From 6c8d2eb0249295de3f0c1b7c2381a1d19ae810cf Mon Sep 17 00:00:00 2001 From: Automated Date: Thu, 7 Sep 2023 10:42:28 +0000 Subject: [PATCH] gcloud: Thu Sep 7 10:42:28 UTC 2023 --- gcloud/_version | 8 +- gcloud/alpha/builds/submit | 23 +- .../alpha/compute/tpus/queued-resources/scp | 34 ++- .../alpha/compute/tpus/queued-resources/ssh | 26 +- gcloud/alpha/compute/tpus/tpu-vm/scp | 20 +- gcloud/alpha/compute/tpus/tpu-vm/ssh | 20 +- gcloud/alpha/compute/url-maps/help | 4 +- gcloud/alpha/compute/url-maps/validate | 7 +- .../clusters/generate-install-manifest | 21 +- .../container/attached/clusters/register | 32 +- .../alpha/container/attached/clusters/update | 54 +++- gcloud/alpha/container/aws/clusters/create | 11 +- gcloud/alpha/container/aws/clusters/update | 11 +- gcloud/alpha/container/aws/node-pools/create | 8 +- gcloud/alpha/container/azure/clusters/create | 6 +- gcloud/alpha/container/azure/clusters/update | 8 +- .../container/bare-metal/node-pools/create | 5 +- .../container/bare-metal/node-pools/update | 4 + .../bare-metal/standalone-clusters/unenroll | 6 +- .../binauthz/policy/export-system-policy | 19 +- gcloud/alpha/container/clusters/create | 50 ++-- gcloud/alpha/container/clusters/create-auto | 6 +- gcloud/alpha/container/clusters/update | 69 ++--- gcloud/alpha/container/fleet/create | 25 +- .../fleet/memberships/generate-gateway-rbac | 37 ++- gcloud/alpha/container/fleet/update | 25 +- gcloud/alpha/container/hub/create | 25 +- .../hub/memberships/generate-gateway-rbac | 37 ++- gcloud/alpha/container/hub/update | 25 +- gcloud/alpha/dataproc/clusters/create | 4 +- .../workflow-templates/set-managed-cluster | 4 +- gcloud/alpha/deploy/get-config | 53 ++++ gcloud/alpha/deploy/help | 4 + .../edge-cloud/container/clusters/create | 17 +- gcloud/alpha/filestore/instances/create | 7 +- gcloud/alpha/filestore/instances/update | 187 ++++++------ gcloud/alpha/firestore/backups/delete | 44 +++ gcloud/alpha/firestore/backups/describe | 46 +++ gcloud/alpha/firestore/backups/help | 39 +++ gcloud/alpha/firestore/backups/list | 75 +++++ .../alpha/firestore/backups/schedules/create | 85 ++++++ .../alpha/firestore/backups/schedules/delete | 48 +++ .../firestore/backups/schedules/describe | 48 +++ gcloud/alpha/firestore/backups/schedules/help | 39 +++ gcloud/alpha/firestore/backups/schedules/list | 68 +++++ .../alpha/firestore/backups/schedules/update | 59 ++++ gcloud/alpha/firestore/databases/help | 3 + gcloud/alpha/firestore/databases/restore | 50 ++++ gcloud/alpha/firestore/help | 3 + gcloud/alpha/functions/local/deploy | 130 ++++++++- .../alpha/healthcare/dicom-stores/import/gcs | 16 +- gcloud/alpha/infra-manager/deployments/apply | 9 +- .../infra-manager/deployments/export-lock | 2 +- .../deployments/export-statefile | 2 +- .../deployments/import-statefile | 2 +- gcloud/alpha/infra-manager/deployments/lock | 2 +- gcloud/alpha/infra-manager/deployments/unlock | 2 +- gcloud/alpha/iot/devices/commands/help | 6 +- gcloud/alpha/iot/devices/commands/send | 5 +- gcloud/alpha/iot/devices/configs/describe | 5 +- gcloud/alpha/iot/devices/configs/get-value | 5 +- gcloud/alpha/iot/devices/configs/help | 16 +- gcloud/alpha/iot/devices/configs/list | 7 +- gcloud/alpha/iot/devices/configs/update | 6 +- gcloud/alpha/iot/devices/create | 5 +- gcloud/alpha/iot/devices/credentials/clear | 4 +- gcloud/alpha/iot/devices/credentials/create | 6 +- gcloud/alpha/iot/devices/credentials/delete | 4 +- gcloud/alpha/iot/devices/credentials/describe | 4 +- gcloud/alpha/iot/devices/credentials/help | 18 +- gcloud/alpha/iot/devices/credentials/list | 4 +- gcloud/alpha/iot/devices/credentials/update | 4 +- gcloud/alpha/iot/devices/delete | 5 +- gcloud/alpha/iot/devices/describe | 5 +- gcloud/alpha/iot/devices/gateways/bind | 5 +- gcloud/alpha/iot/devices/gateways/help | 11 +- .../iot/devices/gateways/list-bound-devices | 5 +- gcloud/alpha/iot/devices/gateways/unbind | 5 +- gcloud/alpha/iot/devices/help | 26 +- gcloud/alpha/iot/devices/list | 5 +- gcloud/alpha/iot/devices/states/help | 8 +- gcloud/alpha/iot/devices/states/list | 8 +- gcloud/alpha/iot/devices/update | 7 +- gcloud/alpha/iot/help | 10 +- .../iot/registries/add-iam-policy-binding | 7 +- gcloud/alpha/iot/registries/create | 5 +- gcloud/alpha/iot/registries/credentials/clear | 4 +- .../alpha/iot/registries/credentials/create | 9 +- .../alpha/iot/registries/credentials/delete | 4 +- .../alpha/iot/registries/credentials/describe | 4 +- gcloud/alpha/iot/registries/credentials/help | 16 +- gcloud/alpha/iot/registries/credentials/list | 4 +- gcloud/alpha/iot/registries/delete | 5 +- gcloud/alpha/iot/registries/describe | 5 +- gcloud/alpha/iot/registries/get-iam-policy | 7 +- gcloud/alpha/iot/registries/help | 26 +- gcloud/alpha/iot/registries/list | 5 +- .../iot/registries/remove-iam-policy-binding | 8 +- gcloud/alpha/iot/registries/set-iam-policy | 19 +- gcloud/alpha/iot/registries/update | 7 +- gcloud/alpha/logging/copy | 7 +- gcloud/alpha/monitoring/policies/help | 2 +- gcloud/alpha/monitoring/policies/migrate | 7 +- gcloud/alpha/netapp/volumes/create | 8 + gcloud/alpha/netapp/volumes/update | 8 + .../policy-based-routes/create | 29 +- gcloud/alpha/notebooks/instances/diagnose | 6 +- gcloud/alpha/run/deploy | 274 ++++++++++-------- gcloud/alpha/run/services/update | 217 ++++++++------ gcloud/alpha/services/disable | 63 ---- gcloud/alpha/services/enable | 59 ---- gcloud/alpha/services/help | 6 - gcloud/alpha/sql/instances/create | 7 +- gcloud/alpha/sql/instances/patch | 7 +- gcloud/alpha/storage/buckets/update | 16 +- gcloud/alpha/storage/cat | 2 +- gcloud/alpha/storage/cp | 6 +- gcloud/alpha/storage/hash | 2 +- gcloud/alpha/storage/ls | 2 +- gcloud/alpha/storage/mv | 6 +- gcloud/alpha/storage/objects/describe | 2 +- gcloud/alpha/storage/objects/list | 2 +- gcloud/alpha/storage/objects/update | 22 +- gcloud/alpha/storage/rsync | 4 +- gcloud/beta/builds/submit | 23 +- gcloud/beta/compute/commitments/create | 8 +- gcloud/beta/compute/instance-templates/create | 4 + gcloud/beta/compute/instance-templates/delete | 12 +- .../beta/compute/instance-templates/describe | 13 +- gcloud/beta/compute/instance-templates/list | 15 +- gcloud/beta/compute/url-maps/help | 4 +- gcloud/beta/compute/url-maps/validate | 7 +- gcloud/beta/container/clusters/create | 50 ++-- gcloud/beta/container/clusters/create-auto | 6 +- gcloud/beta/container/clusters/update | 69 ++--- gcloud/beta/container/fleet/create | 25 +- .../fleet/memberships/generate-gateway-rbac | 37 ++- gcloud/beta/container/fleet/update | 25 +- gcloud/beta/container/hub/create | 25 +- .../hub/memberships/generate-gateway-rbac | 37 ++- gcloud/beta/container/hub/update | 25 +- gcloud/beta/dataproc/clusters/create | 4 +- .../workflow-templates/set-managed-cluster | 4 +- gcloud/beta/deploy/get-config | 51 ++++ gcloud/beta/deploy/help | 3 + gcloud/beta/filestore/instances/create | 7 +- gcloud/beta/filestore/instances/update | 167 ++++++----- gcloud/beta/firestore/databases/create | 18 +- .../beta/healthcare/dicom-stores/import/gcs | 16 +- gcloud/beta/iot/devices/commands/help | 6 +- gcloud/beta/iot/devices/commands/send | 5 +- gcloud/beta/iot/devices/configs/describe | 5 +- gcloud/beta/iot/devices/configs/get-value | 5 +- gcloud/beta/iot/devices/configs/help | 16 +- gcloud/beta/iot/devices/configs/list | 8 +- gcloud/beta/iot/devices/configs/update | 6 +- gcloud/beta/iot/devices/create | 5 +- gcloud/beta/iot/devices/credentials/clear | 4 +- gcloud/beta/iot/devices/credentials/create | 6 +- gcloud/beta/iot/devices/credentials/delete | 4 +- gcloud/beta/iot/devices/credentials/describe | 4 +- gcloud/beta/iot/devices/credentials/help | 18 +- gcloud/beta/iot/devices/credentials/list | 4 +- gcloud/beta/iot/devices/credentials/update | 4 +- gcloud/beta/iot/devices/delete | 7 +- gcloud/beta/iot/devices/describe | 7 +- gcloud/beta/iot/devices/gateways/bind | 5 +- gcloud/beta/iot/devices/gateways/help | 11 +- .../iot/devices/gateways/list-bound-devices | 5 +- gcloud/beta/iot/devices/gateways/unbind | 5 +- gcloud/beta/iot/devices/help | 26 +- gcloud/beta/iot/devices/list | 5 +- gcloud/beta/iot/devices/states/help | 8 +- gcloud/beta/iot/devices/states/list | 12 +- gcloud/beta/iot/devices/update | 7 +- gcloud/beta/iot/help | 10 +- .../iot/registries/add-iam-policy-binding | 5 +- gcloud/beta/iot/registries/create | 5 +- gcloud/beta/iot/registries/credentials/clear | 4 +- gcloud/beta/iot/registries/credentials/create | 9 +- gcloud/beta/iot/registries/credentials/delete | 4 +- .../beta/iot/registries/credentials/describe | 4 +- gcloud/beta/iot/registries/credentials/help | 16 +- gcloud/beta/iot/registries/credentials/list | 4 +- gcloud/beta/iot/registries/delete | 7 +- gcloud/beta/iot/registries/describe | 7 +- gcloud/beta/iot/registries/get-iam-policy | 11 +- gcloud/beta/iot/registries/help | 26 +- gcloud/beta/iot/registries/list | 7 +- .../iot/registries/remove-iam-policy-binding | 5 +- gcloud/beta/iot/registries/set-iam-policy | 23 +- gcloud/beta/iot/registries/update | 7 +- gcloud/beta/logging/copy | 7 +- gcloud/beta/netapp/volumes/create | 8 + gcloud/beta/netapp/volumes/update | 8 + gcloud/beta/notebooks/instances/diagnose | 6 +- gcloud/beta/run/services/replace | 8 +- gcloud/beta/services/disable | 6 +- gcloud/beta/services/enable | 6 +- gcloud/beta/sql/instances/create | 7 +- gcloud/beta/sql/instances/patch | 7 +- gcloud/builds/submit | 23 +- gcloud/compute/commitments/create | 8 +- gcloud/compute/instance-templates/create | 4 + gcloud/compute/instance-templates/delete | 12 +- gcloud/compute/instance-templates/describe | 13 +- gcloud/compute/instance-templates/list | 15 +- gcloud/compute/url-maps/help | 4 +- gcloud/compute/url-maps/validate | 7 +- .../clusters/generate-install-manifest | 21 +- gcloud/container/attached/clusters/register | 32 +- gcloud/container/attached/clusters/update | 56 +++- gcloud/container/aws/clusters/create | 11 +- gcloud/container/aws/clusters/update | 11 +- gcloud/container/aws/node-pools/create | 18 +- gcloud/container/aws/node-pools/update | 8 +- gcloud/container/azure/clusters/create | 6 +- gcloud/container/azure/clusters/update | 5 +- gcloud/container/azure/node-pools/create | 10 +- gcloud/container/azure/node-pools/update | 10 +- gcloud/container/fleet/create | 25 +- .../fleet/memberships/generate-gateway-rbac | 40 ++- gcloud/container/fleet/update | 25 +- gcloud/container/hub/create | 25 +- .../hub/memberships/generate-gateway-rbac | 40 ++- gcloud/container/hub/update | 25 +- gcloud/dataproc/clusters/create | 4 +- .../workflow-templates/set-managed-cluster | 4 +- gcloud/deploy/get-config | 50 ++++ gcloud/deploy/help | 3 + gcloud/filestore/instances/create | 7 +- gcloud/filestore/instances/update | 130 +++++---- gcloud/healthcare/dicom-stores/import/gcs | 16 +- gcloud/iot/devices/commands/help | 6 +- gcloud/iot/devices/commands/send | 3 + gcloud/iot/devices/configs/describe | 4 +- gcloud/iot/devices/configs/get-value | 4 +- gcloud/iot/devices/configs/help | 12 +- gcloud/iot/devices/configs/list | 4 + gcloud/iot/devices/configs/update | 4 + gcloud/iot/devices/create | 3 + gcloud/iot/devices/credentials/clear | 4 +- gcloud/iot/devices/credentials/create | 4 + gcloud/iot/devices/credentials/delete | 4 +- gcloud/iot/devices/credentials/describe | 4 +- gcloud/iot/devices/credentials/help | 16 +- gcloud/iot/devices/credentials/list | 4 +- gcloud/iot/devices/credentials/update | 4 +- gcloud/iot/devices/delete | 7 +- gcloud/iot/devices/describe | 7 +- gcloud/iot/devices/gateways/bind | 3 + gcloud/iot/devices/gateways/help | 10 +- .../iot/devices/gateways/list-bound-devices | 3 + gcloud/iot/devices/gateways/unbind | 3 + gcloud/iot/devices/help | 24 +- gcloud/iot/devices/list | 3 + gcloud/iot/devices/states/help | 6 +- gcloud/iot/devices/states/list | 7 + gcloud/iot/devices/update | 7 +- gcloud/iot/help | 8 +- gcloud/iot/registries/create | 3 + gcloud/iot/registries/credentials/clear | 4 +- gcloud/iot/registries/credentials/create | 7 + gcloud/iot/registries/credentials/delete | 4 +- gcloud/iot/registries/credentials/describe | 4 +- gcloud/iot/registries/credentials/help | 14 +- gcloud/iot/registries/credentials/list | 4 +- gcloud/iot/registries/delete | 7 +- gcloud/iot/registries/describe | 7 +- gcloud/iot/registries/get-iam-policy | 7 + gcloud/iot/registries/help | 20 +- gcloud/iot/registries/list | 7 +- gcloud/iot/registries/set-iam-policy | 7 + gcloud/iot/registries/update | 7 +- gcloud/logging/copy | 7 +- gcloud/netapp/volumes/create | 8 + gcloud/netapp/volumes/update | 8 + .../hubs/groups/add-iam-policy-binding | 85 ++++++ .../network-connectivity/hubs/groups/describe | 58 ++++ .../hubs/groups/get-iam-policy | 89 ++++++ gcloud/network-connectivity/hubs/groups/help | 35 +++ gcloud/network-connectivity/hubs/groups/list | 77 +++++ .../hubs/groups/remove-iam-policy-binding | 86 ++++++ .../hubs/groups/set-iam-policy | 69 +++++ gcloud/network-connectivity/hubs/help | 3 + .../policy-based-routes/create | 28 +- .../service-connection-policies/help | 3 + .../service-connection-policies/update | 106 +++++++ gcloud/notebooks/instances/diagnose | 6 +- gcloud/notebooks/runtimes/diagnose | 6 +- gcloud/policy-intelligence/help | 8 +- .../troubleshoot-policy/help | 23 ++ .../troubleshoot-policy/iam | 97 +++++++ gcloud/services/disable | 4 +- gcloud/services/enable | 4 +- gcloud/sql/instances/create | 7 + gcloud/sql/instances/patch | 7 + gcloud/storage/buckets/update | 16 +- gcloud/storage/cat | 2 +- gcloud/storage/cp | 6 +- gcloud/storage/hash | 2 +- gcloud/storage/ls | 2 +- gcloud/storage/mv | 6 +- gcloud/storage/objects/describe | 2 +- gcloud/storage/objects/list | 2 +- gcloud/storage/objects/update | 22 +- gcloud/storage/rsync | 4 +- 307 files changed, 4053 insertions(+), 1615 deletions(-) create mode 100644 gcloud/alpha/deploy/get-config create mode 100644 gcloud/alpha/firestore/backups/delete create mode 100644 gcloud/alpha/firestore/backups/describe create mode 100644 gcloud/alpha/firestore/backups/help create mode 100644 gcloud/alpha/firestore/backups/list create mode 100644 gcloud/alpha/firestore/backups/schedules/create create mode 100644 gcloud/alpha/firestore/backups/schedules/delete create mode 100644 gcloud/alpha/firestore/backups/schedules/describe create mode 100644 gcloud/alpha/firestore/backups/schedules/help create mode 100644 gcloud/alpha/firestore/backups/schedules/list create mode 100644 gcloud/alpha/firestore/backups/schedules/update create mode 100644 gcloud/alpha/firestore/databases/restore delete mode 100644 gcloud/alpha/services/disable delete mode 100644 gcloud/alpha/services/enable create mode 100644 gcloud/beta/deploy/get-config create mode 100644 gcloud/deploy/get-config create mode 100644 gcloud/network-connectivity/hubs/groups/add-iam-policy-binding create mode 100644 gcloud/network-connectivity/hubs/groups/describe create mode 100644 gcloud/network-connectivity/hubs/groups/get-iam-policy create mode 100644 gcloud/network-connectivity/hubs/groups/help create mode 100644 gcloud/network-connectivity/hubs/groups/list create mode 100644 gcloud/network-connectivity/hubs/groups/remove-iam-policy-binding create mode 100644 gcloud/network-connectivity/hubs/groups/set-iam-policy create mode 100644 gcloud/network-connectivity/service-connection-policies/update create mode 100644 gcloud/policy-intelligence/troubleshoot-policy/help create mode 100644 gcloud/policy-intelligence/troubleshoot-policy/iam diff --git a/gcloud/_version b/gcloud/_version index 18e20351f..efb50789e 100644 --- a/gcloud/_version +++ b/gcloud/_version @@ -1,8 +1,8 @@ -Google Cloud SDK 444.0.0 -alpha 2023.08.22 -beta 2023.08.22 +Google Cloud SDK 445.0.0 +alpha 2023.09.01 +beta 2023.09.01 bq 2.0.97 bundled-python3-unix 3.9.16 -core 2023.08.22 +core 2023.09.01 gcloud-crc32c 1.0.0 gsutil 5.25 diff --git a/gcloud/alpha/builds/submit b/gcloud/alpha/builds/submit index a62523e85..3619c3bdb 100644 --- a/gcloud/alpha/builds/submit +++ b/gcloud/alpha/builds/submit @@ -3,12 +3,12 @@ NAME SYNOPSIS gcloud alpha builds submit [[SOURCE] --no-source] [--async] [--no-cache] - [--default-buckets-behavior=DEFAULT_BUCKETS_BEHAVIOR] + [--default-buckets-behavior=DEFAULT_BUCKETS_BEHAVIOR] [--dir=DIR] [--disk-size=DISK_SIZE] [--gcs-log-dir=GCS_LOG_DIR] [--gcs-source-staging-dir=GCS_SOURCE_STAGING_DIR] [--git-source-dir=GIT_SOURCE_DIR] [--git-source-revision=GIT_SOURCE_REVISION] [--ignore-file=IGNORE_FILE] - [--machine-type=MACHINE_TYPE] [--region=REGION] + [--machine-type=MACHINE_TYPE] [--region=REGION] [--revision=REVISION] [--substitutions=[KEY=VALUE,...]] [--suppress-logs] [--timeout=TIMEOUT] [--worker-pool=WORKER_POOL] [--config=CONFIG; default="cloudbuild.yaml" @@ -77,6 +77,13 @@ FLAGS How default buckets are setup. DEFAULT_BUCKETS_BEHAVIOR must be one of: default-logs-bucket-behavior-unspecified, regional-user-owned-bucket. + --dir=DIR + Directory, relative to the source root, in which to run the build. This + is used when the build source is a 2nd-gen Google Cloud Build + repository resource. This must be a relative path. If a step's dir is + specified and is an absolute path, this value is ignored for that + step's execution. + --disk-size=DISK_SIZE Machine disk size (GB) to run the build. @@ -126,6 +133,18 @@ FLAGS which is the default region to use when working with Cloud Build resources, is used. If builds/region is unset, region is set to global. + --revision=REVISION + Revision to fetch from the Git repository such as a branch, a tag, a + commit SHA, or any Git ref to run the build. This is used when the + build source is a 2nd-gen Google Cloud Build repository resource. + + Cloud Build uses git fetch to fetch the revision from the Git + repository; therefore make sure that the string you provide for + revision is parsable by the command. For information on string values + accepted by git fetch, see + https://git-scm.com/docs/gitrevisions#_specifying_revisions. For + information on git fetch, see https://git-scm.com/docs/git-fetch. + --substitutions=[KEY=VALUE,...] Parameters to be substituted in the build specification. diff --git a/gcloud/alpha/compute/tpus/queued-resources/scp b/gcloud/alpha/compute/tpus/queued-resources/scp index 4d4c03382..d73e84378 100644 --- a/gcloud/alpha/compute/tpus/queued-resources/scp +++ b/gcloud/alpha/compute/tpus/queued-resources/scp @@ -5,7 +5,7 @@ NAME SYNOPSIS gcloud alpha compute tpus queued-resources scp [[USER@]INSTANCE:]SRC [[[USER@]INSTANCE:]SRC ...] [[USER@]INSTANCE:]DEST - [--batch-size=BATCH_SIZE; default="all"] [--compress] [--dry-run] + [--batch-size=BATCH_SIZE; default=64] [--compress] [--dry-run] [--force-key-file-overwrite] [--node=NODE; default="0"] [--plain] [--recurse] [--scp-flag=SCP_FLAG] [--ssh-key-file=SSH_KEY_FILE] [--strict-host-key-checking=STRICT_HOST_KEY_CHECKING] @@ -23,12 +23,18 @@ EXAMPLES $ gcloud alpha compute tpus queued-resources scp ~/my-file my-qr: - To copy a file into all nodes and workers in a Cloud TPU Queued Resource, - run: + To copy a file into all nodes and workers in a Cloud TPU Queued Resource + (with the default batch size), run: $ gcloud alpha compute tpus queued-resources scp ~/my-file my-qr: \ --worker=all --node=all + To copy a file into all nodes and workers in a Cloud TPU Queued Resource + with a batch size of 4, run: + + $ gcloud alpha compute tpus queued-resources scp ~/my-file my-qr: \ + --worker=all --node=all --batch-size=4 + To copy a file into all workers in the first node of a Cloud TPU Queued Resource, run: @@ -53,17 +59,17 @@ POSITIONAL ARGUMENTS Specifies a destination for the source files. FLAGS - --batch-size=BATCH_SIZE; default="all" - Batch size for simultaneous command execution. When using a - comma-separated list (e.g. '1,4,6') or a range (e.g. '1-3') or ``all`` - keyword in --worker flag, it executes the command concurrently in - groups of the batch size. This flag takes a value greater than 0 to - specify the batch size to control the concurrent connections that can - be established with the TPU workers, or the special keyword ``all`` to - allow the concurrent command executions on all the specified workers in - --worker flag. Maximum value of this flag should not be more than the - number of specified workers, otherwise the value will be treated as - ``--batch-size=all``. + --batch-size=BATCH_SIZE; default=64 + Batch size for simultaneous command execution on the client's side. + When using a comma-separated list (e.g. '1,4,6') or a range (e.g. + '1-3') or ``all`` keyword in --worker flag, it executes the command + concurrently in groups of the batch size. This flag takes a value + greater than 0 to specify the batch size to control the concurrent + connections that can be established with the TPU workers, or the + special keyword ``all`` to allow the concurrent command executions on + all the specified workers in --worker flag. Maximum value of this flag + should not be more than the number of specified workers, otherwise the + value will be treated as ``--batch-size=all``. --compress Enable compression. diff --git a/gcloud/alpha/compute/tpus/queued-resources/ssh b/gcloud/alpha/compute/tpus/queued-resources/ssh index 4a4659667..3b88e908d 100644 --- a/gcloud/alpha/compute/tpus/queued-resources/ssh +++ b/gcloud/alpha/compute/tpus/queued-resources/ssh @@ -4,7 +4,7 @@ NAME SYNOPSIS gcloud alpha compute tpus queued-resources ssh [USER@]QR - [--batch-size=BATCH_SIZE; default="all"] [--dry-run] + [--batch-size=BATCH_SIZE; default=64] [--dry-run] [--force-key-file-overwrite] [--node=NODE; default="0"] [--plain] [--ssh-flag=SSH_FLAG] [--ssh-key-file=SSH_KEY_FILE] [--strict-host-key-checking=STRICT_HOST_KEY_CHECKING] @@ -26,7 +26,7 @@ EXAMPLES --command="last boot" To run the same command in all nodes and workers in a Cloud TPU Queued - Resource simultaneously, run: + Resource (with the default batch size), run: $ gcloud alpha compute tpus queued-resources ssh my-qr \ --command="last boot" --worker=all --node=all @@ -57,17 +57,17 @@ POSITIONAL ARGUMENTS --zone=us-central1-a -- -vvv -L 80:%TPU%:80 FLAGS - --batch-size=BATCH_SIZE; default="all" - Batch size for simultaneous command execution. When using a - comma-separated list (e.g. '1,4,6') or a range (e.g. '1-3') or ``all`` - keyword in --worker flag, it executes the command concurrently in - groups of the batch size. This flag takes a value greater than 0 to - specify the batch size to control the concurrent connections that can - be established with the TPU workers, or the special keyword ``all`` to - allow the concurrent command executions on all the specified workers in - --worker flag. Maximum value of this flag should not be more than the - number of specified workers, otherwise the value will be treated as - ``--batch-size=all``. + --batch-size=BATCH_SIZE; default=64 + Batch size for simultaneous command execution on the client's side. + When using a comma-separated list (e.g. '1,4,6') or a range (e.g. + '1-3') or ``all`` keyword in --worker flag, it executes the command + concurrently in groups of the batch size. This flag takes a value + greater than 0 to specify the batch size to control the concurrent + connections that can be established with the TPU workers, or the + special keyword ``all`` to allow the concurrent command executions on + all the specified workers in --worker flag. Maximum value of this flag + should not be more than the number of specified workers, otherwise the + value will be treated as ``--batch-size=all``. --dry-run Print the equivalent scp/ssh command that would be run to stdout, diff --git a/gcloud/alpha/compute/tpus/tpu-vm/scp b/gcloud/alpha/compute/tpus/tpu-vm/scp index 75ec10966..39167e733 100644 --- a/gcloud/alpha/compute/tpus/tpu-vm/scp +++ b/gcloud/alpha/compute/tpus/tpu-vm/scp @@ -45,16 +45,16 @@ POSITIONAL ARGUMENTS FLAGS --batch-size=BATCH_SIZE; default="all" - Batch size for simultaneous command execution. When using a - comma-separated list (e.g. '1,4,6') or a range (e.g. '1-3') or ``all`` - keyword in --worker flag, it executes the command concurrently in - groups of the batch size. This flag takes a value greater than 0 to - specify the batch size to control the concurrent connections that can - be established with the TPU workers, or the special keyword ``all`` to - allow the concurrent command executions on all the specified workers in - --worker flag. Maximum value of this flag should not be more than the - number of specified workers, otherwise the value will be treated as - ``--batch-size=all``. + Batch size for