gcloud: Wed Mar 29 10:40:15 UTC 2023

gcloud/certificate-manager/certificates/create

@@ -6,7 +6,8 @@ SYNOPSIS
         (CERTIFICATE : --location=LOCATION)
         (--certificate-file=CERTIFICATE_FILE
           --private-key-file=PRIVATE_KEY_FILE | [--domains=[DOMAINS,...]
-          : --dns-authorizations=[DNS_AUTHORIZATIONS,...]]) [--async]
+          : --dns-authorizations=[DNS_AUTHORIZATIONS,...]
+          | --issuance-config=ISSUANCE_CONFIG]) [--async]
         [--description=DESCRIPTION] [--labels=[KEY=VALUE,...]]
         [--scope=SCOPE; default="DEFAULT"] [GCLOUD_WIDE_FLAG ...]
 
@@ -103,18 +104,23 @@ REQUIRED FLAGS
             This flag argument must be specified if any of the other arguments
             in this group are specified.
 
-         --dns-authorizations=[DNS_AUTHORIZATIONS,...]
-            Name(s) of the DNS authorizations for each listed domain.
+         At most one of these can be specified:
 
-            Note that each domain requires a matching authorization, and any
-            domain that fails authorization will prevent issuance and/or
-            renewal of the certificate.
+           --dns-authorizations=[DNS_AUTHORIZATIONS,...]
+              Name(s) of the DNS authorizations for each listed domain.
 
-            To reference multiple DNS authorizations, provide a list of comma
-            separated DNS authorization resource names or URLs. For example:
+              Note that each domain requires a matching authorization, and any
+              domain that fails authorization will prevent issuance and/or
+              renewal of the certificate.
 
-                $ gcloud certificate-manager certificates create \
-                     --dns-authorizations=api-example-com,www-example-com
+              To reference multiple DNS authorizations, provide a list of comma
+              separated DNS authorization resource names or URLs. For example:
+
+                  $ gcloud certificate-manager certificates create \
+                       --dns-authorizations=api-example-com,www-example-com
+
+           --issuance-config=ISSUANCE_CONFIG
+              Name of the Certificate Issuance Config to use for issuance.
 
 OPTIONAL FLAGS
      --async

gcloud/certificate-manager/help

@@ -22,6 +22,9 @@ GROUPS
      dns-authorizations
         Manage Certificate Manager DNS authorizations.
 
+     issuance-configs
+        Manage Certificate Manager Certificate Issuance Configs.
+
      maps
         Manage Certificate Manager certificate maps.
 

gcloud/certificate-manager/issuance-configs/create

@@ -0,0 +1,107 @@
+NAME
+    gcloud certificate-manager issuance-configs create - create a Certificate
+        Issuance Config
+
+SYNOPSIS
+    gcloud certificate-manager issuance-configs create
+        (CERTIFICATE_ISSUANCE_CONFIG : --location=LOCATION) --ca-pool=CA_POOL
+        [--async] [--description=DESCRIPTION]
+        [--key-algorithm=KEY_ALGORITHM; default="rsa-2048"]
+        [--labels=[KEY=VALUE,...]] [--lifetime=LIFETIME; default="P30D"]
+        [--rotation-window-percentage=ROTATION_WINDOW_PERCENTAGE; default=66]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Create a new Certificate Issuance Config.
+
+EXAMPLES
+    To create a Certificate Issuance Config called my-cic, run:
+
+        $ gcloud certificate-manager issuance-configs create my-cic \
+            --ca-pool=my-ca-pool
+
+POSITIONAL ARGUMENTS
+     CertificateIssuanceConfig resource - Name of the Certificate Issuance
+     Config to create. The arguments in this group can be used to specify the
+     attributes of this resource. (NOTE) Some attributes are not given
+     arguments in this group but can be set in other ways. To set the project
+     attribute:
+      ◆ provide the argument certificate_issuance_config on the command line
+        with a fully specified name;
+      ◆ set the property core/project;
+      ◆ provide the argument --project on the command line.
+
+     This must be specified.
+
+       CERTIFICATE_ISSUANCE_CONFIG
+          ID of the certificateIssuanceConfig or fully qualified identifier for
+          the certificateIssuanceConfig. To set the certificate_issuance_config
+          attribute:
+          ▸ provide the argument certificate_issuance_config on the command
+            line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          Certificate Manager location. To set the location attribute:
+          ▸ provide the argument certificate_issuance_config on the command
+            line with a fully specified name;
+          ▸ provide the argument --location on the command line;
+          ▸ default value of location is [global].
+
+REQUIRED FLAGS
+     --ca-pool=CA_POOL
+        CA Pool used for issuing certificates. For example:
+
+            $ gcloud certificate-manager issuance-configs create \
+                 --ca-pool=projects/test-project/locations/us-west1/caPools/\
+             my-ca-pool
+
+OPTIONAL FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+     --description=DESCRIPTION
+        Human-readable description of the resource.
+
+     --key-algorithm=KEY_ALGORITHM; default="rsa-2048"
+        Key algorithm to use when generating the private key. Defaults to
+        rsa-2048. KEY_ALGORITHM must be one of: ecdsa-p256, rsa-2048.
+
+     --labels=[KEY=VALUE,...]
+        List of label KEY=VALUE pairs to add.
+
+        Keys must start with a lowercase character and contain only hyphens
+        (-), underscores (_), lowercase characters, and numbers. Values must
+        contain only hyphens (-), underscores (_), lowercase characters, and
+        numbers.
+
+     --lifetime=LIFETIME; default="P30D"
+        Lifetime of issued certificates in ISO 8601 format. Use gcloud topic
+        datetimes for details. Defaults to P30D.
+
+     --rotation-window-percentage=ROTATION_WINDOW_PERCENTAGE; default=66
+        How long along the lifetime of the ceritificate to renew, expressed as
+        a percentage. Defaults to 66.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the certificatemanager/v1 API. The full documentation for
+    this API can be found at: https://cloud.google.com/certificate-manager
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha certificate-manager issuance-configs create
+
+        $ gcloud beta certificate-manager issuance-configs create
+

