + [--[no-]event-based-hold] [--read-paths-from-stdin, -I] + [--recursive, -R, -r] [--storage-class=STORAGE_CLASS, -s STORAGE_CLASS] [--[no-]temporary-hold] + [--canned-acl=PREDEFINED_ACL, + --predefined-acl=PREDEFINED_ACL, -a PREDEFINED_ACL + | --[no-]preserve-acl, -p] [--clear-encryption-key --decryption-keys=[DECRYPTION_KEY,...] --encryption-key=ENCRYPTION_KEY] [--cache-control=CACHE_CONTROL --clear-cache-control @@ -58,13 +60,6 @@ FLAGS Enables or disables an event-based hold on objects. Use --event-based-hold to enable and --no-event-based-hold to disable. - --preserve-acl, -p - Preserves ACLs when copying in the cloud. This feature is supported for - only Google Cloud Storage and requires OWNER access to all copied - objects. To use the destination bucket's default policy (necessary for - uniform bucket-level access), use --no-preserve-acl. Enabled by - default, use -p to disable. - --read-paths-from-stdin, -I Read the list of objects to update from stdin. No need to enter a source argument if this flag is present. Example: "storage objects @@ -82,6 +77,22 @@ FLAGS Enables or disables a temporary hold on objects. Use --temporary-hold to enable and --no-temporary-hold to disable. + At most one of these can be specified: + + --canned-acl=PREDEFINED_ACL, --predefined-acl=PREDEFINED_ACL, -a PREDEFINED_ACL + Applies predefined, or "canned," ACLs to a resource. See docs for a + list of predefined ACL constants: + https://cloud.google.com/storage/docs/access-control/lists#predefined-acl + + --[no-]preserve-acl, -p + Preserves ACLs when copying in the cloud. This option is Google Cloud + Storage-only, and you need OWNER access to all copied objects. If all + objects in the destination bucket should have the same ACL, you can + also set a default object ACL on that bucket instead of using this + flag. Preserving ACLs is the default behavior for updating existing + objects. Use --preserve-acl to enable and --no-preserve-acl to + disable. + ENCRYPTION FLAGS --clear-encryption-key Clears the encryption key associated with an object. Using this flag diff --git a/gcloud/alpha/tasks/queues/create b/gcloud/alpha/tasks/queues/create index abea032c6..e501fc303 100644 --- a/gcloud/alpha/tasks/queues/create +++ b/gcloud/alpha/tasks/queues/create @@ -2,13 +2,17 @@ NAME gcloud alpha tasks queues create - create a Cloud Tasks queue SYNOPSIS - gcloud alpha tasks queues create QUEUE [--location=LOCATION] + gcloud alpha tasks queues create QUEUE + [--http-header-override=HEADER_FIELD: HEADER_VALUE] + [--http-method-override=HTTP_METHOD_OVERRIDE] + [--http-uri-override=KEY:VALUE,[KEY:VALUE,...]] [--location=LOCATION] [--max-attempts=MAX_ATTEMPTS] [--max-backoff=MAX_BACKOFF] [--max-concurrent-tasks=MAX_CONCURRENT_TASKS] [--max-doublings=MAX_DOUBLINGS] [--max-retry-duration=MAX_RETRY_DURATION] [--max-tasks-dispatched-per-second=MAX_TASKS_DISPATCHED_PER_SECOND] [--min-backoff=MIN_BACKOFF] [--routing-override=KEY:VALUE,[...]] + [[--http-oauth-service-account-email-override=HTTP_OAUTH_SERVICE_ACCOUNT_EMAIL_OVERRIDE : --http-oauth-token-scope-override=HTTP_OAUTH_TOKEN_SCOPE_OVERRIDE] | [--http-oidc-service-account-email-override=HTTP_OIDC_SERVICE_ACCOUNT_EMAIL_OVERRIDE : --http-oidc-token-audience-override=HTTP_OIDC_TOKEN_AUDIENCE_OVERRIDE]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -28,6 +32,26 @@ POSITIONAL ARGUMENTS The queue to create. FLAGS + --http-header-override=HEADER_FIELD: HEADER_VALUE + If provided, the specified HTTP headers overrides the existing headers + for all tasks in the queue. If a task has a header with the same Key as + a queue-level header override, then the value of the task header will + be overriden with the value of the queue-level header. Otherwise, the + queue-level header will be added to the task headers. Header values can + contain commas. This flag can be repeated. Repeated header fields will + have their values overridden. + + --http-method-override=HTTP_METHOD_OVERRIDE + If provided, the specified HTTP method type override is used for all + tasks in the queue, no matter what is set at the task-level. + + --http-uri-override=KEY:VALUE,[KEY:VALUE,...] + If provided, the specified HTTP target URI override is used for all + tasks in the queue, no matter what is set at the task-level. + + KEY must be at least one of: [scheme, host, port, path, query]. Any + missing keys will use the default. + --location=LOCATION The location where we want to manage the queue or task. If not specified, uses the location of the current project's App Engine app if @@ -76,12 +100,53 @@ FLAGS fails. Must be a string that ends in 's', such as "5s". --routing-override=KEY:VALUE,[...] - If provided, the specified route is used for all tasks in the queue, no - matter what is set is at the task-level. + If provided, the specified App Engine route is used for all tasks in + the queue, no matter what is set is at the task-level. KEY must be at least one of: [service, version, instance]. Any missing keys will use the default. + If specified, all Authorization headers in the HttpRequest.headers field + will be overridden for any tasks executed on this queue. + + At most one of these can be specified: + + OAuth2 + + --http-oauth-service-account-email-override=HTTP_OAUTH_SERVICE_ACCOUNT_EMAIL_OVERRIDE + The service account email to be used for generating an OAuth2 + access token to be included in the request sent to the target when + executing the task. The service account must be within the same + project as the queue. The caller must have + 'iam.serviceAccounts.actAs' permission for the service account. + + This flag argument must be specified if any of the other arguments + in this group are specified. + + --http-oauth-token-scope-override=HTTP_OAUTH_TOKEN_SCOPE_OVERRIDE + The scope to be used when generating an OAuth2 access token to be + included in the request sent to the target when executing the task. + If not specified, 'https://www.googleapis.com/auth/cloud-platform' + will be used. + + OpenId Connect + + --http-oidc-service-account-email-override=HTTP_OIDC_SERVICE_ACCOUNT_EMAIL_OVERRIDE + The service account email to be used for generating an OpenID + Connect token to be included in the request sent to the target when + executing the task. The service account must be within the same + project as the queue. The caller must have + 'iam.serviceAccounts.actAs' permission for the service account. + + This flag argument must be specified if any of the other arguments + in this group are specified. + + --http-oidc-token-audience-override=HTTP_OIDC_TOKEN_AUDIENCE_OVERRIDE + The audience to be used when generating an OpenID Connect token to + be included in the request sent to the target when executing the + task. If not specified, the URI specified in the target will be + used. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/tasks/queues/create-app-engine-queue b/gcloud/alpha/tasks/queues/create-app-engine-queue index 4e6ffe047..6fc28a5c3 100644 --- a/gcloud/alpha/tasks/queues/create-app-engine-queue +++ b/gcloud/alpha/tasks/queues/create-app-engine-queue @@ -87,8 +87,8 @@ FLAGS fails. Must be a string that ends in 's', such as "5s". --routing-override=KEY:VALUE,[...] - If provided, the specified route is used for all tasks in the queue, no - matter what is set is at the task-level. + If provided, the specified App Engine route is used for all tasks in + the queue, no matter what is set is at the task-level. KEY must be at least one of: [service, version, instance]. Any missing keys will use the default. diff --git a/gcloud/alpha/tasks/queues/update b/gcloud/alpha/tasks/queues/update index 4f42adfcb..64fd8fed6 100644 --- a/gcloud/alpha/tasks/queues/update +++ b/gcloud/alpha/tasks/queues/update @@ -122,8 +122,8 @@ FLAGS Clear the field corresponding to --routing-override. --routing-override=KEY:VALUE,[...] - If provided, the specified route is used for all tasks in the queue, - no matter what is set is at the task-level. + If provided, the specified App Engine route is used for all tasks in + the queue, no matter what is set is at the task-level. KEY must be at least one of: [service, version, instance]. Any missing keys will use the default. diff --git a/gcloud/alpha/tasks/queues/update-app-engine-queue b/gcloud/alpha/tasks/queues/update-app-engine-queue index 686a40d48..c62d6f15d 100644 --- a/gcloud/alpha/tasks/queues/update-app-engine-queue +++ b/gcloud/alpha/tasks/queues/update-app-engine-queue @@ -131,8 +131,8 @@ FLAGS Clear the field corresponding to --routing-override. --routing-override=KEY:VALUE,[...] - If provided, the specified route is used for all tasks in the queue, - no matter what is set is at the task-level. + If provided, the specified App Engine route is used for all tasks in + the queue, no matter what is set is at the task-level. KEY must be at least one of: [service, version, instance]. Any missing keys will use the default. diff --git a/gcloud/asset/saved-queries/create b/gcloud/asset/saved-queries/create index 9f3837555..2d8bafa16 100644 --- a/gcloud/asset/saved-queries/create +++ b/gcloud/asset/saved-queries/create @@ -6,8 +6,8 @@ SYNOPSIS gcloud asset saved-queries create QUERY_ID --query-file-path=QUERY_FILE_PATH (--folder=FOLDER_ID | --organization=ORGANIZATION_ID - | --project=PROJECT_ID) [--description=DESCRIPTION] [--labels=LABELS] - [GCLOUD_WIDE_FLAG ...] + | --project=PROJECT_ID) [--description=DESCRIPTION] + [--labels=[KEY=VALUE,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION Create a new Cloud Asset Inventory saved query. @@ -56,10 +56,13 @@ OPTIONAL FLAGS --description=DESCRIPTION A string describing the query. - --labels=LABELS - A key/value pair to attach to the query, which can be used in search - and list operations. You can include up to 10 labels for each saved - query. + --labels=[KEY=VALUE,...] + List of label KEY=VALUE pairs to add. + + Keys must start with a lowercase character and contain only hyphens + (-), underscores (_), lowercase characters, and numbers. Values must + contain only hyphens (-), underscores (_), lowercase characters, and + numbers. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/beta/active-directory/domains/extend-schema b/gcloud/beta/active-directory/domains/extend-schema index fc7f729b1..6fa128ebe 100644 --- a/gcloud/beta/active-directory/domains/extend-schema +++ b/gcloud/beta/active-directory/domains/extend-schema @@ -19,8 +19,8 @@ DESCRIPTION EXAMPLES The following command initiates a schema extension for the domain - my-domain.com in project my-project, with description "Test Description", - using the LDIF file "demo.ldif" + my-domain.com in project my-project, with description Test Description, + using the LDIF file demo.ldif $ gcloud beta active-directory domains extend-schema my-domain.com \ --description="Test Description" --ldif-file=demo.ldf \ @@ -70,8 +70,10 @@ API REFERENCE https://cloud.google.com/managed-microsoft-ad/ NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud active-directory domains extend-schema $ gcloud alpha active-directory domains extend-schema diff --git a/gcloud/beta/alloydb/clusters/help b/gcloud/beta/alloydb/clusters/help index 41c6b22c8..bd18d378e 100644 --- a/gcloud/beta/alloydb/clusters/help +++ b/gcloud/beta/alloydb/clusters/help @@ -30,8 +30,7 @@ COMMANDS (BETA) Lists AlloyDB clusters in a given project and region. restore - (BETA) Restores an AlloyDB cluster from a given backup or a source - cluster at a specific point in time. + (BETA) Restores an AlloyDB cluster from a given backup. update (BETA) Updates an AlloyDB cluster within a given project and region. diff --git a/gcloud/beta/alloydb/clusters/restore b/gcloud/beta/alloydb/clusters/restore index fbd4b6f21..95391959b 100644 --- a/gcloud/beta/alloydb/clusters/restore +++ b/gcloud/beta/alloydb/clusters/restore @@ -1,19 +1,16 @@ NAME gcloud beta alloydb clusters restore - restores an AlloyDB cluster from a - given backup or a source cluster at a specific point in time + given backup SYNOPSIS - gcloud beta alloydb clusters restore CLUSTER --region=REGION [--async] - [--network=NETWORK] - [--backup=BACKUP - : --point-in-time=POINT_IN_TIME --source-cluster=SOURCE_CLUSTER] + gcloud beta alloydb clusters restore CLUSTER --region=REGION + --backup=BACKUP [--async] [--network=NETWORK] [--kms-key=KMS_KEY : --kms-keyring=KMS_KEYRING --kms-location=KMS_LOCATION --kms-project=KMS_PROJECT] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) Restores an AlloyDB cluster from a given backup or a source cluster - at a specific point in time. + (BETA) Restores an AlloyDB cluster from a given backup. EXAMPLES To restore a cluster from a backup, run: @@ -21,12 +18,6 @@ EXAMPLES $ gcloud beta alloydb clusters restore my-cluster \ --region=us-central1 --backup=my-backup - To restore a cluster back to a point in time, run: - - $ gcloud beta alloydb clusters restore my-cluster \ - --region=us-central1 --source-cluster=my-source-cluster \ - --point-in-time=2003-09-25T10:49:41.519Z - POSITIONAL ARGUMENTS CLUSTER AlloyDB cluster ID @@ -37,6 +28,15 @@ REQUIRED FLAGS regions at https://cloud.google.com/sql/docs/instance-locations. OPTIONAL FLAGS + RestoreCluster source types. + + At most one of these can be specified: + + Restore a cluster using a specific backup as the source. + + --backup=BACKUP + AlloyDB backup ID + --async Return immediately, without waiting for the operation in progress to complete. @@ -48,30 +48,6 @@ OPTIONAL FLAGS network, 'testsharednetwork', this would be of the form:--network=projects/testproject/global/networks/testsharednetwork - RestoreCluster source types. - - At most one of these can be specified: - - Restore a cluster using a specific backup as the source. - - --backup=BACKUP - AlloyDB backup ID - - Restore a cluster from a source cluster at a given point in time. - - --point-in-time=POINT_IN_TIME - Point in time to restore to, in RFC 3339 format. For example, - 2012-11-15T16:19:00.094Z. - - This flag argument must be specified if any of the other arguments - in this group are specified. - - --source-cluster=SOURCE_CLUSTER - Source cluster name. - - This flag argument must be specified if any of the other arguments - in this group are specified. - Key resource - The Cloud KMS (Key Management Service) cryptokey that will be used to protect the cluster. The 'AlloyDB Service Agent' service account must hold permission 'Cloud KMS CryptoKey Encrypter/Decrypter'. diff --git a/gcloud/beta/app/gen-config b/gcloud/beta/app/gen-config index 4b376c62b..0fc3dc94b 100644 --- a/gcloud/beta/app/gen-config +++ b/gcloud/beta/app/gen-config @@ -10,9 +10,9 @@ DESCRIPTION (BETA) (DEPRECATED) This command is deprecated and will soon be removed. As an alternative, create an app.yaml file yourself using the directions at - https://cloud.google.com/appengine/docs/flexible/python/configuring-your-app-with-app-yaml - (App Engine flexible environment) or - https://cloud.google.com/appengine/docs/standard/python/config/appref (App + https://cloud.google.com/appengine/docs/flexible/reference/app-yaml (App + Engine flexible environment) or + https://cloud.google.com/appengine/docs/standard/reference/app-yaml (App Engine standard environment) under the tab for your language. To create a custom runtime, please follow the instructions at diff --git a/gcloud/beta/asset/saved-queries/create b/gcloud/beta/asset/saved-queries/create index c49a766b3..77d157de1 100644 --- a/gcloud/beta/asset/saved-queries/create +++ b/gcloud/beta/asset/saved-queries/create @@ -6,8 +6,8 @@ SYNOPSIS gcloud beta asset saved-queries create QUERY_ID --query-file-path=QUERY_FILE_PATH (--folder=FOLDER_ID | --organization=ORGANIZATION_ID - | --project=PROJECT_ID) [--description=DESCRIPTION] [--labels=LABELS] - [GCLOUD_WIDE_FLAG ...] + | --project=PROJECT_ID) [--description=DESCRIPTION] + [--labels=[KEY=VALUE,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) Create a new Cloud Asset Inventory saved query. @@ -56,10 +56,13 @@ OPTIONAL FLAGS --description=DESCRIPTION A string describing the query. - --labels=LABELS - A key/value pair to attach to the query, which can be used in search - and list operations. You can include up to 10 labels for each saved - query. + --labels=[KEY=VALUE,...] + List of label KEY=VALUE pairs to add. + + Keys must start with a lowercase character and contain only hyphens + (-), underscores (_), lowercase characters, and numbers. Values must + contain only hyphens (-), underscores (_), lowercase characters, and + numbers. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/beta/certificate-manager/help b/gcloud/beta/certificate-manager/help index 7d9032fb4..3bc345e2e 100644 --- a/gcloud/beta/certificate-manager/help +++ b/gcloud/beta/certificate-manager/help @@ -22,6 +22,9 @@ GROUPS dns-authorizations (BETA) Manage Certificate Manager DNS authorizations. + issuance-configs + (BETA) Manage Certificate Manager Certificate Issuance Configs. + maps (BETA) Manage Certificate Manager certificate maps. diff --git a/gcloud/beta/certificate-manager/issuance-configs/create b/gcloud/beta/certificate-manager/issuance-configs/create new file mode 100644 index 000000000..0fdf08e18 --- /dev/null +++ b/gcloud/beta/certificate-manager/issuance-configs/create @@ -0,0 +1,106 @@ +NAME + gcloud beta certificate-manager issuance-configs create - create a + Certificate Issuance Config + +SYNOPSIS + gcloud beta certificate-manager issuance-configs create + (CERTIFICATE_ISSUANCE_CONFIG : --location=LOCATION) --ca-pool=CA_POOL + [--async] [--description=DESCRIPTION] + [--key-algorithm=KEY_ALGORITHM; default="rsa-2048"] + [--labels=[KEY=VALUE,...]] [--lifetime=LIFETIME; default="P30D"] + [--rotation-window-percentage=ROTATION_WINDOW_PERCENTAGE; default=66] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Create a new Certificate Issuance Config. + +EXAMPLES + To create a Certificate Issuance Config called my-cic, run: + + $ gcloud beta certificate-manager issuance-configs create my-cic \ + --ca-pool=my-ca-pool + +POSITIONAL ARGUMENTS + CertificateIssuanceConfig resource - Name of the Certificate Issuance + Config to create. The arguments in this group can be used to specify the + attributes of this resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. To set the project + attribute: + ◆ provide the argument certificate_issuance_config on the command line + with a fully specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + CERTIFICATE_ISSUANCE_CONFIG + ID of the certificateIssuanceConfig or fully qualified identifier for + the certificateIssuanceConfig. To set the certificate_issuance_config + attribute: + ▸ provide the argument certificate_issuance_config on the command + line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Certificate Manager location. To set the location attribute: + ▸ provide the argument certificate_issuance_config on the command + line with a fully specified name; + ▸ provide the argument --location on the command line; + ▸ default value of location is [global]. + +REQUIRED FLAGS + --ca-pool=CA_POOL + CA Pool used for issuing certificates. For example: + + $ gcloud beta certificate-manager issuance-configs create \ + --ca-pool=projects/test-project/locations/us-west1/caPools/\ + my-ca-pool + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --description=DESCRIPTION + Human-readable description of the resource. + + --key-algorithm=KEY_ALGORITHM; default="rsa-2048" + Key algorithm to use when generating the private key. Defaults to + rsa-2048. KEY_ALGORITHM must be one of: ecdsa-p256, rsa-2048. + + --labels=[KEY=VALUE,...] + List of label KEY=VALUE pairs to add. + + Keys must start with a lowercase character and contain only hyphens + (-), underscores (_), lowercase characters, and numbers. Values must + contain only hyphens (-), underscores (_), lowercase characters, and + numbers. + + --lifetime=LIFETIME; default="P30D" + Lifetime of issued certificates in ISO 8601 format. Use gcloud topic + datetimes for details. Defaults to P30D. + + --rotation-window-percentage=ROTATION_WINDOW_PERCENTAGE; default=66 + How long along the lifetime of the ceritificate to renew, expressed as + a percentage. Defaults to 66. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the certificatemanager/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/certificate-manager + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha certificate-manager issuance-configs create + diff --git a/gcloud/beta/certificate-manager/issuance-configs/delete b/gcloud/beta/certificate-manager/issuance-configs/delete new file mode 100644 index 000000000..de0d87943 --- /dev/null +++ b/gcloud/beta/certificate-manager/issuance-configs/delete @@ -0,0 +1,70 @@ +NAME + gcloud beta certificate-manager issuance-configs delete - delete a + Certificate Issuance Config + +SYNOPSIS + gcloud beta certificate-manager issuance-configs delete + (CERTIFICATE_ISSUANCE_CONFIG : --location=LOCATION) [--async] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Delete a Certificate Issuance Config. + +EXAMPLES + To delete a Certificate Issuance Config called my-cic, run: + + $ gcloud beta certificate-manager issuance-configs delete my-cic + +POSITIONAL ARGUMENTS + CertificateIssuanceConfig resource - Name of the CertificateIssuanceConfig + to delete. The arguments in this group can be used to specify the + attributes of this resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. To set the project + attribute: + ◆ provide the argument certificate_issuance_config on the command line + with a fully specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + CERTIFICATE_ISSUANCE_CONFIG + ID of the certificateIssuanceConfig or fully qualified identifier for + the certificateIssuanceConfig. To set the certificate_issuance_config + attribute: + ▸ provide the argument certificate_issuance_config on the command + line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Certificate Manager location. To set the location attribute: + ▸ provide the argument certificate_issuance_config on the command + line with a fully specified name; + ▸ provide the argument --location on the command line; + ▸ default value of location is [global]. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the certificatemanager/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/certificate-manager + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha certificate-manager issuance-configs delete + diff --git a/gcloud/beta/certificate-manager/issuance-configs/describe b/gcloud/beta/certificate-manager/issuance-configs/describe new file mode 100644 index 000000000..43bc329da --- /dev/null +++ b/gcloud/beta/certificate-manager/issuance-configs/describe @@ -0,0 +1,65 @@ +NAME + gcloud beta certificate-manager issuance-configs describe - show details + about a Certificate Issuance Config + +SYNOPSIS + gcloud beta certificate-manager issuance-configs describe + (CERTIFICATE_ISSUANCE_CONFIG : --location=LOCATION) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Show details about a Certificate Issuance Config. + +EXAMPLES + To show details about an existing Certificate Issuance Config my-cic, run: + + $ gcloud beta certificate-manager issuance-configs describe my-cic + +POSITIONAL ARGUMENTS + CertificateIssuanceConfig resource - CertificateIssuanceConfig you want to + describe. The arguments in this group can be used to specify the + attributes of this resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. To set the project + attribute: + ◆ provide the argument certificate_issuance_config on the command line + with a fully specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + CERTIFICATE_ISSUANCE_CONFIG + ID of the certificateIssuanceConfig or fully qualified identifier for + the certificateIssuanceConfig. To set the certificate_issuance_config + attribute: + ▸ provide the argument certificate_issuance_config on the command + line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Certificate Manager location. To set the location attribute: + ▸ provide the argument certificate_issuance_config on the command + line with a fully specified name; + ▸ provide the argument --location on the command line; + ▸ default value of location is [global]. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the certificatemanager/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/certificate-manager + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha certificate-manager issuance-configs describe + diff --git a/gcloud/beta/certificate-manager/issuance-configs/help b/gcloud/beta/certificate-manager/issuance-configs/help new file mode 100644 index 000000000..c20f1a3d4 --- /dev/null +++ b/gcloud/beta/certificate-manager/issuance-configs/help @@ -0,0 +1,37 @@ +NAME + gcloud beta certificate-manager issuance-configs - manage Certificate + Manager Certificate Issuance Configs + +SYNOPSIS + gcloud beta certificate-manager issuance-configs COMMAND + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Commands for managing Certificate Issuance Configs. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + create + (BETA) Create a Certificate Issuance Config. + + delete + (BETA) Delete a Certificate Issuance Config. + + describe + (BETA) Show details about a Certificate Issuance Config. + + list + (BETA) List all Certificate Issuance Configs in a project. + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha certificate-manager issuance-configs + diff --git a/gcloud/beta/certificate-manager/issuance-configs/list b/gcloud/beta/certificate-manager/issuance-configs/list new file mode 100644 index 000000000..9df62c456 --- /dev/null +++ b/gcloud/beta/certificate-manager/issuance-configs/list @@ -0,0 +1,84 @@ +NAME + gcloud beta certificate-manager issuance-configs list - list all + Certificate Issuance Configs in a project + +SYNOPSIS + gcloud beta certificate-manager issuance-configs list [--location=LOCATION] + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) List existing Certificate Issuance Configs. + +EXAMPLES + To list existing Certificate Issuance Configs, run: + + $ gcloud beta certificate-manager issuance-configs list + +FLAGS + Location resource - Location (defaults to global) of the resources. This + represents a Cloud resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. To set the project + attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ default value of location is [global] with a fully specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. To + set the location attribute: + ▸ provide the argument --location on the command line; + ▸ default value of location is [global]. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the certificatemanager/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/certificate-manager + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha certificate-manager issuance-configs list + diff --git a/gcloud/beta/composer/environments/create b/gcloud/beta/composer/environments/create index a97b4dfa5..2458c7f1a 100644 --- a/gcloud/beta/composer/environments/create +++ b/gcloud/beta/composer/environments/create @@ -116,7 +116,7 @@ FLAGS provide to the Airflow scheduler, worker, and webserver processes. NAME may contain upper and lowercase letters, digits, and underscores, but they may not begin with a digit. To include commas as part of a VALUE, - see gcloud topics escaping for information about overriding the + see gcloud topic escaping for information about overriding the delimiter. --environment-size=ENVIRONMENT_SIZE diff --git a/gcloud/beta/compute/addresses/create b/gcloud/beta/compute/addresses/create index 5096da6ee..98358c9be 100644 --- a/gcloud/beta/compute/addresses/create +++ b/gcloud/beta/compute/addresses/create @@ -89,11 +89,13 @@ FLAGS addresses can only use PREMIUM. --prefix-length=PREFIX_LENGTH - The prefix length of the IP range. It must be a value between 8 and 30 - inclusive. If not present, it means the address field is a single IP - address. + The prefix length of the IP range. If the address is an IPv4 address, + it must be a value between 8 and 30 inclusive. If the address is an + IPv6 address, the only allowed value is 96. If not present, it means + the address field is a single IP address. - This field is not applicable to external addresses. + This field is not applicable to external IPv4 addresses or global IPv6 + addresses. --purpose=PURPOSE The purpose of the address resource. This field is not applicable to diff --git a/gcloud/beta/compute/firewall-policies/rules/create b/gcloud/beta/compute/firewall-policies/rules/create index c1aa3ded7..d7b3dd0ad 100644 --- a/gcloud/beta/compute/firewall-policies/rules/create +++ b/gcloud/beta/compute/firewall-policies/rules/create @@ -5,10 +5,16 @@ NAME SYNOPSIS gcloud beta compute firewall-policies rules create PRIORITY --action=ACTION --firewall-policy=FIREWALL_POLICY [--description=DESCRIPTION] - [--dest-ip-ranges=[DEST_IP_RANGE,...]] [--direction=DIRECTION] - [--[no-]disabled] [--[no-]enable-logging] + [--dest-address-groups=[DEST_ADDRESS_GROUPS,...]] + [--dest-fqdns=[DEST_FQDNS,...]] [--dest-ip-ranges=[DEST_IP_RANGE,...]] + [--dest-region-codes=[DEST_REGION_CODES,...]] + [--dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...]] + [--direction=DIRECTION] [--[no-]disabled] [--[no-]enable-logging] [--layer4-configs=[LAYER4_CONFIG,...]] [--organization=ORGANIZATION] - [--src-ip-ranges=[SRC_IP_RANGE,...]] + [--src-address-groups=[SOURCE_ADDRESS_GROUPS,...]] + [--src-fqdns=[SOURCE_FQDNS,...]] [--src-ip-ranges=[SRC_IP_RANGE,...]] + [--src-region-codes=[SOURCE_REGION_CODES,...]] + [--src-threat-intelligence=[SOURCE_THREAT_INTELLIGENCE_LISTS,...]] [--target-resources=[TARGET_RESOURCES,...]] [--target-service-accounts=[TARGET_SERVICE_ACCOUNTS,...]] [GCLOUD_WIDE_FLAG ...] @@ -42,10 +48,26 @@ OPTIONAL FLAGS --description=DESCRIPTION An optional, textual description for the rule. + --dest-address-groups=[DEST_ADDRESS_GROUPS,...] + Dest address groups to match for this rule. Can only be specified if + DIRECTION is egress. + + --dest-fqdns=[DEST_FQDNS,...] + Dest FQDNs to match for this rule. Can only be specified if DIRECTION + is egress. + --dest-ip-ranges=[DEST_IP_RANGE,...] Destination IP ranges to match for this rule. Can only be specified if DIRECTION is egress. + --dest-region-codes=[DEST_REGION_CODES,...] + Dest Region Code to match for this rule. Can only be specified if + DIRECTION is egress. + + --dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...] + Destination Threat Intelligence lists to match for this rule. Can only + be specified if DIRECTION is egress. + --direction=DIRECTION Direction of the traffic the rule is applied. The default is to apply on incoming traffic. DIRECTION must be one of: INGRESS, EGRESS. @@ -67,10 +89,26 @@ OPTIONAL FLAGS Organization which the organization firewall policy belongs to. Must be set if FIREWALL_POLICY is short name. + --src-address-groups=[SOURCE_ADDRESS_GROUPS,...] + Source address groups to match for this rule. Can only be specified if + DIRECTION is ingress. + + --src-fqdns=[SOURCE_FQDNS,...] + Source FQDNs to match for this rule. Can only be specified if DIRECTION + is ingress. + --src-ip-ranges=[SRC_IP_RANGE,...] Source IP ranges to match for this rule. Can only be specified if DIRECTION is ingress. + --src-region-codes=[SOURCE_REGION_CODES,...] + Source Region Code to match for this rule. Can only be specified if + DIRECTION is ingress. + + --src-threat-intelligence=[SOURCE_THREAT_INTELLIGENCE_LISTS,...] + Source Threat Intelligence lists to match for this rule. Can only be + specified if DIRECTION is ingress. + --target-resources=[TARGET_RESOURCES,...] List of URLs of target resources to which the rule is applied. diff --git a/gcloud/beta/compute/firewall-policies/rules/update b/gcloud/beta/compute/firewall-policies/rules/update index 8924e6a92..0c7806e9b 100644 --- a/gcloud/beta/compute/firewall-policies/rules/update +++ b/gcloud/beta/compute/firewall-policies/rules/update @@ -5,10 +5,18 @@ NAME SYNOPSIS gcloud beta compute firewall-policies rules update PRIORITY --firewall-policy=FIREWALL_POLICY [--action=ACTION] - [--description=DESCRIPTION] [--dest-ip-ranges=[DEST_IP_RANGE,...]] + [--description=DESCRIPTION] + [--dest-address-groups=[DEST_ADDRESS_GROUPS,...]] + [--dest-fqdns=[DEST_FQDNS,...]] [--dest-ip-ranges=[DEST_IP_RANGE,...]] + [--dest-region-codes=[DEST_REGION_CODES,...]] + [--dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...]] [--direction=DIRECTION] [--[no-]disabled] [--[no-]enable-logging] [--layer4-configs=[LAYER4_CONFIG,...]] [--new-priority=NEW_PRIORITY] - [--organization=ORGANIZATION] [--src-ip-ranges=[SRC_IP_RANGE,...]] + [--organization=ORGANIZATION] + [--src-address-groups=[SOURCE_ADDRESS_GROUPS,...]] + [--src-fqdns=[SOURCE_FQDNS,...]] [--src-ip-ranges=[SRC_IP_RANGE,...]] + [--src-region-codes=[SOURCE_REGION_CODES,...]] + [--src-threat-intelligence=[SOURCE_THREAT_INTELLIGENCE_LISTS,...]] [--target-resources=[TARGET_RESOURCES,...]] [--target-service-accounts=[TARGET_SERVICE_ACCOUNTS,...]] [GCLOUD_WIDE_FLAG ...] @@ -43,10 +51,26 @@ OPTIONAL FLAGS --description=DESCRIPTION An optional, textual description for the rule. + --dest-address-groups=[DEST_ADDRESS_GROUPS,...] + Dest address groups to match for this rule. Can only be specified if + DIRECTION is egress. + + --dest-fqdns=[DEST_FQDNS,...] + Dest FQDNs to match for this rule. Can only be specified if DIRECTION + is egress. + --dest-ip-ranges=[DEST_IP_RANGE,...] Destination IP ranges to match for this rule. Can only be specified if DIRECTION is egress. + --dest-region-codes=[DEST_REGION_CODES,...] + Dest Region Code to match for this rule. Can only be specified if + DIRECTION is egress. + + --dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...] + Destination Threat Intelligence lists to match for this rule. Can only + be specified if DIRECTION is egress. + --direction=DIRECTION Direction of the traffic the rule is applied. The default is to apply on incoming traffic. DIRECTION must be one of: INGRESS, EGRESS. @@ -71,10 +95,26 @@ OPTIONAL FLAGS Organization which the organization firewall policy belongs to. Must be set if FIREWALL_POLICY is short name. + --src-address-groups=[SOURCE_ADDRESS_GROUPS,...] + Source address groups to match for this rule. Can only be specified if + DIRECTION is ingress. + + --src-fqdns=[SOURCE_FQDNS,...] + Source FQDNs to match for this rule. Can only be specified if DIRECTION + is ingress. + --src-ip-ranges=[SRC_IP_RANGE,...] Source IP ranges to match for this rule. Can only be specified if DIRECTION is ingress. + --src-region-codes=[SOURCE_REGION_CODES,...] + Source Region Code to match for this rule. Can only be specified if + DIRECTION is ingress. + + --src-threat-intelligence=[SOURCE_THREAT_INTELLIGENCE_LISTS,...] + Source Threat Intelligence lists to match for this rule. Can only be + specified if DIRECTION is ingress. + --target-resources=[TARGET_RESOURCES,...] List of URLs of target resources to which the rule is applied. diff --git a/gcloud/beta/compute/network-firewall-policies/rules/create b/gcloud/beta/compute/network-firewall-policies/rules/create index e2ec5575f..893db9bb4 100644 --- a/gcloud/beta/compute/network-firewall-policies/rules/create +++ b/gcloud/beta/compute/network-firewall-policies/rules/create @@ -5,11 +5,18 @@ NAME SYNOPSIS gcloud beta compute network-firewall-policies rules create PRIORITY --action=ACTION --firewall-policy=FIREWALL_POLICY - [--description=DESCRIPTION] [--dest-ip-ranges=[DEST_IP_RANGE,...]] + [--description=DESCRIPTION] + [--dest-address-groups=[DEST_ADDRESS_GROUPS,...]] + [--dest-fqdns=[DEST_FQDNS,...]] [--dest-ip-ranges=[DEST_IP_RANGE,...]] + [--dest-region-codes=[DEST_REGION_CODES,...]] + [--dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...]] [--direction=DIRECTION] [--[no-]disabled] [--[no-]enable-logging] [--layer4-configs=[LAYER4_CONFIG,...]] - [--src-ip-ranges=[SRC_IP_RANGE,...]] + [--src-address-groups=[SOURCE_ADDRESS_GROUPS,...]] + [--src-fqdns=[SOURCE_FQDNS,...]] [--src-ip-ranges=[SRC_IP_RANGE,...]] + [--src-region-codes=[SOURCE_REGION_CODES,...]] [--src-secure-tags=[SOURCE_SECURE_TAGS,...]] + [--src-threat-intelligence=[SOURCE_THREAT_INTELLIGENCE_LISTS,...]] [--target-secure-tags=[TARGET_SECURE_TAGS,...]] [--target-service-accounts=[TARGET_SERVICE_ACCOUNTS,...]] [--firewall-policy-region=FIREWALL_POLICY_REGION @@ -51,10 +58,26 @@ OPTIONAL FLAGS --description=DESCRIPTION An optional, textual description for the rule. + --dest-address-groups=[DEST_ADDRESS_GROUPS,...] + Dest address groups to match for this rule. Can only be specified if + DIRECTION is engress. + + --dest-fqdns=[DEST_FQDNS,...] + Dest FQDNs to match for this rule. Can only be specified if DIRECTION + is egress. + --dest-ip-ranges=[DEST_IP_RANGE,...] Destination IP ranges to match for this rule. Can only be specified if DIRECTION is egress. + --dest-region-codes=[DEST_REGION_CODES,...] + Dest Region Code to match for this rule. Can only be specified if + DIRECTION is egress. + + --dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...] + Destination Threat Intelligence lists to match for this rule. Can only + be specified if DIRECTION is egress. + --direction=DIRECTION Direction of the traffic the rule is applied. The default is to apply on incoming traffic. DIRECTION must be one of: INGRESS, EGRESS. @@ -72,6 +95,14 @@ OPTIONAL FLAGS A list of destination protocols and ports to which the firewall rule will apply. + --src-address-groups=[SOURCE_ADDRESS_GROUPS,...] + Source address groups to match for this rule. Can only be specified if + DIRECTION is ingress. + + --src-fqdns=[SOURCE_FQDNS,...] + Source FQDNs to match for this rule. Can only be specified if DIRECTION + is ingress. + --src-ip-ranges=[SRC_IP_RANGE,...] A list of IP address blocks that are allowed to make inbound connections that match the firewall rule to the instances on the @@ -84,6 +115,10 @@ OPTIONAL FLAGS --src-secure-tags.Multiple IP address blocks can be specified if they are separated by commas. + --src-region-codes=[SOURCE_REGION_CODES,...] + Source Region Code to match for this rule. Can only be specified if + DIRECTION is ingress. + --src-secure-tags=[SOURCE_SECURE_TAGS,...] A list of instance secure tags indicating the set of instances on the network to which the rule applies if all other fields match. Either @@ -94,6 +129,10 @@ OPTIONAL FLAGS --src-secure-tags. Secure Tags can be assigned to instances during instance creation. + --src-threat-intelligence=[SOURCE_THREAT_INTELLIGENCE_LISTS,...] + Source Threat Intelligence lists to match for this rule. Can only be + specified if DIRECTION is ingress. + --target-secure-tags=[TARGET_SECURE_TAGS,...] An optional, list of target secure tags with a name of the format tagValues/ or full namespaced name diff --git a/gcloud/beta/compute/network-firewall-policies/rules/update b/gcloud/beta/compute/network-firewall-policies/rules/update index 7ab51601c..e5e0e98e7 100644 --- a/gcloud/beta/compute/network-firewall-policies/rules/update +++ b/gcloud/beta/compute/network-firewall-policies/rules/update @@ -5,11 +5,18 @@ NAME SYNOPSIS gcloud beta compute network-firewall-policies rules update PRIORITY --firewall-policy=FIREWALL_POLICY [--action=ACTION] - [--description=DESCRIPTION] [--dest-ip-ranges=[DEST_IP_RANGE,...]] + [--description=DESCRIPTION] + [--dest-address-groups=[DEST_ADDRESS_GROUPS,...]] + [--dest-fqdns=[DEST_FQDNS,...]] [--dest-ip-ranges=[DEST_IP_RANGE,...]] + [--dest-region-codes=[DEST_REGION_CODES,...]] + [--dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...]] [--direction=DIRECTION] [--[no-]disabled] [--[no-]enable-logging] [--layer4-configs=[LAYER4_CONFIG,...]] [--new-priority=NEW_PRIORITY] - [--src-ip-ranges=[SRC_IP_RANGE,...]] + [--src-address-groups=[SOURCE_ADDRESS_GROUPS,...]] + [--src-fqdns=[SOURCE_FQDNS,...]] [--src-ip-ranges=[SRC_IP_RANGE,...]] + [--src-region-codes=[SOURCE_REGION_CODES,...]] [--src-secure-tags=[SOURCE_SECURE_TAGS,...]] + [--src-threat-intelligence=[SOURCE_THREAT_INTELLIGENCE_LISTS,...]] [--target-secure-tags=[TARGET_SECURE_TAGS,...]] [--target-service-accounts=[TARGET_SERVICE_ACCOUNTS,...]] [--firewall-policy-region=FIREWALL_POLICY_REGION @@ -44,10 +51,26 @@ OPTIONAL FLAGS --description=DESCRIPTION An optional, textual description for the rule. + --dest-address-groups=[DEST_ADDRESS_GROUPS,...] + Dest address groups to match for this rule. Can only be specified if + DIRECTION is engress. + + --dest-fqdns=[DEST_FQDNS,...] + Dest FQDNs to match for this rule. Can only be specified if DIRECTION + is egress. + --dest-ip-ranges=[DEST_IP_RANGE,...] Destination IP ranges to match for this rule. Can only be specified if DIRECTION is egress. + --dest-region-codes=[DEST_REGION_CODES,...] + Dest Region Code to match for this rule. Can only be specified if + DIRECTION is egress. + + --dest-threat-intelligence=[DEST_THREAT_INTELLIGENCE_LISTS,...] + Destination Threat Intelligence lists to match for this rule. Can only + be specified if DIRECTION is egress. + --direction=DIRECTION Direction of the traffic the rule is applied. The default is to apply on incoming traffic. DIRECTION must be one of: INGRESS, EGRESS. @@ -68,6 +91,14 @@ OPTIONAL FLAGS --new-priority=NEW_PRIORITY New priority for the rule to update. Valid in [0, 65535]. + --src-address-groups=[SOURCE_ADDRESS_GROUPS,...] + Source address groups to match for this rule. Can only be specified if + DIRECTION is ingress. + + --src-fqdns=[SOURCE_FQDNS,...] + Source FQDNs to match for this rule. Can only be specified if DIRECTION + is ingress. + --src-ip-ranges=[SRC_IP_RANGE,...] A list of IP address blocks that are allowed to make inbound connections that match the firewall rule to the instances on the @@ -80,6 +111,10 @@ OPTIONAL FLAGS --src-secure-tags.Multiple IP address blocks can be specified if they are separated by commas. + --src-region-codes=[SOURCE_REGION_CODES,...] + Source Region Code to match for this rule. Can only be specified if + DIRECTION is ingress. + --src-secure-tags=[SOURCE_SECURE_TAGS,...] A list of instance secure tags indicating the set of instances on the network to which the rule applies if all other fields match. Either @@ -90,6 +125,10 @@ OPTIONAL FLAGS --src-secure-tags. Secure Tags can be assigned to instances during instance creation. + --src-threat-intelligence=[SOURCE_THREAT_INTELLIGENCE_LISTS,...] + Source Threat Intelligence lists to match for this rule. Can only be + specified if DIRECTION is ingress. + --target-secure-tags=[TARGET_SECURE_TAGS,...] An optional, list of target secure tags with a name of the format tagValues/ or full namespaced name diff --git a/gcloud/beta/container/clusters/create b/gcloud/beta/container/clusters/create index d3655f770..c1d9f3237 100644 --- a/gcloud/beta/container/clusters/create +++ b/gcloud/beta/container/clusters/create @@ -156,13 +156,12 @@ FLAGS are additional Kubernetes cluster components. Addons specified by this flag will be enabled. The others will be disabled. Default addons: HttpLoadBalancing, HorizontalPodAutoscaling. The Istio addon is - deprecated and will be removed in an upcoming release. For more - information and migration, see + deprecated and removed. For more information and migration, see https://cloud.google.com/istio/docs/istio-on-gke/migrate-to-anthos-service-mesh. ADDON must be one of: HttpLoadBalancing, HorizontalPodAutoscaling, KubernetesDashboard, NetworkPolicy, NodeLocalDNS, ConfigConnector, - GcePersistentDiskCsiDriver, GcpFilestoreCsiDriver, Istio, - ApplicationManager, BackupRestore, CloudRun. + GcePersistentDiskCsiDriver, GcpFilestoreCsiDriver, BackupRestore, + Istio, ApplicationManager, CloudRun. --allow-route-overlap Allows the provided cluster CIDRs to overlap with existing routes that @@ -562,7 +561,7 @@ FLAGS client certificates are disabled by default. --istio-config=[auth=MTLS_PERMISSIVE,...] - (DEPRECATED) Configurations for Istio addon, requires --addons contains + (REMOVED) Configurations for Istio addon, requires --addons contains Istio for create, or --update-addons Istio=ENABLED for update. auth @@ -573,8 +572,8 @@ FLAGS $ gcloud beta container clusters create example-cluster \ --istio-config=auth=MTLS_PERMISSIVE - The --istio-config flag is deprecated and will be removed in an - upcoming release. For more information and migration, see + The --istio-config flag is no longer supported. For more + information and migration, see https://cloud.google.com/istio/docs/istio-on-gke/migrate-to-anthos-service-mesh. --labels=[KEY=VALUE,...] diff --git a/gcloud/beta/container/clusters/update b/gcloud/beta/container/clusters/update index 93ca53976..4cdc02e2e 100644 --- a/gcloud/beta/container/clusters/update +++ b/gcloud/beta/container/clusters/update @@ -1096,7 +1096,7 @@ OPTIONAL FLAGS --cloud-run-config=load-balancer-type=INTERNAL --istio-config=[auth=MTLS_PERMISSIVE,...] - (DEPRECATED) Configurations for Istio addon, requires --addons contains + (REMOVED) Configurations for Istio addon, requires --addons contains Istio for create, or --update-addons Istio=ENABLED for update. auth @@ -1107,8 +1107,8 @@ OPTIONAL FLAGS $ gcloud beta container clusters update example-cluster \ --istio-config=auth=MTLS_PERMISSIVE - The --istio-config flag is deprecated and will be removed in an - upcoming release. For more information and migration, see + The --istio-config flag is no longer supported. For more + information and migration, see https://cloud.google.com/istio/docs/istio-on-gke/migrate-to-anthos-service-mesh. --master-authorized-networks=NETWORK,[NETWORK,...] diff --git a/gcloud/beta/datastream/streams/create b/gcloud/beta/datastream/streams/create index dd7518cd4..f7360fd8b 100644 --- a/gcloud/beta/datastream/streams/create +++ b/gcloud/beta/datastream/streams/create @@ -8,7 +8,8 @@ SYNOPSIS | --backfill-all --mysql-excluded-objects=MYSQL_EXCLUDED_OBJECTS | --oracle-excluded-objects=ORACLE_EXCLUDED_OBJECTS) (--destination-name=DESTINATION_NAME - --gcs-destination-config=GCS_DESTINATION_CONFIG) + (--bigquery-destination-config=BIGQUERY_DESTINATION_CONFIG + | --gcs-destination-config=GCS_DESTINATION_CONFIG)) (--source-name=SOURCE_NAME (--mysql-source-config=MYSQL_SOURCE_CONFIG | --oracle-source-config=ORACLE_SOURCE_CONFIG)) [--labels=[KEY=VALUE,...]] [--force | --validate-only] @@ -108,21 +109,37 @@ REQUIRED FLAGS connection_profile. To set the connection_profile attribute: ▫ provide the argument --destination-name on the command line. - --gcs-destination-config=GCS_DESTINATION_CONFIG - Path to a YAML (or JSON) file containing the configuration for Google - Cloud Storage Destination Config. + Exactly one of these must be specified: - The JSON file is formatted as follows: + --bigquery-destination-config=BIGQUERY_DESTINATION_CONFIG + Path to a YAML (or JSON) file containing the configuration for + Google BigQuery Destination Config. - { - "path": "some/path", - "file_rotation_mb":5, - "file_rotation_interval":"15s", - "avro_file_format": {} - } + The JSON file is formatted as follows: - This flag argument must be specified if any of the other arguments in - this group are specified. + { + "source_hierarchy_datasets": { + "dataset_template": { + "location": "us-central1", + "dataset_id_prefix": "my_prefix", + "kms_key_name": "projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{cryptoKey}" + } + }, + "data_freshness": 3600 + } + + --gcs-destination-config=GCS_DESTINATION_CONFIG + Path to a YAML (or JSON) file containing the configuration for + Google Cloud Storage Destination Config. + + The JSON file is formatted as follows: + + { + "path": "some/path", + "file_rotation_mb":5, + "file_rotation_interval":"15s", + "avro_file_format": {} + } This must be specified. diff --git a/gcloud/beta/datastream/streams/update b/gcloud/beta/datastream/streams/update index e857e2e48..fff7f8621 100644 --- a/gcloud/beta/datastream/streams/update +++ b/gcloud/beta/datastream/streams/update @@ -10,7 +10,8 @@ SYNOPSIS | --oracle-excluded-objects=ORACLE_EXCLUDED_OBJECTS] [--clear-labels | --remove-labels=[KEY,...]] [--destination-name=DESTINATION_NAME - : --gcs-destination-config=GCS_DESTINATION_CONFIG] + : --bigquery-destination-config=BIGQUERY_DESTINATION_CONFIG + | --gcs-destination-config=GCS_DESTINATION_CONFIG] [--force | --validate-only] [--source-name=SOURCE_NAME : --mysql-source-config=MYSQL_SOURCE_CONFIG | --oracle-source-config=ORACLE_SOURCE_CONFIG] [GCLOUD_WIDE_FLAG ...] @@ -144,18 +145,37 @@ FLAGS connection_profile. To set the connection_profile attribute: ▸ provide the argument --destination-name on the command line. - --gcs-destination-config=GCS_DESTINATION_CONFIG - Path to a YAML (or JSON) file containing the configuration for Google - Cloud Storage Destination Config. + At most one of these can be specified: - The JSON file is formatted as follows: + --bigquery-destination-config=BIGQUERY_DESTINATION_CONFIG + Path to a YAML (or JSON) file containing the configuration for Google + BigQuery Destination Config. - { - "path": "some/path", - "file_rotation_mb":5, - "file_rotation_interval":"15s", - "avro_file_format": {} - } + The JSON file is formatted as follows: + + { + "source_hierarchy_datasets": { + "dataset_template": { + "location": "us-central1", + "dataset_id_prefix": "my_prefix", + "kms_key_name": "projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{cryptoKey}" + } + }, + "data_freshness": 3600 + } + + --gcs-destination-config=GCS_DESTINATION_CONFIG + Path to a YAML (or JSON) file containing the configuration for Google + Cloud Storage Destination Config. + + The JSON file is formatted as follows: + + { + "path": "some/path", + "file_rotation_mb":5, + "file_rotation_interval":"15s", + "avro_file_format": {} + } At most one of these can be specified: diff --git a/gcloud/beta/emulators/firestore/help b/gcloud/beta/emulators/firestore/help index 92f7baea8..9e78678bf 100644 --- a/gcloud/beta/emulators/firestore/help +++ b/gcloud/beta/emulators/firestore/help @@ -1,15 +1,15 @@ NAME - gcloud beta emulators firestore - manage your local firestore emulator + gcloud beta emulators firestore - manage your local Firestore emulator SYNOPSIS gcloud beta emulators firestore COMMAND [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) This set of commands allows you to start and use a local firestore + (BETA) This set of commands allows you to start and use a local Firestore emulator. EXAMPLES - To start a local firestore emulator, run: + To start the local Firestore emulator, run: $ gcloud beta emulators firestore start @@ -22,11 +22,13 @@ COMMANDS COMMAND is one of the following: start - (BETA) Start a local firestore emulator. + (BETA) Start a local Firestore emulator. NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud emulators firestore $ gcloud alpha emulators firestore diff --git a/gcloud/beta/emulators/firestore/start b/gcloud/beta/emulators/firestore/start index 4c5723908..52bcd045b 100644 --- a/gcloud/beta/emulators/firestore/start +++ b/gcloud/beta/emulators/firestore/start @@ -1,18 +1,26 @@ NAME - gcloud beta emulators firestore start - start a local firestore emulator + gcloud beta emulators firestore start - start a local Firestore emulator SYNOPSIS gcloud beta emulators firestore start [--host-port=HOST_PORT] [--rules=RULES] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) This command starts a local firestore emulator. + (BETA) This command starts a local Firestore emulator. EXAMPLES - To start a local firestore emulator, run: + To start the local Firestore emulator, run: $ gcloud beta emulators firestore start + To bind to a specific host and port, run: + + $ gcloud beta emulators firestore start --host-port=0.0.0.0:8080 + + To run the local Firestore emulator with a Firebase Rules set, run: + + $ gcloud beta emulators firestore start --rules=firestore.rules + FLAGS --host-port=HOST_PORT The host:port to which the emulator should be bound. Can take the form @@ -27,7 +35,9 @@ FLAGS The default value is localhost:8080. --rules=RULES - If set, all projects will use the security rules in this file + If set, all projects will use the security rules in this file. More + information on Firebase Rules and the syntax for this file is available + at https://firebase.google.com/docs/rules. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, @@ -38,8 +48,10 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud emulators firestore start $ gcloud alpha emulators firestore start diff --git a/gcloud/beta/emulators/help b/gcloud/beta/emulators/help index 19ab8eb6a..f62ff90fb 100644 --- a/gcloud/beta/emulators/help +++ b/gcloud/beta/emulators/help @@ -23,7 +23,7 @@ GROUPS (BETA) Manage your local datastore emulator. firestore - (BETA) Manage your local firestore emulator. + (BETA) Manage your local Firestore emulator. pubsub (BETA) Manage your local pubsub emulator. diff --git a/gcloud/beta/scc/notifications/create b/gcloud/beta/scc/notifications/create index 292feae68..f1c9d0d68 100644 --- a/gcloud/beta/scc/notifications/create +++ b/gcloud/beta/scc/notifications/create @@ -5,23 +5,48 @@ NAME SYNOPSIS gcloud beta scc notifications create NOTIFICATION_CONFIG_ID --pubsub-topic=PUBSUB_TOPIC [--description=DESCRIPTION] - [--filter=FILTER] [--organization=ORGANIZATION] [GCLOUD_WIDE_FLAG ...] + [--filter=FILTER] + [--folder=FOLDER | --organization=ORGANIZATION | --project=PROJECT] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) Create a Cloud Security Command Center notification config. EXAMPLES - Create a notification config test-config under organization 123456 for + Create a notification config test-config under organization 123 for findings for pubsub-topic projects/test-project/topics/notification-test with a filter on resource name: $ gcloud beta scc notifications create test-config \ - --organization=123456 \ + --organization=123 \ + --pubsub-topic=projects/test-project/topics/notification-test \ + --filter="resource_name: \"a\"" + $ gcloud beta scc notifications create \ + organizations/123/notificationConfigs/test-config \ --pubsub-topic=projects/test-project/topics/notification-test \ --filter="resource_name: \"a\"" + Create a notification config test-config under folder 456 for findings for + pubsub-topic projects/test-project/topics/notification-test with a filter + on resource name: + + $ gcloud beta scc notifications create test-config --folder=456 \ + --pubsub-topic=projects/test-project/topics/notification-test \ + --filter="resource_name: \"a\"" $ gcloud beta scc notifications create \ - organizations/123456/notificationConfigs/test-config \ + folders/456/notificationConfigs/test-config \ + --pubsub-topic=projects/test-project/topics/notification-test \ + --filter="resource_name: \"a\"" + + Create a notification config test-config under project 789 for findings for + pubsub-topic projects/test-project/topics/notification-test with a filter + on resource name: + + $ gcloud beta scc notifications create test-config --project=789 \ + --pubsub-topic=projects/test-project/topics/notification-test \ + --filter="resource_name: \"a\"" + $ gcloud beta scc notifications create \ + projects/789/notificationConfigs/test-config \ --pubsub-topic=projects/test-project/topics/notification-test \ --filter="resource_name: \"a\"" @@ -42,10 +67,19 @@ OPTIONAL FLAGS --filter=FILTER Filter to be used for notification config. - --organization=ORGANIZATION - The organization where the notification config resides. Formatted as - "organizations/123" or just "123". Required if notificationConfigId - does not contain organization information. + At most one of these can be specified: + + --folder=FOLDER + Folder where the notification config resides. Formatted as + folders/456 or just 456. + + --organization=ORGANIZATION + Organization where the notification config resides. Formatted as + organizations/123 or just 123. + + --project=PROJECT + Project (ID or number) where the notification config resides. + Formatted as projects/789 or just 789. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/beta/scc/notifications/delete b/gcloud/beta/scc/notifications/delete index 3a435bdac..768243a74 100644 --- a/gcloud/beta/scc/notifications/delete +++ b/gcloud/beta/scc/notifications/delete @@ -4,19 +4,30 @@ NAME SYNOPSIS gcloud beta scc notifications delete NOTIFICATION_CONFIG_ID - [--organization=ORGANIZATION] [GCLOUD_WIDE_FLAG ...] + [--folder=FOLDER | --organization=ORGANIZATION | --project=PROJECT] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) Delete a Cloud Security Command Center notification config. EXAMPLES - Delete notification config 'my-config' from organization 123456 - - $ gcloud beta scc notifications delete my-config \ - --organization=123456 + Delete notification config 'my-config' from organization 123 + $ gcloud beta scc notifications delete my-config --organization=123 $ gcloud beta scc notifications delete \ - organization/123456/notificationConfigs/my-config + organizations/123/notificationConfigs/my-config + + Delete notification config 'my-config' from folder 456 + + $ gcloud beta scc notifications delete my-config --folder=456 + $ gcloud beta scc notifications delete \ + folders/456/notificationConfigs/my-config + + Delete notification config 'my-config' from project 789 + + $ gcloud beta scc notifications delete my-config --project=789 + $ gcloud beta scc notifications delete \ + projects/789/notificationConfigs/my-config POSITIONAL ARGUMENTS NOTIFICATION_CONFIG_ID @@ -24,10 +35,19 @@ POSITIONAL ARGUMENTS "organizations/123/notificationConfigs/456" or just "456". FLAGS - --organization=ORGANIZATION - The organization where the notification config resides. Formatted as - "organizations/123" or just "123". Required if notificationConfigId - does not contain organization information. + At most one of these can be specified: + + --folder=FOLDER + Folder where the notification config resides. Formatted as + folders/456 or just 456. + + --organization=ORGANIZATION + Organization where the notification config resides. Formatted as + organizations/123 or just 123. + + --project=PROJECT + Project (ID or number) where the notification config resides. + Formatted as projects/789 or just 789. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/beta/scc/notifications/list b/gcloud/beta/scc/notifications/list index c74939ac7..97dd0895c 100644 --- a/gcloud/beta/scc/notifications/list +++ b/gcloud/beta/scc/notifications/list @@ -3,7 +3,7 @@ NAME notification configs SYNOPSIS - gcloud beta scc notifications list [ORGANIZATION] [--filter=EXPRESSION] + gcloud beta scc notifications list [PARENT] [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] @@ -11,23 +11,29 @@ DESCRIPTION (BETA) List Cloud Security Command Center notification configs. EXAMPLES - List notification configs from organization 123456 + List notification configs from organization 123 - $ gcloud beta scc notifications list 123456 + $ gcloud beta scc notifications list 123 + $ gcloud beta scc notifications list organizations/123 - $ gcloud beta scc notifications list organizations/123456 + List notification configs from folder 456 + + $ gcloud beta scc notifications list folders/456 + + List notification configs from project 789 + + $ gcloud beta scc notifications list projects/789 POSITIONAL ARGUMENTS - Organization resource - The organization to be used for the SCC (Security - Command Center) command. This represents a Cloud resource. + Parent resource - The parent to be used for the SCC (Security Command + Center) command. This represents a Cloud resource. - [ORGANIZATION] - ID of the organization or fully qualified identifier for the - organization. To set the organization attribute: - ▸ provide the argument organization on the command line; - ▸ Set the organization property in configuration using gcloud - config set scc/organization if it is not specified in command - line.. + [PARENT] + ID of the parent or fully qualified identifier for the parent. To set + the organization attribute: + ▸ provide the argument parent on the command line; + ▸ Set the parent property in configuration using gcloud config set + scc/parent if it is not specified in command line.. LIST COMMAND FLAGS --filter=EXPRESSION diff --git a/gcloud/beta/scc/notifications/update b/gcloud/beta/scc/notifications/update index 9cf180661..712a87b30 100644 --- a/gcloud/beta/scc/notifications/update +++ b/gcloud/beta/scc/notifications/update @@ -5,51 +5,76 @@ NAME SYNOPSIS gcloud beta scc notifications update NOTIFICATION_CONFIG_ID [--description=DESCRIPTION] [--filter=FILTER] - [--organization=ORGANIZATION] [--pubsub-topic=PUBSUB_TOPIC] + [--pubsub-topic=PUBSUB_TOPIC] + [--folder=FOLDER | --organization=ORGANIZATION | --project=PROJECT] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) Update a Cloud Security Command Center notification config. EXAMPLES - Update all mutable fields in my-config (description + pubsub topic + - filter): + Update all mutable fields under an organization parent my-config + (description + pubsub topic + filter): - $ gcloud beta scc notifications update my-config \ - --organization=123456 --description="New description" \ + $ gcloud beta scc notifications update scc notifications update \ + my-config --organization=123 --description="New description" \ --pubsub-topic="projects/22222/topics/newtopic" - $ gcloud beta scc notifications update \ - organizations/123456/notificationConfigs/my-config \ + $ gcloud beta scc notifications update scc notifications update \ + organizations/123/notificationConfigs/my-config \ + --description="New description" \ + --pubsub-topic="projects/22222/topics/newtopic" + + Update all mutable fields under a folder parent my-config (description + + pubsub topic + filter): + + $ gcloud beta scc notifications update scc notifications update \ + my-config --folder=456 --description="New description" \ + --pubsub-topic="projects/22222/topics/newtopic" + + $ gcloud beta scc notifications update scc notifications update \ + folders/456/notificationConfigs/my-config \ + --description="New description" \ + --pubsub-topic="projects/22222/topics/newtopic" + + Update all mutable fields under a project parent my-config (description + + pubsub topic + filter): + + $ gcloud beta scc notifications update scc notifications update \ + my-config --project=789 --description="New description" \ + --pubsub-topic="projects/22222/topics/newtopic" + + $ gcloud beta scc notifications update scc notifications update \ + projects/789/notificationConfigs/my-config \ --description="New description" \ --pubsub-topic="projects/22222/topics/newtopic" Update my-config's description $ gcloud beta scc notifications update my-config \ - --organization=123456 --description="New description" + --organization=123 --description="New description" $ gcloud beta scc notifications update \ - organizations/123456/notificationConfigs/my-config \ + organizations/123/notificationConfigs/my-config \ --description="New description" Update my-config's pubsub-topic $ gcloud beta scc notifications update my-config \ - --organization=123456 \ + --organization=123 \ --pubsub-topic="projects/22222/topics/newtopic" $ gcloud beta scc notifications update \ - organizations/123456/notificationConfigs/my-config \ + organizations/123/notificationConfigs/my-config \ --pubsub-topic="projects/22222/topics/newtopic" Update my-config's filter $ gcloud beta scc notifications update my-config \ - --organization=123456 --filter='state = \"ACTIVE\"' + --organization=123 --filter='state = \"ACTIVE\"' $ gcloud beta scc notifications update \ - organizations/123456/notificationConfigs/my-config \ + organizations/123/notificationConfigs/my-config \ --filter='state = \"ACTIVE\"' POSITIONAL ARGUMENTS @@ -65,15 +90,24 @@ FLAGS The filter string which will applied to events of findings of a notification configuration. - --organization=ORGANIZATION - The organization where the notification config resides. Formatted as - "organizations/123" or just "123". Required if notificationConfigId - does not contain organization information. - --pubsub-topic=PUBSUB_TOPIC The Pub/Sub topic which will receive notifications. Its format is "projects/[project_id]/topics/[topic]". + At most one of these can be specified: + + --folder=FOLDER + Folder where the notification config resides. Formatted as + folders/456 or just 456. + + --organization=ORGANIZATION + Organization where the notification config resides. Formatted as + organizations/123 or just 123. + + --project=PROJECT + Project (ID or number) where the notification config resides. + Formatted as projects/789 or just 789. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/beta/spanner/instance-configs/create b/gcloud/beta/spanner/instance-configs/create index 6c9b473c7..c57959508 100644 --- a/gcloud/beta/spanner/instance-configs/create +++ b/gcloud/beta/spanner/instance-configs/create @@ -15,16 +15,6 @@ DESCRIPTION (BETA) Create a Cloud Spanner instance configuration. EXAMPLES - To create a custom Cloud Spanner instance configuration, run: - - $ gcloud beta spanner instance-configs create \ - custom-instance-config \ - --display-name=custom-instance-config-name --base-config=nam3 \ - --replicas=location=us-east4,type=READ_WRITE:location=us-east4,\ - type=READ_WRITE:location=us-east1,\ - type=READ_WRITE:location=us-east1,\ - type=READ_WRITE:location=us-central1,type=WITNESS - To create a custom Cloud Spanner instance configuration based on an existing Google-managed configuration (nam3) by adding a 'READ_ONLY' type replica in location 'us-east4', run: @@ -33,15 +23,15 @@ EXAMPLES custom-instance-config --clone-config=nam3 \ --add-replicas=location=us-east4,type=READ_ONLY - To create a custom Cloud Spanner instance configuration based on an - existing Google-managed configuration (nam3) by adding a 'READ_ONLY' type - replica in location 'us-east4' and removing a 'READ_ONLY' type replica in - location 'us-central1', run: + To create a custom Cloud Spanner instance configuration based on another + custom configuration (custom-instance-config) by adding a 'READ_ONLY' type + replica in location 'us-east1' and removing a 'READ_ONLY' type replica in + location 'us-east4', run: $ gcloud beta spanner instance-configs create \ - custom-instance-config --clone-config=nam3 \ - --add-replicas=location=us-east4,type=READ_ONLY \ - --skip-replicas=location=us-central1,type=READ_ONLY + custom-instance-config1 --clone-config=custom-instance-config \ + --add-replicas=location=us-east1,type=READ_ONLY \ + --skip-replicas=location=us-east4,type=READ_ONLY POSITIONAL ARGUMENTS INSTANCE_CONFIG diff --git a/gcloud/beta/tasks/queues/create b/gcloud/beta/tasks/queues/create index d066f4373..bd55ad96e 100644 --- a/gcloud/beta/tasks/queues/create +++ b/gcloud/beta/tasks/queues/create @@ -82,8 +82,8 @@ FLAGS fails. Must be a string that ends in 's', such as "5s". --routing-override=KEY:VALUE,[...] - If provided, the specified route is used for all tasks in the queue, no - matter what is set is at the task-level. + If provided, the specified App Engine route is used for all tasks in + the queue, no matter what is set is at the task-level. KEY must be at least one of: [service, version, instance]. Any missing keys will use the default. diff --git a/gcloud/beta/tasks/queues/create-app-engine-queue b/gcloud/beta/tasks/queues/create-app-engine-queue index 2baaa8296..cad7d86d3 100644 --- a/gcloud/beta/tasks/queues/create-app-engine-queue +++ b/gcloud/beta/tasks/queues/create-app-engine-queue @@ -91,8 +91,8 @@ FLAGS fails. Must be a string that ends in 's', such as "5s". --routing-override=KEY:VALUE,[...] - If provided, the specified route is used for all tasks in the queue, no - matter what is set is at the task-level. + If provided, the specified App Engine route is used for all tasks in + the queue, no matter what is set is at the task-level. KEY must be at least one of: [service, version, instance]. Any missing keys will use the default. diff --git a/gcloud/beta/tasks/queues/update b/gcloud/beta/tasks/queues/update index 29293867a..7068f2c44 100644 --- a/gcloud/beta/tasks/queues/update +++ b/gcloud/beta/tasks/queues/update @@ -137,8 +137,8 @@ FLAGS Clear the field corresponding to --routing-override. --routing-override=KEY:VALUE,[...] - If provided, the specified route is used for all tasks in the queue, - no matter what is set is at the task-level. + If provided, the specified App Engine route is used for all tasks in + the queue, no matter what is set is at the task-level. KEY must be at least one of: [service, version, instance]. Any missing keys will use the default. diff --git a/gcloud/beta/tasks/queues/update-app-engine-queue b/gcloud/beta/tasks/queues/update-app-engine-queue index 9f060f176..8c6373588 100644 --- a/gcloud/beta/tasks/queues/update-app-engine-queue +++ b/gcloud/beta/tasks/queues/update-app-engine-queue @@ -141,8 +141,8 @@ FLAGS Clear the field corresponding to --routing-override. --routing-override=KEY:VALUE,[...] - If provided, the specified route is used for all tasks in the queue, - no matter what is set is at the task-level. + If provided, the specified App Engine route is used for all tasks in + the queue, no matter what is set is at the task-level. KEY must be at least one of: [service, version, instance]. Any missing keys will use the default. diff --git a/gcloud/bms/instances/help b/gcloud/bms/instances/help index a3e196e5c..b61068326 100644 --- a/gcloud/bms/instances/help +++ b/gcloud/bms/instances/help @@ -27,6 +27,9 @@ COMMANDS start Start a Bare Metal Solution instance. + stop + Stop a Bare Metal Solution instance. + update Update a Bare Metal Solution instance. diff --git a/gcloud/bms/instances/stop b/gcloud/bms/instances/stop new file mode 100644 index 000000000..fd118ffa1 --- /dev/null +++ b/gcloud/bms/instances/stop @@ -0,0 +1,64 @@ +NAME + gcloud bms instances stop - stop a Bare Metal Solution instance + +SYNOPSIS + gcloud bms instances stop (INSTANCE : --region=REGION) [--async] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Stops a Bare Metal Solution instance. + +EXAMPLES + To stop an instance named test-instance, run: + + $ gcloud bms instances stop test-instance + +POSITIONAL ARGUMENTS + Instance resource - Arguments and flags that specify the Bare Metal + Solution instance you want to stop. The arguments in this group can be + used to specify the attributes of this resource. (NOTE) Some attributes + are not given arguments in this group but can be set in other ways. To set + the project attribute: + ◆ provide the argument instance on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + INSTANCE + ID of the instance or fully qualified identifier for the instance. To + set the instance attribute: + ▸ provide the argument instance on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + Region of the resource. To set the region attribute: + ▸ provide the argument instance on the command line with a fully + specified name; + ▸ provide the argument --region on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the baremetalsolution/v2 API. The full documentation for + this API can be found at: https://cloud.google.com/bare-metal + +NOTES + This variant is also available: + + $ gcloud alpha bms instances stop + diff --git a/gcloud/bms/nfs-shares/create b/gcloud/bms/nfs-shares/create new file mode 100644 index 000000000..b76f32155 --- /dev/null +++ b/gcloud/bms/nfs-shares/create @@ -0,0 +1,120 @@ +NAME + gcloud bms nfs-shares create - create a Bare Metal Solution NFS share + +SYNOPSIS + gcloud bms nfs-shares create (NFS_SHARE : --region=REGION) + --allowed-client=[PROPERTY=VALUE,...] --size-gib=SIZE_GIB + --storage-type=STORAGE_TYPE [--async] [--labels=[KEY=VALUE,...]] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Create a Bare Metal Solution NFS share. + +EXAMPLES + To create an NFS share called my-share in region us-central1, with + requested size of 256 Gib, SSD storage and 2 allowed clients, run: + + $ gcloud bms nfs-shares create my-share --region=us-central1 \ + --size-gib=256 --storage-type=SSD \ + --allowed-client=network=my-network,\ + network-project-id=some-other-project,cidr=10.130.240.24/29,\ + mount-permissions=READ_ONLY,allow-dev=yes,allow-suid=no,\ + enable-root-squash=yes \ + --allowed-client=network=my-network2,cidr=10.130.240.26/28,\ + mount-permissions=READ_WRITE,allow-dev=yes,allow-suid=yes,\ + enable-root-squash=no + +POSITIONAL ARGUMENTS + Nfs share resource - nfs_share. The arguments in this group can be used to + specify the attributes of this resource. (NOTE) Some attributes are not + given arguments in this group but can be set in other ways. To set the + project attribute: + ◆ provide the argument nfs_share on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + NFS_SHARE + ID of the nfs_share or fully qualified identifier for the nfs_share. + To set the nfs_share attribute: + ▸ provide the argument nfs_share on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + Region of the resource. To set the region attribute: + ▸ provide the argument nfs_share on the command line with a fully + specified name; + ▸ provide the argument --region on the command line. + +REQUIRED FLAGS + --allowed-client=[PROPERTY=VALUE,...] + Adds an allowed client to the NFS share. This flag can be repeated to + specify multiple allowed clients. + + network + The name of the network to allow. + + network-project-id + The project ID of the allowed client network. If not present, the + project ID of the NFS share will be used. + + cidr + The subnet of IP addresses permitted to access the NFS share. + + mount-permissions + The mount permissions for the allowed client. MOUNT_PERMISSIONS + must be one of: READ_ONLY, READ_WRITE. + + allow-dev + If yes, allows creation of devices. + + allow-suid + If yes, allows SUID. + + enable-root-squash + If yes, enables root squashing which is a special mapping of the + remote superuser (root) identity when using identity authentication + . + + --size-gib=SIZE_GIB + The requested size of the NFS share in GiB + + --storage-type=STORAGE_TYPE + Specifies the storage type of the underlying volume which will be + created for the NFS share. STORAGE_TYPE must be one of: + + HDD + The storage type of the underlying volume will be HDD + SSD + The storage type of the underlying volume will be SSD + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --labels=[KEY=VALUE,...] + List of label KEY=VALUE pairs to add. + + Keys must start with a lowercase character and contain only hyphens + (-), underscores (_), lowercase characters, and numbers. Values must + contain only hyphens (-), underscores (_), lowercase characters, and + numbers. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This variant is also available: + + $ gcloud alpha bms nfs-shares create + diff --git a/gcloud/bms/nfs-shares/delete b/gcloud/bms/nfs-shares/delete new file mode 100644 index 000000000..02ef6ad1f --- /dev/null +++ b/gcloud/bms/nfs-shares/delete @@ -0,0 +1,59 @@ +NAME + gcloud bms nfs-shares delete - delete a Bare Metal Solution NFS share + +SYNOPSIS + gcloud bms nfs-shares delete (NFS_SHARE : --region=REGION) [--async] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Delete a Bare Metal Solution NFS share. + +EXAMPLES + To delete an NFS share called my-share in region us-central1, run: + + $ gcloud bms nfs-shares delete my-share --region=us-central1 + +POSITIONAL ARGUMENTS + Nfs share resource - nfs_share. The arguments in this group can be used to + specify the attributes of this resource. (NOTE) Some attributes are not + given arguments in this group but can be set in other ways. To set the + project attribute: + ◆ provide the argument nfs_share on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + NFS_SHARE + ID of the nfs_share or fully qualified identifier for the nfs_share. + To set the nfs_share attribute: + ▸ provide the argument nfs_share on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + Region of the resource. To set the region attribute: + ▸ provide the argument nfs_share on the command line with a fully + specified name; + ▸ provide the argument --region on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This variant is also available: + + $ gcloud alpha bms nfs-shares delete + diff --git a/gcloud/bms/nfs-shares/help b/gcloud/bms/nfs-shares/help index ee8376b30..4d0c7d809 100644 --- a/gcloud/bms/nfs-shares/help +++ b/gcloud/bms/nfs-shares/help @@ -15,6 +15,12 @@ GCLOUD WIDE FLAGS COMMANDS COMMAND is one of the following: + create + Create a Bare Metal Solution NFS share. + + delete + Delete a Bare Metal Solution NFS share. + describe Describe a Bare Metal solution NFS share. diff --git a/gcloud/bms/nfs-shares/update b/gcloud/bms/nfs-shares/update index 7bc62ad6a..64a8ec8a1 100644 --- a/gcloud/bms/nfs-shares/update +++ b/gcloud/bms/nfs-shares/update @@ -4,6 +4,8 @@ NAME SYNOPSIS gcloud bms nfs-shares update (NFS_SHARE : --region=REGION) [--async] [--update-labels=[KEY=VALUE,...]] + [--add-allowed-client=[PROPERTY=VALUE,...] | --clear-allowed-clients + | --remove-allowed-client=[PROPERTY=VALUE,...]] [--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -70,6 +72,56 @@ FLAGS contain only hyphens (-), underscores (_), lowercase characters, and numbers. + At most one of these can be specified: + + --add-allowed-client=[PROPERTY=VALUE,...] + Adds an allowed client to the NFS share. This flag can be repeated to + specify multiple allowed clients. + + network + The name of the network to allow. + + network-project-id + The project ID of the allowed client network. If not present, the + project ID of the NFS share will be used. + + cidr + The subnet of IP addresses permitted to access the NFS share. + + mount-permissions + The mount permissions for the allowed client. MOUNT_PERMISSIONS + must be one of: READ_ONLY, READ_WRITE. + + allow-dev + If yes, allows creation of devices. + + allow-suid + If yes, allows SUID. + + enable-root-squash + If yes, enables root squashing which is a special mapping of the + remote superuser (root) identity when using identity + authentication . + + --clear-allowed-clients + Removes all IP range reservations in the network. + + --remove-allowed-client=[PROPERTY=VALUE,...] + Removes an allowed client for the NFS share given its network name + and cidr. This flag can be repeated to remove multiple allowed + clients. + + network + The name of the network of the allowed client to remove. + + network-project-id + The project ID of the allowed client network. If not present, the + project ID of the NFS share will be used. + + cidr + The subnet of permitted IP addresses of the allowed client to + remove. + At most one of these can be specified: --clear-labels diff --git a/gcloud/bms/volumes/help b/gcloud/bms/volumes/help index bdbc99055..808ccd3b8 100644 --- a/gcloud/bms/volumes/help +++ b/gcloud/bms/volumes/help @@ -18,6 +18,9 @@ GROUPS luns Manage bare metal logical unit numbers (LUNs) in Bare Metal Solution. + snapshots + Manage snapshots for Bare Metal Solution volumes. + COMMANDS COMMAND is one of the following: @@ -27,6 +30,12 @@ COMMANDS list List Bare Metal Solution volumes in a project. + restore + Restore a Bare Metal Solution boot volume from an existing snapshot. + + snapshot + Create a snapshot of a Bare Metal Solution boot volume. + update Update a Bare Metal Solution volume. diff --git a/gcloud/bms/volumes/restore b/gcloud/bms/volumes/restore new file mode 100644 index 000000000..cb8bfbed5 --- /dev/null +++ b/gcloud/bms/volumes/restore @@ -0,0 +1,66 @@ +NAME + gcloud bms volumes restore - restore a Bare Metal Solution boot volume from + an existing snapshot + +SYNOPSIS + gcloud bms volumes restore (VOLUME : --region=REGION) --snapshot=SNAPSHOT + [--async] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Restore a Bare Metal Solution boot volume from an existing snapshot. + +EXAMPLES + To restore a boot volume named my-boot-volume in region us-central1 from + snapshot named my-snapshot, run: + + $ gcloud bms volumes restore my-boot-volume --region=us-central1 \ + --snapshot=my-snapshot + +POSITIONAL ARGUMENTS + Volume resource - volume. The arguments in this group can be used to + specify the attributes of this resource. (NOTE) Some attributes are not + given arguments in this group but can be set in other ways. To set the + project attribute: + ◆ provide the argument volume on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + VOLUME + ID of the volume or fully qualified identifier for the volume. To set + the volume attribute: + ▸ provide the argument volume on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + Region of the resource. To set the region attribute: + ▸ provide the argument volume on the command line with a fully + specified name; + ▸ provide the argument --region on the command line. + +REQUIRED FLAGS + --snapshot=SNAPSHOT + Name of the snapshot to restore. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This variant is also available: + + $ gcloud alpha bms volumes restore + diff --git a/gcloud/bms/volumes/snapshot b/gcloud/bms/volumes/snapshot new file mode 100644 index 000000000..bcd670187 --- /dev/null +++ b/gcloud/bms/volumes/snapshot @@ -0,0 +1,65 @@ +NAME + gcloud bms volumes snapshot - create a snapshot of a Bare Metal Solution + boot volume + +SYNOPSIS + gcloud bms volumes snapshot (VOLUME : --region=REGION) + --description=DESCRIPTION --snapshot-name=SNAPSHOT_NAME + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Create a snapshot of a Bare Metal Solution boot volume. + +EXAMPLES + To create a snapshot of a boot volume named my-boot-volume in region + us-central1 with the name my-snapshot and description my-description, run: + + $ gcloud bms volumes snapshot my-boot-volume --region=us-central1 \ + --snapshot-name=my-snapshot --description=my-description + +POSITIONAL ARGUMENTS + Volume resource - volume. The arguments in this group can be used to + specify the attributes of this resource. (NOTE) Some attributes are not + given arguments in this group but can be set in other ways. To set the + project attribute: + ◆ provide the argument volume on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + VOLUME + ID of the volume or fully qualified identifier for the volume. To set + the volume attribute: + ▸ provide the argument volume on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + Region of the resource. To set the region attribute: + ▸ provide the argument volume on the command line with a fully + specified name; + ▸ provide the argument --region on the command line. + +REQUIRED FLAGS + --description=DESCRIPTION + Textual description of the created snapshot. + + --snapshot-name=SNAPSHOT_NAME + Name to assign to the created snapshot. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This variant is also available: + + $ gcloud alpha bms volumes snapshot + diff --git a/gcloud/bms/volumes/snapshots/delete b/gcloud/bms/volumes/snapshots/delete new file mode 100644 index 000000000..a548d5256 --- /dev/null +++ b/gcloud/bms/volumes/snapshots/delete @@ -0,0 +1,63 @@ +NAME + gcloud bms volumes snapshots delete - delete a Bare Metal Solution boot + volume snapshot + +SYNOPSIS + gcloud bms volumes snapshots delete + (SNAPSHOT : --region=REGION --volume=VOLUME) [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Delete a Bare Metal Solution boot volume snapshot. + +EXAMPLES + To delete a snapshot called my-snapshot on boot volume my-boot-volume in + region us-central1, run: + + $ gcloud bms volumes snapshots delete my-snapshot \ + --region=us-central1 --volume=my-boot-volume + +POSITIONAL ARGUMENTS + Snapshot resource - snapshot. The arguments in this group can be used to + specify the attributes of this resource. (NOTE) Some attributes are not + given arguments in this group but can be set in other ways. To set the + project attribute: + ◆ provide the argument snapshot on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + SNAPSHOT + ID of the snapshot or fully qualified identifier for the snapshot. To + set the snapshot attribute: + ▸ provide the argument snapshot on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + Region of the resource. To set the region attribute: + ▸ provide the argument snapshot on the command line with a fully + specified name; + ▸ provide the argument --region on the command line. + + --volume=VOLUME + Bare Metal Solution volume. To set the volume attribute: + ▸ provide the argument snapshot on the command line with a fully + specified name; + ▸ provide the argument --volume on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This variant is also available: + + $ gcloud alpha bms volumes snapshots delete + diff --git a/gcloud/bms/volumes/snapshots/describe b/gcloud/bms/volumes/snapshots/describe new file mode 100644 index 000000000..f02cdfc56 --- /dev/null +++ b/gcloud/bms/volumes/snapshots/describe @@ -0,0 +1,63 @@ +NAME + gcloud bms volumes snapshots describe - describe a Bare Metal Solution boot + volume snapshot + +SYNOPSIS + gcloud bms volumes snapshots describe + (SNAPSHOT : --region=REGION --volume=VOLUME) [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Describe a Bare Metal Solution boot volume snapshot. + +EXAMPLES + To get a description of a snapshot called my-snapshot on boot volume + my-boot-volume in region us-central1, run: + + $ gcloud bms volumes snapshots describe my-snapshot \ + --region=us-central1 --volume=my-boot-volume + +POSITIONAL ARGUMENTS + Snapshot resource - snapshot. The arguments in this group can be used to + specify the attributes of this resource. (NOTE) Some attributes are not + given arguments in this group but can be set in other ways. To set the + project attribute: + ◆ provide the argument snapshot on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + SNAPSHOT + ID of the snapshot or fully qualified identifier for the snapshot. To + set the snapshot attribute: + ▸ provide the argument snapshot on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + Region of the resource. To set the region attribute: + ▸ provide the argument snapshot on the command line with a fully + specified name; + ▸ provide the argument --region on the command line. + + --volume=VOLUME + Bare Metal Solution volume. To set the volume attribute: + ▸ provide the argument snapshot on the command line with a fully + specified name; + ▸ provide the argument --volume on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This variant is also available: + + $ gcloud alpha bms volumes snapshots describe + diff --git a/gcloud/bms/volumes/snapshots/help b/gcloud/bms/volumes/snapshots/help new file mode 100644 index 000000000..09ab5ba0f --- /dev/null +++ b/gcloud/bms/volumes/snapshots/help @@ -0,0 +1,32 @@ +NAME + gcloud bms volumes snapshots - manage snapshots for Bare Metal Solution + volumes + +SYNOPSIS + gcloud bms volumes snapshots COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Manage snapshots for Bare Metal Solution volumes. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + delete + Delete a Bare Metal Solution boot volume snapshot. + + describe + Describe a Bare Metal Solution boot volume snapshot. + + list + List snapshots for a Bare Metal Solution boot volume. + +NOTES + This variant is also available: + + $ gcloud alpha bms volumes snapshots + diff --git a/gcloud/bms/volumes/snapshots/list b/gcloud/bms/volumes/snapshots/list new file mode 100644 index 000000000..fe9f2d24c --- /dev/null +++ b/gcloud/bms/volumes/snapshots/list @@ -0,0 +1,69 @@ +NAME + gcloud bms volumes snapshots list - list snapshots for a Bare Metal + Solution boot volume + +SYNOPSIS + gcloud bms volumes snapshots list (--volume=VOLUME : --region=REGION) + [--filter=EXPRESSION] [--limit=LIMIT] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + List snapshots for a Bare Metal Solution boot volume. + +EXAMPLES + To list snapshots on boot volume my-boot-volume in region us-central1, run: + + $ gcloud bms volumes snapshots list --region=us-central1 \ + --volume=my-boot-volume + +REQUIRED FLAGS + Volume resource - The Bare Metal Solution volume to list snapshots of. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument --volume on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + --volume=VOLUME + ID of the volume or fully qualified identifier for the volume. To set + the volume attribute: + ▸ provide the argument --volume on the command line. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --region=REGION + Region of the resource. To set the region attribute: + ▸ provide the argument --volume on the command line with a fully + specified name; + ▸ provide the argument --region on the command line. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --filter, --limit. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This variant is also available: + + $ gcloud alpha bms volumes snapshots list + diff --git a/gcloud/components/update b/gcloud/components/update index a5b299792..6d7f97d1c 100644 --- a/gcloud/components/update +++ b/gcloud/components/update @@ -34,7 +34,8 @@ EXAMPLES $ gcloud components update - To update all installed components to version 1.2.3: + To update all installed components to a fixed Google Cloud CLI version + 1.2.3: $ gcloud components update --version=1.2.3 diff --git a/gcloud/composer/environments/create b/gcloud/composer/environments/create index 9c6886bb0..b6755b635 100644 --- a/gcloud/composer/environments/create +++ b/gcloud/composer/environments/create @@ -114,7 +114,7 @@ FLAGS provide to the Airflow scheduler, worker, and webserver processes. NAME may contain upper and lowercase letters, digits, and underscores, but they may not begin with a digit. To include commas as part of a VALUE, - see gcloud topics escaping for information about overriding the + see gcloud topic escaping for information about overriding the delimiter. --environment-size=ENVIRONMENT_SIZE diff --git a/gcloud/compute/addresses/create b/gcloud/compute/addresses/create index 1f746afd7..fbfe6ca57 100644 --- a/gcloud/compute/addresses/create +++ b/gcloud/compute/addresses/create @@ -82,11 +82,13 @@ FLAGS addresses can only use PREMIUM. --prefix-length=PREFIX_LENGTH - The prefix length of the IP range. It must be a value between 8 and 30 - inclusive. If not present, it means the address field is a single IP - address. + The prefix length of the IP range. If the address is an IPv4 address, + it must be a value between 8 and 30 inclusive. If the address is an + IPv6 address, the only allowed value is 96. If not present, it means + the address field is a single IP address. - This field is not applicable to external addresses. + This field is not applicable to external IPv4 addresses or global IPv6 + addresses. --purpose=PURPOSE The purpose of the address resource. This field is not applicable to diff --git a/gcloud/compute/os-config/os-policy-assignments/create b/gcloud/compute/os-config/os-policy-assignments/create index d52685493..ccbd1804b 100644 --- a/gcloud/compute/os-config/os-policy-assignments/create +++ b/gcloud/compute/os-config/os-policy-assignments/create @@ -50,8 +50,13 @@ POSITIONAL ARGUMENTS REQUIRED FLAGS --file=FILE - Absolute path to OS policy assignment file on your local client. File - must be in either JSON or YAML format. + Absolute path to the OS policy assignment file on your local client. + File must be in either JSON or YAML format. This file defines the OS + policies that you want to apply to your VMs, the target VMs that you + want to apply the policies to, and the rollout rate at which to apply + the OS policies. For more information about this resource and sample OS + policy assignment files, see + https://cloud.google.com/compute/docs/os-configuration-management/working-with-os-policies#os-policy-assignment. OPTIONAL FLAGS --async diff --git a/gcloud/compute/os-config/os-policy-assignments/update b/gcloud/compute/os-config/os-policy-assignments/update index ddfcb0db9..bc7d8e401 100644 --- a/gcloud/compute/os-config/os-policy-assignments/update +++ b/gcloud/compute/os-config/os-policy-assignments/update @@ -49,8 +49,13 @@ POSITIONAL ARGUMENTS REQUIRED FLAGS --file=FILE - Absolute path to OS policy assignment file on your local client. File - must be in either JSON or YAML format. + Absolute path to the OS policy assignment file on your local client. + File must be in either JSON or YAML format. This file defines the OS + policies that you want to apply to your VMs, the target VMs that you + want to apply the policies to, and the rollout rate at which to apply + the OS policies. For more information about this resource and sample OS + policy assignment files, see + https://cloud.google.com/compute/docs/os-configuration-management/working-with-os-policies#os-policy-assignment. OPTIONAL FLAGS --async diff --git a/gcloud/compute/tpus/tpu-vm/create b/gcloud/compute/tpus/tpu-vm/create index 6d15721fc..666dcdc8c 100644 --- a/gcloud/compute/tpus/tpu-vm/create +++ b/gcloud/compute/tpus/tpu-vm/create @@ -9,8 +9,8 @@ SYNOPSIS [--metadata-from-file=[METADATA_FROM_FILE,...]] [--network=NETWORK; default="default"] [--preemptible] [--range=RANGE] [--reserved] [--scopes=[SCOPES,...]] - [--service-account=SERVICE_ACCOUNT] [--subnetwork=SUBNETWORK] - [--tags=[TAGS,...]] [GCLOUD_WIDE_FLAG ...] + [--service-account=SERVICE_ACCOUNT] [--shielded-secure-boot] + [--subnetwork=SUBNETWORK] [--tags=[TAGS,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION Create a new Cloud TPU VM node. @@ -163,6 +163,10 @@ OPTIONAL FLAGS Email address of the service account. If empty, default Google Compute Engine service account will be used. + --shielded-secure-boot + Specifies that the TPU instances are created with secure boot enabled. + This implicitly makes them Shielded VM instances. + --subnetwork=SUBNETWORK Subnetwork that this TPU will be a part of. diff --git a/gcloud/container/aws/clusters/create b/gcloud/container/aws/clusters/create index 9ba1c32bd..4f139494b 100644 --- a/gcloud/container/aws/clusters/create +++ b/gcloud/container/aws/clusters/create @@ -14,6 +14,7 @@ SYNOPSIS [--admin-users=USER,[USER,...]] [--annotations=ANNOTATION,[ANNOTATION,...]] [--async] [--description=DESCRIPTION] [--instance-type=INSTANCE_TYPE] + [--logging=COMPONENT,[COMPONENT,...]] [--main-volume-iops=MAIN_VOLUME_IOPS] [--main-volume-kms-key-arn=MAIN_VOLUME_KMS_KEY_ARN] [--main-volume-size=MAIN_VOLUME_SIZE] @@ -129,6 +130,16 @@ OPTIONAL FLAGS --instance-type=INSTANCE_TYPE AWS EC2 instance type for the control plane's nodes. + --logging=COMPONENT,[COMPONENT,...] + Set the components that have logging enabled. + + Examples: + + $ gcloud container aws clusters create --logging=SYSTEM + $ gcloud container aws clusters create --logging=SYSTEM,WORKLOAD + + COMPONENT must be one of: SYSTEM, WORKLOAD. + --main-volume-iops=MAIN_VOLUME_IOPS Number of I/O operations per second (IOPS) to provision for the main volume. diff --git a/gcloud/container/aws/clusters/get-credentials b/gcloud/container/aws/clusters/get-credentials index b628e0697..daa9e33cd 100644 --- a/gcloud/container/aws/clusters/get-credentials +++ b/gcloud/container/aws/clusters/get-credentials @@ -11,7 +11,7 @@ DESCRIPTION Fetch credentials for a running Anthos cluster on AWS. This command updates a kubeconfig file with appropriate credentials and - endpoint information to point kubectl at a specific cluster on AWS. + endpoint information to point kubectl at a specific Anthos cluster on AWS. By default, credentials are written to HOME/.kube/config. You can provide an alternate path by setting the KUBECONFIG environment variable. If diff --git a/gcloud/container/aws/clusters/update b/gcloud/container/aws/clusters/update index 84be466d0..39ee914d8 100644 --- a/gcloud/container/aws/clusters/update +++ b/gcloud/container/aws/clusters/update @@ -7,8 +7,8 @@ SYNOPSIS [--cluster-version=CLUSTER_VERSION] [--config-encryption-kms-key-arn=CONFIG_ENCRYPTION_KMS_KEY_ARN] [--iam-instance-profile=IAM_INSTANCE_PROFILE] - [--instance-type=INSTANCE_TYPE] [--role-arn=ROLE_ARN] - [--role-session-name=ROLE_SESSION_NAME] + [--instance-type=INSTANCE_TYPE] [--logging=COMPONENT,[COMPONENT,...]] + [--role-arn=ROLE_ARN] [--role-session-name=ROLE_SESSION_NAME] [--root-volume-iops=ROOT_VOLUME_IOPS] [--root-volume-kms-key-arn=ROOT_VOLUME_KMS_KEY_ARN] [--root-volume-size=ROOT_VOLUME_SIZE] @@ -78,6 +78,16 @@ FLAGS --instance-type=INSTANCE_TYPE AWS EC2 instance type for the control plane's nodes. + --logging=COMPONENT,[COMPONENT,...] + Set the components that have logging enabled. + + Examples: + + $ gcloud container aws clusters update --logging=SYSTEM + $ gcloud container aws clusters update --logging=SYSTEM,WORKLOAD + + COMPONENT must be one of: SYSTEM, WORKLOAD. + --role-arn=ROLE_ARN Amazon Resource Name (ARN) of the IAM role to assume when managing AWS resources. diff --git a/gcloud/container/azure/clusters/create b/gcloud/container/azure/clusters/create index 563bfd4a7..2e65f314c 100644 --- a/gcloud/container/azure/clusters/create +++ b/gcloud/container/azure/clusters/create @@ -15,6 +15,7 @@ SYNOPSIS [--config-encryption-public-key=CONFIG_ENCRYPTION_PUBLIC_KEY] [--database-encryption-key-id=DATABASE_ENCRYPTION_KEY_ID] [--description=DESCRIPTION] [--endpoint-subnet-id=ENDPOINT_SUBNET_ID] + [--logging=COMPONENT,[COMPONENT,...]] [--main-volume-size=MAIN_VOLUME_SIZE] [--replica-placements=[REPLICA_PLACEMENT,...]] [--root-volume-size=ROOT_VOLUME_SIZE] @@ -144,6 +145,16 @@ OPTIONAL FLAGS ARM ID of the subnet where the control plane load balancer is deployed. When unspecified, it defaults to the control plane subnet ID. + --logging=COMPONENT,[COMPONENT,...] + Set the components that have logging enabled. + + Examples: + + $ gcloud container azure clusters create --logging=SYSTEM + $ gcloud container azure clusters create --logging=SYSTEM,WORKLOAD + + COMPONENT must be one of: SYSTEM, WORKLOAD. + --main-volume-size=MAIN_VOLUME_SIZE Size of the main volume. The value must be a whole number followed by a size unit of GB for gigabyte, or TB for terabyte. If no size unit is diff --git a/gcloud/container/azure/clusters/get-credentials b/gcloud/container/azure/clusters/get-credentials index f809236da..3cc39d9b0 100644 --- a/gcloud/container/azure/clusters/get-credentials +++ b/gcloud/container/azure/clusters/get-credentials @@ -11,7 +11,8 @@ DESCRIPTION Fetch credentials for a running Anthos cluster on Azure. This command updates a kubeconfig file with appropriate credentials and - endpoint information to point kubectl at a specific cluster on Azure. + endpoint information to point kubectl at a specific Anthos cluster on + Azure. By default, credentials are written to HOME/.kube/config. You can provide an alternate path by setting the KUBECONFIG environment variable. If diff --git a/gcloud/container/azure/clusters/update b/gcloud/container/azure/clusters/update index 4b7a556fc..b61c9c7f7 100644 --- a/gcloud/container/azure/clusters/update +++ b/gcloud/container/azure/clusters/update @@ -4,7 +4,8 @@ NAME SYNOPSIS gcloud container azure clusters update (CLUSTER : --location=LOCATION) --client=CLIENT [--admin-users=USER,[USER,...]] [--async] - [--cluster-version=CLUSTER_VERSION] [--ssh-public-key=SSH_PUBLIC_KEY] + [--cluster-version=CLUSTER_VERSION] + [--logging=COMPONENT,[COMPONENT,...]] [--ssh-public-key=SSH_PUBLIC_KEY] [--validate-only] [--vm-size=VM_SIZE] [--annotations=ANNOTATION,[ANNOTATION,...] | --clear-annotations] [--clear-description | --description=DESCRIPTION] @@ -75,6 +76,16 @@ FLAGS --cluster-version=CLUSTER_VERSION Kubernetes version to use for the cluster. + --logging=COMPONENT,[COMPONENT,...] + Set the components that have logging enabled. + + Examples: + + $ gcloud container azure clusters update --logging=SYSTEM + $ gcloud container azure clusters update --logging=SYSTEM,WORKLOAD + + COMPONENT must be one of: SYSTEM, WORKLOAD. + --ssh-public-key=SSH_PUBLIC_KEY SSH public key to use for authentication. diff --git a/gcloud/container/azure/node-pools/create b/gcloud/container/azure/node-pools/create index 6c522837d..2718af5dc 100644 --- a/gcloud/container/azure/node-pools/create +++ b/gcloud/container/azure/node-pools/create @@ -6,8 +6,8 @@ SYNOPSIS gcloud container azure node-pools create (NODE_POOL : --cluster=CLUSTER --location=LOCATION) --node-version=NODE_VERSION --ssh-public-key=SSH_PUBLIC_KEY - --subnet-id=SUBNET_ID [--async] - [--azure-availability-zone=AZURE_AVAILABILITY_ZONE] + --subnet-id=SUBNET_ID [--annotations=ANNOTATION,[ANNOTATION,...]] + [--async] [--azure-availability-zone=AZURE_AVAILABILITY_ZONE] [--config-encryption-key-id=CONFIG_ENCRYPTION_KEY_ID] [--config-encryption-public-key=CONFIG_ENCRYPTION_PUBLIC_KEY] [--max-pods-per-node=MAX_PODS_PER_NODE] @@ -76,6 +76,9 @@ REQUIRED FLAGS Subnet ID of an existing VNET to use for the node pool. OPTIONAL FLAGS + --annotations=ANNOTATION,[ANNOTATION,...] + Annotations for the node pool. + --async Return immediately, without waiting for the operation in progress to complete. diff --git a/gcloud/container/azure/node-pools/update b/gcloud/container/azure/node-pools/update index 920b3601c..5733d4739 100644 --- a/gcloud/container/azure/node-pools/update +++ b/gcloud/container/azure/node-pools/update @@ -6,8 +6,9 @@ SYNOPSIS gcloud container azure node-pools update (NODE_POOL : --cluster=CLUSTER --location=LOCATION) [--async] [--node-version=NODE_VERSION] [--ssh-public-key=SSH_PUBLIC_KEY] - [--validate-only] [--max-nodes=MAX_NODES --min-nodes=MIN_NODES] - [GCLOUD_WIDE_FLAG ...] + [--validate-only] + [--annotations=ANNOTATION,[ANNOTATION,...] | --clear-annotations] + [--max-nodes=MAX_NODES --min-nodes=MIN_NODES] [GCLOUD_WIDE_FLAG ...] DESCRIPTION Update a node pool in an Anthos cluster on Azure. @@ -68,6 +69,16 @@ FLAGS --validate-only Validate the update of the node pool, but don't actually perform it. + Annotations + + At most one of these can be specified: + + --annotations=ANNOTATION,[ANNOTATION,...] + Annotations for the node pool. + + --clear-annotations + Clear the annotations for the node pool. + Node pool autoscaling --max-nodes=MAX_NODES diff --git a/gcloud/container/clusters/create b/gcloud/container/clusters/create index 05aca7bfb..0764a93ba 100644 --- a/gcloud/container/clusters/create +++ b/gcloud/container/clusters/create @@ -168,12 +168,12 @@ FLAGS are additional Kubernetes cluster components. Addons specified by this flag will be enabled. The others will be disabled. Default addons: HttpLoadBalancing, HorizontalPodAutoscaling. The Istio addon is - deprecated and will be removed in an upcoming release. For more - information and migration, see + deprecated and removed. For more information and migration, see https://cloud.google.com/istio/docs/istio-on-gke/migrate-to-anthos-service-mesh. ADDON must be one of: HttpLoadBalancing, HorizontalPodAutoscaling, KubernetesDashboard, NetworkPolicy, NodeLocalDNS, ConfigConnector, - GcePersistentDiskCsiDriver, GcpFilestoreCsiDriver, CloudRun. + GcePersistentDiskCsiDriver, GcpFilestoreCsiDriver, BackupRestore, + CloudRun. --async Return immediately, without waiting for the operation in progress to diff --git a/gcloud/container/clusters/update b/gcloud/container/clusters/update index 906504b3c..3a9826f0d 100644 --- a/gcloud/container/clusters/update +++ b/gcloud/container/clusters/update @@ -458,8 +458,8 @@ REQUIRED FLAGS HorizontalPodAutoscaling=ENABLED|DISABLED HttpLoadBalancing=ENABLED|DISABLED KubernetesDashboard=ENABLED|DISABLED NetworkPolicy=ENABLED|DISABLED - CloudRun=ENABLED|DISABLED ConfigConnector=ENABLED|DISABLED - NodeLocalDNS=ENABLED|DISABLED + BackupRestore=ENABLED|DISABLED CloudRun=ENABLED|DISABLED + ConfigConnector=ENABLED|DISABLED NodeLocalDNS=ENABLED|DISABLED GcePersistentDiskCsiDriver=ENABLED|DISABLED GcpFilestoreCsiDriver=ENABLED|DISABLED diff --git a/gcloud/datastream/streams/create b/gcloud/datastream/streams/create index bb7b98969..5e02f9ff3 100644 --- a/gcloud/datastream/streams/create +++ b/gcloud/datastream/streams/create @@ -8,7 +8,8 @@ SYNOPSIS | --backfill-all --mysql-excluded-objects=MYSQL_EXCLUDED_OBJECTS | --oracle-excluded-objects=ORACLE_EXCLUDED_OBJECTS) (--destination=DESTINATION - --gcs-destination-config=GCS_DESTINATION_CONFIG) + (--bigquery-destination-config=BIGQUERY_DESTINATION_CONFIG + | --gcs-destination-config=GCS_DESTINATION_CONFIG)) (--source=SOURCE (--mysql-source-config=MYSQL_SOURCE_CONFIG | --oracle-source-config=ORACLE_SOURCE_CONFIG)) [--labels=[KEY=VALUE,...]] [--force | --validate-only] @@ -114,21 +115,37 @@ REQUIRED FLAGS connection_profile. To set the connection_profile attribute: ▫ provide the argument --destination on the command line. - --gcs-destination-config=GCS_DESTINATION_CONFIG - Path to a YAML (or JSON) file containing the configuration for Google - Cloud Storage Destination Config. + Exactly one of these must be specified: - The JSON file is formatted as follows: + --bigquery-destination-config=BIGQUERY_DESTINATION_CONFIG + Path to a YAML (or JSON) file containing the configuration for + Google BigQuery Destination Config. - { - "path": "some/path", - "file_rotation_mb":5, - "file_rotation_interval":"15s", - "avro_file_format": {} - } + The JSON file is formatted as follows: - This flag argument must be specified if any of the other arguments in - this group are specified. + { + "source_hierarchy_datasets": { + "dataset_template": { + "location": "us-central1", + "dataset_id_prefix": "my_prefix", + "kms_key_name": "projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{cryptoKey}" + } + }, + "data_freshness": 3600 + } + + --gcs-destination-config=GCS_DESTINATION_CONFIG + Path to a YAML (or JSON) file containing the configuration for + Google Cloud Storage Destination Config. + + The JSON file is formatted as follows: + + { + "path": "some/path", + "file_rotation_mb":5, + "file_rotation_interval":"15s", + "avro_file_format": {} + } This must be specified. diff --git a/gcloud/datastream/streams/update b/gcloud/datastream/streams/update index 94c2be27f..6dfcaa3b6 100644 --- a/gcloud/datastream/streams/update +++ b/gcloud/datastream/streams/update @@ -10,7 +10,8 @@ SYNOPSIS | --oracle-excluded-objects=ORACLE_EXCLUDED_OBJECTS] [--clear-labels | --remove-labels=[KEY,...]] [--destination=DESTINATION - : --gcs-destination-config=GCS_DESTINATION_CONFIG] + : --bigquery-destination-config=BIGQUERY_DESTINATION_CONFIG + | --gcs-destination-config=GCS_DESTINATION_CONFIG] [--force | --validate-only] [--source=SOURCE : --mysql-source-config=MYSQL_SOURCE_CONFIG | --oracle-source-config=ORACLE_SOURCE_CONFIG] [GCLOUD_WIDE_FLAG ...] @@ -140,18 +141,37 @@ FLAGS connection_profile. To set the connection_profile