simultaneous command execution on the client's side. + When using a comma-separated list (e.g. '1,4,6') or a range (e.g. + '1-3') or ``all`` keyword in --worker flag, it executes the command + concurrently in groups of the batch size. This flag takes a value + greater than 0 to specify the batch size to control the concurrent + connections that can be established with the TPU workers, or the + special keyword ``all`` to allow the concurrent command executions on + all the specified workers in --worker flag. Maximum value of this flag + should not be more than the number of specified workers, otherwise the + value will be treated as ``--batch-size=all``. --compress Enable compression. diff --git a/gcloud/alpha/compute/tpus/tpu-vm/ssh b/gcloud/alpha/compute/tpus/tpu-vm/ssh index 43ec1ce99..5c213d9a4 100644 --- a/gcloud/alpha/compute/tpus/tpu-vm/ssh +++ b/gcloud/alpha/compute/tpus/tpu-vm/ssh @@ -57,16 +57,16 @@ POSITIONAL ARGUMENTS FLAGS --batch-size=BATCH_SIZE; default="all" - Batch size for simultaneous command execution. When using a - comma-separated list (e.g. '1,4,6') or a range (e.g. '1-3') or ``all`` - keyword in --worker flag, it executes the command concurrently in - groups of the batch size. This flag takes a value greater than 0 to - specify the batch size to control the concurrent connections that can - be established with the TPU workers, or the special keyword ``all`` to - allow the concurrent command executions on all the specified workers in - --worker flag. Maximum value of this flag should not be more than the - number of specified workers, otherwise the value will be treated as - ``--batch-size=all``. + Batch size for simultaneous command execution on the client's side. + When using a comma-separated list (e.g. '1,4,6') or a range (e.g. + '1-3') or ``all`` keyword in --worker flag, it executes the command + concurrently in groups of the batch size. This flag takes a value + greater than 0 to specify the batch size to control the concurrent + connections that can be established with the TPU workers, or the + special keyword ``all`` to allow the concurrent command executions on + all the specified workers in --worker flag. Maximum value of this flag + should not be more than the number of specified workers, otherwise the + value will be treated as ``--batch-size=all``. --dry-run Print the equivalent scp/ssh command that would be run to stdout, diff --git a/gcloud/alpha/compute/url-maps/help b/gcloud/alpha/compute/url-maps/help index 8233dc365..ca58ab203 100644 --- a/gcloud/alpha/compute/url-maps/help +++ b/gcloud/alpha/compute/url-maps/help @@ -5,8 +5,8 @@ SYNOPSIS gcloud alpha compute url-maps GROUP | COMMAND [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) List, create, and delete URL maps for external HTTP(S) Load - Balancing, internal HTTP(S) Load Balancing, and Traffic Director. + (ALPHA) List, create, and delete URL maps for external Application Load + Balancer, internal Application Load Balancer, and Traffic Director. For more information about URL maps, see the URL maps documentation (https://cloud.google.com/load-balancing/docs/url-map-concepts). diff --git a/gcloud/alpha/compute/url-maps/validate b/gcloud/alpha/compute/url-maps/validate index 6f09b398f..eaf071112 100644 --- a/gcloud/alpha/compute/url-maps/validate +++ b/gcloud/alpha/compute/url-maps/validate @@ -18,10 +18,9 @@ EXAMPLES FLAGS --load-balancing-scheme=LOAD_BALANCING_SCHEME - Specifies the load balancer type(s) this validation request is for. Use - EXTERNAL_MANAGED for HTTP/HTTPS External Global Load Balancer with - Advanced Traffic Management. Use EXTERNAL for Classic HTTP/HTTPS - External Global Load Balancer. + Specifies the load balancer type this validation request is for. Use + EXTERNAL_MANAGED for global external Application Load Balancer. Use + EXTERNAL for classic Application Load Balancer. Other load balancer types are not supported. For more information, refer to Choosing a load balancer diff --git a/gcloud/alpha/container/attached/clusters/generate-install-manifest b/gcloud/alpha/container/attached/clusters/generate-install-manifest index 7b30ab6ab..300512068 100644 --- a/gcloud/alpha/container/attached/clusters/generate-install-manifest +++ b/gcloud/alpha/container/attached/clusters/generate-install-manifest @@ -5,7 +5,10 @@ NAME SYNOPSIS gcloud alpha container attached clusters generate-install-manifest (CLUSTER : --location=LOCATION) --platform-version=PLATFORM_VERSION - [--output-file=OUTPUT_FILE] [GCLOUD_WIDE_FLAG ...] + [--output-file=OUTPUT_FILE] + [--proxy-secret-name=PROXY_SECRET_NAME + --proxy-secret-namespace=PROXY_SECRET_NAMESPACE] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Generate Install Manifest for an Attached cluster. @@ -69,6 +72,22 @@ OPTIONAL FLAGS --output-file=OUTPUT_FILE Path to the output file to store manifest. + Proxy config + + --proxy-secret-name=PROXY_SECRET_NAME + Name of the Kubernetes secret that contains the HTTP/HTTPS proxy + configuration. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --proxy-secret-namespace=PROXY_SECRET_NAMESPACE + Namespace of the Kubernetes secret that contains the HTTP/HTTPS proxy + configuration. + + This flag argument must be specified if any of the other arguments in + this group are specified. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/container/attached/clusters/register b/gcloud/alpha/container/attached/clusters/register index bf24e3219..e8bec38cd 100644 --- a/gcloud/alpha/container/attached/clusters/register +++ b/gcloud/alpha/container/attached/clusters/register @@ -8,9 +8,13 @@ SYNOPSIS --fleet-project=FLEET_PROJECT --platform-version=PLATFORM_VERSION (--context=CONTEXT : --kubeconfig=KUBECONFIG) (--has-private-issuer | --issuer-url=ISSUER_URL) - [--admin-users=[USER,...]] [--annotations=ANNOTATION,[ANNOTATION,...]] + [--admin-groups=[GROUP,...]] [--admin-users=[USER,...]] + [--annotations=ANNOTATION,[ANNOTATION,...]] + [--binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE] [--description=DESCRIPTION] [--enable-managed-prometheus] [--logging=COMPONENT,[COMPONENT,...]] [--validate-only] + [--proxy-secret-name=PROXY_SECRET_NAME + --proxy-secret-namespace=PROXY_SECRET_NAMESPACE] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -134,14 +138,20 @@ REQUIRED FLAGS Issuer url of the cluster to attach. OPTIONAL FLAGS + --admin-groups=[GROUP,...] + Groups of users that can perform operations as a cluster administrator. + --admin-users=[USER,...] Users that can perform operations as a cluster administrator. - There is no way to completely remove admin users after setting. - --annotations=ANNOTATION,[ANNOTATION,...] Annotations for the cluster. + --binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE + Set Binary Authorization evaluation mode for this cluster. + BINAUTHZ_EVALUATION_MODE must be one of: DISABLED, + PROJECT_SINGLETON_POLICY_ENFORCE. + --description=DESCRIPTION Description for the cluster. @@ -163,6 +173,22 @@ OPTIONAL FLAGS --validate-only Validate the cluster to create, but don't actually perform it. + Proxy config + + --proxy-secret-name=PROXY_SECRET_NAME + Name of the Kubernetes secret that contains the HTTP/HTTPS proxy + configuration. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --proxy-secret-namespace=PROXY_SECRET_NAMESPACE + Namespace of the Kubernetes secret that contains the HTTP/HTTPS proxy + configuration. + + This flag argument must be specified if any of the other arguments in + this group are specified. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/container/attached/clusters/update b/gcloud/alpha/container/attached/clusters/update index 0cc8a9dec..c9d3205e6 100644 --- a/gcloud/alpha/container/attached/clusters/update +++ b/gcloud/alpha/container/attached/clusters/update @@ -4,12 +4,17 @@ NAME SYNOPSIS gcloud alpha container attached clusters update - (CLUSTER : --location=LOCATION) [--admin-users=[USER,...]] + (CLUSTER : --location=LOCATION) [--annotations=ANNOTATION,[ANNOTATION,...]] [--async] + [--binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE] [--clear-description] [--description=DESCRIPTION] [--logging=COMPONENT,[COMPONENT,...]] [--platform-version=PLATFORM_VERSION] [--validate-only] + [--admin-groups=[GROUP,...] | --clear-admin-groups] + [--admin-users=[USER,...] | --clear-admin-users] [--disable-managed-prometheus | --enable-managed-prometheus] + [--proxy-secret-name=PROXY_SECRET_NAME + --proxy-secret-namespace=PROXY_SECRET_NAMESPACE] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -53,11 +58,6 @@ POSITIONAL ARGUMENTS ▸ set the property container_attached/location. FLAGS - --admin-users=[USER,...] - Users that can perform operations as a cluster administrator. - - There is no way to completely remove admin users after setting. - --annotations=ANNOTATION,[ANNOTATION,...] Annotations for the cluster. @@ -65,6 +65,11 @@ FLAGS Return immediately, without waiting for the operation in progress to complete. + --binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE + Set Binary Authorization evaluation mode for this cluster. + BINAUTHZ_EVALUATION_MODE must be one of: DISABLED, + PROJECT_SINGLETON_POLICY_ENFORCE. + --clear-description Clear the description for the cluster. @@ -96,6 +101,27 @@ FLAGS --validate-only Validate the update of the cluster, but don't actually perform it. + Admin groups + + At most one of these can be specified: + + --admin-groups=[GROUP,...] + Groups of users that can perform operations as a cluster + administrator. + + --clear-admin-groups + Clear the admin groups associated with the cluster + + Admin users + + At most one of these can be specified: + + --admin-users=[USER,...] + Users that can perform operations as a cluster administrator. + + --clear-admin-users + Clear the admin users associated with the cluster + Monitoring Config At most one of these can be specified: @@ -106,6 +132,22 @@ FLAGS --enable-managed-prometheus Enable managed collection for Managed Service for Prometheus. + Proxy config + + --proxy-secret-name=PROXY_SECRET_NAME + Name of the Kubernetes secret that contains the HTTP/HTTPS proxy + configuration. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --proxy-secret-namespace=PROXY_SECRET_NAMESPACE + Namespace of the Kubernetes secret that contains the HTTP/HTTPS proxy + configuration. + + This flag argument must be specified if any of the other arguments in + this group are specified. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/container/aws/clusters/create b/gcloud/alpha/container/aws/clusters/create index 102ce001d..15eb27aae 100644 --- a/gcloud/alpha/container/aws/clusters/create +++ b/gcloud/alpha/container/aws/clusters/create @@ -12,8 +12,9 @@ SYNOPSIS --pod-address-cidr-blocks=POD_ADDRESS_CIDR_BLOCKS --role-arn=ROLE_ARN --service-address-cidr-blocks=SERVICE_ADDRESS_CIDR_BLOCKS --subnet-ids=[SUBNET_ID,...] --vpc-id=VPC_ID - [--admin-users=USER,[USER,...]] + [--admin-groups=[GROUP,...]] [--admin-users=USER,[USER,...]] [--annotations=ANNOTATION,[ANNOTATION,...]] [--async] + [--binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE] [--description=DESCRIPTION] [--disable-per-node-pool-sg-rules] [--enable-managed-prometheus] [--instance-placement=INSTANCE_PLACEMENT] [--instance-type=INSTANCE_TYPE] [--logging=COMPONENT,[COMPONENT,...]] @@ -121,6 +122,9 @@ REQUIRED FLAGS VPC associated with the cluster. OPTIONAL FLAGS + --admin-groups=[GROUP,...] + Groups of users that can perform operations as a cluster administrator. + --admin-users=USER,[USER,...] Users that can perform operations as a cluster administrator. If not specified, the value of property core/account is used. @@ -132,6 +136,11 @@ OPTIONAL FLAGS Return immediately, without waiting for the operation in progress to complete. + --binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE + Set Binary Authorization evaluation mode for this cluster. + BINAUTHZ_EVALUATION_MODE must be one of: DISABLED, + PROJECT_SINGLETON_POLICY_ENFORCE. + --description=DESCRIPTION Description for the cluster. diff --git a/gcloud/alpha/container/aws/clusters/update b/gcloud/alpha/container/aws/clusters/update index 35395b9dc..89e30ebae 100644 --- a/gcloud/alpha/container/aws/clusters/update +++ b/gcloud/alpha/container/aws/clusters/update @@ -4,7 +4,8 @@ NAME SYNOPSIS gcloud alpha container aws clusters update (CLUSTER : --location=LOCATION) - [--admin-users=USER,[USER,...]] [--async] + [--admin-groups=[GROUP,...]] [--admin-users=USER,[USER,...]] [--async] + [--binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE] [--cluster-version=CLUSTER_VERSION] [--config-encryption-kms-key-arn=CONFIG_ENCRYPTION_KMS_KEY_ARN] [--iam-instance-profile=IAM_INSTANCE_PROFILE] @@ -68,6 +69,9 @@ POSITIONAL ARGUMENTS ▸ set the property container_aws/location. FLAGS + --admin-groups=[GROUP,...] + Groups of users that can perform operations as a cluster administrator. + --admin-users=USER,[USER,...] Users that can perform operations as a cluster administrator. @@ -75,6 +79,11 @@ FLAGS Return immediately, without waiting for the operation in progress to complete. + --binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE + Set Binary Authorization evaluation mode for this cluster. + BINAUTHZ_EVALUATION_MODE must be one of: DISABLED, + PROJECT_SINGLETON_POLICY_ENFORCE. + --cluster-version=CLUSTER_VERSION Kubernetes version to use for the cluster. diff --git a/gcloud/alpha/container/aws/node-pools/create b/gcloud/alpha/container/aws/node-pools/create index d1bf012d0..301cdbfe6 100644 --- a/gcloud/alpha/container/aws/node-pools/create +++ b/gcloud/alpha/container/aws/node-pools/create @@ -208,10 +208,10 @@ OPTIONAL FLAGS --spot-instance-types=[INSTANCE_TYPE,...] List of AWS EC2 instance types for creating a spot node pool's nodes. - The specified instance types must have the same number of CPUs and - memory. You can use the Amazon EC2 Instance Selector tool - (https://github.com/aws/amazon-ec2-instance-selector) to choose - instance types with matching CPU and memory configurations. + The specified instance types must have the same CPU architecture, the + same number of CPUs and memory. You can use the Amazon EC2 Instance + Selector tool (https://github.com/aws/amazon-ec2-instance-selector) + to choose instance types with matching CPU and memory configurations. Proxy config diff --git a/gcloud/alpha/container/azure/clusters/create b/gcloud/alpha/container/azure/clusters/create index e6994d714..829e4035d 100644 --- a/gcloud/alpha/container/azure/clusters/create +++ b/gcloud/alpha/container/azure/clusters/create @@ -11,7 +11,8 @@ SYNOPSIS --service-address-cidr-blocks=SERVICE_ADDRESS_CIDR_BLOCKS --ssh-public-key=SSH_PUBLIC_KEY --vnet-id=VNET_ID (--client=CLIENT | --azure-application-id=AZURE_APPLICATION_ID - --azure-tenant-id=AZURE_TENANT_ID) [--admin-users=USER,[USER,...]] + --azure-tenant-id=AZURE_TENANT_ID) [--admin-groups=[GROUP,...]] + [--admin-users=USER,[USER,...]] [--annotations=ANNOTATION,[ANNOTATION,...]] [--async] [--config-encryption-key-id=CONFIG_ENCRYPTION_KEY_ID] [--config-encryption-public-key=CONFIG_ENCRYPTION_PUBLIC_KEY] @@ -143,6 +144,9 @@ REQUIRED FLAGS in this group are specified. OPTIONAL FLAGS + --admin-groups=[GROUP,...] + Groups of users that can perform operations as a cluster administrator. + --admin-users=USER,[USER,...] Users that can perform operations as a cluster administrator. If not specified, the value of property core/account is used. diff --git a/gcloud/alpha/container/azure/clusters/update b/gcloud/alpha/container/azure/clusters/update index 812f6014b..51a1ca485 100644 --- a/gcloud/alpha/container/azure/clusters/update +++ b/gcloud/alpha/container/azure/clusters/update @@ -4,8 +4,9 @@ NAME SYNOPSIS gcloud alpha container azure clusters update - (CLUSTER : --location=LOCATION) [--admin-users=USER,[USER,...]] - [--async] [--cluster-version=CLUSTER_VERSION] + (CLUSTER : --location=LOCATION) [--admin-groups=[GROUP,...]] + [--admin-users=USER,[USER,...]] [--async] + [--cluster-version=CLUSTER_VERSION] [--logging=COMPONENT,[COMPONENT,...]] [--ssh-public-key=SSH_PUBLIC_KEY] [--validate-only] [--vm-size=VM_SIZE] [--annotations=ANNOTATION,[ANNOTATION,...] | --clear-annotations] @@ -58,6 +59,9 @@ POSITIONAL ARGUMENTS ▸ set the property container_azure/location. FLAGS + --admin-groups=[GROUP,...] + Groups of users that can perform operations as a cluster administrator. + --admin-users=USER,[USER,...] Users that can perform operations as a cluster administrator. diff --git a/gcloud/alpha/container/bare-metal/node-pools/create b/gcloud/alpha/container/bare-metal/node-pools/create index 3ff3b2539..ea5e5358e 100644 --- a/gcloud/alpha/container/bare-metal/node-pools/create +++ b/gcloud/alpha/container/bare-metal/node-pools/create @@ -10,7 +10,7 @@ SYNOPSIS --disable-serialize-image-pulls --registry-burst=REGISTRY_BURST --registry-pull-qps=REGISTRY_PULL_QPS) [--annotations=[KEY=VALUE,...]] [--async] [--display-name=DISPLAY_NAME] - [--validate-only] [GCLOUD_WIDE_FLAG ...] + [--validate-only] [--version=VERSION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Create a node pool in an Anthos cluster on bare metal. @@ -106,6 +106,9 @@ OPTIONAL FLAGS If set, only validate the request, but do not actually perform the operation. + --version=VERSION + Anthos version for the node pool. Defaults to the user cluster version. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/container/bare-metal/node-pools/update b/gcloud/alpha/container/bare-metal/node-pools/update index fdb75253c..9ab18da7f 100644 --- a/gcloud/alpha/container/bare-metal/node-pools/update +++ b/gcloud/alpha/container/bare-metal/node-pools/update @@ -6,6 +6,7 @@ SYNOPSIS gcloud alpha container bare-metal node-pools update (NODE_POOL : --cluster=CLUSTER --location=LOCATION) [--allow-missing] [--async] [--display-name=DISPLAY_NAME] [--validate-only] + [--version=VERSION] [--node-configs=[labels=LABELS],[node-ip=NODE-IP] --node-labels=[KEY=VALUE,...] --node-taints=[KEY=VALUE:EFFECT,...] --registry-burst=REGISTRY_BURST @@ -78,6 +79,9 @@ FLAGS If set, only validate the request, but do not actually perform the operation. + --version=VERSION + Anthos version for the node pool. Defaults to the user cluster version. + Anthos on bare metal node pool configuration. Populate Bare Metal Node Pool node config. diff --git a/gcloud/alpha/container/bare-metal/standalone-clusters/unenroll b/gcloud/alpha/container/bare-metal/standalone-clusters/unenroll index 6e09af583..603b669c1 100644 --- a/gcloud/alpha/container/bare-metal/standalone-clusters/unenroll +++ b/gcloud/alpha/container/bare-metal/standalone-clusters/unenroll @@ -5,7 +5,7 @@ NAME SYNOPSIS gcloud alpha container bare-metal standalone-clusters unenroll (STANDALONE_CLUSTER : --location=LOCATION) [--allow-missing] [--async] - [GCLOUD_WIDE_FLAG ...] + [--ignore-errors] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Unenroll an Anthos on bare metal standalone cluster. @@ -59,6 +59,10 @@ FLAGS Return immediately, without waiting for the operation in progress to complete. + --ignore-errors + If set, the unenrollment of a bare metal standalone cluster resource + will succeed even if errors occur during unenrollment. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/container/binauthz/policy/export-system-policy b/gcloud/alpha/container/binauthz/policy/export-system-policy index ffad78d65..4a0337142 100644 --- a/gcloud/alpha/container/binauthz/policy/export-system-policy +++ b/gcloud/alpha/container/binauthz/policy/export-system-policy @@ -30,16 +30,17 @@ EXAMPLES FLAGS --location=LOCATION; default="global" The region for which to get the system policy (or "global"). LOCATION - must be one of: global, asia-east1, asia-east2, asia-northeast1, - asia-northeast2, asia-northeast3, asia-south1, asia-south2, - asia-southeast1, asia-southeast2, australia-southeast1, + must be one of: global, africa-south1, asia-east1, asia-east2, + asia-northeast1, asia-northeast2, asia-northeast3, asia-south1, + asia-south2, asia-southeast1, asia-southeast2, australia-southeast1, australia-southeast2, europe-central2, europe-north1, - europe-southwest1, europe-west1, europe-west12, europe-west2, - europe-west3, europe-west4, europe-west5, europe-west6, europe-west8, - europe-west9, me-central1, me-west1, northamerica-northeast1, - northamerica-northeast2, southamerica-east1, southamerica-west1, - us-central1, us-central2, us-east1, us-east4, us-east5, us-east7, - us-south1, us-west1, us-west2, us-west3, us-west4. + europe-southwest1, europe-west1, europe-west10, europe-west12, + europe-west2, europe-west3, europe-west4, europe-west5, europe-west6, + europe-west8, europe-west9, me-central1, me-central2, me-west1, + northamerica-northeast1, northamerica-northeast2, southamerica-east1, + southamerica-west1, us-central1, us-central2, us-east1, us-east4, + us-east5, us-east7, us-south1, us-west1, us-west2, us-west3, us-west4, + us-west8. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/container/clusters/create b/gcloud/alpha/container/clusters/create index 15c1c10cb..e25a1d0ed 100644 --- a/gcloud/alpha/container/clusters/create +++ b/gcloud/alpha/container/clusters/create @@ -71,11 +71,11 @@ SYNOPSIS [--workload-metadata=WORKLOAD_METADATA] [--workload-pool=WORKLOAD_POOL] [--workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING] [--additional-zones=ZONE,[ZONE,...] | --node-locations=ZONE,[ZONE,...]] + [--cluster-dns=CLUSTER_DNS --cluster-dns-domain=CLUSTER_DNS_DOMAIN + --cluster-dns-scope=CLUSTER_DNS_SCOPE] [--binauthz-policy-bindings=[name=BINAUTHZ_POLICY,...] --binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE | --enable-binauthz] - [--cluster-dns=CLUSTER_DNS --cluster-dns-domain=CLUSTER_DNS_DOMAIN - --cluster-dns-scope=CLUSTER_DNS_SCOPE] [--disable-dataplane-v2-metrics | --enable-dataplane-v2-metrics] [[--enable-autoprovisioning : --autoprovisioning-config-file=AUTOPROVISIONING_CONFIG_FILE @@ -1265,7 +1265,8 @@ FLAGS To disable in an existing cluster, explicitly set the flag to --workload-vulnerability-scanning=disabled. - WORKLOAD_VULNERABILITY_SCANNING must be one of: disabled, standard. + WORKLOAD_VULNERABILITY_SCANNING must be one of: disabled, standard, + enterprise. At most one of these can be specified: @@ -1310,28 +1311,6 @@ FLAGS --location us-central1-a \ --node-locations us-central1-a,us-central1-b - Flags for Binary Authorization: - - --binauthz-policy-bindings=[name=BINAUTHZ_POLICY,...] - The relative resource name of the Binary Authorization policy to - audit and/or enforce. GKE policies have the following format: - projects/{project_number}/platforms/gke/policies/{policy_id}. - - At most one of these can be specified: - - --binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE - Enable Binary Authorization for this cluster. - BINAUTHZ_EVALUATION_MODE must be one of: DISABLED, MONITORING, - MONITORING_AND_PROJECT_SINGLETON_POLICY_ENFORCE, POLICY_BINDINGS, - POLICY_BINDINGS_AND_PROJECT_SINGLETON_POLICY_ENFORCE, - PROJECT_SINGLETON_POLICY_ENFORCE. - - --enable-binauthz - (DEPRECATED) Enable Binary Authorization for this cluster. - - The --enable-binauthz flag is deprecated. Please use - --binauthz-evaluation-mode instead. - ClusterDNS --cluster-dns=CLUSTER_DNS @@ -1361,6 +1340,27 @@ FLAGS vpc Configures the Cloud DNS zone to be private to the VPC Network. + Flags for Binary Authorization: + + --binauthz-policy-bindings=[name=BINAUTHZ_POLICY,...] + The relative resource name of the Binary Authorization policy to + audit and/or enforce. GKE policies have the following format: + projects/{project_number}/platforms/gke/policies/{policy_id}. + + At most one of these can be specified: + + --binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE + Enable Binary Authorization for this cluster. + BINAUTHZ_EVALUATION_MODE must be one of: DISABLED, POLICY_BINDINGS, + POLICY_BINDINGS_AND_PROJECT_SINGLETON_POLICY_ENFORCE, + PROJECT_SINGLETON_POLICY_ENFORCE. + + --enable-binauthz + (DEPRECATED) Enable Binary Authorization for this cluster. + + The --enable-binauthz flag is deprecated. Please use + --binauthz-evaluation-mode instead. + At most one of these can be specified: --disable-dataplane-v2-metrics diff --git a/gcloud/alpha/container/clusters/create-auto b/gcloud/alpha/container/clusters/create-auto index d4dd754b2..fa56d46ae 100644 --- a/gcloud/alpha/container/clusters/create-auto +++ b/gcloud/alpha/container/clusters/create-auto @@ -355,14 +355,14 @@ FLAGS To disable in an existing cluster, explicitly set the flag to --workload-vulnerability-scanning=disabled. - WORKLOAD_VULNERABILITY_SCANNING must be one of: disabled, standard. + WORKLOAD_VULNERABILITY_SCANNING must be one of: disabled, standard, + enterprise. Flags for Binary Authorization: --binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE Enable Binary Authorization for this cluster. - BINAUTHZ_EVALUATION_MODE must be one of: DISABLED, MONITORING, - MONITORING_AND_PROJECT_SINGLETON_POLICY_ENFORCE, POLICY_BINDINGS, + BINAUTHZ_EVALUATION_MODE must be one of: DISABLED, POLICY_BINDINGS, POLICY_BINDINGS_AND_PROJECT_SINGLETON_POLICY_ENFORCE, PROJECT_SINGLETON_POLICY_ENFORCE. diff --git a/gcloud/alpha/container/clusters/update b/gcloud/alpha/container/clusters/update index 79e5a4d04..11430fd61 100644 --- a/gcloud/alpha/container/clusters/update +++ b/gcloud/alpha/container/clusters/update @@ -43,6 +43,8 @@ SYNOPSIS | --additional-pod-ipv4-ranges=NAME,[NAME,...] --remove-additional-pod-ipv4-ranges=NAME,[NAME,...] | --additional-zones=[ZONE,...] | --node-locations=ZONE,[ZONE,...] + | --cluster-dns=CLUSTER_DNS --cluster-dns-domain=CLUSTER_DNS_DOMAIN + --cluster-dns-scope=CLUSTER_DNS_SCOPE | --binauthz-policy-bindings=[name=BINAUTHZ_POLICY,...] --binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE | --enable-binauthz | --clear-maintenance-window @@ -58,8 +60,6 @@ SYNOPSIS | --enable-network-egress-metering --enable-resource-consumption-metering --resource-usage-bigquery-dataset=RESOURCE_USAGE_BIGQUERY_DATASET - | --cluster-dns=CLUSTER_DNS --cluster-dns-domain=CLUSTER_DNS_DOMAIN - --cluster-dns-scope=CLUSTER_DNS_SCOPE | --dataplane-v2-observability-mode=DATAPLANE_V2_OBSERVABILITY_MODE --disable-dataplane-v2-metrics | --enable-dataplane-v2-metrics | [--enable-autoprovisioning @@ -647,7 +647,8 @@ REQUIRED FLAGS To disable in an existing cluster, explicitly set the flag to --workload-vulnerability-scanning=disabled. - WORKLOAD_VULNERABILITY_SCANNING must be one of: disabled, standard. + WORKLOAD_VULNERABILITY_SCANNING must be one of: disabled, standard, + enterprise. --additional-pod-ipv4-ranges=NAME,[NAME,...] Additional IP address ranges(by name) for pods that need to be added @@ -716,6 +717,35 @@ REQUIRED FLAGS --location us-central1-a \ --node-locations us-central1-a,us-central1-b + ClusterDNS + + --cluster-dns=CLUSTER_DNS + DNS provider to use for this cluster. CLUSTER_DNS must be one of: + + clouddns + Selects Cloud DNS as the DNS provider for the cluster. + default + Selects the default DNS provider (kube-dns) for the cluster. + kubedns + Selects Kube DNS as the DNS provider for the cluster. + + --cluster-dns-domain=CLUSTER_DNS_DOMAIN + DNS domain for this cluster. The default value is cluster.local. + This is configurable when --cluster-dns=clouddns and + --cluster-dns-scope=vpc are set. The value must be a valid DNS + subdomain as defined in RFC 1123. + + --cluster-dns-scope=CLUSTER_DNS_SCOPE + DNS scope for the Cloud DNS zone created - valid only with + --cluster-dns=clouddns. Defaults to cluster. + + CLUSTER_DNS_SCOPE must be one of: + + cluster + Configures the Cloud DNS zone to be private to the cluster. + vpc + Configures the Cloud DNS zone to be private to the VPC Network. + Flags for Binary Authorization: --binauthz-policy-bindings=[name=BINAUTHZ_POLICY,...] @@ -727,8 +757,8 @@ REQUIRED FLAGS --binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE Enable Binary Authorization for this cluster. - BINAUTHZ_EVALUATION_MODE must be one of: DISABLED, MONITORING, - MONITORING_AND_PROJECT_SINGLETON_POLICY_ENFORCE, POLICY_BINDINGS, + BINAUTHZ_EVALUATION_MODE must be one of: DISABLED, + POLICY_BINDINGS, POLICY_BINDINGS_AND_PROJECT_SINGLETON_POLICY_ENFORCE, PROJECT_SINGLETON_POLICY_ENFORCE. @@ -874,35 +904,6 @@ REQUIRED FLAGS $ gcloud alpha container clusters update example-cluster \ --resource-usage-bigquery-dataset=example_bigquery_dataset_name - ClusterDNS - - --cluster-dns=CLUSTER_DNS - DNS provider to use for this cluster. CLUSTER_DNS must be one of: - - clouddns - Selects Cloud DNS as the DNS provider for the cluster. - default - Selects the default DNS provider (kube-dns) for the cluster. - kubedns - Selects Kube DNS as the DNS provider for the cluster. - - --cluster-dns-domain=CLUSTER_DNS_DOMAIN - DNS domain for this cluster. The default value is cluster.local. - This is configurable when --cluster-dns=clouddns and - --cluster-dns-scope=vpc are set. The value must be a valid DNS - subdomain as defined in RFC 1123. - - --cluster-dns-scope=CLUSTER_DNS_SCOPE - DNS scope for the Cloud DNS zone created - valid only with - --cluster-dns=clouddns. Defaults to cluster. - - CLUSTER_DNS_SCOPE must be one of: - - cluster - Configures the Cloud DNS zone to be private to the cluster. - vpc - Configures the Cloud DNS zone to be private to the VPC Network. - --dataplane-v2-observability-mode=DATAPLANE_V2_OBSERVABILITY_MODE Select Advanced Datapath Observability mode for the cluster. Defaults to DISABLED. diff --git a/gcloud/alpha/container/fleet/create b/gcloud/alpha/container/fleet/create index cad03a207..6d6d162ee 100644 --- a/gcloud/alpha/container/fleet/create +++ b/gcloud/alpha/container/fleet/create @@ -3,10 +3,7 @@ NAME SYNOPSIS gcloud alpha container fleet create [--async] [--display-name=DISPLAY_NAME] - [--labels=[KEY=VALUE,...]] - [--security-posture=SECURITY_POSTURE - --workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING] - [GCLOUD_WIDE_FLAG ...] + [--labels=[KEY=VALUE,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) This command can fail for the following reasons: @@ -39,26 +36,6 @@ FLAGS contain only hyphens (-), underscores (_), lowercase characters, and numbers. - Default cluster configurations to apply across the fleet. - - Security posture config. - - --security-posture=SECURITY_POSTURE - To apply basic security posture to the clusters of the fleet, - - $ gcloud alpha container fleet create --security-posture=basic - - SECURITY_POSTURE must be one of: disabled, basic, enterprise. - - --workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING - To apply basic vulnerability scanning to the clusters of the fleet, - - $ gcloud alpha container fleet create \ - --workload-vulnerability-scanning=disabled - - WORKLOAD_VULNERABILITY_SCANNING must be one of: disabled, basic, - enterprise. - GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/container/fleet/memberships/generate-gateway-rbac b/gcloud/alpha/container/fleet/memberships/generate-gateway-rbac index 65d924171..c384d5b4d 100644 --- a/gcloud/alpha/container/fleet/memberships/generate-gateway-rbac +++ b/gcloud/alpha/container/fleet/memberships/generate-gateway-rbac @@ -4,10 +4,10 @@ NAME SYNOPSIS gcloud alpha container fleet memberships generate-gateway-rbac - [--anthos-support] [--apply] [--context=CONTEXT] - [--kubeconfig=KUBECONFIG] [--membership=MEMBERSHIP] + (--anthos-support | --groups=GROUPS | --users=USERS) [--apply] + [--context=CONTEXT] [--kubeconfig=KUBECONFIG] [--membership=MEMBERSHIP] [--rbac-output-file=RBAC_OUTPUT_FILE] [--revoke] [--role=ROLE] - [--users=USERS] [GCLOUD_WIDE_FLAG ...] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) gcloud alpha container fleet memberships generate-gateway-rbac @@ -85,11 +85,31 @@ EXAMPLES --role=clusterrole/cluster-admin --context=my-cluster-context \ --kubeconfig=/home/user/custom_kubeconfig --apply -FLAGS - --anthos-support - If specified, this command will generate RBAC policy file for anthos - support. + The groups can be provided as a Google identity (only email) or an external + identity (starting with "principalSet://iam.googleapis.com"): + $ gcloud alpha container fleet memberships generate-gateway-rbac \ + --membership=my-cluster \ + --groups=group@example.com,principalSet://iam.googleapis.com/\ + locations/global/workforcePools/pool/group/ExampleGroup \ + --role=clusterrole/cluster-admin --context=my-cluster-context \ + --kubeconfig=/home/user/custom_kubeconfig --apply + +REQUIRED FLAGS + Exactly one of these must be specified: + + --anthos-support + If specified, this command will generate RBAC policy file for anthos + support. + + --groups=GROUPS + Group email address or third-party IAM group principal. + + --users=USERS + User's email address, service account email address, or third-party + IAM subject principal. + +OPTIONAL FLAGS --apply If specified, this command will generate RBAC policy and apply to the specified cluster. @@ -120,9 +140,6 @@ FLAGS --role=ROLE Namespace scoped role or cluster role. - --users=USERS - User's email address or service account email address. - GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/container/fleet/update b/gcloud/alpha/container/fleet/update index 03989c65c..2453daf8e 100644 --- a/gcloud/alpha/container/fleet/update +++ b/gcloud/alpha/container/fleet/update @@ -4,10 +4,7 @@ NAME SYNOPSIS gcloud alpha container fleet update [--async] [--display-name=DISPLAY_NAME] [--update-labels=[KEY=VALUE,...]] - [--clear-labels | --remove-labels=[KEY,...]] - [--security-posture=SECURITY_POSTURE - --workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING] - [GCLOUD_WIDE_FLAG ...] + [--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) This command can fail for the following reasons: @@ -61,26 +58,6 @@ FLAGS silently ignored. If --update-labels is also specified then --update-labels is applied first. - Default cluster configurations to apply across the fleet. - - Security posture config. - - --security-posture=SECURITY_POSTURE - To apply basic security posture to the clusters of the fleet, - - $ gcloud alpha container fleet update --security-posture=basic - - SECURITY_POSTURE must be one of: disabled, basic, enterprise. - - --workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING - To apply basic vulnerability scanning to the clusters of the fleet, - - $ gcloud alpha container fleet update \ - --workload-vulnerability-scanning=disabled - - WORKLOAD_VULNERABILITY_SCANNING must be one of: disabled, basic, - enterprise. - GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/container/hub/create b/gcloud/alpha/container/hub/create index 85eb5503e..1e038706a 100644 --- a/gcloud/alpha/container/hub/create +++ b/gcloud/alpha/container/hub/create @@ -3,10 +3,7 @@ NAME SYNOPSIS gcloud alpha container hub create [--async] [--display-name=DISPLAY_NAME] - [--labels=[KEY=VALUE,...]] - [--security-posture=SECURITY_POSTURE - --workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING] - [GCLOUD_WIDE_FLAG ...] + [--labels=[KEY=VALUE,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) This command can fail for the following reasons: @@ -39,26 +36,6 @@ FLAGS contain only hyphens (-), underscores (_), lowercase characters, and numbers. - Default cluster configurations to apply across the fleet. - - Security posture config. - - --security-posture=SECURITY_POSTURE - To apply basic security posture to the clusters of the fleet, - - $ gcloud alpha container hub create --security-posture=basic - - SECURITY_POSTURE must be one of: disabled, basic, enterprise. - - --workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING - To apply basic vulnerability scanning to the clusters of the fleet, - - $ gcloud alpha container hub create \ - --workload-vulnerability-scanning=disabled - - WORKLOAD_VULNERABILITY_SCANNING must be one of: disabled, basic, - enterprise. - GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/container/hub/memberships/generate-gateway-rbac b/gcloud/alpha/container/hub/memberships/generate-gateway-rbac index eed867bfb..ffcb6a27d 100644 --- a/gcloud/alpha/container/hub/memberships/generate-gateway-rbac +++ b/gcloud/alpha/container/hub/memberships/generate-gateway-rbac @@ -4,10 +4,10 @@ NAME SYNOPSIS gcloud alpha container hub memberships generate-gateway-rbac - [--anthos-support] [--apply] [--context=CONTEXT] - [--kubeconfig=KUBECONFIG] [--membership=MEMBERSHIP] + (--anthos-support | --groups=GROUPS | --users=USERS) [--apply] + [--context=CONTEXT] [--kubeconfig=KUBECONFIG] [--membership=MEMBERSHIP] [--rbac-output-file=RBAC_OUTPUT_FILE] [--revoke] [--role=ROLE] - [--users=USERS] [GCLOUD_WIDE_FLAG ...] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) gcloud alpha container hub memberships generate-gateway-rbac @@ -85,11 +85,31 @@ EXAMPLES --role=clusterrole/cluster-admin --context=my-cluster-context \ --kubeconfig=/home/user/custom_kubeconfig --apply -FLAGS - --anthos-support - If specified, this command will generate RBAC policy file for anthos - support. + The groups can be provided as a Google identity (only email) or an external + identity (starting with "principalSet://iam.googleapis.com"): + $ gcloud alpha container hub memberships generate-gateway-rbac \ + --membership=my-cluster \ + --groups=group@example.com,principalSet://iam.googleapis.com/\ + locations/global/workforcePools/pool/group/ExampleGroup \ + --role=clusterrole/cluster-admin --context=my-cluster-context \ + --kubeconfig=/home/user/custom_kubeconfig --apply + +REQUIRED FLAGS + Exactly one of these must be specified: + + --anthos-support + If specified, this command will generate RBAC policy file for anthos + support. + + --groups=GROUPS + Group email address or third-party IAM group principal. + + --users=USERS + User's email address, service account email address, or third-party + IAM subject principal. + +OPTIONAL FLAGS --apply If specified, this command will generate RBAC policy and apply to the specified cluster. @@ -120,9 +140,6 @@ FLAGS --role=ROLE Namespace scoped role or cluster role. - --users=USERS - User's email address or service account email address. - GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/container/hub/update b/gcloud/alpha/container/hub/update index 5e7a626d1..68d2edd3d 100644 --- a/gcloud/alpha/container/hub/update +++ b/gcloud/alpha/container/hub/update @@ -4,10 +4,7 @@ NAME SYNOPSIS gcloud alpha container hub update [--async] [--display-name=DISPLAY_NAME] [--update-labels=[KEY=VALUE,...]] - [--clear-labels | --remove-labels=[KEY,...]] - [--security-posture=SECURITY_POSTURE - --workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING] - [GCLOUD_WIDE_FLAG ...] + [--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) This command can fail for the following reasons: @@ -61,26 +58,6 @@ FLAGS silently ignored. If --update-labels is also specified then --update-labels is applied first. - Default cluster configurations to apply across the fleet. - - Security posture config. - - --security-posture=SECURITY_POSTURE - To apply basic security posture to the clusters of the fleet, - - $ gcloud alpha container hub update --security-posture=basic - - SECURITY_POSTURE must be one of: disabled, basic, enterprise. - - --workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING - To apply basic vulnerability scanning to the clusters of the fleet, - - $ gcloud alpha container hub update \ - --workload-vulnerability-scanning=disabled - - WORKLOAD_VULNERABILITY_SCANNING must be one of: disabled, basic, - enterprise. - GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/dataproc/clusters/create b/gcloud/alpha/dataproc/clusters/create index 1a620ada7..a10d046d1 100644 --- a/gcloud/alpha/dataproc/clusters/create +++ b/gcloud/alpha/dataproc/clusters/create @@ -761,8 +761,8 @@ FLAGS Multi-node cluster flags --min-num-workers=MIN_NUM_WORKERS - The minimum number of workers nodes to provision for cluster create - operations to succeed. + Minimum number of primary worker nodes to provision for cluster + creation to succeed. --num-secondary-workers=NUM_SECONDARY_WORKERS The number of secondary worker nodes in the cluster. diff --git a/gcloud/alpha/dataproc/workflow-templates/set-managed-cluster b/gcloud/alpha/dataproc/workflow-templates/set-managed-cluster index b023359a3..17c7953d4 100644 --- a/gcloud/alpha/dataproc/workflow-templates/set-managed-cluster +++ b/gcloud/alpha/dataproc/workflow-templates/set-managed-cluster @@ -637,8 +637,8 @@ FLAGS Multi-node cluster flags --min-num-workers=MIN_NUM_WORKERS - The minimum number of workers nodes to provision for cluster create - operations to succeed. + Minimum number of primary worker nodes to provision for cluster + creation to succeed. --num-secondary-workers=NUM_SECONDARY_WORKERS The number of secondary worker nodes in the cluster. diff --git a/gcloud/alpha/deploy/get-config b/gcloud/alpha/deploy/get-config new file mode 100644 index 000000000..3d19ddb34 --- /dev/null +++ b/gcloud/alpha/deploy/get-config @@ -0,0 +1,53 @@ +NAME + gcloud alpha deploy get-config - get the Cloud Deploy config for the + provided region and project + +SYNOPSIS + gcloud alpha deploy get-config [--region=REGION] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Get the Cloud Deploy config for the provided region and project. + +EXAMPLES + To get the config for project test-project in region us-central1: + + $ gcloud alpha deploy get-config --project=test-project \ + --region=us-central1 + +FLAGS + Location resource - The Cloud region of {resource}. This represents a + Cloud resource. (NOTE) Some attributes are not given arguments in this + group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument --region on the command line with a fully + specified name; + ◆ set the property deploy/region with a fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + --region=REGION + ID of the location or fully qualified identifier for the location. + + To set the region attribute: + ▸ provide the argument --region on the command line; + ▸ set the property deploy/region. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud deploy get-config + + $ gcloud beta deploy get-config + diff --git a/gcloud/alpha/deploy/help b/gcloud/alpha/deploy/help index 80209513b..28f172816 100644 --- a/gcloud/alpha/deploy/help +++ b/gcloud/alpha/deploy/help @@ -42,6 +42,10 @@ COMMANDS (ALPHA) Deletes delivery pipeline(s) and target(s) in a yaml configuration. + get-config + (ALPHA) Get the Cloud Deploy config for the provided region and + project. + NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct diff --git a/gcloud/alpha/edge-cloud/container/clusters/create b/gcloud/alpha/edge-cloud/container/clusters/create index c7a37eab4..624f240f2 100644 --- a/gcloud/alpha/edge-cloud/container/clusters/create +++ b/gcloud/alpha/edge-cloud/container/clusters/create @@ -18,9 +18,12 @@ SYNOPSIS [--maintenance-window-end=MAINTENANCE_WINDOW_END] [--maintenance-window-recurrence=MAINTENANCE_WINDOW_RECURRENCE] [--maintenance-window-start=MAINTENANCE_WINDOW_START] + [--release-channel=RELEASE_CHANNEL; + default="RELEASE_CHANNEL_UNSPECIFIED"] [--services-ipv4-cidr=SERVICES_IPV4_CIDR; default="10.96.0.0/12"] [--services-ipv6-cidr=SERVICES_IPV6_CIDR] - [--system-addons-config=SYSTEM_ADDONS_CONFIG] [GCLOUD_WIDE_FLAG ...] + [--system-addons-config=SYSTEM_ADDONS_CONFIG] [--version=VERSION] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Create an Edge Container cluster. @@ -147,6 +150,15 @@ FLAGS (https://www.ietf.org/rfc/rfc3339.txt) format. E.g. "2021-01-01T00:00:00Z" or "2021-01-01T00:00:00-05:00" + --release-channel=RELEASE_CHANNEL; default="RELEASE_CHANNEL_UNSPECIFIED" + Release channel a cluster is subscribed to. It supports two values, + NONE and REGULAR. NONE is used to opt out of any release channel. + Clusters subscribed to the REGULAR channel will be automatically + upgraded to versions that are considered GA quality, and cannot be + manually upgraded. Additionally, if the REGULAR channel is used, a + specific target version cannot be set with the 'version' flag. If left + unspecified, the release channel will default to REGULAR. + --services-ipv4-cidr=SERVICES_IPV4_CIDR; default="10.96.0.0/12" All services in the cluster are assigned an RFC1918 IPv4 address from this block. This field cannot be changed after creation. @@ -164,6 +176,9 @@ FLAGS { "systemAddonsConfig": { "ingress": { "disabled": true, "ipv4_vip": "10.0.0.1" } } } + --version=VERSION + Target cluster version. For example: "1.5.0". + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/filestore/instances/create b/gcloud/alpha/filestore/instances/create index 82fd733f1..b724149a5 100644 --- a/gcloud/alpha/filestore/instances/create +++ b/gcloud/alpha/filestore/instances/create @@ -110,9 +110,10 @@ REQUIRED FLAGS nfs-export-options The NfsExportOptions for the Cloud Filestore instance file share. - Configuring NfsExportOptions is optional. Use the --flags-file flag - to specify the path to a JSON or YAML configuration file that - contains the required NfsExportOptions flags. + Configuring NfsExportOptions is optional and can only be set using + flags-file. Use the --flags-file flag to specify the path to a JSON + or YAML configuration file that contains the required + NfsExportOptions flags. ip-ranges A list of IPv4 addresses or CIDR ranges that are allowed to mount diff --git a/gcloud/alpha/filestore/instances/update b/gcloud/alpha/filestore/instances/update index def817de2..762f17430 100644 --- a/gcloud/alpha/filestore/instances/update +++ b/gcloud/alpha/filestore/instances/update @@ -3,14 +3,14 @@ NAME SYNOPSIS gcloud alpha filestore instances update (INSTANCE : --zone=ZONE) [--async] - [--description=DESCRIPTION] - [--file-share=[capacity=CAPACITY],[name=NAME], + [--description=DESCRIPTION] [--location=LOCATION] [--region=REGION] + [--update-labels=[KEY=VALUE,...]] + [--clear-labels | --remove-labels=[KEY,...]] + [[--file-share=[capacity=CAPACITY],[name=NAME], [nfs-export-options=NFS-EXPORT-OPTIONS], [source-snapshot=SOURCE-SNAPSHOT], - [source-snapshot-region=SOURCE-SNAPSHOT-REGION]] - [--location=LOCATION] [--region=REGION] - [--update-labels=[KEY=VALUE,...]] - [--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...] + [source-snapshot-region=SOURCE-SNAPSHOT-REGION] + : --clear-nfs-export-options]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Update a Filestore instance. @@ -102,89 +102,6 @@ FLAGS --description=DESCRIPTION A description of the Cloud Filestore instance. - --file-share=[capacity=CAPACITY],[name=NAME],[nfs-export-options=NFS-EXPORT-OPTIONS],[source-snapshot=SOURCE-SNAPSHOT],[source-snapshot-region=SOURCE-SNAPSHOT-REGION] - File share configuration for an instance. Specifying both name and - capacity is required. - - capacity - The desired capacity of the volume in GB or TB units. If no - capacity unit is specified, GB is assumed. Acceptable instance - capacities for each tier are as follows: - ▸ BASIC_HDD: 1TB-63.9TB in 1GB increments or its multiples. - ▸ BASIC_SSD: 2.5TB-63.9TB in 1GB increments or its multiples. - ▸ HIGH_SCALE_SSD: 10TB-100TB in 2.5TB increments or its - multiples. - ▸ ZONAL: 1TB-100TB: - ▫ 1TB-9.75TB in 256GB increments or its multiples. - ▫ 10TB-100TB in 2.5TB increments or its multiples. - ▸ ENTERPRISE: 1TB-10TB in 256GB increments or its multiples. - - name - The desired logical name of the volume. - - nfs-export-options - The NfsExportOptions for the Cloud Filestore instance file share. - Configuring NfsExportOptions is optional. Use the --flags-file flag - to specify the path to a JSON or YAML configuration file that - contains the required NfsExportOptions flags. - - ip-ranges - A list of IPv4 addresses or CIDR ranges that are allowed to mount - the file share. IPv4 addresses format: {octet 1}.{octet 2}.{octet - 3}.{octet 4}. CIDR range format: {octet 1}.{octet 2}.{octet - 3}.