gcloud/certificate-manager/issuance-configs/delete

@@ -0,0 +1,71 @@
+NAME
+    gcloud certificate-manager issuance-configs delete - delete a Certificate
+        Issuance Config
+
+SYNOPSIS
+    gcloud certificate-manager issuance-configs delete
+        (CERTIFICATE_ISSUANCE_CONFIG : --location=LOCATION) [--async]
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Delete a Certificate Issuance Config.
+
+EXAMPLES
+    To delete a Certificate Issuance Config called my-cic, run:
+
+        $ gcloud certificate-manager issuance-configs delete my-cic
+
+POSITIONAL ARGUMENTS
+     CertificateIssuanceConfig resource - Name of the CertificateIssuanceConfig
+     to delete. The arguments in this group can be used to specify the
+     attributes of this resource. (NOTE) Some attributes are not given
+     arguments in this group but can be set in other ways. To set the project
+     attribute:
+      ◆ provide the argument certificate_issuance_config on the command line
+        with a fully specified name;
+      ◆ set the property core/project;
+      ◆ provide the argument --project on the command line.
+
+     This must be specified.
+
+       CERTIFICATE_ISSUANCE_CONFIG
+          ID of the certificateIssuanceConfig or fully qualified identifier for
+          the certificateIssuanceConfig. To set the certificate_issuance_config
+          attribute:
+          ▸ provide the argument certificate_issuance_config on the command
+            line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          Certificate Manager location. To set the location attribute:
+          ▸ provide the argument certificate_issuance_config on the command
+            line with a fully specified name;
+          ▸ provide the argument --location on the command line;
+          ▸ default value of location is [global].
+
+FLAGS
+     --async
+        Return immediately, without waiting for the operation in progress to
+        complete.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the certificatemanager/v1 API. The full documentation for
+    this API can be found at: https://cloud.google.com/certificate-manager
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha certificate-manager issuance-configs delete
+
+        $ gcloud beta certificate-manager issuance-configs delete
+

gcloud/certificate-manager/issuance-configs/describe

@@ -0,0 +1,66 @@
+NAME
+    gcloud certificate-manager issuance-configs describe - show details about a
+        Certificate Issuance Config
+
+SYNOPSIS
+    gcloud certificate-manager issuance-configs describe
+        (CERTIFICATE_ISSUANCE_CONFIG : --location=LOCATION)
+        [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Show details about a Certificate Issuance Config.
+
+EXAMPLES
+    To show details about an existing Certificate Issuance Config my-cic, run:
+
+        $ gcloud certificate-manager issuance-configs describe my-cic
+
+POSITIONAL ARGUMENTS
+     CertificateIssuanceConfig resource - CertificateIssuanceConfig you want to
+     describe. The arguments in this group can be used to specify the
+     attributes of this resource. (NOTE) Some attributes are not given
+     arguments in this group but can be set in other ways. To set the project
+     attribute:
+      ◆ provide the argument certificate_issuance_config on the command line
+        with a fully specified name;
+      ◆ set the property core/project;
+      ◆ provide the argument --project on the command line.
+
+     This must be specified.
+
+       CERTIFICATE_ISSUANCE_CONFIG
+          ID of the certificateIssuanceConfig or fully qualified identifier for
+          the certificateIssuanceConfig. To set the certificate_issuance_config
+          attribute:
+          ▸ provide the argument certificate_issuance_config on the command
+            line.
+
+          This positional argument must be specified if any of the other
+          arguments in this group are specified.
+
+       --location=LOCATION
+          Certificate Manager location. To set the location attribute:
+          ▸ provide the argument certificate_issuance_config on the command
+            line with a fully specified name;
+          ▸ provide the argument --location on the command line;
+          ▸ default value of location is [global].
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the certificatemanager/v1 API. The full documentation for
+    this API can be found at: https://cloud.google.com/certificate-manager
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha certificate-manager issuance-configs describe
+
+        $ gcloud beta certificate-manager issuance-configs describe
+