attribute: ▸ provide the argument --destination on the command line. - --gcs-destination-config=GCS_DESTINATION_CONFIG - Path to a YAML (or JSON) file containing the configuration for Google - Cloud Storage Destination Config. + At most one of these can be specified: - The JSON file is formatted as follows: + --bigquery-destination-config=BIGQUERY_DESTINATION_CONFIG + Path to a YAML (or JSON) file containing the configuration for Google + BigQuery Destination Config. - { - "path": "some/path", - "file_rotation_mb":5, - "file_rotation_interval":"15s", - "avro_file_format": {} - } + The JSON file is formatted as follows: + + { + "source_hierarchy_datasets": { + "dataset_template": { + "location": "us-central1", + "dataset_id_prefix": "my_prefix", + "kms_key_name": "projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{cryptoKey}" + } + }, + "data_freshness": 3600 + } + + --gcs-destination-config=GCS_DESTINATION_CONFIG + Path to a YAML (or JSON) file containing the configuration for Google + Cloud Storage Destination Config. + + The JSON file is formatted as follows: + + { + "path": "some/path", + "file_rotation_mb":5, + "file_rotation_interval":"15s", + "avro_file_format": {} + } At most one of these can be specified: diff --git a/gcloud/emulators/firestore/help b/gcloud/emulators/firestore/help new file mode 100644 index 000000000..f34dd49c1 --- /dev/null +++ b/gcloud/emulators/firestore/help @@ -0,0 +1,33 @@ +NAME + gcloud emulators firestore - manage your local Firestore emulator + +SYNOPSIS + gcloud emulators firestore COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + This set of commands allows you to start and use a local Firestore + emulator. + +EXAMPLES + To start the local Firestore emulator, run: + + $ gcloud emulators firestore start + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + start + Start a local Firestore emulator. + +NOTES + These variants are also available: + + $ gcloud alpha emulators firestore + + $ gcloud beta emulators firestore + diff --git a/gcloud/emulators/firestore/start b/gcloud/emulators/firestore/start new file mode 100644 index 000000000..5c40ed439 --- /dev/null +++ b/gcloud/emulators/firestore/start @@ -0,0 +1,56 @@ +NAME + gcloud emulators firestore start - start a local Firestore emulator + +SYNOPSIS + gcloud emulators firestore start [--host-port=HOST_PORT] [--rules=RULES] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + This command starts a local Firestore emulator. + +EXAMPLES + To start the local Firestore emulator, run: + + $ gcloud emulators firestore start + + To bind to a specific host and port, run: + + $ gcloud emulators firestore start --host-port=0.0.0.0:8080 + + To run the local Firestore emulator with a Firebase Rules set, run: + + $ gcloud emulators firestore start --rules=firestore.rules + +FLAGS + --host-port=HOST_PORT + The host:port to which the emulator should be bound. Can take the form + of a single address (hostname, IPv4, or IPv6) and/or port: + + [ADDRESS][:PORT] + + In this format you must enclose IPv6 addresses in square brackets: e.g. + + [2001:db8:0:0:0:ff00:42:8329]:8080 + + The default value is localhost:8080. + + --rules=RULES + If set, all projects will use the security rules in this file. More + information on Firebase Rules and the syntax for this file is available + at https://firebase.google.com/docs/rules. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha emulators firestore start + + $ gcloud beta emulators firestore start + diff --git a/gcloud/emulators/help b/gcloud/emulators/help index ff7fea8f3..b9a060203 100644 --- a/gcloud/emulators/help +++ b/gcloud/emulators/help @@ -16,6 +16,9 @@ GCLOUD WIDE FLAGS GROUPS GROUP is one of the following: + firestore + Manage your local Firestore emulator. + spanner Manage your local Spanner emulator. diff --git a/gcloud/network-connectivity/help b/gcloud/network-connectivity/help index 645d02fec..627062da1 100644 --- a/gcloud/network-connectivity/help +++ b/gcloud/network-connectivity/help @@ -24,6 +24,9 @@ GROUPS operations Manage Network Connectivity Center operations. + policy-based-routes + Manage Policy Based Routes. + spokes Manage Network Connectivity Center spokes. diff --git a/gcloud/network-connectivity/policy-based-routes/create b/gcloud/network-connectivity/policy-based-routes/create new file mode 100644 index 000000000..8ffab1a07 --- /dev/null +++ b/gcloud/network-connectivity/policy-based-routes/create @@ -0,0 +1,130 @@ +NAME + gcloud network-connectivity policy-based-routes create - create a new + policy based route + +SYNOPSIS + gcloud network-connectivity policy-based-routes create POLICY_BASED_ROUTE + --network=NETWORK --next-hop-ilb-ip=NEXT_HOP_ILB_IP [--async] + [--description=DESCRIPTION] [--destination-range=DESTINATION_RANGE] + [--ip-protocol=IP_PROTOCOL] [--labels=[KEY=VALUE,...]] + [--priority=PRIORITY] + [--protocol-version=PROTOCOL_VERSION; default="IPv4"] + [--source-range=SOURCE_RANGE] + [--interconnect-attachment-region=INTERCONNECT_ATTACHMENT_REGION + | --tags=[TAGS,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Create a new policy based route with the given name. + +EXAMPLES + To create a policy based route with the name my-pbr to route all l4 traffic + in default network to a ilb with vip 10.0.0.1, run: + + $ gcloud network-connectivity policy-based-routes create my-pbr \ + --network="projects/my-project/global/networks/default" \ + --next-hop-ilb-ip=10.0.0.1 + +POSITIONAL ARGUMENTS + Policy based route resource - Name of the policy based route to be + created. This represents a Cloud resource. (NOTE) Some attributes are not + given arguments in this group but can be set in other ways. To set the + project attribute: + ◆ provide the argument policy_based_route on the command line with a + fully specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + POLICY_BASED_ROUTE + ID of the policy based route or fully qualified identifier for the + policy based route. To set the policy_based_route attribute: + ▸ provide the argument policy_based_route on the command line. + +REQUIRED FLAGS + --network=NETWORK + Fully-qualified URL of the network that this route applies to. E.g. + projects/my-project/global/networks/my-network + + --next-hop-ilb-ip=NEXT_HOP_ILB_IP + IP of a global access enabled L4 ILB that should be the next hop to + handle packets. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --description=DESCRIPTION + Optional description of this resource. Provide this field when you + create the resource. + + --destination-range=DESTINATION_RANGE + Destination IP range of outgoing packets that this policy based route + applies to. + + --ip-protocol=IP_PROTOCOL + IP protocol that this policy based route applies to. Valid values are + TCP, UDP, and ALL. Default is ALL. + + --labels=[KEY=VALUE,...] + List of label KEY=VALUE pairs to add. + + Keys must start with a lowercase character and contain only hyphens + (-), underscores (_), lowercase characters, and numbers. Values must + contain only hyphens (-), underscores (_), lowercase characters, and + numbers. + + --priority=PRIORITY + Priority of this policy based route. Priority is used to break ties in + cases where there are more than one matching policy based routes found. + In cases where multiple policy based routes are matched, the one with + the lowest-numbered priority value wins. The default value is 1000. The + priority value must be from 1 to 65535, inclusive. Note the priority of + policy based route is always higher than other types of route (e.g. + static routes/advanced routes) + + --protocol-version=PROTOCOL_VERSION; default="IPv4" + Internet protocol versions this policy based route applies to. For this + version, only IPV4 is supported. PROTOCOL_VERSION must be one of: ipv4, + protocol-version-unspecified. + + --source-range=SOURCE_RANGE + Source IP range of outgoing packets that this policy based route + applies to. + + At most one of these can be specified: + + --interconnect-attachment-region=INTERCONNECT_ATTACHMENT_REGION + Cloud region to install this policy based route on interconnect + attachment. Use all to install it on all interconnect attachments. + Note if both --tags and --interconnect-attachment-region are not set, + then the policy based route will be installed in all network + endpoints, including VMs, VPNs, and Interconnect attachements, in the + network. + + --tags=[TAGS,...] + List of VM instance tags to which this route applies to. VM instances + that have ANY of tags specified here will install this route. Note if + both --tags and --interconnect-attachment-region are not set, then + the policy based route will be installed in all endpoints, including + VMs, VPNs, and Interconnect attachements, in the network. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networkconnectivity/v1 API. The full documentation + for this API can be found at: + https://cloud.google.com/network-connectivity/docs/reference/networkconnectivity/rest + +NOTES + This variant is also available: + + $ gcloud alpha network-connectivity policy-based-routes create + diff --git a/gcloud/network-connectivity/policy-based-routes/delete b/gcloud/network-connectivity/policy-based-routes/delete new file mode 100644 index 000000000..8e22eeb3b --- /dev/null +++ b/gcloud/network-connectivity/policy-based-routes/delete @@ -0,0 +1,56 @@ +NAME + gcloud network-connectivity policy-based-routes delete - delete a policy + based route + +SYNOPSIS + gcloud network-connectivity policy-based-routes delete POLICY_BASED_ROUTE + [--async] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Delete the specified policy based route. + +EXAMPLES + To delete a policy based route named my-pbr, run: + + $ gcloud network-connectivity policy-based-routes delete my-pbr + +POSITIONAL ARGUMENTS + Policy based route resource - Name of the policy based route to be + deleted. This represents a Cloud resource. (NOTE) Some attributes are not + given arguments in this group but can be set in other ways. To set the + project attribute: + ◆ provide the argument policy_based_route on the command line with a + fully specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + POLICY_BASED_ROUTE + ID of the policy based route or fully qualified identifier for the + policy based route. To set the policy_based_route attribute: + ▸ provide the argument policy_based_route on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networkconnectivity/v1 API. The full documentation + for this API can be found at: + https://cloud.google.com/network-connectivity/docs/reference/networkconnectivity/rest + +NOTES + This variant is also available: + + $ gcloud alpha network-connectivity policy-based-routes delete + diff --git a/gcloud/network-connectivity/policy-based-routes/describe b/gcloud/network-connectivity/policy-based-routes/describe new file mode 100644 index 000000000..a578f96e5 --- /dev/null +++ b/gcloud/network-connectivity/policy-based-routes/describe @@ -0,0 +1,51 @@ +NAME + gcloud network-connectivity policy-based-routes describe - describe a + policy based route + +SYNOPSIS + gcloud network-connectivity policy-based-routes describe POLICY_BASED_ROUTE + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Retrieve and display details about a policy based route. + +EXAMPLES + To display details about a policy based route named my-pbr, run: + + $ gcloud network-connectivity policy-based-routes describe my-pbr + +POSITIONAL ARGUMENTS + Policy based route resource - Name of the policy based route to be + described. This represents a Cloud resource. (NOTE) Some attributes are + not given arguments in this group but can be set in other ways. To set the + project attribute: + ◆ provide the argument policy_based_route on the command line with a + fully specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + POLICY_BASED_ROUTE + ID of the policy based route or fully qualified identifier for the + policy based route. To set the policy_based_route attribute: + ▸ provide the argument policy_based_route on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networkconnectivity/v1 API. The full documentation + for this API can be found at: + https://cloud.google.com/network-connectivity/docs/reference/networkconnectivity/rest + +NOTES + This variant is also available: + + $ gcloud alpha network-connectivity policy-based-routes describe + diff --git a/gcloud/network-connectivity/policy-based-routes/help b/gcloud/network-connectivity/policy-based-routes/help new file mode 100644 index 000000000..b203c9ca8 --- /dev/null +++ b/gcloud/network-connectivity/policy-based-routes/help @@ -0,0 +1,36 @@ +NAME + gcloud network-connectivity policy-based-routes - manage Policy Based + Routes + +SYNOPSIS + gcloud network-connectivity policy-based-routes COMMAND + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Manage Policy Based Routes. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + create + Create a new policy based route. + + delete + Delete a policy based route. + + describe + Describe a policy based route. + + list + List policy based routes. + +NOTES + This variant is also available: + + $ gcloud alpha network-connectivity policy-based-routes + diff --git a/gcloud/network-connectivity/policy-based-routes/list b/gcloud/network-connectivity/policy-based-routes/list new file mode 100644 index 000000000..5d8b08226 --- /dev/null +++ b/gcloud/network-connectivity/policy-based-routes/list @@ -0,0 +1,62 @@ +NAME + gcloud network-connectivity policy-based-routes list - list policy based + routes + +SYNOPSIS + gcloud network-connectivity policy-based-routes list [--filter=EXPRESSION] + [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Retrieve and display a list of all policy based routes in the specified + project. + +EXAMPLES + To display details about a policy based route named my-pbr, run: + + $ gcloud network-connectivity policy-based-routes list my-pbr + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networkconnectivity/v1 API. The full documentation + for this API can be found at: + https://cloud.google.com/network-connectivity/docs/reference/networkconnectivity/rest + +NOTES + This variant is also available: + + $ gcloud alpha network-connectivity policy-based-routes list + diff --git a/gcloud/scc/notifications/create b/gcloud/scc/notifications/create index 7bf209ce5..7481f9258 100644 --- a/gcloud/scc/notifications/create +++ b/gcloud/scc/notifications/create @@ -5,23 +5,47 @@ NAME SYNOPSIS gcloud scc notifications create NOTIFICATION_CONFIG_ID --pubsub-topic=PUBSUB_TOPIC [--description=DESCRIPTION] - [--filter=FILTER] [--organization=ORGANIZATION] [GCLOUD_WIDE_FLAG ...] + [--filter=FILTER] + [--folder=FOLDER | --organization=ORGANIZATION | --project=PROJECT] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION Create a Cloud Security Command Center notification config. EXAMPLES - Create a notification config test-config under organization 123456 for + Create a notification config test-config under organization 123 for findings for pubsub-topic projects/test-project/topics/notification-test with a filter on resource name: - $ gcloud scc notifications create test-config \ - --organization=123456 \ + $ gcloud scc notifications create test-config --organization=123 \ + --pubsub-topic=projects/test-project/topics/notification-test \ + --filter="resource_name: \"a\"" + $ gcloud scc notifications create \ + organizations/123/notificationConfigs/test-config \ --pubsub-topic=projects/test-project/topics/notification-test \ --filter="resource_name: \"a\"" + Create a notification config test-config under folder 456 for findings for + pubsub-topic projects/test-project/topics/notification-test with a filter + on resource name: + + $ gcloud scc notifications create test-config --folder=456 \ + --pubsub-topic=projects/test-project/topics/notification-test \ + --filter="resource_name: \"a\"" $ gcloud scc notifications create \ - organizations/123456/notificationConfigs/test-config \ + folders/456/notificationConfigs/test-config \ + --pubsub-topic=projects/test-project/topics/notification-test \ + --filter="resource_name: \"a\"" + + Create a notification config test-config under project 789 for findings for + pubsub-topic projects/test-project/topics/notification-test with a filter + on resource name: + + $ gcloud scc notifications create test-config --project=789 \ + --pubsub-topic=projects/test-project/topics/notification-test \ + --filter="resource_name: \"a\"" + $ gcloud scc notifications create \ + projects/789/notificationConfigs/test-config \ --pubsub-topic=projects/test-project/topics/notification-test \ --filter="resource_name: \"a\"" @@ -42,10 +66,19 @@ OPTIONAL FLAGS --filter=FILTER Filter to be used for notification config. - --organization=ORGANIZATION - The organization where the notification config resides. Formatted as - "organizations/123" or just "123". Required if notificationConfigId - does not contain organization information. + At most one of these can be specified: + + --folder=FOLDER + Folder where the notification config resides. Formatted as + folders/456 or just 456. + + --organization=ORGANIZATION + Organization where the notification config resides. Formatted as + organizations/123 or just 123. + + --project=PROJECT + Project (ID or number) where the notification config resides. + Formatted as projects/789 or just 789. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/scc/notifications/delete b/gcloud/scc/notifications/delete index 606fdea65..8191e2077 100644 --- a/gcloud/scc/notifications/delete +++ b/gcloud/scc/notifications/delete @@ -4,18 +4,30 @@ NAME SYNOPSIS gcloud scc notifications delete NOTIFICATION_CONFIG_ID - [--organization=ORGANIZATION] [GCLOUD_WIDE_FLAG ...] + [--folder=FOLDER | --organization=ORGANIZATION | --project=PROJECT] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION Delete a Cloud Security Command Center notification config. EXAMPLES - Delete notification config 'my-config' from organization 123456 - - $ gcloud scc notifications delete my-config --organization=123456 + Delete notification config 'my-config' from organization 123 + $ gcloud scc notifications delete my-config --organization=123 $ gcloud scc notifications delete \ - organization/123456/notificationConfigs/my-config + organizations/123/notificationConfigs/my-config + + Delete notification config 'my-config' from folder 456 + + $ gcloud scc notifications delete my-config --folder=456 + $ gcloud scc notifications delete \ + folders/456/notificationConfigs/my-config + + Delete notification config 'my-config' from project 789 + + $ gcloud scc notifications delete my-config --project=789 + $ gcloud scc notifications delete \ + projects/789/notificationConfigs/my-config POSITIONAL ARGUMENTS NOTIFICATION_CONFIG_ID @@ -23,10 +35,19 @@ POSITIONAL ARGUMENTS "organizations/123/notificationConfigs/456" or just "456". FLAGS - --organization=ORGANIZATION - The organization where the notification config resides. Formatted as - "organizations/123" or just "123". Required if notificationConfigId - does not contain organization information. + At most one of these can be specified: + + --folder=FOLDER + Folder where the notification config resides. Formatted as + folders/456 or just 456. + + --organization=ORGANIZATION + Organization where the notification config resides. Formatted as + organizations/123 or just 123. + + --project=PROJECT + Project (ID or number) where the notification config resides. + Formatted as projects/789 or just 789. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/scc/notifications/list b/gcloud/scc/notifications/list index ab55d9346..f3996f723 100644 --- a/gcloud/scc/notifications/list +++ b/gcloud/scc/notifications/list @@ -3,7 +3,7 @@ NAME notification configs SYNOPSIS - gcloud scc notifications list [ORGANIZATION] [--filter=EXPRESSION] + gcloud scc notifications list [PARENT] [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] @@ -11,23 +11,29 @@ DESCRIPTION List Cloud Security Command Center notification configs. EXAMPLES - List notification configs from organization 123456 + List notification configs from organization 123 - $ gcloud scc notifications list 123456 + $ gcloud scc notifications list 123 + $ gcloud scc notifications list organizations/123 - $ gcloud scc notifications list organizations/123456 + List notification configs from folder 456 + + $ gcloud scc notifications list folders/456 + + List notification configs from project 789 + + $ gcloud scc notifications list projects/789 POSITIONAL ARGUMENTS - Organization resource - The organization to be used for the SCC (Security - Command Center) command. This represents a Cloud resource. + Parent resource - The parent to be used for the SCC (Security Command + Center) command. This represents a Cloud resource. - [ORGANIZATION] - ID of the organization or fully qualified identifier for the - organization. To set the organization attribute: - ▸ provide the argument organization on the command line; - ▸ Set the organization property in configuration using gcloud - config set scc/organization if it is not specified in command - line.. + [PARENT] + ID of the parent or fully qualified identifier for the parent. To set + the organization attribute: + ▸ provide the argument parent on the command line; + ▸ Set the parent property in configuration using gcloud config set + scc/parent if it is not specified in command line.. LIST COMMAND FLAGS --filter=EXPRESSION diff --git a/gcloud/scc/notifications/update b/gcloud/scc/notifications/update index 5e8d3864b..47eb12136 100644 --- a/gcloud/scc/notifications/update +++ b/gcloud/scc/notifications/update @@ -5,50 +5,75 @@ NAME SYNOPSIS gcloud scc notifications update NOTIFICATION_CONFIG_ID [--description=DESCRIPTION] [--filter=FILTER] - [--organization=ORGANIZATION] [--pubsub-topic=PUBSUB_TOPIC] + [--pubsub-topic=PUBSUB_TOPIC] + [--folder=FOLDER | --organization=ORGANIZATION | --project=PROJECT] [GCLOUD_WIDE_FLAG ...] DESCRIPTION Update a Cloud Security Command Center notification config. EXAMPLES - Update all mutable fields in my-config (description + pubsub topic + - filter): + Update all mutable fields under an organization parent my-config + (description + pubsub topic + filter): - $ gcloud scc notifications update my-config --organization=123456 \ + $ gcloud scc notifications update scc notifications update \ + my-config --organization=123 --description="New description" \ + --pubsub-topic="projects/22222/topics/newtopic" + + $ gcloud scc notifications update scc notifications update \ + organizations/123/notificationConfigs/my-config \ --description="New description" \ --pubsub-topic="projects/22222/topics/newtopic" - $ gcloud scc notifications update \ - organizations/123456/notificationConfigs/my-config \ + Update all mutable fields under a folder parent my-config (description + + pubsub topic + filter): + + $ gcloud scc notifications update scc notifications update \ + my-config --folder=456 --description="New description" \ + --pubsub-topic="projects/22222/topics/newtopic" + + $ gcloud scc notifications update scc notifications update \ + folders/456/notificationConfigs/my-config \ + --description="New description" \ + --pubsub-topic="projects/22222/topics/newtopic" + + Update all mutable fields under a project parent my-config (description + + pubsub topic + filter): + + $ gcloud scc notifications update scc notifications update \ + my-config --project=789 --description="New description" \ + --pubsub-topic="projects/22222/topics/newtopic" + + $ gcloud scc notifications update scc notifications update \ + projects/789/notificationConfigs/my-config \ --description="New description" \ --pubsub-topic="projects/22222/topics/newtopic" Update my-config's description - $ gcloud scc notifications update my-config --organization=123456 \ + $ gcloud scc notifications update my-config --organization=123 \ --description="New description" $ gcloud scc notifications update \ - organizations/123456/notificationConfigs/my-config \ + organizations/123/notificationConfigs/my-config \ --description="New description" Update my-config's pubsub-topic - $ gcloud scc notifications update my-config --organization=123456 \ + $ gcloud scc notifications update my-config --organization=123 \ --pubsub-topic="projects/22222/topics/newtopic" $ gcloud scc notifications update \ - organizations/123456/notificationConfigs/my-config \ + organizations/123/notificationConfigs/my-config \ --pubsub-topic="projects/22222/topics/newtopic" Update my-config's filter - $ gcloud scc notifications update my-config --organization=123456 \ + $ gcloud scc notifications update my-config --organization=123 \ --filter='state = \"ACTIVE\"' $ gcloud scc notifications update \ - organizations/123456/notificationConfigs/my-config \ + organizations/123/notificationConfigs/my-config \ --filter='state = \"ACTIVE\"' POSITIONAL ARGUMENTS @@ -64,15 +89,24 @@ FLAGS The filter string which will applied to events of findings of a notification configuration. - --organization=ORGANIZATION - The organization where the notification config resides. Formatted as - "organizations/123" or just "123". Required if notificationConfigId - does not contain organization information. - --pubsub-topic=PUBSUB_TOPIC The Pub/Sub topic which will receive notifications. Its format is "projects/[project_id]/topics/[topic]". + At most one of these can be specified: + + --folder=FOLDER + Folder where the notification config resides. Formatted as + folders/456 or just 456. + + --organization=ORGANIZATION + Organization where the notification config resides. Formatted as + organizations/123 or just 123. + + --project=PROJECT + Project (ID or number) where the notification config resides. + Formatted as projects/789 or just 789. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/spanner/instance-configs/create b/gcloud/spanner/instance-configs/create index 1f6d765e5..877c5919b 100644 --- a/gcloud/spanner/instance-configs/create +++ b/gcloud/spanner/instance-configs/create @@ -15,15 +15,6 @@ DESCRIPTION Create a Cloud Spanner instance configuration. EXAMPLES - To create a custom Cloud Spanner instance configuration, run: - - $ gcloud spanner instance-configs create custom-instance-config \ - --display-name=custom-instance-config-name --base-config=nam3 \ - --replicas=location=us-east4,type=READ_WRITE:location=us-east4,\ - type=READ_WRITE:location=us-east1,\ - type=READ_WRITE:location=us-east1,\ - type=READ_WRITE:location=us-central1,type=WITNESS - To create a custom Cloud Spanner instance configuration based on an existing Google-managed configuration (nam3) by adding a 'READ_ONLY' type replica in location 'us-east4', run: @@ -32,15 +23,15 @@ EXAMPLES --clone-config=nam3 \ --add-replicas=location=us-east4,type=READ_ONLY - To create a custom Cloud Spanner instance configuration based on an - existing Google-managed configuration (nam3) by adding a 'READ_ONLY' type - replica in location 'us-east4' and removing a 'READ_ONLY' type replica in - location 'us-central1', run: + To create a custom Cloud Spanner instance configuration based on another + custom configuration (custom-instance-config) by adding a 'READ_ONLY' type + replica in location 'us-east1' and removing a 'READ_ONLY' type replica in + location 'us-east4', run: - $ gcloud spanner instance-configs create custom-instance-config \ - --clone-config=nam3 \ - --add-replicas=location=us-east4,type=READ_ONLY \ - --skip-replicas=location=us-central1,type=READ_ONLY + $ gcloud spanner instance-configs create custom-instance-config1 \ + --clone-config=custom-instance-config \ + --add-replicas=location=us-east1,type=READ_ONLY \ + --skip-replicas=location=us-east4,type=READ_ONLY POSITIONAL ARGUMENTS INSTANCE_CONFIG diff --git a/gcloud/storage/buckets/update b/gcloud/storage/buckets/update index c6adeada2..c04554cf7 100644 --- a/gcloud/storage/buckets/update +++ b/gcloud/storage/buckets/update @@ -2,7 +2,10 @@ NAME gcloud storage buckets update - update bucket settings SYNOPSIS - gcloud storage buckets update URL [URL ...] [--continue-on-error, -c] + gcloud storage buckets update URL [URL ...] + [--canned-acl=PREDEFINED_ACL, + --predefined-acl=PREDEFINED_ACL, -a PREDEFINED_ACL] + [--continue-on-error, -c] [--default-storage-class=DEFAULT_STORAGE_CLASS] [--[no-]requester-pays] [--[no-]versioning] [--clear-cors | --cors-file=CORS_FILE] [--clear-default-encryption-key @@ -34,6 +37,11 @@ POSITIONAL ARGUMENTS URLs of the buckets to update. FLAGS + --canned-acl=PREDEFINED_ACL, --predefined-acl=PREDEFINED_ACL, -a PREDEFINED_ACL + Applies predefined, or "canned," ACLs to a resource. See docs for a + list of predefined ACL constants: + https://cloud.google.com/storage/docs/access-control/lists#predefined-acl + --continue-on-error, -c If any operations are unsuccessful, the command will exit with a non-zero exit status after completing the remaining operations. This diff --git a/gcloud/storage/cp b/gcloud/storage/cp index 5946ebee0..8c23c44f7 100644 --- a/gcloud/storage/cp +++ b/gcloud/storage/cp @@ -12,7 +12,7 @@ SYNOPSIS [--storage-class=STORAGE_CLASS, -s STORAGE_CLASS] [--canned-acl=PREDEFINED_ACL, --predefined-acl=PREDEFINED_ACL, -a PREDEFINED_ACL - | --preserve-acl, -p] + | --[no-]preserve-acl, -p] [--gzip-in-flight=[FILE_EXTENSIONS,...], -j [FILE_EXTENSIONS,...] | --gzip-in-flight-all, -J | --gzip-local=[FILE_EXTENSIONS,...], -z [FILE_EXTENSIONS,...] @@ -174,16 +174,18 @@ FLAGS At most one of these can be specified: --canned-acl=PREDEFINED_ACL, --predefined-acl=PREDEFINED_ACL, -a PREDEFINED_ACL - Applies predefined, or "canned," ACLs to a copied object. See docs - for a list of predefined ACL constants: + Applies predefined, or "canned," ACLs to a resource. See docs for a + list of predefined ACL constants: https://cloud.google.com/storage/docs/access-control/lists#predefined-acl - --preserve-acl, -p + --[no-]preserve-acl, -p Preserves ACLs when copying in the cloud. This option is Google Cloud Storage-only, and you need OWNER access to all copied objects. If all objects in the destination bucket should have the same ACL, you can also set a default object ACL on that bucket instead of using this - flag. + flag. Preserving ACLs is the default behavior for updating existing + objects. Use --preserve-acl to enable and --no-preserve-acl to + disable. At most one of these can be specified: diff --git a/gcloud/storage/mv b/gcloud/storage/mv index b23359e06..4475ddb5b 100644 --- a/gcloud/storage/mv +++ b/gcloud/storage/mv @@ -11,7 +11,7 @@ SYNOPSIS [--storage-class=STORAGE_CLASS, -s STORAGE_CLASS] [--canned-acl=PREDEFINED_ACL, --predefined-acl=PREDEFINED_ACL, -a PREDEFINED_ACL - | --preserve-acl, -p] + | --[no-]preserve-acl, -p] [--gzip-in-flight=[FILE_EXTENSIONS,...], -j [FILE_EXTENSIONS,...] | --gzip-in-flight-all, -J | --gzip-local=[FILE_EXTENSIONS,...], -z [FILE_EXTENSIONS,...] @@ -180,16 +180,18 @@ FLAGS At most one of these can be specified: --canned-acl=PREDEFINED_ACL, --predefined-acl=PREDEFINED_ACL, -a PREDEFINED_ACL - Applies predefined, or "canned," ACLs to a copied object. See docs - for a list of predefined ACL constants: + Applies predefined, or "canned," ACLs to a resource. See docs for a + list of predefined ACL constants: https://cloud.google.com/storage/docs/access-control/lists#predefined-acl - --preserve-acl, -p + --[no-]preserve-acl, -p Preserves ACLs when copying in the cloud. This option is Google Cloud Storage-only, and you need OWNER access to all copied objects. If all objects in the destination bucket should have the same ACL, you can also set a default object ACL on that bucket instead of using this - flag. + flag. Preserving ACLs is the default behavior for updating existing + objects. Use --preserve-acl to enable and --no-preserve-acl to + disable. At most one of these can be specified: diff --git a/gcloud/storage/objects/update b/gcloud/storage/objects/update index 3c1eb7061..fa7bfe434 100644 --- a/gcloud/storage/objects/update +++ b/gcloud/storage/objects/update @@ -3,8 +3,11 @@ NAME SYNOPSIS gcloud storage objects update [URL ...] [--continue-on-error, -c] - [--preserve-acl, -p] [--read-paths-from-stdin, -I] - [--recursive, -R, -r] [--storage-class=STORAGE_CLASS, -s STORAGE_CLASS] + [--read-paths-from-stdin, -I] [--recursive, -R, -r] + [--storage-class=STORAGE_CLASS, -s STORAGE_CLASS] + [--canned-acl=PREDEFINED_ACL, + --predefined-acl=PREDEFINED_ACL, -a PREDEFINED_ACL + | --[no-]preserve-acl, -p] [--clear-encryption-key --decryption-keys=[DECRYPTION_KEY,...] --encryption-key=ENCRYPTION_KEY] [--cache-control=CACHE_CONTROL --clear-cache-control @@ -52,13 +55,6 @@ FLAGS flag takes effect only in sequential execution mode (i.e. processor and thread count are set to 1). Parallelism is default. - --preserve-acl, -p - Preserves ACLs when copying in the cloud. This feature is supported for - only Google Cloud Storage and requires OWNER access to all copied - objects. To use the destination bucket's default policy (necessary for - uniform bucket-level access), use --no-preserve-acl. Enabled by - default, use -p to disable. - --read-paths-from-stdin, -I Read the list of objects to update from stdin. No need to enter a source argument if this flag is present. Example: "storage objects @@ -72,6 +68,22 @@ FLAGS Specify the storage class of the object. Using this flag triggers a rewrite of underlying object data. + At most one of these can be specified: + + --canned-acl=PREDEFINED_ACL, --predefined-acl=PREDEFINED_ACL, -a PREDEFINED_ACL + Applies predefined, or "canned," ACLs to a resource. See docs for a + list of predefined ACL constants: + https://cloud.google.com/storage/docs/access-control/lists#predefined-acl + + --[no-]preserve-acl, -p + Preserves ACLs when copying in the cloud. This option is Google Cloud + Storage-only, and you need OWNER access to all copied objects. If all + objects in the destination bucket should have the same ACL, you can + also set a default object ACL on that bucket instead of using this + flag. Preserving ACLs is the default behavior for updating existing + objects. Use --preserve-acl to enable and --no-preserve-acl to + disable. + ENCRYPTION FLAGS --clear-encryption-key Clears the encryption key associated with an object. Using this flag diff --git a/gcloud/tasks/queues/create b/gcloud/tasks/queues/create index 89142b166..bc3fcaf92 100644 --- a/gcloud/tasks/queues/create +++ b/gcloud/tasks/queues/create @@ -81,8 +81,8 @@ FLAGS fails. Must be a string that ends in 's', such as "5s". --routing-override=KEY:VALUE,[...] - If provided, the specified route is used for all tasks in the queue, no - matter what is set is at the task-level. + If provided, the specified App Engine route is used for all tasks in + the queue, no matter what is set is at the task-level. KEY must be at least one of: [service, version, instance]. Any missing keys will use the default. diff --git a/gcloud/tasks/queues/update b/gcloud/tasks/queues/update index 874669fb4..d7f7b67d6 100644 --- a/gcloud/tasks/queues/update +++ b/gcloud/tasks/queues/update @@ -132,8 +132,8 @@ FLAGS Clear the field corresponding to --routing-override. --routing-override=KEY:VALUE,[...] - If provided, the specified route is used for all tasks in the queue, - no matter what is set is at the task-level. + If provided, the specified App Engine route is used for all tasks in + the queue, no matter what is set is at the task-level. KEY must be at least one of: [service, version, instance]. Any missing keys will use the default.