{octet 4}/{mask size}. Overlapping IP ranges are allowed for all - tiers other than BASIC_HDD and BASIC_SSD. The limit of IP - ranges/addresses for each FileShareConfig among all - NfsExportOptions is 64 per instance. - - access-mode - The type of access allowed for the specified IP-addresses or CIDR - ranges. READ_ONLY: Allows only read requests on the exported file - share. READ_WRITE: Allows both read and write requests on the - exported file share. The default setting is READ_WRITE. - - squash-mode - Enables or disables root squash for the specified IP addresses or - CIDR ranges. NO_ROOT_SQUASH: Disables root squash to allow root - access on the exported file share. ROOT_SQUASH. Enables root squash - to remove root access on the exported file share. The default - setting is NO_ROOT_SQUASH. - - anon_uid - An integer that represents the user ID of anonymous users. Anon_uid - may only be set when squash_mode is set to ROOT_SQUASH. If - NO_ROOT_SQUASH is specified, an error will be returned. The default - value is 65534. - - anon_gid - An integer that represents the group ID of anonymous groups. - Anon_gid may only be set when squash_mode is set to ROOT_SQUASH. If - NO_ROOT_SQUASH is specified, an error will be returned. The default - value is 65534. - - security-flavors - A list of security flavors that are allowed to be used during mount - command in NFSv4.1 filestore instances. The security flavors - supported are: - ◆ SECURITY_FLAVOR_UNSPECIFIED: SecurityFlavor not set. Defaults to - AUTH_SYS. - ◆ AUTH_SYS: The user's UNIX user-id and group-ids are passed in the - clear. - ◆ KRB5: The end-user authentication is done using Kerberos V5. - ◆ KRB5I: KRB5 plus integrity protection (data packets are tamper - proof). - ◆ KRB5P: KRB5I plus privacy protection (data packets are tamper - proof and encrypted). - - source-snapshot - The name of the snapshot to restore from. Supported for BASIC - instances only. - - source-snapshot-region - The region of the source snapshot. If unspecified, it is assumed - that the Filestore snapshot is local and instance-zone will be - used. - --location=LOCATION Location of the Cloud Filestore instance/operation. @@ -220,6 +137,98 @@ FLAGS silently ignored. If --update-labels is also specified then --update-labels is applied first. + Parameters for file-share. + + --file-share=[capacity=CAPACITY],[name=NAME],[nfs-export-options=NFS-EXPORT-OPTIONS],[source-snapshot=SOURCE-SNAPSHOT],[source-snapshot-region=SOURCE-SNAPSHOT-REGION] + File share configuration for an instance. Specifying both name and + capacity is required. + + capacity + The desired capacity of the volume in GB or TB units. If no + capacity unit is specified, GB is assumed. Acceptable instance + capacities for each tier are as follows: + ▸ BASIC_HDD: 1TB-63.9TB in 1GB increments or its multiples. + ▸ BASIC_SSD: 2.5TB-63.9TB in 1GB increments or its multiples. + ▸ HIGH_SCALE_SSD: 10TB-100TB in 2.5TB increments or its multiples. + ▸ ZONAL: 1TB-100TB: + ▫ 1TB-9.75TB in 256GB increments or its multiples. + ▫ 10TB-100TB in 2.5TB increments or its multiples. + ▸ ENTERPRISE: 1TB-10TB in 256GB increments or its multiples. + + name + The desired logical name of the volume. + + nfs-export-options + The NfsExportOptions for the Cloud Filestore instance file share. + Configuring NfsExportOptions is optional and can only be set + using flags-file. Use the --flags-file flag to specify the path + to a JSON or YAML configuration file that contains the required + NfsExportOptions flags. + + ip-ranges + A list of IPv4 addresses or CIDR ranges that are allowed to mount + the file share. IPv4 addresses format: {octet 1}.{octet 2}.{octet + 3}.{octet 4}. CIDR range format: {octet 1}.{octet 2}.{octet + 3}.{octet 4}/{mask size}. Overlapping IP ranges are allowed for + all tiers other than BASIC_HDD and BASIC_SSD. The limit of IP + ranges/addresses for each FileShareConfig among all + NfsExportOptions is 64 per instance. + + access-mode + The type of access allowed for the specified IP-addresses or CIDR + ranges. READ_ONLY: Allows only read requests on the exported file + share. READ_WRITE: Allows both read and write requests on the + exported file share. The default setting is READ_WRITE. + + squash-mode + Enables or disables root squash for the specified IP addresses or + CIDR ranges. NO_ROOT_SQUASH: Disables root squash to allow root + access on the exported file share. ROOT_SQUASH. Enables root + squash to remove root access on the exported file share. The + default setting is NO_ROOT_SQUASH. + + anon_uid + An integer that represents the user ID of anonymous users. + Anon_uid may only be set when squash_mode is set to ROOT_SQUASH. + If NO_ROOT_SQUASH is specified, an error will be returned. The + default value is 65534. + + anon_gid + An integer that represents the group ID of anonymous groups. + Anon_gid may only be set when squash_mode is set to ROOT_SQUASH. + If NO_ROOT_SQUASH is specified, an error will be returned. The + default value is 65534. + + security-flavors + A list of security flavors that are allowed to be used during + mount command in NFSv4.1 filestore instances. The security + flavors supported are: + ◆ SECURITY_FLAVOR_UNSPECIFIED: SecurityFlavor not set. Defaults to + AUTH_SYS. + ◆ AUTH_SYS: The user's UNIX user-id and group-ids are passed in the + clear. + ◆ KRB5: The end-user authentication is done using Kerberos V5. + ◆ KRB5I: KRB5 plus integrity protection (data packets are tamper + proof). + ◆ KRB5P: KRB5I plus privacy protection (data packets are tamper proof + and encrypted). + + source-snapshot + The name of the snapshot to restore from. Supported for BASIC + instances only. + + source-snapshot-region + The region of the source snapshot. If unspecified, it is assumed + that the Filestore snapshot is local and instance-zone will be + used. + + This flag argument must be specified if any of the other + arguments in this group are specified. + + --clear-nfs-export-options + Clears the NfsExportOptions. Must specify --file-share flag if + --clear-nfs-export-options is specified. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/firestore/backups/delete b/gcloud/alpha/firestore/backups/delete new file mode 100644 index 000000000..eec70a1b3 --- /dev/null +++ b/gcloud/alpha/firestore/backups/delete @@ -0,0 +1,44 @@ +NAME + gcloud alpha firestore backups delete - deletes a Cloud Firestore backup + +SYNOPSIS + gcloud alpha firestore backups delete --backup=BACKUP --location=LOCATION + [GCLOUD_WIDE_FLAG ...] + +EXAMPLES + To delete cf9f748a-7980-4703-b1a1-d1ffff591db0 backup in us-east1. + + $ gcloud alpha firestore backups delete --location=us-east1 \ + --backup=cf9f748a-7980-4703-b1a1-d1ffff591db0 + +REQUIRED FLAGS + --backup=BACKUP + The backup to operate on. + + For example, to operate on backup cf9f748a-7980-4703-b1a1-d1ffff591db0: + + $ gcloud alpha firestore backups delete \ + --backup='cf9f748a-7980-4703-b1a1-d1ffff591db0' + + --location=LOCATION + The location to operate on. Available locations are listed at + https://cloud.google.com/firestore/docs/locations. + + For example, to operate on location us-east1: + + $ gcloud alpha firestore backups delete --location='us-east1' + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/firestore/backups/describe b/gcloud/alpha/firestore/backups/describe new file mode 100644 index 000000000..e5405ee76 --- /dev/null +++ b/gcloud/alpha/firestore/backups/describe @@ -0,0 +1,46 @@ +NAME + gcloud alpha firestore backups describe - retrieves information about a + Cloud Firestore backup + +SYNOPSIS + gcloud alpha firestore backups describe --backup=BACKUP --location=LOCATION + [GCLOUD_WIDE_FLAG ...] + +EXAMPLES + To retrieve information about the cf9f748a-7980-4703-b1a1-d1ffff591db0 + backup in us-east1. + + $ gcloud alpha firestore backups describe --location=us-east1 \ + --backup=cf9f748a-7980-4703-b1a1-d1ffff591db0 + +REQUIRED FLAGS + --backup=BACKUP + The backup to operate on. + + For example, to operate on backup cf9f748a-7980-4703-b1a1-d1ffff591db0: + + $ gcloud alpha firestore backups describe \ + --backup='cf9f748a-7980-4703-b1a1-d1ffff591db0' + + --location=LOCATION + The location to operate on. Available locations are listed at + https://cloud.google.com/firestore/docs/locations. + + For example, to operate on location us-east1: + + $ gcloud alpha firestore backups describe --location='us-east1' + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/firestore/backups/help b/gcloud/alpha/firestore/backups/help new file mode 100644 index 000000000..3548518c3 --- /dev/null +++ b/gcloud/alpha/firestore/backups/help @@ -0,0 +1,39 @@ +NAME + gcloud alpha firestore backups - the set of commands to manage backups for + Cloud Firestore + +SYNOPSIS + gcloud alpha firestore backups GROUP | COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) The set of commands to manage backups for Cloud Firestore. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +GROUPS + GROUP is one of the following: + + schedules + (ALPHA) Manage the backup schedules for a Cloud Firestore Database. + +COMMANDS + COMMAND is one of the following: + + delete + (ALPHA) Deletes a Cloud Firestore backup. + + describe + (ALPHA) Retrieves information about a Cloud Firestore backup. + + list + (ALPHA) List backups available to Cloud Firestore. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/firestore/backups/list b/gcloud/alpha/firestore/backups/list new file mode 100644 index 000000000..6199f27a5 --- /dev/null +++ b/gcloud/alpha/firestore/backups/list @@ -0,0 +1,75 @@ +NAME + gcloud alpha firestore backups list - list backups available to Cloud + Firestore + +SYNOPSIS + gcloud alpha firestore backups list [--location=LOCATION] + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] + +EXAMPLES + To list all backups in location us-east1. + + $ gcloud alpha firestore backups list --location=us-east1 \ + --format="table(name, database, state)" + + To list all backups in all location. + + $ gcloud alpha firestore backups list \ + --format="table(name, database, state)" + +FLAGS + --location=LOCATION + The location to operate on. Available locations are listed at + https://cloud.google.com/firestore/docs/locations. + + For example, to operate on location us-east1: + + $ gcloud alpha firestore backups list --location='us-east1' + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/firestore/backups/schedules/create b/gcloud/alpha/firestore/backups/schedules/create new file mode 100644 index 000000000..a0e624f51 --- /dev/null +++ b/gcloud/alpha/firestore/backups/schedules/create @@ -0,0 +1,85 @@ +NAME + gcloud alpha firestore backups schedules create - creates a Cloud Firestore + backup schedule + +SYNOPSIS + gcloud alpha firestore backups schedules create --database=DATABASE + --retention=RETENTION + (--recurrence=RECURRENCE : --day-of-week=DAY_OF_WEEK) + [GCLOUD_WIDE_FLAG ...] + +EXAMPLES + To create a backup schedule with 7 days retention and daily recurrence + under database testdb. + + $ gcloud alpha firestore backups schedules create \ + --database=testdb --retention=7d --recurrence=daily + + To create a backup schedule with 7 days retention and weekly recurrence on + Monday under database testdb. + + $ gcloud alpha firestore backups schedules create \ + --database=testdb --retention=7d --recurrence=weekly \ + --day-of-week=MON + +REQUIRED FLAGS + --database=DATABASE + The database to operate on. The default value is (default). + + For example, to operate on database foo: + + $ gcloud alpha firestore backups schedules create --database='foo' + + --retention=RETENTION + The rention of the backup. At what relative time in the future, + compared to the creation time of the backup should the backup be + deleted, i.e. keep backups for 7 days. + + For example, to set retention as 7 days. + + $ gcloud alpha firestore backups schedules create --retention=7d + + Recurrence settings of a backup schedule. + + This must be specified. + + --recurrence=RECURRENCE + The recurrence settings of a backup schedule. + + Currently only daily and weekly backup schedules are supported. + + When a weekly backup schedule is created, day-of-week is needed. + + For example, to create a weekly backup schedule which creates backups + on Monday. + + $ gcloud alpha firestore backups schedules create \ + --recurrence=weekly --day-of-week=MON + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --day-of-week=DAY_OF_WEEK + The day of week (UTC time zone) of when backups are created. + + The available values are: `MON`, `TUE`, `WED`, `THU`, `FRI`, `SAT`,`SUN`. + Values are case insensitive. + + This is required when creating a weekly backup schedule. + + DAY_OF_WEEK must be one of: SUN, MON, TUE, WED, THU, FRI, SAT. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/firestore/backups/schedules/delete b/gcloud/alpha/firestore/backups/schedules/delete new file mode 100644 index 000000000..c1f441a0c --- /dev/null +++ b/gcloud/alpha/firestore/backups/schedules/delete @@ -0,0 +1,48 @@ +NAME + gcloud alpha firestore backups schedules delete - deletes a Cloud Firestore + backup schedule + +SYNOPSIS + gcloud alpha firestore backups schedules delete + --backup-schedule=BACKUP_SCHEDULE --database=DATABASE + [GCLOUD_WIDE_FLAG ...] + +EXAMPLES + To delete backup schedule 'cf9f748a-7980-4703-b1a1-d1ffff591db0' under + database testdb. + + $ gcloud alpha firestore backups schedules delete \ + --database='testdb' \ + --backup-schedule='cf9f748a-7980-4703-b1a1-d1ffff591db0' + +REQUIRED FLAGS + --backup-schedule=BACKUP_SCHEDULE + The backup schedule to operate on. + + For example, to operate on backup schedule + 091a49a0-223f-4c98-8c69-a284abbdb26b: + + $ gcloud alpha firestore backups schedules delete \ + --backup-schedule='091a49a0-223f-4c98-8c69-a284abbdb26b' + + --database=DATABASE + The database to operate on. The default value is (default). + + For example, to operate on database foo: + + $ gcloud alpha firestore backups schedules delete --database='foo' + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/firestore/backups/schedules/describe b/gcloud/alpha/firestore/backups/schedules/describe new file mode 100644 index 000000000..8c2be5b59 --- /dev/null +++ b/gcloud/alpha/firestore/backups/schedules/describe @@ -0,0 +1,48 @@ +NAME + gcloud alpha firestore backups schedules describe - describes a Cloud + Firestore backup schedule + +SYNOPSIS + gcloud alpha firestore backups schedules describe + --backup-schedule=BACKUP_SCHEDULE --database=DATABASE + [GCLOUD_WIDE_FLAG ...] + +EXAMPLES + To describe backup schedule 'cf9f748a-7980-4703-b1a1-d1ffff591db0' under + database testdb. + + $ gcloud alpha firestore backups schedules describe \ + --database='testdb' \ + --backup-schedule='cf9f748a-7980-4703-b1a1-d1ffff591db0' + +REQUIRED FLAGS + --backup-schedule=BACKUP_SCHEDULE + The backup schedule to operate on. + + For example, to operate on backup schedule + 091a49a0-223f-4c98-8c69-a284abbdb26b: + + $ gcloud alpha firestore backups schedules describe \ + --backup-schedule='091a49a0-223f-4c98-8c69-a284abbdb26b' + + --database=DATABASE + The database to operate on. The default value is (default). + + For example, to operate on database foo: + + $ gcloud alpha firestore backups schedules describe --database='foo' + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/firestore/backups/schedules/help b/gcloud/alpha/firestore/backups/schedules/help new file mode 100644 index 000000000..7fdedd4b4 --- /dev/null +++ b/gcloud/alpha/firestore/backups/schedules/help @@ -0,0 +1,39 @@ +NAME + gcloud alpha firestore backups schedules - manage the backup schedules for + a Cloud Firestore Database + +SYNOPSIS + gcloud alpha firestore backups schedules COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Manage the backup schedules for a Cloud Firestore Database. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + create + (ALPHA) Creates a Cloud Firestore backup schedule. + + delete + (ALPHA) Deletes a Cloud Firestore backup schedule. + + describe + (ALPHA) Describes a Cloud Firestore backup schedule. + + list + (ALPHA) Lists backup schedules under a Cloud Firesore database. + + update + (ALPHA) Updates a Cloud Firestore backup schedule. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/firestore/backups/schedules/list b/gcloud/alpha/firestore/backups/schedules/list new file mode 100644 index 000000000..53aef3360 --- /dev/null +++ b/gcloud/alpha/firestore/backups/schedules/list @@ -0,0 +1,68 @@ +NAME + gcloud alpha firestore backups schedules list - lists backup schedules + under a Cloud Firesore database + +SYNOPSIS + gcloud alpha firestore backups schedules list --database=DATABASE + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] + +EXAMPLES + To list all backup schedules under database testdb. + + $ gcloud alpha firestore backups schedules list --database='testdb' + +REQUIRED FLAGS + --database=DATABASE + The database to operate on. The default value is (default). + + For example, to operate on database foo: + + $ gcloud alpha firestore backups schedules list --database='foo' + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/firestore/backups/schedules/update b/gcloud/alpha/firestore/backups/schedules/update new file mode 100644 index 000000000..e6acbfad3 --- /dev/null +++ b/gcloud/alpha/firestore/backups/schedules/update @@ -0,0 +1,59 @@ +NAME + gcloud alpha firestore backups schedules update - updates a Cloud Firestore + backup schedule + +SYNOPSIS + gcloud alpha firestore backups schedules update + --backup-schedule=BACKUP_SCHEDULE --database=DATABASE + [--retention=RETENTION] [GCLOUD_WIDE_FLAG ...] + +EXAMPLES + To update backup schedule 'cf9f748a-7980-4703-b1a1-d1ffff591db0' under + database testdb to 7 days retention. + + $ gcloud alpha firestore backups schedules update \ + --database='testdb' \ + --backup-schedule='cf9f748a-7980-4703-b1a1-d1ffff591db0' \ + --retention='7d' + +REQUIRED FLAGS + --backup-schedule=BACKUP_SCHEDULE + The backup schedule to operate on. + + For example, to operate on backup schedule + 091a49a0-223f-4c98-8c69-a284abbdb26b: + + $ gcloud alpha firestore backups schedules update \ + --backup-schedule='091a49a0-223f-4c98-8c69-a284abbdb26b' + + --database=DATABASE + The database to operate on. The default value is (default). + + For example, to operate on database foo: + + $ gcloud alpha firestore backups schedules update --database='foo' + +OPTIONAL FLAGS + --retention=RETENTION + The rention of the backup. At what relative time in the future, + compared to the creation time of the backup should the backup be + deleted, i.e. keep backups for 7 days. + + For example, to set retention as 7 days. + + $ gcloud alpha firestore backups schedules update --retention=7d + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/firestore/databases/help b/gcloud/alpha/firestore/databases/help index 628cbe53b..8d771d94a 100644 --- a/gcloud/alpha/firestore/databases/help +++ b/gcloud/alpha/firestore/databases/help @@ -28,6 +28,9 @@ COMMANDS list (ALPHA) Lists all Firestore databases under the project. + restore + (ALPHA) Restores a Cloud Firestore database from a backup. + update (ALPHA) Update the database configuration of a Cloud Firestore database. diff --git a/gcloud/alpha/firestore/databases/restore b/gcloud/alpha/firestore/databases/restore new file mode 100644 index 000000000..8e796c081 --- /dev/null +++ b/gcloud/alpha/firestore/databases/restore @@ -0,0 +1,50 @@ +NAME + gcloud alpha firestore databases restore - restores a Cloud Firestore + database from a backup + +SYNOPSIS + gcloud alpha firestore databases restore + --destination-database=DESTINATION_DATABASE + --source-backup=SOURCE_BACKUP [GCLOUD_WIDE_FLAG ...] + +EXAMPLES + To restore a database from a backup. + + $ gcloud alpha firestore databases restore \ + --source-backup=projects/PROJECT_ID/locations/LOCATION_ID/\ + backups/BACKUP_ID --destination-database=DATABASE_ID + +REQUIRED FLAGS + --destination-database=DESTINATION_DATABASE + Destination database to restore to. Destination database will be + created in the same location as the source backup. + + For example, to restore to database testdb: + + $ gcloud alpha firestore databases restore \ + --destination-database=testdb + + --source-backup=SOURCE_BACKUP + The source backup to restore from. + + For example, to restore from backup + cf9f748a-7980-4703-b1a1-d1ffff591db0 in us-east1: + + $ gcloud alpha firestore databases restore \ + --source-backup=projects/PROJECT_ID/locations/us-east1/backups/\ + cf9f748a-7980-4703-b1a1-d1ffff591db0 + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/firestore/help b/gcloud/alpha/firestore/help index b5b9042d6..7c1b9dc52 100644 --- a/gcloud/alpha/firestore/help +++ b/gcloud/alpha/firestore/help @@ -21,6 +21,9 @@ GCLOUD WIDE FLAGS GROUPS GROUP is one of the following: + backups + (ALPHA) The set of commands to manage backups for Cloud Firestore. + databases (ALPHA) Manage Creation of Cloud Firestore in Native mode Database. diff --git a/gcloud/alpha/functions/local/deploy b/gcloud/alpha/functions/local/deploy index 691dead84..1a5a71c0c 100644 --- a/gcloud/alpha/functions/local/deploy +++ b/gcloud/alpha/functions/local/deploy @@ -4,8 +4,16 @@ NAME SYNOPSIS gcloud alpha functions local deploy NAME [--builder=BUILDER] - [--entry-point=ENTRY_POINT] [--port=PORT; default=8080] - [--runtime=RUNTIME] [GCLOUD_WIDE_FLAG ...] + [--entry-point=ENTRY_POINT] [--ignore-file=IGNORE_FILE] + [--port=PORT; default=8080] [--runtime=RUNTIME] [--source=SOURCE] + [--build-env-vars-file=FILE_PATH | --clear-build-env-vars + | --set-build-env-vars=[KEY=VALUE,...] + | --remove-build-env-vars=[KEY,...] + --update-build-env-vars=[KEY=VALUE,...]] + [--clear-env-vars | --env-vars-file=FILE_PATH + | --set-env-vars=[KEY=VALUE,...] + | --remove-env-vars=[KEY,...] --update-env-vars=[KEY=VALUE,...]] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) gcloud alpha functions local deploy Deploy a Google Cloud Function @@ -25,8 +33,12 @@ FLAGS be executed. Defaults to the resource name suffix (ID of the function), if not specified. + --ignore-file=IGNORE_FILE + Override the .gcloudignore file and use the specified file instead. + --port=PORT; default=8080 - Port for the deployment to run on. + Port for the deployment to run on. The default port is 8080 for new + local deployments. --runtime=RUNTIME Runtime in which to run the function. @@ -36,7 +48,117 @@ FLAGS For a list of available runtimes, run gcloud functions runtimes list. - RUNTIME must be one of: python, go, java, nodejs, php, ruby, dotnet. + --source=SOURCE + Location of source code to deploy. + + Location of the source can be one of the following three options: + + ◆ Source code in Google Cloud Storage (must be a .zip archive), + ◆ Reference to source repository or, + ◆ Local filesystem path (root directory of function source). + + Note that, depending on your runtime type, Cloud Functions will look + for files with specific names for deployable functions. For Node.js, + these filenames are index.js or function.js. For Python, this is + main.py. + + If you do not specify the --source flag: + + ◆ The current directory will be used for new function deployments. + ◆ If the function was previously deployed using a local filesystem + path, then the function's source code will be updated using the + current directory. + ◆ If the function was previously deployed using a Google Cloud + Storage location or a source repository, then the function's source + code will not be updated. + + The value of the flag will be interpreted as a Cloud Storage location, + if it starts with gs://. + + The value will be interpreted as a reference to a source repository, if + it starts with https://. + + Otherwise, it will be interpreted as the local filesystem path. When + deploying source from the local filesystem, this command skips files + specified in the .gcloudignore file (see gcloud topic gcloudignore for + more information). If the .gcloudignore file doesn't exist, the command + will try to create it. + + The minimal source repository URL is: + https://source.developers.google.com/projects/${PROJECT}/repos/${REPO} + + By using the URL above, sources from the root directory of the + repository on the revision tagged master will be used. + + If you want to deploy from a revision different from master, append one + of the following three sources to the URL: + + ◆ /revisions/${REVISION}, + ◆ /moveable-aliases/${MOVEABLE_ALIAS}, + ◆ /fixed-aliases/${FIXED_ALIAS}. + + If you'd like to deploy sources from a directory different from the + root, you must specify a revision, a moveable alias, or a fixed alias, + as above, and append /paths/${PATH_TO_SOURCES_DIRECTORY} to the URL. + + Overall, the URL should match the following regular expression: + + ^https://source\.developers\.google\.com/projects/ + (?[^/]+)/repos/(?[^/]+) + (((/revisions/(?[^/]+))|(/moveable-aliases/(?[^/]+))| + (/fixed-aliases/(?[^/]+)))(/paths/(?.*))?)?