gcloud/certificate-manager/issuance-configs/help

@@ -0,0 +1,37 @@
+NAME
+    gcloud certificate-manager issuance-configs - manage Certificate Manager
+        Certificate Issuance Configs
+
+SYNOPSIS
+    gcloud certificate-manager issuance-configs COMMAND [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    Commands for managing Certificate Issuance Configs.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --help.
+
+    Run $ gcloud help for details.
+
+COMMANDS
+    COMMAND is one of the following:
+
+     create
+        Create a Certificate Issuance Config.
+
+     delete
+        Delete a Certificate Issuance Config.
+
+     describe
+        Show details about a Certificate Issuance Config.
+
+     list
+        List all Certificate Issuance Configs in a project.
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha certificate-manager issuance-configs
+
+        $ gcloud beta certificate-manager issuance-configs
+

gcloud/certificate-manager/issuance-configs/list

@@ -0,0 +1,85 @@
+NAME
+    gcloud certificate-manager issuance-configs list - list all Certificate
+        Issuance Configs in a project
+
+SYNOPSIS
+    gcloud certificate-manager issuance-configs list [--location=LOCATION]
+        [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE]
+        [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...]
+
+DESCRIPTION
+    List existing Certificate Issuance Configs.
+
+EXAMPLES
+    To list existing Certificate Issuance Configs, run:
+
+        $ gcloud certificate-manager issuance-configs list
+
+FLAGS
+     Location resource - Location (defaults to global) of the resources. This
+     represents a Cloud resource. (NOTE) Some attributes are not given
+     arguments in this group but can be set in other ways. To set the project
+     attribute:
+      ◆ provide the argument --location on the command line with a fully
+        specified name;
+      ◆ default value of location is [global] with a fully specified name;
+      ◆ set the property core/project;
+      ◆ provide the argument --project on the command line.
+
+       --location=LOCATION
+          ID of the location or fully qualified identifier for the location. To
+          set the location attribute:
+          ▸ provide the argument --location on the command line;
+          ▸ default value of location is [global].
+
+LIST COMMAND FLAGS
+     --filter=EXPRESSION
+        Apply a Boolean filter EXPRESSION to each resource item to be listed.
+        If the expression evaluates True, then that item is listed. For more
+        details and examples of filter expressions, run $ gcloud topic filters.
+        This flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --limit=LIMIT
+        Maximum number of resources to list. The default is unlimited. This
+        flag interacts with other flags that are applied in this order:
+        --flatten, --sort-by, --filter, --limit.
+
+     --page-size=PAGE_SIZE
+        Some services group resource list output into pages. This flag
+        specifies the maximum number of resources per page. The default is
+        determined by the service if it supports paging, otherwise it is
+        unlimited (no paging). Paging may be applied before or after --filter
+        and --limit depending on the service.
+
+     --sort-by=[FIELD,...]
+        Comma-separated list of resource field key names to sort by. The
+        default order is ascending. Prefix a field with ``~'' for descending
+        order on that field. This flag interacts with other flags that are
+        applied in this order: --flatten, --sort-by, --filter, --limit.
+
+     --uri
+        Print a list of resource URIs instead of the default output, and change
+        the command output to a list of URIs. If this flag is used with
+        --format, the formatting is applied on this URI list. To display URIs
+        alongside other keys instead, use the uri() transform.
+
+GCLOUD WIDE FLAGS
+    These flags are available to all commands: --access-token-file, --account,
+    --billing-project, --configuration, --flags-file, --flatten, --format,
+    --help, --impersonate-service-account, --log-http, --project, --quiet,
+    --trace-token, --user-output-enabled, --verbosity.
+
+    Run $ gcloud help for details.
+
+API REFERENCE
+    This command uses the certificatemanager/v1 API. The full documentation for
+    this API can be found at: https://cloud.google.com/certificate-manager
+
+NOTES
+    These variants are also available:
+
+        $ gcloud alpha certificate-manager issuance-configs list
+
+        $ gcloud beta certificate-manager issuance-configs list
+