$ + + An example of a validly formatted source repository URL is: + + https://source.developers.google.com/projects/123456789/repos/testrepo/ + moveable-aliases/alternate-branch/paths/path-to=source + + At most one of these can be specified: + + --build-env-vars-file=FILE_PATH + Path to a local YAML file with definitions for all build environment + variables. All existing build environment variables will be removed + before the new build environment variables are added. + + --clear-build-env-vars + Remove all build environment variables. + + --set-build-env-vars=[KEY=VALUE,...] + List of key-value pairs to set as build environment variables. All + existing build environment variables will be removed first. + + Only --update-build-env-vars and --remove-build-env-vars can be used + together. If both are specified, --remove-build-env-vars will be applied + first. + + --remove-build-env-vars=[KEY,...] + List of build environment variables to be removed. + + --update-build-env-vars=[KEY=VALUE,...] + List of key-value pairs to set as build environment variables. + + At most one of these can be specified: + + --clear-env-vars + Remove all environment variables. + + --env-vars-file=FILE_PATH + Path to a local YAML file with definitions for all environment + variables. All existing environment variables will be removed before + the new environment variables are added. + + --set-env-vars=[KEY=VALUE,...] + List of key-value pairs to set as environment variables. All existing + environment variables will be removed first. + + Only --update-env-vars and --remove-env-vars can be used together. If + both are specified, --remove-env-vars will be applied first. + + --remove-env-vars=[KEY,...] + List of environment variables to be removed. + + --update-env-vars=[KEY=VALUE,...] + List of key-value pairs to set as environment variables. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/healthcare/dicom-stores/import/gcs b/gcloud/alpha/healthcare/dicom-stores/import/gcs index f1226346e..f808d1e55 100644 --- a/gcloud/alpha/healthcare/dicom-stores/import/gcs +++ b/gcloud/alpha/healthcare/dicom-stores/import/gcs @@ -65,7 +65,21 @@ POSITIONAL ARGUMENTS REQUIRED FLAGS --gcs-uri=GCS_URI Google Cloud Storage URI containing DICOM object data. It must match - individual DICOM files or co + individual DICOM files or use wildcards to import multiple files from + one or more directories. + ◆ Use * to match 0 or more non-separator characters. For example, + gs://BUCKET/DIRECTORY/Example*.dcm matches Example.dcm and + Example22.dcm in DIRECTORY. + ◆ Use ** to match 0 or more characters (including separators). Must + be used at the end of a path and with no other wildcards in the path. + Can also be used with a filename extension (such as .dcm), which + imports all files with the filename extension in the specified + directory and its subdirectories. For example, + gs://BUCKET/DIRECTORY/**.dcm imports all files with the .dcm filename + extension in DIRECTORY and its subdirectories. + ◆ Use ? to match 1 character. For example, + gs://BUCKET/DIRECTORY/Example?.dcm matches Example1.dcm but does not + match Example.dcm or Example01.dcm. OPTIONAL FLAGS --async diff --git a/gcloud/alpha/infra-manager/deployments/apply b/gcloud/alpha/infra-manager/deployments/apply index 6938f2067..4e74bd73e 100644 --- a/gcloud/alpha/infra-manager/deployments/apply +++ b/gcloud/alpha/infra-manager/deployments/apply @@ -23,7 +23,7 @@ EXAMPLES Create a deployment named my-deployment from a storage my-bucket: $ gcloud alpha infra-manager deployments apply \ - projects/p1/location/us-central1/deployments/my-deployment \ + projects/p1/locations/us-central1/deployments/my-deployment \ --gcs-source="gs://my-bucket" \ --input-values="project=p1,region=us-central1" @@ -32,7 +32,7 @@ EXAMPLES "mainline" branch: $ gcloud alpha infra-manager deployments apply \ - projects/p1/location/us-central1/deployments/my-deployment \ + projects/p1/locations/us-central1/deployments/my-deployment \ --git-source-repo="https://github.com/examples/repository.git" \ --git-source-directory="staging/compute" \ --git-source-ref="mainline" @@ -40,7 +40,7 @@ EXAMPLES Update a deployment's labels: $ gcloud alpha infra-manager deployments apply \ - projects/p1/location/us-central1/deployments/my-deployment \ + projects/p1/locations/us-central1/deployments/my-deployment \ --git-source-repo="https://github.com/examples/repository.git" \ --git-source-directory="staging/compute" \ --git-source-ref="mainline" --labels="env=prod,team=finance" @@ -121,8 +121,7 @@ FLAGS --service-account=SERVICE_ACCOUNT User-specified Service Account (SA) to be used as credential to manage resources. Format: - projects/{projectID}/serviceAccounts/{serviceAccount}The default Cloud - Build SA will be used initially if this field is not set. + projects/{projectID}/serviceAccounts/{serviceAccount} --worker-pool=WORKER_POOL User-specified Worker Pool resource in which the Cloud Build jobwill diff --git a/gcloud/alpha/infra-manager/deployments/export-lock b/gcloud/alpha/infra-manager/deployments/export-lock index c97b5b428..67fd4bca2 100644 --- a/gcloud/alpha/infra-manager/deployments/export-lock +++ b/gcloud/alpha/infra-manager/deployments/export-lock @@ -14,7 +14,7 @@ EXAMPLES projects/p1/locations/us-central1/deployments/my-deployment: $ gcloud alpha infra-manager deployments export-lock \ - projects/p1/location/us-central1/deployments/my-deployment + projects/p1/locations/us-central1/deployments/my-deployment POSITIONAL ARGUMENTS Deployment resource - the deployment to be used as parent. The arguments diff --git a/gcloud/alpha/infra-manager/deployments/export-statefile b/gcloud/alpha/infra-manager/deployments/export-statefile index 3cfc8ba85..0934df230 100644 --- a/gcloud/alpha/infra-manager/deployments/export-statefile +++ b/gcloud/alpha/infra-manager/deployments/export-statefile @@ -14,7 +14,7 @@ EXAMPLES Export state file for my-deployment: $ gcloud alpha infra-manager deployments export-statefile \ - projects/p1/location/us-central1/deployments/my-deployment + projects/p1/locations/us-central1/deployments/my-deployment POSITIONAL ARGUMENTS Deployment resource - the deployment to be used as parent. The arguments diff --git a/gcloud/alpha/infra-manager/deployments/import-statefile b/gcloud/alpha/infra-manager/deployments/import-statefile index dc09576f2..5ab4e332d 100644 --- a/gcloud/alpha/infra-manager/deployments/import-statefile +++ b/gcloud/alpha/infra-manager/deployments/import-statefile @@ -15,7 +15,7 @@ EXAMPLES Import state file for my-deployment with lock-id 1658343229583347: $ gcloud alpha infra-manager deployments import-statefile \ - projects/p1/location/us-central1/deployments/my-deployment \ + projects/p1/locations/us-central1/deployments/my-deployment \ --lock-id=1658343229583347 POSITIONAL ARGUMENTS diff --git a/gcloud/alpha/infra-manager/deployments/lock b/gcloud/alpha/infra-manager/deployments/lock index 94937a64d..b14bd913e 100644 --- a/gcloud/alpha/infra-manager/deployments/lock +++ b/gcloud/alpha/infra-manager/deployments/lock @@ -12,7 +12,7 @@ EXAMPLES Lock deployment my-deployment under project p1 and location us-central1: $ gcloud alpha infra-manager deployments lock \ - projects/p1/location/us-central1/deployments/my-deployment + projects/p1/locations/us-central1/deployments/my-deployment POSITIONAL ARGUMENTS Deployment resource - the deployment to be used as parent. The arguments diff --git a/gcloud/alpha/infra-manager/deployments/unlock b/gcloud/alpha/infra-manager/deployments/unlock index 036a7667d..0ff4593cc 100644 --- a/gcloud/alpha/infra-manager/deployments/unlock +++ b/gcloud/alpha/infra-manager/deployments/unlock @@ -14,7 +14,7 @@ EXAMPLES with lock-id 1234: $ gcloud alpha infra-manager deployments unlock \ - projects/p1/location/us-central1/deployments/my-deployment \ + projects/p1/locations/us-central1/deployments/my-deployment \ --lock-id=1234 POSITIONAL ARGUMENTS diff --git a/gcloud/alpha/iot/devices/commands/help b/gcloud/alpha/iot/devices/commands/help index de20371b1..f95f49e87 100644 --- a/gcloud/alpha/iot/devices/commands/help +++ b/gcloud/alpha/iot/devices/commands/help @@ -5,7 +5,9 @@ SYNOPSIS gcloud alpha iot devices commands COMMAND [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Manage commands for Cloud IoT devices. + (ALPHA) (DEPRECATED) Manage commands for Cloud IoT devices. + + This command is deprecated. Google Cloud IoT Core has been retired. GCLOUD WIDE FLAGS These flags are available to all commands: --help. @@ -16,7 +18,7 @@ COMMANDS COMMAND is one of the following: send - (ALPHA) Sends a command to a device. + (ALPHA) (DEPRECATED) Sends a command to a device. NOTES This command is currently in alpha and might change without notice. If this diff --git a/gcloud/alpha/iot/devices/commands/send b/gcloud/alpha/iot/devices/commands/send index f46ebc731..473b10891 100644 --- a/gcloud/alpha/iot/devices/commands/send +++ b/gcloud/alpha/iot/devices/commands/send @@ -8,7 +8,10 @@ SYNOPSIS [--subfolder=SUBFOLDER] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Sends a command to a device. + (ALPHA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + Sends a command to a device. EXAMPLES To send a simple command to a device in 'my-registry' and region diff --git a/gcloud/alpha/iot/devices/configs/describe b/gcloud/alpha/iot/devices/configs/describe index 0c2745b62..51355eddc 100644 --- a/gcloud/alpha/iot/devices/configs/describe +++ b/gcloud/alpha/iot/devices/configs/describe @@ -8,7 +8,10 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Show details about the latest configuration for a device. + (ALPHA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + Show details about the latest configuration for a device. EXAMPLES To show the details of the latest configuration for a device in region diff --git a/gcloud/alpha/iot/devices/configs/get-value b/gcloud/alpha/iot/devices/configs/get-value index a8a96cc61..d1e28c9b1 100644 --- a/gcloud/alpha/iot/devices/configs/get-value +++ b/gcloud/alpha/iot/devices/configs/get-value @@ -8,7 +8,10 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Show the binary data of a device's latest configuration. + (ALPHA) (DEPRECATED) Show the binary data of a device's latest + configuration. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To show the binary data of the latest configuration of a device in region diff --git a/gcloud/alpha/iot/devices/configs/help b/gcloud/alpha/iot/devices/configs/help index 6c50ccb1a..bfc667d5f 100644 --- a/gcloud/alpha/iot/devices/configs/help +++ b/gcloud/alpha/iot/devices/configs/help @@ -6,7 +6,11 @@ SYNOPSIS gcloud alpha iot devices configs COMMAND [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Commands for managing configurations for Google Cloud IoT devices. + (ALPHA) (DEPRECATED) Manage configurations for Cloud IoT devices. + + This command is deprecated. Google Cloud IoT Core has been retired. + + Commands for managing configurations for Google Cloud IoT devices. GCLOUD WIDE FLAGS These flags are available to all commands: --help. @@ -17,16 +21,18 @@ COMMANDS COMMAND is one of the following: describe - (ALPHA) Show details about the latest configuration for a device. + (ALPHA) (DEPRECATED) Show details about the latest configuration for a + device. get-value - (ALPHA) Show the binary data of a device's latest configuration. + (ALPHA) (DEPRECATED) Show the binary data of a device's latest + configuration. list - (ALPHA) List configs for a device. + (ALPHA) (DEPRECATED) List configs for a device. update - (ALPHA) Update a specific device configuration. + (ALPHA) (DEPRECATED) Update a specific device configuration. NOTES This command is currently in alpha and might change without notice. If this diff --git a/gcloud/alpha/iot/devices/configs/list b/gcloud/alpha/iot/devices/configs/list index 3f26f76d1..e325e571b 100644 --- a/gcloud/alpha/iot/devices/configs/list +++ b/gcloud/alpha/iot/devices/configs/list @@ -8,8 +8,11 @@ SYNOPSIS [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) This command lists all available configurations in the history of - the device. Up to 10 are kept; you may restrict the output to fewer via the + (ALPHA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + This command lists all available configurations in the history of the + device. Up to 10 are kept; you may restrict the output to fewer via the --limit flag. EXAMPLES diff --git a/gcloud/alpha/iot/devices/configs/update b/gcloud/alpha/iot/devices/configs/update index d48251ef5..7553c7020 100644 --- a/gcloud/alpha/iot/devices/configs/update +++ b/gcloud/alpha/iot/devices/configs/update @@ -9,7 +9,11 @@ SYNOPSIS [--version-to-update=VERSION_TO_UPDATE] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) This command updates the current configuration of the device. + (ALPHA) (DEPRECATED) Update a specific device configuration. + + This command is deprecated. Google Cloud IoT Core has been retired. + + This command updates the current configuration of the device. It always creates a new config with a new version number; if --version-to-update is provided, the config at that version is used as a diff --git a/gcloud/alpha/iot/devices/create b/gcloud/alpha/iot/devices/create index 61c59a2ba..c0789e872 100644 --- a/gcloud/alpha/iot/devices/create +++ b/gcloud/alpha/iot/devices/create @@ -12,7 +12,10 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Create a new device. + (ALPHA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + Create a new device. EXAMPLES To create a new device 'my-device' in device registry 'my-registry' and diff --git a/gcloud/alpha/iot/devices/credentials/clear b/gcloud/alpha/iot/devices/credentials/clear index 704d1e136..090a2b487 100644 --- a/gcloud/alpha/iot/devices/credentials/clear +++ b/gcloud/alpha/iot/devices/credentials/clear @@ -8,7 +8,9 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Delete all credentials from a device. + (ALPHA) (DEPRECATED) Delete all credentials from a device. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To delete all credentials from a device in region 'us-central1', run: diff --git a/gcloud/alpha/iot/devices/credentials/create b/gcloud/alpha/iot/devices/credentials/create index 1f6eaf966..e5e5444cd 100644 --- a/gcloud/alpha/iot/devices/credentials/create +++ b/gcloud/alpha/iot/devices/credentials/create @@ -8,7 +8,11 @@ SYNOPSIS [--expiration-time=EXPIRATION_TIME] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) A device may have at most 3 credentials. + (ALPHA) (DEPRECATED) Add a new credential to a device. + + This command is deprecated. Google Cloud IoT Core has been retired. + + A device may have at most 3 credentials. EXAMPLES To add an RSA public key wrapped in an X.509v3 certificate to a device, diff --git a/gcloud/alpha/iot/devices/credentials/delete b/gcloud/alpha/iot/devices/credentials/delete index 32767fa85..2ad6334ab 100644 --- a/gcloud/alpha/iot/devices/credentials/delete +++ b/gcloud/alpha/iot/devices/credentials/delete @@ -8,7 +8,9 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Delete a credential from a device. + (ALPHA) (DEPRECATED) Delete a credential from a device. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To delete the first credential from a device in region 'us-central1', run: diff --git a/gcloud/alpha/iot/devices/credentials/describe b/gcloud/alpha/iot/devices/credentials/describe index 9801e596a..269f83e49 100644 --- a/gcloud/alpha/iot/devices/credentials/describe +++ b/gcloud/alpha/iot/devices/credentials/describe @@ -8,7 +8,9 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Show details about a specific device credential. + (ALPHA) (DEPRECATED) Show details about a specific device credential. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To describe the first credential of a device in region 'us-central1', run: diff --git a/gcloud/alpha/iot/devices/credentials/help b/gcloud/alpha/iot/devices/credentials/help index 2603b4dbd..b82fcd90e 100644 --- a/gcloud/alpha/iot/devices/credentials/help +++ b/gcloud/alpha/iot/devices/credentials/help @@ -6,7 +6,11 @@ SYNOPSIS gcloud alpha iot devices credentials COMMAND [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Commands for managing credentials for Google Cloud IoT devices. + (ALPHA) (DEPRECATED) Manage credentials for Cloud IoT devices. + + This command is deprecated. Google Cloud IoT Core has been retired. + + Commands for managing credentials for Google Cloud IoT devices. GCLOUD WIDE FLAGS These flags are available to all commands: --help. @@ -17,22 +21,22 @@ COMMANDS COMMAND is one of the following: clear - (ALPHA) Delete all credentials from a device. + (ALPHA) (DEPRECATED) Delete all credentials from a device. create - (ALPHA) Add a new credential to a device. + (ALPHA) (DEPRECATED) Add a new credential to a device. delete - (ALPHA) Delete a credential from a device. + (ALPHA) (DEPRECATED) Delete a credential from a device. describe - (ALPHA) Show details about a specific device credential. + (ALPHA) (DEPRECATED) Show details about a specific device credential. list - (ALPHA) List credentials for a device. + (ALPHA) (DEPRECATED) List credentials for a device. update - (ALPHA) Update a specific device credential. + (ALPHA) (DEPRECATED) Update a specific device credential. NOTES This command is currently in alpha and might change without notice. If this diff --git a/gcloud/alpha/iot/devices/credentials/list b/gcloud/alpha/iot/devices/credentials/list index 2060f8a6b..4c704f5de 100644 --- a/gcloud/alpha/iot/devices/credentials/list +++ b/gcloud/alpha/iot/devices/credentials/list @@ -8,7 +8,9 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) List credentials for a device. + (ALPHA) (DEPRECATED) List credentials for a device. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To list the credentials of a device in region 'us-central1', run: diff --git a/gcloud/alpha/iot/devices/credentials/update b/gcloud/alpha/iot/devices/credentials/update index ac9293bf4..9ccd9fff7 100644 --- a/gcloud/alpha/iot/devices/credentials/update +++ b/gcloud/alpha/iot/devices/credentials/update @@ -8,7 +8,9 @@ SYNOPSIS [--expiration-time=EXPIRATION_TIME] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Update a specific device credential. + (ALPHA) (DEPRECATED) Update a specific device credential. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To update the expiration time of the first credential of a device in region diff --git a/gcloud/alpha/iot/devices/delete b/gcloud/alpha/iot/devices/delete index 9ff421b22..e89c2a776 100644 --- a/gcloud/alpha/iot/devices/delete +++ b/gcloud/alpha/iot/devices/delete @@ -6,7 +6,10 @@ SYNOPSIS (DEVICE : --region=REGION --registry=REGISTRY) [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Delete a device. + (ALPHA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + Delete a device. EXAMPLES To delete a device from device registry 'my-registry', run: diff --git a/gcloud/alpha/iot/devices/describe b/gcloud/alpha/iot/devices/describe index 556c71403..ee4211129 100644 --- a/gcloud/alpha/iot/devices/describe +++ b/gcloud/alpha/iot/devices/describe @@ -6,7 +6,10 @@ SYNOPSIS (DEVICE : --region=REGION --registry=REGISTRY) [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Show details about a device. + (ALPHA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + Show details about a device. EXAMPLES To show details about a device, run: diff --git a/gcloud/alpha/iot/devices/gateways/bind b/gcloud/alpha/iot/devices/gateways/bind index 8ccf20af2..5348c8e27 100644 --- a/gcloud/alpha/iot/devices/gateways/bind +++ b/gcloud/alpha/iot/devices/gateways/bind @@ -9,7 +9,10 @@ SYNOPSIS --gateway-registry=GATEWAY_REGISTRY) [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Associate a device with a gateway. + (ALPHA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + Associate a device with a gateway. EXAMPLES To associate 'my-device' with 'my-gateway' in region 'us-central1', run: diff --git a/gcloud/alpha/iot/devices/gateways/help b/gcloud/alpha/iot/devices/gateways/help index 62cc1ed9d..3e5cbaac6 100644 --- a/gcloud/alpha/iot/devices/gateways/help +++ b/gcloud/alpha/iot/devices/gateways/help @@ -6,7 +6,9 @@ SYNOPSIS gcloud alpha iot devices gateways COMMAND [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Manage Cloud IoT Core Gateway Associations. + (ALPHA) (DEPRECATED) Manage Cloud IoT Core Gateway Associations. + + This command is deprecated. Google Cloud IoT Core has been retired. GCLOUD WIDE FLAGS These flags are available to all commands: --help. @@ -17,13 +19,14 @@ COMMANDS COMMAND is one of the following: bind - (ALPHA) Associate a device with a gateway. + (ALPHA) (DEPRECATED) Associate a device with a gateway. list-bound-devices - (ALPHA) Lists all of the devices bound to the gateway. + (ALPHA) (DEPRECATED) Lists all of the devices bound to the gateway. unbind - (ALPHA) Remove the association between a device and a gateway. + (ALPHA) (DEPRECATED) Remove the association between a device and a + gateway. NOTES This command is currently in alpha and might change without notice. If this diff --git a/gcloud/alpha/iot/devices/gateways/list-bound-devices b/gcloud/alpha/iot/devices/gateways/list-bound-devices index b4ad759ba..792377eeb 100644 --- a/gcloud/alpha/iot/devices/gateways/list-bound-devices +++ b/gcloud/alpha/iot/devices/gateways/list-bound-devices @@ -9,7 +9,10 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Lists all of the devices bound to the gateway. + (ALPHA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + Lists all of the devices bound to the gateway. EXAMPLES To list all of the devices bound to the gateway 'my-gateway' in region diff --git a/gcloud/alpha/iot/devices/gateways/unbind b/gcloud/alpha/iot/devices/gateways/unbind index dad0f4a2e..b008a2437 100644 --- a/gcloud/alpha/iot/devices/gateways/unbind +++ b/gcloud/alpha/iot/devices/gateways/unbind @@ -10,7 +10,10 @@ SYNOPSIS --gateway-registry=GATEWAY_REGISTRY) [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Remove the association between a device and a gateway. + (ALPHA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + Remove the association between a device and a gateway. EXAMPLES To remove the association between 'my-device' and 'my-gateway' in region diff --git a/gcloud/alpha/iot/devices/help b/gcloud/alpha/iot/devices/help index 58c5d1c3c..ca8650adc 100644 --- a/gcloud/alpha/iot/devices/help +++ b/gcloud/alpha/iot/devices/help @@ -5,7 +5,11 @@ SYNOPSIS gcloud alpha iot devices GROUP | COMMAND [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Commands for managing Google Cloud IoT Devices. + (ALPHA) (DEPRECATED) Manage Cloud IoT Devices. + + This command is deprecated. Google Cloud IoT Core has been retired. + + Commands for managing Google Cloud IoT Devices. GCLOUD WIDE FLAGS These flags are available to all commands: --help. @@ -16,37 +20,37 @@ GROUPS GROUP is one of the following: commands - (ALPHA) Manage commands for Cloud IoT devices. + (ALPHA) (DEPRECATED) Manage commands for Cloud IoT devices. configs - (ALPHA) Manage configurations for Cloud IoT devices. + (ALPHA) (DEPRECATED) Manage configurations for Cloud IoT devices. credentials - (ALPHA) Manage credentials for Cloud IoT devices. + (ALPHA) (DEPRECATED) Manage credentials for Cloud IoT devices. gateways - (ALPHA) Manage Cloud IoT Core Gateway Associations. + (ALPHA) (DEPRECATED) Manage Cloud IoT Core Gateway Associations. states - (ALPHA) Manage states for Cloud IoT devices. + (ALPHA) (DEPRECATED) Manage states for Cloud IoT devices. COMMANDS COMMAND is one of the following: create - (ALPHA) Create a new device. + (ALPHA) (DEPRECATED) Create a new device. delete - (ALPHA) Delete a device. + (ALPHA) (DEPRECATED) Delete a device. describe - (ALPHA) Show details about a device. + (ALPHA) (DEPRECATED) Show details about a device. list - (ALPHA) List devices. + (ALPHA) (DEPRECATED) List devices. update - (ALPHA) Update an existing device. + (ALPHA) (DEPRECATED) Update an existing device. NOTES This command is currently in alpha and might change without notice. If this diff --git a/gcloud/alpha/iot/devices/list b/gcloud/alpha/iot/devices/list index 2a3973480..75965c4c8 100644 --- a/gcloud/alpha/iot/devices/list +++ b/gcloud/alpha/iot/devices/list @@ -10,7 +10,10 @@ SYNOPSIS [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) List devices. + (ALPHA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + List devices. EXAMPLES To list all devices in the device registry 'my-registry' and region diff --git a/gcloud/alpha/iot/devices/states/help b/gcloud/alpha/iot/devices/states/help index 6ea711a37..4ebaaf06a 100644 --- a/gcloud/alpha/iot/devices/states/help +++ b/gcloud/alpha/iot/devices/states/help @@ -5,7 +5,11 @@ SYNOPSIS gcloud alpha iot devices states COMMAND [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Commands for managing states for Google Cloud IoT devices. + (ALPHA) (DEPRECATED) Manage states for Cloud IoT devices. + + This command is deprecated. Google Cloud IoT Core has been retired. + + Commands for managing states for Google Cloud IoT devices. GCLOUD WIDE FLAGS These flags are available to all commands: --help. @@ -16,7 +20,7 @@ COMMANDS COMMAND is one of the following: list - (ALPHA) List states for a device. + (ALPHA) (DEPRECATED) List states for a device. NOTES This command is currently in alpha and might change without notice. If this diff --git a/gcloud/alpha/iot/devices/states/list b/gcloud/alpha/iot/devices/states/list index 4964df377..1875506f9 100644 --- a/gcloud/alpha/iot/devices/states/list +++ b/gcloud/alpha/iot/devices/states/list @@ -8,9 +8,11 @@ SYNOPSIS [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) This command lists all available states in the history of the - device. Up to 10 are kept; you may restrict the output to fewer via the - --limit flag. + (ALPHA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + This command lists all available states in the history of the device. Up to + 10 are kept; you may restrict the output to fewer via the --limit flag. EXAMPLES To list states for the device 'my-device' in region 'us-central1' and in diff --git a/gcloud/alpha/iot/devices/update b/gcloud/alpha/iot/devices/update index 9e3f70822..63f7f1f3f 100644 --- a/gcloud/alpha/iot/devices/update +++ b/gcloud/alpha/iot/devices/update @@ -9,7 +9,12 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Update an existing device. + (ALPHA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + (ALPHA) (DEPRECATED) Update an existing device. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES The following command updates the device 'my-device' in device registry diff --git a/gcloud/alpha/iot/help b/gcloud/alpha/iot/help index f008edfae..48c620805 100644 --- a/gcloud/alpha/iot/help +++ b/gcloud/alpha/iot/help @@ -5,7 +5,11 @@ SYNOPSIS gcloud alpha iot GROUP [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Commands for managing Google Cloud IoT resources. + (ALPHA) (DEPRECATED) Manage Cloud IoT resources. + + This command is deprecated. Google Cloud IoT Core has been retired. + + Commands for managing Google Cloud IoT resources. GCLOUD WIDE FLAGS These flags are available to all commands: --help. @@ -16,10 +20,10 @@ GROUPS GROUP is one of the following: devices - (ALPHA) Manage Cloud IoT Devices. + (ALPHA) (DEPRECATED) Manage Cloud IoT Devices. registries - (ALPHA) Manage Cloud IoT Registries. + (ALPHA) (DEPRECATED) Manage Cloud IoT Registries. NOTES This command is currently in alpha and might change without notice. If this diff --git a/gcloud/alpha/iot/registries/add-iam-policy-binding b/gcloud/alpha/iot/registries/add-iam-policy-binding index dcf7a5395..07cae9938 100644 --- a/gcloud/alpha/iot/registries/add-iam-policy-binding +++ b/gcloud/alpha/iot/registries/add-iam-policy-binding @@ -9,8 +9,11 @@ SYNOPSIS | --condition-from-file=CONDITION_FROM_FILE] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Add an IAM policy binding to the IAM policy of a device registry. - One binding consists of a member, a role, and an optional condition. + (ALPHA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + Add an IAM policy binding to the IAM policy of a device registry. One + binding consists of a member, a role, and an optional condition. EXAMPLES To add an IAM policy binding for the role of 'roles/editor' for the user diff --git a/gcloud/alpha/iot/registries/create b/gcloud/alpha/iot/registries/create index 026bffdca..356243689 100644 --- a/gcloud/alpha/iot/registries/create +++ b/gcloud/alpha/iot/registries/create @@ -9,7 +9,10 @@ SYNOPSIS [--state-pubsub-topic=STATE_PUBSUB_TOPIC] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Create a new device registry. + (ALPHA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + Create a new device registry. EXAMPLES To create a new device registry 'my-registry' in region 'us-central1', run: diff --git a/gcloud/alpha/iot/registries/credentials/clear b/gcloud/alpha/iot/registries/credentials/clear index 1c3a1e00b..b67b0da19 100644 --- a/gcloud/alpha/iot/registries/credentials/clear +++ b/gcloud/alpha/iot/registries/credentials/clear @@ -7,7 +7,9 @@ SYNOPSIS (--registry=REGISTRY : --region=REGION) [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Delete all credentials from a registry. + (ALPHA) (DEPRECATED) Delete all credentials from a registry. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To delete all credentials from a registry in region 'us-central1', run: diff --git a/gcloud/alpha/iot/registries/credentials/create b/gcloud/alpha/iot/registries/credentials/create index bd149f303..bde85f4f8 100644 --- a/gcloud/alpha/iot/registries/credentials/create +++ b/gcloud/alpha/iot/registries/credentials/create @@ -7,7 +7,14 @@ SYNOPSIS (--registry=REGISTRY : --region=REGION) [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) A registry may have at most 10 credentials. + (ALPHA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + (ALPHA) (DEPRECATED) Add a new credential to a registry. + + This command is deprecated. Google Cloud IoT Core has been retired. + + A registry may have at most 10 credentials. EXAMPLES To add a credential located in '/path/to/cert.pem' to a registry, run: diff --git a/gcloud/alpha/iot/registries/credentials/delete b/gcloud/alpha/iot/registries/credentials/delete index 2fbfff5ab..b4a448f04 100644 --- a/gcloud/alpha/iot/registries/credentials/delete +++ b/gcloud/alpha/iot/registries/credentials/delete @@ -7,7 +7,9 @@ SYNOPSIS (--registry=REGISTRY : --region=REGION) [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Delete a credential from a registry. + (ALPHA) (DEPRECATED) Delete a credential from a registry. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To delete the first credential from a registry, run: diff --git a/gcloud/alpha/iot/registries/credentials/describe b/gcloud/alpha/iot/registries/credentials/describe index 64968921d..5fdac0434 100644 --- a/gcloud/alpha/iot/registries/credentials/describe +++ b/gcloud/alpha/iot/registries/credentials/describe @@ -7,7 +7,9 @@ SYNOPSIS (--registry=REGISTRY : --region=REGION) [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Show details about a specific registry credential. + (ALPHA) (DEPRECATED) Show details about a specific registry credential. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To describe the first credential of a registry in region 'us-central1', diff --git a/gcloud/alpha/iot/registries/credentials/help b/gcloud/alpha/iot/registries/credentials/help index 35b49c31d..d758c6789 100644 --- a/gcloud/alpha/iot/registries/credentials/help +++ b/gcloud/alpha/iot/registries/credentials/help @@ -6,7 +6,11 @@ SYNOPSIS gcloud alpha iot registries credentials COMMAND [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Commands for managing credentials for Google Cloud IoT devices. + (ALPHA) (DEPRECATED) Manage credentials for Cloud IoT devices. + + This command is deprecated. Google Cloud IoT Core has been retired. + + Commands for managing credentials for Google Cloud IoT devices. GCLOUD WIDE FLAGS These flags are available to all commands: --help. @@ -17,19 +21,19 @@ COMMANDS COMMAND is one of the following: clear - (ALPHA) Delete all credentials from a registry. + (ALPHA) (DEPRECATED) Delete all credentials from a registry. create - (ALPHA) Add a new credential to a registry. + (ALPHA) (DEPRECATED) Add a new credential to a registry. delete - (ALPHA) Delete a credential from a registry. + (ALPHA) (DEPRECATED) Delete a credential from a registry. describe - (ALPHA) Show details about a specific registry credential. + (ALPHA) (DEPRECATED) Show details about a specific registry credential. list - (ALPHA) List credentials for a registry. + (ALPHA) (DEPRECATED) List credentials for a registry. NOTES This command is currently in alpha and might change without notice. If this diff --git a/gcloud/alpha/iot/registries/credentials/list b/gcloud/alpha/iot/registries/credentials/list index 6264550c8..c44dbac10 100644 --- a/gcloud/alpha/iot/registries/credentials/list +++ b/gcloud/alpha/iot/registries/credentials/list @@ -8,7 +8,9 @@ SYNOPSIS [--limit=LIMIT] [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) List credentials for a registry. + (ALPHA) (DEPRECATED) List credentials for a registry. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To list the credentials of a registry, run: diff --git a/gcloud/alpha/iot/registries/delete b/gcloud/alpha/iot/registries/delete index a3c023d14..9a7e8c0f9 100644 --- a/gcloud/alpha/iot/registries/delete +++ b/gcloud/alpha/iot/registries/delete @@ -6,7 +6,10 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Delete a device registry. + (ALPHA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + Delete a device registry. EXAMPLES To delete a device registry, run: diff --git a/gcloud/alpha/iot/registries/describe b/gcloud/alpha/iot/registries/describe index 54163e84d..432209bfe 100644 --- a/gcloud/alpha/iot/registries/describe +++ b/gcloud/alpha/iot/registries/describe @@ -6,7 +6,10 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Show details about a device registry. + (ALPHA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + Show details about a device registry. EXAMPLES To show details about a device registry, run: diff --git a/gcloud/alpha/iot/registries/get-iam-policy b/gcloud/alpha/iot/registries/get-iam-policy index ceb5a5191..7882f030d 100644 --- a/gcloud/alpha/iot/registries/get-iam-policy +++ b/gcloud/alpha/iot/registries/get-iam-policy @@ -8,8 +8,11 @@ SYNOPSIS [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) This command gets the IAM policy for a device registry. If - formatted as JSON, the output can be edited and used as a policy file for + (ALPHA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + This command gets the IAM policy for a device registry. If formatted as + JSON, the output can be edited and used as a policy file for set-iam-policy. The output includes an "etag" field identifying the version emitted and allowing detection of concurrent policy updates; see $ gcloud iot registries set-iam-policy for additional details. diff --git a/gcloud/alpha/iot/registries/help b/gcloud/alpha/iot/registries/help index 94b7bd11b..e738d86a0 100644 --- a/gcloud/alpha/iot/registries/help +++ b/gcloud/alpha/iot/registries/help @@ -5,7 +5,11 @@ SYNOPSIS gcloud alpha iot registries GROUP | COMMAND [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Commands for managing Google Cloud IoT Registries. + (ALPHA) (DEPRECATED) Manage Cloud IoT Registries. + + This command is deprecated. Google Cloud IoT Core has been retired. + + Commands for managing Google Cloud IoT Registries. GCLOUD WIDE FLAGS These flags are available to all commands: --help. @@ -16,37 +20,37 @@ GROUPS GROUP is one of the following: credentials - (ALPHA) Manage credentials for Cloud IoT devices. + (ALPHA) (DEPRECATED) Manage credentials for Cloud IoT devices. COMMANDS COMMAND is one of the following: add-iam-policy-binding - (ALPHA) Add IAM policy binding to a device registry. + (ALPHA) (DEPRECATED) Add IAM policy binding to a device registry. create - (ALPHA) Create a new device registry. + (ALPHA) (DEPRECATED) Create a new device registry. delete - (ALPHA) Delete a device registry. + (ALPHA) (DEPRECATED) Delete a device registry. describe - (ALPHA) Show details about a device registry. + (ALPHA) (DEPRECATED) Show details about a device registry. get-iam-policy - (ALPHA) Get the IAM policy for a device registry. + (ALPHA) (DEPRECATED) Get the IAM policy for a device registry. list - (ALPHA) List device registries. + (ALPHA) (DEPRECATED) List device registries. remove-iam-policy-binding - (ALPHA) Remove IAM policy binding of a device registry. + (ALPHA) (DEPRECATED) Remove IAM policy binding of a device registry. set-iam-policy - (ALPHA) Set the IAM policy for a device registry. + (ALPHA) (DEPRECATED) Set the IAM policy for a device registry. update - (ALPHA) Update a device registry. + (ALPHA) (DEPRECATED) Update a device registry. NOTES This command is currently in alpha and might change without notice. If this diff --git a/gcloud/alpha/iot/registries/list b/gcloud/alpha/iot/registries/list index 9fb7e9229..2aabcdc7b 100644 --- a/gcloud/alpha/iot/registries/list +++ b/gcloud/alpha/iot/registries/list @@ -7,7 +7,10 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) List device registries. + (ALPHA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + List device registries. EXAMPLES To list all device registries in a project and region 'us-central1', run: diff --git a/gcloud/alpha/iot/registries/remove-iam-policy-binding b/gcloud/alpha/iot/registries/remove-iam-policy-binding index 3223be89f..8031d7bc8 100644 --- a/gcloud/alpha/iot/registries/remove-iam-policy-binding +++ b/gcloud/alpha/iot/registries/remove-iam-policy-binding @@ -9,9 +9,11 @@ SYNOPSIS | --condition-from-file=CONDITION_FROM_FILE] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Remove an IAM policy binding from the IAM policy of a device - registry. One binding consists of a member, a role, and an optional - condition. + (ALPHA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + Remove an IAM policy binding from the IAM policy of a device registry. One + binding consists of a member, a role, and an optional condition. EXAMPLES To remove an IAM policy binding for the role of 'roles/editor' for the user diff --git a/gcloud/alpha/iot/registries/set-iam-policy b/gcloud/alpha/iot/registries/set-iam-policy index a26fcc53a..4b440cd31 100644 --- a/gcloud/alpha/iot/registries/set-iam-policy +++ b/gcloud/alpha/iot/registries/set-iam-policy @@ -7,14 +7,17 @@ SYNOPSIS POLICY_FILE [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) This command replaces the existing IAM policy for a device - registry, given a REGISTRY and a file encoded in JSON or YAML that contains - the IAM policy. If the given policy file specifies an "etag" value, then - the replacement will succeed only if the policy already in place matches - that etag. (An etag obtained via $ gcloud iot registries get-iam-policy - will prevent the replacement if the policy for the device registry has been - subsequently updated.) A policy file that does not contain an etag value - will replace any existing policy for the device registry. + (ALPHA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + This command replaces the existing IAM policy for a device registry, given + a REGISTRY and a file encoded in JSON or YAML that contains the IAM policy. + If the given policy file specifies an "etag" value, then the replacement + will succeed only if the policy already in place matches that etag. (An + etag obtained via $ gcloud iot registries get-iam-policy will prevent the + replacement if the policy for the device registry has been subsequently + updated.) A policy file that does not contain an etag value will replace + any existing policy for the device registry. EXAMPLES The following command will read an IAM policy defined in a JSON file diff --git a/gcloud/alpha/iot/registries/update b/gcloud/alpha/iot/registries/update index 234802d36..963645dca 100644 --- a/gcloud/alpha/iot/registries/update +++ b/gcloud/alpha/iot/registries/update @@ -9,7 +9,12 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Update a device registry. + (ALPHA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + (ALPHA) (DEPRECATED) Update a device registry. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES The following command updates the device registry 'my-registry' in region diff --git a/gcloud/alpha/logging/copy b/gcloud/alpha/logging/copy index bec129b8a..4d1665042 100644 --- a/gcloud/alpha/logging/copy +++ b/gcloud/alpha/logging/copy @@ -27,14 +27,15 @@ EXAMPLES POSITIONAL ARGUMENTS BUCKET_ID - Id of the bucket to copy. + Id of the log bucket to copy logs from. Example: my-bucket DESTINATION - destination to which to copy logs. + Destination to copy logs to. Example: Cloud Storage bucket: + storage.googleapis.com/my-cloud-storage-bucket REQUIRED FLAGS --location=LOCATION - Location of the bucket. + Location of the log bucket. OPTIONAL FLAGS --log-filter=LOG_FILTER diff --git a/gcloud/alpha/monitoring/policies/help b/gcloud/alpha/monitoring/policies/help index f600d79d5..caf022c95 100644 --- a/gcloud/alpha/monitoring/policies/help +++ b/gcloud/alpha/monitoring/policies/help @@ -41,7 +41,7 @@ COMMANDS (ALPHA) List alerting policies. migrate - (ALPHA) Migrate a new alerting policy. + (ALPHA) Migrate a Prometheus configuration file to Cloud Monitoring. update (ALPHA) Updates an alerting policy. diff --git a/gcloud/alpha/monitoring/policies/migrate b/gcloud/alpha/monitoring/policies/migrate index d79f065ba..2b428b1f8 100644 --- a/gcloud/alpha/monitoring/policies/migrate +++ b/gcloud/alpha/monitoring/policies/migrate @@ -1,5 +1,6 @@ NAME - gcloud alpha monitoring policies migrate - migrate a new alerting policy + gcloud alpha monitoring policies migrate - migrate a Prometheus + configuration file to Cloud Monitoring SYNOPSIS gcloud alpha monitoring policies migrate @@ -7,8 +8,8 @@ SYNOPSIS ...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Creates a new alerting policies and/or notification channels based - on provided Prometheus files. The rules YAML file, which holds the alert + (ALPHA) Creates new alerting policies and/or notification channels based on + provided Prometheus files. The rules YAML file, which holds the alert rules, must be specified as a file through the --policies-from-prometheus-alert-rules-yaml flag. diff --git a/gcloud/alpha/netapp/volumes/create b/gcloud/alpha/netapp/volumes/create index 7ab83c3c8..e7bcd1a06 100644 --- a/gcloud/alpha/netapp/volumes/create +++ b/gcloud/alpha/netapp/volumes/create @@ -15,6 +15,7 @@ SYNOPSIS [kerberos-5p-read-only=KERBEROS-5P-READ-ONLY], [kerberos-5p-read-write=KERBEROS-5P-READ-WRITE], [nfsv3=NFSV3],[nfsv4=NFSV4]] [--labels=[KEY=VALUE,...]] + [--restricted-actions=RESTRICTED_ACTION,[...]] [--security-style=SECURITY_STYLE; default="SECURITY_STYLE_UNSPECIFIED"] [--smb-settings=SMB_SETTING,[SMB_SETTING,...]] [--snap-reserve=SNAP_RESERVE] @@ -154,6 +155,13 @@ OPTIONAL FLAGS contain only hyphens (-), underscores (_), lowercase characters, and numbers. + --restricted-actions=RESTRICTED_ACTION,[...] + Actions to be restricted for a volume.Valid restricted action options + are: 'DELETE' + + For more information, look at + https://cloud.google.com/netapp/volumes/docs/reference/rest/v1/projects.locations.volumes#restrictedaction. + --security-style=SECURITY_STYLE; default="SECURITY_STYLE_UNSPECIFIED" The security style of the Volume. This can either be UNIX or NTFS. diff --git a/gcloud/alpha/netapp/volumes/update b/gcloud/alpha/netapp/volumes/update index c33e359c7..f34764347 100644 --- a/gcloud/alpha/netapp/volumes/update +++ b/gcloud/alpha/netapp/volumes/update @@ -14,6 +14,7 @@ SYNOPSIS [kerberos-5p-read-only=KERBEROS-5P-READ-ONLY], [kerberos-5p-read-write=KERBEROS-5P-READ-WRITE], [nfsv3=NFSV3],[nfsv4=NFSV4]] [--protocols=PROTOCOL,[PROTOCOL,...]] + [--restricted-actions=RESTRICTED_ACTION,[...]] [--security-style=SECURITY_STYLE; default="SECURITY_STYLE_UNSPECIFIED"] [--share-name=SHARE_NAME] [--smb-settings=SMB_SETTING,[SMB_SETTING,...]] @@ -108,6 +109,13 @@ FLAGS For more information, look athttps://cloud.google.com/netapp/docs/reference/rest/v1alpha1/projects.locations.volumes#protocols. + --restricted-actions=RESTRICTED_ACTION,[...] + Actions to be restricted for a volume.Valid restricted action options + are: 'DELETE' + + For more information, look at + https://cloud.google.com/netapp/volumes/docs/reference/rest/v1/projects.locations.volumes#restrictedaction. + --security-style=SECURITY_STYLE; default="SECURITY_STYLE_UNSPECIFIED" The security style of the Volume. This can either be UNIX or NTFS. diff --git a/gcloud/alpha/network-connectivity/policy-based-routes/create b/gcloud/alpha/network-connectivity/policy-based-routes/create index 4fa22f32a..80ad6f4fe 100644 --- a/gcloud/alpha/network-connectivity/policy-based-routes/create +++ b/gcloud/alpha/network-connectivity/policy-based-routes/create @@ -4,14 +4,17 @@ NAME SYNOPSIS gcloud alpha network-connectivity policy-based-routes create - POLICY_BASED_ROUTE --network=NETWORK --next-hop-ilb-ip=NEXT_HOP_ILB_IP - [--async] [--description=DESCRIPTION] - [--destination-range=DESTINATION_RANGE] [--ip-protocol=IP_PROTOCOL] - [--labels=[KEY=VALUE,...]] [--priority=PRIORITY] + POLICY_BASED_ROUTE --network=NETWORK [--async] + [--description=DESCRIPTION] [--destination-range=DESTINATION_RANGE] + [--ip-protocol=IP_PROTOCOL] [--labels=[KEY=VALUE,...]] + [--priority=PRIORITY] [--protocol-version=PROTOCOL_VERSION; default="IPv4"] [--source-range=SOURCE_RANGE] [--interconnect-attachment-region=INTERCONNECT_ATTACHMENT_REGION - | --tags=[TAGS,...]] [GCLOUD_WIDE_FLAG ...] + | --tags=[TAGS,...]] + [--next-hop-ilb-ip=NEXT_HOP_ILB_IP + | --next-hop-other-routes=NEXT_HOP_OTHER_ROUTES] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Create a new policy based route with the given name. @@ -49,10 +52,6 @@ REQUIRED FLAGS Fully-qualified URL of the network that this route applies to. E.g. projects/my-project/global/networks/my-network - --next-hop-ilb-ip=NEXT_HOP_ILB_IP - IP of a global access enabled L4 ILB that should be the next hop to - handle packets. - OPTIONAL FLAGS --async Return immediately, without waiting for the operation in progress to @@ -113,6 +112,18 @@ OPTIONAL FLAGS the policy based route will be installed in all endpoints, including VMs, VPNs, and Interconnect attachements, in the network. + At most one of these can be specified: + + --next-hop-ilb-ip=NEXT_HOP_ILB_IP + IP of a global access enabled L4 ILB that should be the next hop to + handle packets. + + --next-hop-other-routes=NEXT_HOP_OTHER_ROUTES + Next hop should be other routes that handle packets. This will + effectively exclude matching packets being applied on other PBRs with + a lower priority. NEXT_HOP_OTHER_ROUTES must be one of: + default-routing, other-routes-unspecified. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/notebooks/instances/diagnose b/gcloud/alpha/notebooks/instances/diagnose index 760013925..d36f4a656 100644 --- a/gcloud/alpha/notebooks/instances/diagnose +++ b/gcloud/alpha/notebooks/instances/diagnose @@ -5,7 +5,8 @@ SYNOPSIS gcloud alpha notebooks instances diagnose (INSTANCE : --location=LOCATION) --gcs-bucket=GCS_BUCKET [--async] [--enable-copy-home-files] [--enable-packet-capture] [--enable-repair] - [--relative-path=RELATIVE_PATH] [GCLOUD_WIDE_FLAG ...] + [--relative-path=RELATIVE_PATH] [--timeout-minutes=TIMEOUT_MINUTES] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) (DEPRECATED) This command is deprecated. Please use gcloud @@ -94,6 +95,9 @@ OPTIONAL FLAGS directory of the Cloud Storage bucketFormat of full path: gs://{gcs_bucket}/{relative_path}/ + --timeout-minutes=TIMEOUT_MINUTES + Maximum amount of time in minutes before the operation times out + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/run/deploy b/gcloud/alpha/run/deploy index d14993dc6..271b95f37 100644 --- a/gcloud/alpha/run/deploy +++ b/gcloud/alpha/run/deploy @@ -2,25 +2,17 @@ NAME gcloud alpha run deploy - create or update a Cloud Run service SYNOPSIS - gcloud alpha run deploy [[SERVICE] --namespace=NAMESPACE] - [--args=[ARG,...]] [--async] [--command=[COMMAND,...]] - [--concurrency=CONCURRENCY] [--cpu=CPU] - [--ingress=INGRESS; default="all"] [--max-instances=MAX_INSTANCES] - [--memory=MEMORY] [--min-instances=MIN_INSTANCES] - [--platform=PLATFORM; default="managed"] [--port=PORT] + gcloud alpha run deploy [[SERVICE] --namespace=NAMESPACE] [--async] + [--concurrency=CONCURRENCY] [--ingress=INGRESS; default="all"] + [--max-instances=MAX_INSTANCES] [--min-instances=MIN_INSTANCES] + [--platform=PLATFORM; default="managed"] [--service-account=SERVICE_ACCOUNT] [--tag=TAG] [--timeout=TIMEOUT] - [--no-traffic] [--[no-]use-http2] - [--clear-env-vars | --env-vars-file=FILE_PATH - | --set-env-vars=[KEY=VALUE,...] - | --remove-env-vars=[KEY,...] --update-env-vars=[KEY=VALUE,...]] + [--no-traffic] [--clear-labels | --remove-labels=[KEY,...] --labels=[KEY=VALUE,...] | --update-labels=[KEY=VALUE,...]] - [--clear-secrets | --set-secrets=[KEY=VALUE,...] - | --remove-secrets=[KEY,...] --update-secrets=[KEY=VALUE,...]] [--connectivity=CONNECTIVITY --clear-config-maps | --set-config-maps=[KEY=VALUE,...] | --remove-config-maps=[KEY,...] --update-config-maps=[KEY=VALUE,...]] - [--image=IMAGE | --source=SOURCE] [--[no-]allow-unauthenticated --breakglass=JUSTIFICATION --clear-vpc-connector --[no-]cpu-boost --[no-]cpu-throttling --description=DESCRIPTION @@ -41,7 +33,15 @@ SYNOPSIS --clear-key | --key=KEY --clear-network | --network=NETWORK --subnet=SUBNET --clear-network-tags | --network-tags=[TAG,...] --clear-post-key-revocation-action-type - | --post-key-revocation-action-type=POST_KEY_REVOCATION_ACTION_TYPE] + | --post-key-revocation-action-type=POST_KEY_REVOCATION_ACTION_TYPE + --container=CONTAINER | --args=[ARG,...] --command=[COMMAND,...] + --cpu=CPU + --memory=MEMORY --port=PORT --[no-]use-http2 --clear-env-vars + | --env-vars-file=FILE_PATH | --set-env-vars=[KEY=VALUE,...] + | --remove-env-vars=[KEY,...] + --update-env-vars=[KEY=VALUE,...] --clear-secrets + | --set-secrets=[KEY=VALUE,...] | --remove-secrets=[KEY,...] + --update-secrets=[KEY=VALUE,...] --image=IMAGE | --source=SOURCE] [--region=REGION | --cluster=CLUSTER --cluster-location=CLUSTER_LOCATION | --context=CONTEXT --kubeconfig=KUBECONFIG] [GCLOUD_WIDE_FLAG ...] @@ -93,36 +93,15 @@ POSITIONAL ARGUMENTS ▸ set the property core/project. FLAGS - --args=[ARG,...] - Comma-separated arguments passed to the command run by the container - image. If not specified and no '--command' is provided, the container - image's default Cmd is used. Otherwise, if not specified, no arguments - are passed. To reset this field to its default, pass an empty string. - --async Return immediately, without waiting for the operation in progress to complete. - --command=[COMMAND,...] - Entrypoint for the container image. If not specified, the container - image's default Entrypoint is run. To reset this field to its default, - pass an empty string. - --concurrency=CONCURRENCY Set the maximum number of concurrent requests allowed per container instance. Leave concurrency unspecified or provide the special value 'default' to receive the server default value. - --cpu=CPU - Set a CPU limit in Kubernetes cpu units. - - Cloud Run (fully managed) supports values 1, 2 and 4. For Cloud Run - (fully managed), 4 cpus also requires a minimum 2Gi --memory value. - Examples 2, 2.0, 2000m - - Cloud Run for Anthos and Knative-compatible Kubernetes clusters support - fractional values. Examples .5, 500m, 2 - --ingress=INGRESS; default="all" Set the ingress traffic sources allowed to call the service. For Cloud Run (fully managed) the --[no-]allow-unauthenticated flag separately @@ -151,9 +130,6 @@ FLAGS The maximum number of container instances of the Service to run. Use 'default' to unset the limit and use the platform default. - --memory=MEMORY - Set a memory limit. Ex: 1024Mi, 4Gi. - --min-instances=MIN_INSTANCES The minimum number of container instances for this Revision of the Service to run or 'default' to remove any minimum. @@ -175,13 +151,6 @@ FLAGS --kubeconfig and --context flags to specify a kubeconfig file and the context for connecting. - --port=PORT - Container port to receive requests at. Also sets the $PORT environment - variable. Must be a number between 1 and 65535, inclusive. To unset - this field, pass the special value "default". If updating an existing - service with a TCP startup probe pointing to the previous container - port, this will also update the probe port. - --service-account=SERVICE_ACCOUNT Service account associated with the revision of the service. The service account represents the identity of the running revision, and @@ -212,36 +181,6 @@ FLAGS revision by default, run the gcloud run services update-traffic command with --to-latest. - --[no-]use-http2 - Whether to use HTTP/2 for connections to the service. Use --use-http2 - to enable and --no-use-http2 to disable. - - At most one of these can be specified: - - --clear-env-vars - Remove all environment variables. - - --env-vars-file=FILE_PATH - Path to a local YAML file with definitions for all environment - variables. All existing environment variables will be removed before - the new environment variables are added. Example YAML content: - - KEY_1: "value1" - KEY_2: "value 2" - - --set-env-vars=[KEY=VALUE,...] - List of key-value pairs to set as environment variables. All existing - environment variables will be removed first. - - Only --update-env-vars and --remove-env-vars can be used together. If - both are specified, --remove-env-vars will be applied first. - - --remove-env-vars=[KEY,...] - List of environment variables to be removed. - - --update-env-vars=[KEY=VALUE,...] - List of key-value pairs to set as environment variables. - At most one of these can be specified: --clear-labels @@ -273,33 +212,6 @@ FLAGS List of label KEY=VALUE pairs to update. If a label exists, its value is modified. Otherwise, a new label is created. - Specify secrets to mount or provide as environment variables. Keys - starting with a forward slash '/' are mount paths. All other keys - correspond to environment variables. Values should be in the form - SECRET_NAME:SECRET_VERSION. For example: - '--update-secrets=/secrets/api/key=mysecret:latest,ENV=othersecret:1' will - mount a volume at '/secrets/api' containing a file 'key' with the latest - version of secret 'mysecret'. An environment variable named ENV will also - be created whose value is version 1 of secret 'othersecret'. - - At most one of these can be specified: - - --clear-secrets - Remove all secrets. - - --set-secrets=[KEY=VALUE,...] - List of key-value pairs to set as secrets. All existing secrets will - be removed first. - - Only --update-secrets and --remove-secrets can be used together. If both - are specified, --remove-secrets will be applied first. - - --remove-secrets=[KEY,...] - List of secrets to be removed. - - --update-secrets=[KEY=VALUE,...] - List of key-value pairs to set as secrets. - Only applicable if connecting to Cloud Run for Anthos deployed on Google Cloud or Cloud Run for Anthos deployed on VMware. Specify --platform=gke or --platform=kubernetes to use: @@ -350,27 +262,6 @@ FLAGS --update-config-maps=[KEY=VALUE,...] List of key-value pairs to set as config-maps. - At most one of these can be specified: - - --image=IMAGE - Name of the container image to deploy (e.g. - gcr.io/cloudrun/hello:latest). - - --source=SOURCE - The location of the source to build. If a Dockerfile is present in - the source code directory, it will be built using that Dockerfile, - otherwise it will use Google Cloud buildpacks. See - https://cloud.google.com/run/docs/deploying-source-code for more - details. The location can be a directory on a local disk or a gzipped - archive file (.tar.gz) in Google Cloud Storage. If the source is a - local directory, this command skips the files specified in the - --ignore-file. If --ignore-file is not specified, use .gcloudignore - file. If a .gcloudignore file is absent and a .gitignore file is - present in the local source directory, gcloud will use a generated - Git-compatible .gcloudignore file that respects your .gitignored - files. The global .gitignore is not respected. For more information - on .gcloudignore, see gcloud topic gcloudignore. - Only applicable if connecting to Cloud Run (fully managed). Specify --platform=managed to use: @@ -553,6 +444,143 @@ FLAGS No new instances will be started and the existing instances will be shut down after CMEK key revocation. + Container Flags + + If the --container flag is not specified, container flags apply to the + primary container. + + Multiple containers can specified using --container= followed by the + container flags applying to that container. For example the following + command creates two containers, one using IMAGE-A and one using IMAGE-B: + + $ gcloud alpha run deploy --container=A --image=IMAGE-A \ + --container=B --image=IMAGE-B + + --container=CONTAINER + Specifies a container by name. The following container flags + apply to the specified container. + + If the --container flag is specified the following arguments may only be + specified after a --container flag. + + --args=[ARG,...] + Comma-separated arguments passed to the command run by the + container image. If not specified and no '--command' is + provided, the container image's default Cmd is used. + Otherwise, if not specified, no arguments are passed. To + reset this field to its default, pass an empty string. + + --command=[COMMAND,...] + Entrypoint for the container image. If not specified, the + container image's default Entrypoint is run. To reset this + field to its default, pass an empty string. + + --cpu=CPU + Set a CPU limit in Kubernetes cpu units. + + Cloud Run (fully managed) supports values 1, 2 and 4. For + Cloud Run (fully managed), 4 cpus also requires a minimum 2Gi + --memory value. Examples 2, 2.0, 2000m + + Cloud Run for Anthos and Knative-compatible Kubernetes + clusters support fractional values. Examples .5, 500m, 2 + + --memory=MEMORY + Set a memory limit. Ex: 1024Mi, 4Gi. + + --port=PORT + Container port to receive requests at. Also sets the $PORT + environment variable. Must be a number between 1 and 65535, + inclusive. To unset this field, pass the special value + "default". If updating an existing service with a TCP startup + probe pointing to the previous container port, this will also + update the probe port. + + --[no-]use-http2 + Whether to use HTTP/2 for connections to the service. Use + --use-http2 to enable and --no-use-http2 to disable. + + At most one of these can be specified: + + --clear-env-vars + Remove all environment variables. + + --env-vars-file=FILE_PATH + Path to a local YAML file with definitions for all + environment variables. All existing environment variables + will be removed before the new environment variables are + added. Example YAML content: + + KEY_1: "value1" + KEY_2: "value 2" + + --set-env-vars=[KEY=VALUE,...] + List of key-value pairs to set as environment variables. + All existing environment variables will be removed first. + + Only --update-env-vars and --remove-env-vars can be used + together. If both are specified, --remove-env-vars will be + applied first. + + --remove-env-vars=[KEY,...] + List of environment variables to be removed. + + --update-env-vars=[KEY=VALUE,...] + List of key-value pairs to set as environment variables. + + Specify secrets to mount or provide as environment variables. + Keys starting with a forward slash '/' are mount paths. All + other keys correspond to environment variables. Values should be + in the form SECRET_NAME:SECRET_VERSION. For example: + '--update-secrets=/secrets/api/key=mysecret:latest,ENV=othersecret:1' + will mount a volume at '/secrets/api' containing a file 'key' + with the latest version of secret 'mysecret'. An environment + variable named ENV will also be created whose value is version 1 + of secret 'othersecret'. + + At most one of these can be specified: + + --clear-secrets + Remove all secrets. + + --set-secrets=[KEY=VALUE,...] + List of key-value pairs to set as secrets. All existing + secrets will be removed first. + + Only --update-secrets and --remove-secrets can be used + together. If both are specified, --remove-secrets will be + applied first. + + --remove-secrets=[KEY,...] + List of secrets to be removed. + + --update-secrets=[KEY=VALUE,...] + List of key-value pairs to set as secrets. + + At most one of these can be specified: + + --image=IMAGE + Name of the container image to deploy (e.g. + gcr.io/cloudrun/hello:latest). + + --source=SOURCE + The location of the source to build. If a Dockerfile is + present in the source code directory, it will be built + using that Dockerfile, otherwise it will use Google Cloud + buildpacks. See + https://cloud.google.com/run/docs/deploying-source-code for + more details. The location can be a directory on a local + disk or a gzipped archive file (.tar.gz) in Google Cloud + Storage. If the source is a local directory, this command + skips the files specified in the --ignore-file. If + --ignore-file is not specified, use .gcloudignore file. If + a .gcloudignore file is absent and a .gitignore file is + present in the local source directory, gcloud will use a + generated Git-compatible .gcloudignore file that respects + your .gitignored files. The global .gitignore is not + respected. For more information on .gcloudignore, see + gcloud topic gcloudignore. + Arguments to locate resources, depending on the platform used. At most one of these can be specified: diff --git a/gcloud/alpha/run/services/update b/gcloud/alpha/run/services/update index 2fea019a9..13405a46e 100644 --- a/gcloud/alpha/run/services/update +++ b/gcloud/alpha/run/services/update @@ -4,13 +4,12 @@ NAME SYNOPSIS gcloud alpha run services update [[SERVICE] --namespace=NAMESPACE] - [--args=[ARG,...]] [--async] [--command=[COMMAND,...]] - [--concurrency=CONCURRENCY] [--cpu=CPU] [--image=IMAGE] + [--async] [--concurrency=CONCURRENCY] [--ingress=INGRESS; default="all"] [--max-instances=MAX_INSTANCES] - [--memory=MEMORY] [--min-instances=MIN_INSTANCES] - [--platform=PLATFORM; default="managed"] [--port=PORT] + [--min-instances=MIN_INSTANCES] + [--platform=PLATFORM; default="managed"] [--service-account=SERVICE_ACCOUNT] [--tag=TAG] [--timeout=TIMEOUT] - [--no-traffic] [--[no-]use-http2] + [--no-traffic] [--breakglass=JUSTIFICATION --clear-vpc-connector --[no-]cpu-boost --[no-]cpu-throttling --description=DESCRIPTION --execution-environment=EXECUTION_ENVIRONMENT @@ -30,14 +29,17 @@ SYNOPSIS --clear-key | --key=KEY --clear-network | --network=NETWORK --subnet=SUBNET --clear-network-tags | --network-tags=[TAG,...] --clear-post-key-revocation-action-type - | --post-key-revocation-action-type=POST_KEY_REVOCATION_ACTION_TYPE] - [--clear-env-vars | --env-vars-file=FILE_PATH - | --set-env-vars=[KEY=VALUE,...] - | --remove-env-vars=[KEY,...] --update-env-vars=[KEY=VALUE,...]] + | --post-key-revocation-action-type=POST_KEY_REVOCATION_ACTION_TYPE + --container=CONTAINER | --args=[ARG,...] --command=[COMMAND,...] + --cpu=CPU --image=IMAGE + --memory=MEMORY --port=PORT --[no-]use-http2 --clear-env-vars + | --env-vars-file=FILE_PATH | --set-env-vars=[KEY=VALUE,...] + | --remove-env-vars=[KEY,...] + --update-env-vars=[KEY=VALUE,...] --clear-secrets + | --set-secrets=[KEY=VALUE,...] + | --remove-secrets=[KEY,...] --update-secrets=[KEY=VALUE,...]] [--clear-labels | --remove-labels=[KEY,...] --labels=[KEY=VALUE,...] | --update-labels=[KEY=VALUE,...]] - [--clear-secrets | --set-secrets=[KEY=VALUE,...] - | --remove-secrets=[KEY,...] --update-secrets=[KEY=VALUE,...]] [--connectivity=CONNECTIVITY --clear-config-maps | --set-config-maps=[KEY=VALUE,...] | --remove-config-maps=[KEY,...] --update-config-maps=[KEY=VALUE,...]] @@ -83,40 +85,15 @@ POSITIONAL ARGUMENTS ▸ set the property core/project. FLAGS - --args=[ARG,...] - Comma-separated arguments passed to the command run by the container - image. If not specified and no '--command' is provided, the container - image's default Cmd is used. Otherwise, if not specified, no arguments - are passed. To reset this field to its default, pass an empty string. - --async Return immediately, without waiting for the operation in progress to complete. - --command=[COMMAND,...] - Entrypoint for the container image. If not specified, the container - image's default Entrypoint is run. To reset this field to its default, - pass an empty string. - --concurrency=CONCURRENCY Set the maximum number of concurrent requests allowed per container instance. Leave concurrency unspecified or provide the special value 'default' to receive the server default value. - --cpu=CPU - Set a CPU limit in Kubernetes cpu units. - - Cloud Run (fully managed) supports values 1, 2 and 4. For Cloud Run - (fully managed), 4 cpus also requires a minimum 2Gi --memory value. - Examples 2, 2.0, 2000m - - Cloud Run for Anthos and Knative-compatible Kubernetes clusters support - fractional values. Examples .5, 500m, 2 - - --image=IMAGE - Name of the container image to deploy (e.g. - gcr.io/cloudrun/hello:latest). - --ingress=INGRESS; default="all" Set the ingress traffic sources allowed to call the service. For Cloud Run (fully managed) the --[no-]allow-unauthenticated flag separately @@ -145,9 +122,6 @@ FLAGS The maximum number of container instances of the Service to run. Use 'default' to unset the limit and use the platform default. - --memory=MEMORY - Set a memory limit. Ex: 1024Mi, 4Gi. - --min-instances=MIN_INSTANCES The minimum number of container instances for this Revision of the Service to run or 'default' to remove any minimum. @@ -169,13 +143,6 @@ FLAGS --kubeconfig and --context flags to specify a kubeconfig file and the context for connecting. - --port=PORT - Container port to receive requests at. Also sets the $PORT environment - variable. Must be a number between 1 and 65535, inclusive. To unset - this field, pass the special value "default". If updating an existing - service with a TCP startup probe pointing to the previous container - port, this will also update the probe port. - --service-account=SERVICE_ACCOUNT Service account associated with the revision of the service. The service account represents the identity of the running revision, and @@ -206,10 +173,6 @@ FLAGS revision by default, run the gcloud run services update-traffic command with --to-latest. - --[no-]use-http2 - Whether to use HTTP/2 for connections to the service. Use --use-http2 - to enable and --no-use-http2 to disable. - Only applicable if connecting to Cloud Run (fully managed). Specify --platform=managed to use: @@ -386,31 +349,122 @@ FLAGS No new instances will be started and the existing instances will be shut down after CMEK key revocation. - At most one of these can be specified: + Container Flags - --clear-env-vars - Remove all environment variables. + If the --container flag is not specified, container flags apply to the + primary container. - --env-vars-file=FILE_PATH - Path to a local YAML file with definitions for all environment - variables. All existing environment variables will be removed before - the new environment variables are added. Example YAML content: + Multiple containers can specified using --container= followed by the + container flags applying to that container. For example the following + command creates two containers, one using IMAGE-A and one using IMAGE-B: - KEY_1: "value1" - KEY_2: "value 2" + $ gcloud alpha run services update --container=A --image=IMAGE-A \ + --container=B --image=IMAGE-B - --set-env-vars=[KEY=VALUE,...] - List of key-value pairs to set as environment variables. All existing - environment variables will be removed first. + --container=CONTAINER + Specifies a container by name. The following container flags + apply to the specified container. - Only --update-env-vars and --remove-env-vars can be used together. If - both are specified, --remove-env-vars will be applied first. + If the --container flag is specified the following arguments may only be + specified after a --container flag. - --remove-env-vars=[KEY,...] - List of environment variables to be removed. + --args=[ARG,...] + Comma-separated arguments passed to the command run by the + container image. If not specified and no '--command' is + provided, the container image's default Cmd is used. + Otherwise, if not specified, no arguments are passed. To + reset this field to its default, pass an empty string. - --update-env-vars=[KEY=VALUE,...] - List of key-value pairs to set as environment variables. + --command=[COMMAND,...] + Entrypoint for the container image. If not specified, the + container image's default Entrypoint is run. To reset this + field to its default, pass an empty string. + + --cpu=CPU + Set a CPU limit in Kubernetes cpu units. + + Cloud Run (fully managed) supports values 1, 2 and 4. For + Cloud Run (fully managed), 4 cpus also requires a minimum 2Gi + --memory value. Examples 2, 2.0, 2000m + + Cloud Run for Anthos and Knative-compatible Kubernetes + clusters support fractional values. Examples .5, 500m, 2 + + --image=IMAGE + Name of the container image to deploy (e.g. + gcr.io/cloudrun/hello:latest). + + --memory=MEMORY + Set a memory limit. Ex: 1024Mi, 4Gi. + + --port=PORT + Container port to receive requests at. Also sets the $PORT + environment variable. Must be a number between 1 and 65535, + inclusive. To unset this field, pass the special value + "default". If updating an existing service with a TCP startup + probe pointing to the previous container port, this will also + update the probe port. + + --[no-]use-http2 + Whether to use HTTP/2 for connections to the service. Use + --use-http2 to enable and --no-use-http2 to disable. + + At most one of these can be specified: + + --clear-env-vars + Remove all environment variables. + + --env-vars-file=FILE_PATH + Path to a local YAML file with definitions for all + environment variables. All existing environment variables + will be removed before the new environment variables are + added. Example YAML content: + + KEY_1: "value1" + KEY_2: "value 2" + + --set-env-vars=[KEY=VALUE,...] + List of key-value pairs to set as environment variables. + All existing environment variables will be removed first. + + Only --update-env-vars and --remove-env-vars can be used + together. If both are specified, --remove-env-vars will be + applied first. + + --remove-env-vars=[KEY,...] + List of environment variables to be removed. + + --update-env-vars=[KEY=VALUE,...] + List of key-value pairs to set as environment variables. + + Specify secrets to mount or provide as environment variables. + Keys starting with a forward slash '/' are mount paths. All + other keys correspond to environment variables. Values should be + in the form SECRET_NAME:SECRET_VERSION. For example: + '--update-secrets=/secrets/api/key=mysecret:latest,ENV=othersecret:1' + will mount a volume at '/secrets/api' containing a file 'key' + with the latest version of secret 'mysecret'. An environment + variable named ENV will also be created whose value is version 1 + of secret 'othersecret'. + + At most one of these can be specified: + + --clear-secrets + Remove all secrets. + + --set-secrets=[KEY=VALUE,...] + List of key-value pairs to set as secrets. All existing + secrets will be removed first. + + Only --update-secrets and --remove-secrets can be used + together. If both are specified, --remove-secrets will be + applied first. + + --remove-secrets=[KEY,...] + List of secrets to be removed. + + --update-secrets=[KEY=VALUE,...] + List of key-value pairs to set as secrets. At most one of these can be specified: @@ -443,33 +497,6 @@ FLAGS List of label KEY=VALUE pairs to update. If a label exists, its value is modified. Otherwise, a new label is created. - Specify secrets to mount or provide as environment variables. Keys - starting with a forward slash '/' are mount paths. All other keys - correspond to environment variables. Values should be in the form - SECRET_NAME:SECRET_VERSION. For example: - '--update-secrets=/secrets/api/key=mysecret:latest,ENV=othersecret:1' will - mount a volume at '/secrets/api' containing a file 'key' with the latest - version of secret 'mysecret'. An environment variable named ENV will also - be created whose value is version 1 of secret 'othersecret'. - - At most one of these can be specified: - - --clear-secrets - Remove all secrets. - - --set-secrets=[KEY=VALUE,...] - List of key-value pairs to set as secrets. All existing secrets will - be removed first. - - Only --update-secrets and --remove-secrets can be used together. If both - are specified, --remove-secrets will be applied first. - - --remove-secrets=[KEY,...] - List of secrets to be removed. - - --update-secrets=[KEY=VALUE,...] - List of key-value pairs to set as secrets. - Only applicable if connecting to Cloud Run for Anthos deployed on Google Cloud or Cloud Run for Anthos deployed on VMware. Specify --platform=gke or --platform=kubernetes to use: diff --git a/gcloud/alpha/services/disable b/gcloud/alpha/services/disable deleted file mode 100644 index 4b09f42cb..000000000 --- a/gcloud/alpha/services/disable +++ /dev/null @@ -1,63 +0,0 @@ -NAME - gcloud alpha services disable - disable a service for consumption for a - project - -SYNOPSIS - gcloud alpha services disable [SERVICE ...] [--async] [--force] - [GCLOUD_WIDE_FLAG ...] - -DESCRIPTION - (ALPHA) This command disables one or more previously-enabled services for - consumption. - - To see a list of the enabled services for a project, run: - - $ gcloud alpha services list - - More information on listing services can be found at: - https://cloud.google.com/service-usage/docs/list-services and on disabling - a service at: https://cloud.google.com/service-usage/docs/enable-disable - -EXAMPLES - To disable a service called my-consumed-service for the active project, - run: - - $ gcloud alpha services disable my-consumed-service - - To run the same command asynchronously (non-blocking), run: - - $ gcloud alpha services disable my-consumed-service --async - -POSITIONAL ARGUMENTS - [SERVICE ...] - The name of the service(s) to disable. - -FLAGS - --async - Return immediately, without waiting for the operation in progress to - complete. - - --force - If specified, the disable call will proceed even if there are enabled - services which depend on the service to be disabled. Forcing the call - means that the services which depend on the service to be disabled will - also be disabled. - -GCLOUD WIDE FLAGS - These flags are available to all commands: --access-token-file, --account, - --billing-project, --configuration, --flags-file, --flatten, --format, - --help, --impersonate-service-account, --log-http, --project, --quiet, - --trace-token, --user-output-enabled, --verbosity. - - Run $ gcloud help for details. - -NOTES - This command is currently in alpha and might change without notice. If this - command fails with API permission errors despite specifying the correct - project, you might be trying to access an API with an invitation-only early - access allowlist. These variants are also available: - - $ gcloud services disable - - $ gcloud beta services disable - diff --git a/gcloud/alpha/services/enable b/gcloud/alpha/services/enable deleted file mode 100644 index aa45ca1be..000000000 --- a/gcloud/alpha/services/enable +++ /dev/null @@ -1,59 +0,0 @@ -NAME - gcloud alpha services enable - enables a service for consumption for a - project - -SYNOPSIS - gcloud alpha services enable [SERVICE ...] [--async] [GCLOUD_WIDE_FLAG ...] - -DESCRIPTION - (ALPHA) This command enables a service for consumption for a project. - - To see a list of available services for a project, run: - - $ gcloud alpha services list --available - - More information on listing services can be found at: - https://cloud.google.com/service-usage/docs/list-services and on disabling - a service at: https://cloud.google.com/service-usage/docs/enable-disable - -EXAMPLES - To enable a service called my-consumed-service on the current project, run: - - $ gcloud alpha services enable my-consumed-service - - To run the same command asynchronously (non-blocking), run: - - $ gcloud alpha services enable my-consumed-service --async - - To enable services called service1, service2, and service3 on the current - project, run: - - $ gcloud alpha services enable service1 service2 service3 - -POSITIONAL ARGUMENTS - [SERVICE ...] - The name of the service(s) to enable. - -FLAGS - --async - Return immediately, without waiting for the operation in progress to - complete. - -GCLOUD WIDE FLAGS - These flags are available to all commands: --access-token-file, --account, - --billing-project, --configuration, --flags-file, --flatten, --format, - --help, --impersonate-service-account, --log-http, --project, --quiet, - --trace-token, --user-output-enabled, --verbosity. - - Run $ gcloud help for details. - -NOTES - This command is currently in alpha and might change without notice. If this - command fails with API permission errors despite specifying the correct - project, you might be trying to access an API with an invitation-only early - access allowlist. These variants are also available: - - $ gcloud services enable - - $ gcloud beta services enable - diff --git a/gcloud/alpha/services/help b/gcloud/alpha/services/help index f897e4aa9..f08b3514a 100644 --- a/gcloud/alpha/services/help +++ b/gcloud/alpha/services/help @@ -50,12 +50,6 @@ GROUPS COMMANDS COMMAND is one of the following: - disable - (ALPHA) Disable a service for consumption for a project. - - enable - (ALPHA) Enables a service for consumption for a project. - list (ALPHA) List services for a project. diff --git a/gcloud/alpha/sql/instances/create b/gcloud/alpha/sql/instances/create index c252edc47..be1a9796c 100644 --- a/gcloud/alpha/sql/instances/create +++ b/gcloud/alpha/sql/instances/create @@ -341,9 +341,10 @@ FLAGS implies that complexity check is not enabled. --[no-]password-policy-disallow-compromised-credentials - Disallow credentials that have been compromised by a data breach. Use - --password-policy-disallow-compromised-credentials to enable and - --no-password-policy-disallow-compromised-credentials to disable. + Prohibits the use of credentials that have been compromised by a data + breach. Use --password-policy-disallow-compromised-credentials to + enable and --no-password-policy-disallow-compromised-credentials to + disable. --[no-]password-policy-disallow-username-substring Disallow username as a part of the password. Use diff --git a/gcloud/alpha/sql/instances/patch b/gcloud/alpha/sql/instances/patch index cfcf9f4a4..0bc52252c 100644 --- a/gcloud/alpha/sql/instances/patch +++ b/gcloud/alpha/sql/instances/patch @@ -287,9 +287,10 @@ FLAGS implies that complexity check is not enabled. --[no-]password-policy-disallow-compromised-credentials - Disallow credentials that have been compromised by a data breach. Use - --password-policy-disallow-compromised-credentials to enable and - --no-password-policy-disallow-compromised-credentials to disable. + Prohibits the use of credentials that have been compromised by a data + breach. Use --password-policy-disallow-compromised-credentials to + enable and --no-password-policy-disallow-compromised-credentials to + disable. --[no-]password-policy-disallow-username-substring Disallow username as a part of the password. Use diff --git a/gcloud/alpha/storage/buckets/update b/gcloud/alpha/storage/buckets/update index bd71f954e..c9185516e 100644 --- a/gcloud/alpha/storage/buckets/update +++ b/gcloud/alpha/storage/buckets/update @@ -111,13 +111,15 @@ FLAGS --acl-file=ACL_FILE Path to a local JSON or YAML formatted file containing a valid policy. - The output of gcloud storage [buckets|objects] describe - --format="multi(acl:format=json)" is a valid file and can be edited for - more fine-grained control. + See the ObjectAccessControls resource + (https://cloud.google.com/storage/docs/json_api/v1/objectAccessControls) + for a representation of JSON formatted files. The output of gcloud + storage [buckets|objects] describe --format="multi(acl:format=json)" is + a valid file and can be edited for more fine-grained control. --add-acl-grant=[ACL_GRANT,...] Key-value pairs mirroring the JSON accepted by your cloud provider. For - example, for Google Cloud + example, for Cloud Storage,--add-acl-grant=entity=user-tim@gmail.com,role=OWNER --canned-acl=PREDEFINED_ACL, --predefined-acl=PREDEFINED_ACL, -a PREDEFINED_ACL @@ -127,9 +129,9 @@ FLAGS --remove-acl-grant=REMOVE_ACL_GRANT Key-value pairs mirroring the JSON accepted by your cloud provider. For - example, for Google Cloud Storage, --remove-acl-grant=ENTITY, where - ENTITY has a valid ACL entity format, such as user-tim@gmail.com, - group-admins, allUsers, etc. + example, for Cloud Storage, --remove-acl-grant=ENTITY, where ENTITY has + a valid ACL entity format, such as user-tim@gmail.com, group-admins, + allUsers, etc. --add-default-object-acl-grant=[DEFAULT_OBJECT_ACL_GRANT,...] Adds default object ACL grant. See --add-acl-grant help text for more diff --git a/gcloud/alpha/storage/cat b/gcloud/alpha/storage/cat index 354dda45c..721362cfa 100644 --- a/gcloud/alpha/storage/cat +++ b/gcloud/alpha/storage/cat @@ -64,7 +64,7 @@ ENCRYPTION FLAGS --decryption-keys=[DECRYPTION_KEY,...] A comma-separated list of customer-supplied encryption keys (RFC 4648 section 4 base64-encoded AES256 strings) that will be used to decrypt - Google Cloud Storage objects. Data encrypted with a customer-managed + Cloud Storage objects. Data encrypted with a customer-managed encryption key (CMEK) is decrypted automatically, so CMEKs do not need to be listed here. diff --git a/gcloud/alpha/storage/cp b/gcloud/alpha/storage/cp index 0ca1f3625..7a6f258a0 100644 --- a/gcloud/alpha/storage/cp +++ b/gcloud/alpha/storage/cp @@ -178,7 +178,7 @@ FLAGS https://cloud.google.com/storage/docs/access-control/lists#predefined-acl --[no-]preserve-acl, -p - Preserves ACLs when copying in the cloud. This option is Google Cloud + Preserves ACLs when copying in the cloud. This option is Cloud Storage-only, and you need OWNER access to all copied objects. If all objects in the destination bucket should have the same ACL, you can also set a default object ACL on that bucket instead of using this @@ -264,7 +264,7 @@ ENCRYPTION FLAGS --decryption-keys=[DECRYPTION_KEY,...] A comma-separated list of customer-supplied encryption keys (RFC 4648 section 4 base64-encoded AES256 strings) that will be used to decrypt - Google Cloud Storage objects. Data encrypted with a customer-managed + Cloud Storage objects. Data encrypted with a customer-managed encryption key (CMEK) is decrypted automatically, so CMEKs do not need to be listed here. @@ -301,7 +301,7 @@ OBJECT METADATA FLAGS Type of data contained in the object (e.g. text/html). --custom-time=CUSTOM_TIME - Custom time for Google Cloud Storage objects in RFC 3339 format. + Custom time for Cloud Storage objects in RFC 3339 format. At most one of these can be specified: diff --git a/gcloud/alpha/storage/hash b/gcloud/alpha/storage/hash index 812fdbb4d..b9dbc26b9 100644 --- a/gcloud/alpha/storage/hash +++ b/gcloud/alpha/storage/hash @@ -56,7 +56,7 @@ ENCRYPTION FLAGS --decryption-keys=[DECRYPTION_KEY,...] A comma-separated list of customer-supplied encryption keys (RFC 4648 section 4 base64-encoded AES256 strings) that will be used to decrypt - Google Cloud Storage objects. Data encrypted with a customer-managed + Cloud Storage objects. Data encrypted with a customer-managed encryption key (CMEK) is decrypted automatically, so CMEKs do not need to be listed here. diff --git a/gcloud/alpha/storage/ls b/gcloud/alpha/storage/ls index 8139aee8d..08a96feea 100644 --- a/gcloud/alpha/storage/ls +++ b/gcloud/alpha/storage/ls @@ -124,7 +124,7 @@ ENCRYPTION FLAGS --decryption-keys=[DECRYPTION_KEY,...] A comma-separated list of customer-supplied encryption keys (RFC 4648 section 4 base64-encoded AES256 strings) that will be used to decrypt - Google Cloud Storage objects. Data encrypted with a customer-managed + Cloud Storage objects. Data encrypted with a customer-managed encryption key (CMEK) is decrypted automatically, so CMEKs do not need to be listed here. diff --git a/gcloud/alpha/storage/mv b/gcloud/alpha/storage/mv index 3ce7baf88..9496dc527 100644 --- a/gcloud/alpha/storage/mv +++ b/gcloud/alpha/storage/mv @@ -185,7 +185,7 @@ FLAGS https://cloud.google.com/storage/docs/access-control/lists#predefined-acl --[no-]preserve-acl, -p - Preserves ACLs when copying in the cloud. This option is Google Cloud + Preserves ACLs when copying in the cloud. This option is Cloud Storage-only, and you need OWNER access to all copied objects. If all objects in the destination bucket should have the same ACL, you can also set a default object ACL on that bucket instead of using this @@ -271,7 +271,7 @@ ENCRYPTION FLAGS --decryption-keys=[DECRYPTION_KEY,...] A comma-separated list of customer-supplied encryption keys (RFC 4648 section 4 base64-encoded AES256 strings) that will be used to decrypt - Google Cloud Storage objects. Data encrypted with a customer-managed + Cloud Storage objects. Data encrypted with a customer-managed encryption key (CMEK) is decrypted automatically, so CMEKs do not need to be listed here. @@ -308,7 +308,7 @@ OBJECT METADATA FLAGS Type of data contained in the object (e.g. text/html). --custom-time=CUSTOM_TIME - Custom time for Google Cloud Storage objects in RFC 3339 format. + Custom time for Cloud Storage objects in RFC 3339 format. At most one of these can be specified: diff --git a/gcloud/alpha/storage/objects/describe b/gcloud/alpha/storage/objects/describe index d55497d58..d4512839b 100644 --- a/gcloud/alpha/storage/objects/describe +++ b/gcloud/alpha/storage/objects/describe @@ -45,7 +45,7 @@ ENCRYPTION FLAGS --decryption-keys=[DECRYPTION_KEY,...] A comma-separated list of customer-supplied encryption keys (RFC 4648 section 4 base64-encoded AES256 strings) that will be used to decrypt - Google Cloud Storage objects. Data encrypted with a customer-managed + Cloud Storage objects. Data encrypted with a customer-managed encryption key (CMEK) is decrypted automatically, so CMEKs do not need to be listed here. diff --git a/gcloud/alpha/storage/objects/list b/gcloud/alpha/storage/objects/list index 6bd85f861..c2aadcf20 100644 --- a/gcloud/alpha/storage/objects/list +++ b/gcloud/alpha/storage/objects/list @@ -58,7 +58,7 @@ ENCRYPTION FLAGS --decryption-keys=[DECRYPTION_KEY,...] A comma-separated list of customer-supplied encryption keys (RFC 4648 section 4 base64-encoded AES256 strings) that will be used to decrypt - Google Cloud Storage objects. Data encrypted with a customer-managed + Cloud Storage objects. Data encrypted with a customer-managed encryption key (CMEK) is decrypted automatically, so CMEKs do not need to be listed here. diff --git a/gcloud/alpha/storage/objects/update b/gcloud/alpha/storage/objects/update index f4feb76de..40d99c35c 100644 --- a/gcloud/alpha/storage/objects/update +++ b/gcloud/alpha/storage/objects/update @@ -91,13 +91,15 @@ FLAGS --acl-file=ACL_FILE Path to a local JSON or YAML formatted file containing a valid policy. - The output of gcloud storage [buckets|objects] describe - --format="multi(acl:format=json)" is a valid file and can be edited for - more fine-grained control. + See the ObjectAccessControls resource + (https://cloud.google.com/storage/docs/json_api/v1/objectAccessControls) + for a representation of JSON formatted files. The output of gcloud + storage [buckets|objects] describe --format="multi(acl:format=json)" is + a valid file and can be edited for more fine-grained control. --add-acl-grant=[ACL_GRANT,...] Key-value pairs mirroring the JSON accepted by your cloud provider. For - example, for Google Cloud + example, for Cloud Storage,--add-acl-grant=entity=user-tim@gmail.com,role=OWNER --canned-acl=PREDEFINED_ACL, --predefined-acl=PREDEFINED_ACL, -a PREDEFINED_ACL @@ -106,7 +108,7 @@ FLAGS https://cloud.google.com/storage/docs/access-control/lists#predefined-acl --[no-]preserve-acl, -p - Preserves ACLs when copying in the cloud. This option is Google Cloud + Preserves ACLs when copying in the cloud. This option is Cloud Storage-only, and you need OWNER access to all copied objects. If all objects in the destination bucket should have the same ACL, you can also set a default object ACL on that bucket instead of using this @@ -115,9 +117,9 @@ FLAGS --remove-acl-grant=REMOVE_ACL_GRANT Key-value pairs mirroring the JSON accepted by your cloud provider. For - example, for Google Cloud Storage, --remove-acl-grant=ENTITY, where - ENTITY has a valid ACL entity format, such as user-tim@gmail.com, - group-admins, allUsers, etc. + example, for Cloud Storage, --remove-acl-grant=ENTITY, where ENTITY has + a valid ACL entity format, such as user-tim@gmail.com, group-admins, + allUsers, etc. ENCRYPTION FLAGS --clear-encryption-key @@ -129,7 +131,7 @@ ENCRYPTION FLAGS --decryption-keys=[DECRYPTION_KEY,...] A comma-separated list of customer-supplied encryption keys (RFC 4648 section 4 base64-encoded AES256 strings) that will be used to decrypt - Google Cloud Storage objects. Data encrypted with a customer-managed + Cloud Storage objects. Data encrypted with a customer-managed encryption key (CMEK) is decrypted automatically, so CMEKs do not need to be listed here. @@ -187,7 +189,7 @@ OBJECT METADATA FLAGS Type of data contained in the object (e.g. text/html). --custom-time=CUSTOM_TIME - Custom time for Google Cloud Storage objects in RFC 3339 format. + Custom time for Cloud Storage objects in RFC 3339 format. At most one of these can be specified: diff --git a/gcloud/alpha/storage/rsync b/gcloud/alpha/storage/rsync index 4a19cecee..6597c7bb1 100644 --- a/gcloud/alpha/storage/rsync +++ b/gcloud/alpha/storage/rsync @@ -206,7 +206,7 @@ ENCRYPTION FLAGS --decryption-keys=[DECRYPTION_KEY,...] A comma-separated list of customer-supplied encryption keys (RFC 4648 section 4 base64-encoded AES256 strings) that will be used to decrypt - Google Cloud Storage objects. Data encrypted with a customer-managed + Cloud Storage objects. Data encrypted with a customer-managed encryption key (CMEK) is decrypted automatically, so CMEKs do not need to be listed here. @@ -243,7 +243,7 @@ OBJECT METADATA FLAGS Type of data contained in the object (e.g. text/html). --custom-time=CUSTOM_TIME - Custom time for Google Cloud Storage objects in RFC 3339 format. + Custom time for Cloud Storage objects in RFC 3339 format. At most one of these can be specified: diff --git a/gcloud/beta/builds/submit b/gcloud/beta/builds/submit index cc8e16ffc..f4199c64b 100644 --- a/gcloud/beta/builds/submit +++ b/gcloud/beta/builds/submit @@ -3,12 +3,12 @@ NAME SYNOPSIS gcloud beta builds submit [[SOURCE] --no-source] [--async] [--no-cache] - [--default-buckets-behavior=DEFAULT_BUCKETS_BEHAVIOR] + [--default-buckets-behavior=DEFAULT_BUCKETS_BEHAVIOR] [--dir=DIR] [--disk-size=DISK_SIZE] [--gcs-log-dir=GCS_LOG_DIR] [--gcs-source-staging-dir=GCS_SOURCE_STAGING_DIR] [--git-source-dir=GIT_SOURCE_DIR] [--git-source-revision=GIT_SOURCE_REVISION] [--ignore-file=IGNORE_FILE] - [--machine-type=MACHINE_TYPE] [--region=REGION] + [--machine-type=MACHINE_TYPE] [--region=REGION] [--revision=REVISION] [--substitutions=[KEY=VALUE,...]] [--suppress-logs] [--timeout=TIMEOUT] [--worker-pool=WORKER_POOL] [--config=CONFIG; default="cloudbuild.yaml" @@ -77,6 +77,13 @@ FLAGS How default buckets are setup. DEFAULT_BUCKETS_BEHAVIOR must be one of: default-logs-bucket-behavior-unspecified, regional-user-owned-bucket. + --dir=DIR + Directory, relative to the source root, in which to run the build. This + is used when the build source is a 2nd-gen Google Cloud Build + repository resource. This must be a relative path. If a step's dir is + specified and is an absolute path, this value is ignored for that + step's execution. + --disk-size=DISK_SIZE Machine disk size (GB) to run the build. @@ -126,6 +133,18 @@ FLAGS which is the default region to use when working with Cloud Build resources, is used. If builds/region is unset, region is set to global. + --revision=REVISION + Revision to fetch from the Git repository such as a branch, a tag, a + commit SHA, or any Git ref to run the build. This is used when the + build source is a 2nd-gen Google Cloud Build repository resource. + + Cloud Build uses git fetch to fetch the revision from the Git + repository; therefore make sure that the string you provide for + revision is parsable by the command. For information on string values + accepted by git fetch, see + https://git-scm.com/docs/gitrevisions#_specifying_revisions. For + information on git fetch, see https://git-scm.com/docs/git-fetch. + --substitutions=[KEY=VALUE,...] Parameters to be substituted in the build specification. diff --git a/gcloud/beta/compute/commitments/create b/gcloud/beta/compute/commitments/create index 04ac5bf85..4be9b2f47 100644 --- a/gcloud/beta/compute/commitments/create +++ b/gcloud/beta/compute/commitments/create @@ -100,10 +100,10 @@ OPTIONAL FLAGS Type of commitment. memory-optimized indicates that the commitment is for memory-optimized VMs. TYPE must be one of: accelerator-optimized, accelerator-optimized-a3, compute-optimized, compute-optimized-c2d, - compute-optimized-c3, compute-optimized-h3, general-purpose, - general-purpose-e2, general-purpose-n2, general-purpose-n2d, - general-purpose-t2d, graphics-optimized, memory-optimized, - memory-optimized-m3. + compute-optimized-c3, compute-optimized-c3d, compute-optimized-h3, + general-purpose, general-purpose-e2, general-purpose-n2, + general-purpose-n2d, general-purpose-t2d, graphics-optimized, + memory-optimized, memory-optimized-m3. Manage the reservations to be created with the commitment. diff --git a/gcloud/beta/compute/instance-templates/create b/gcloud/beta/compute/instance-templates/create index 358f910c2..dd4c23595 100644 --- a/gcloud/beta/compute/instance-templates/create +++ b/gcloud/beta/compute/instance-templates/create @@ -17,6 +17,7 @@ SYNOPSIS [--external-ipv6-address=EXTERNAL_IPV6_ADDRESS] [--external-ipv6-prefix-length=EXTERNAL_IPV6_PREFIX_LENGTH] [--host-error-timeout-seconds=HOST_ERROR_TIMEOUT_SECONDS] + [--instance-template-region=INSTANCE_TEMPLATE_REGION] [--instance-termination-action=INSTANCE_TERMINATION_ACTION] [--internal-ipv6-address=INTERNAL_IPV6_ADDRESS] [--internal-ipv6-prefix-length=INTERNAL_IPV6_PREFIX_LENGTH] @@ -387,6 +388,9 @@ FLAGS with 30 second increments, with a range of 90 to 330 seconds. If unset, the default behavior of the host error recovery is used. + --instance-template-region=INSTANCE_TEMPLATE_REGION + Specifies the region of the regional instance template. + --instance-termination-action=INSTANCE_TERMINATION_ACTION Specifies the termination action that will be taken upon VM preemption (--provisioning-model=SPOT or --preemptible) or automatic instance diff --git a/gcloud/beta/compute/instance-templates/delete b/gcloud/beta/compute/instance-templates/delete index b18c6bae2..c57a49299 100644 --- a/gcloud/beta/compute/instance-templates/delete +++ b/gcloud/beta/compute/instance-templates/delete @@ -4,7 +4,7 @@ NAME SYNOPSIS gcloud beta compute instance-templates delete NAME [NAME ...] - [GCLOUD_WIDE_FLAG ...] + [--global | --region=REGION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) gcloud beta compute instance-templates delete deletes one or more @@ -19,6 +19,16 @@ POSITIONAL ARGUMENTS NAME [NAME ...] Names of the instance templates to delete. +FLAGS + At most one of these can be specified: + + --global + If set, the instance templates are global. + + --region=REGION + Region of the instance templates to delete. Overrides the default + compute/region property value for this command invocation. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/beta/compute/instance-templates/describe b/gcloud/beta/compute/instance-templates/describe index d3fdaecbb..135c254e5 100644 --- a/gcloud/beta/compute/instance-templates/describe +++ b/gcloud/beta/compute/instance-templates/describe @@ -3,7 +3,8 @@ NAME machine instance template SYNOPSIS - gcloud beta compute instance-templates describe NAME [GCLOUD_WIDE_FLAG ...] + gcloud beta compute instance-templates describe NAME + [--global | --region=REGION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) gcloud beta compute instance-templates describe displays all data @@ -18,6 +19,16 @@ POSITIONAL ARGUMENTS NAME Name of the instance template to describe. +FLAGS + At most one of these can be specified: + + --global + If set, the instance template is global. + + --region=REGION + Region of the instance template to describe. Overrides the default + compute/region property value for this command invocation. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/beta/compute/instance-templates/list b/gcloud/beta/compute/instance-templates/list index b380cd0af..172f0823e 100644 --- a/gcloud/beta/compute/instance-templates/list +++ b/gcloud/beta/compute/instance-templates/list @@ -4,9 +4,9 @@ NAME SYNOPSIS gcloud beta compute instance-templates list [NAME ...] - [--regexp=REGEXP, -r REGEXP] [--filter=EXPRESSION] [--limit=LIMIT] - [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri] - [GCLOUD_WIDE_FLAG ...] + [--regexp=REGEXP, -r REGEXP] [--global | --regions=[REGION,...]] + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) gcloud beta compute instance-templates list displays all Google @@ -37,6 +37,15 @@ FLAGS Flag --regexp is deprecated. Use --filter="name~'REGEXP'" instead. + At most one of these can be specified: + + --global + If provided, only global resources are shown. + + --regions=[REGION,...] + If provided, only regional resources are shown. If arguments are + provided, only resources from the given regions are shown. + LIST COMMAND FLAGS --filter=EXPRESSION Apply a Boolean filter EXPRESSION to each resource item to be listed. diff --git a/gcloud/beta/compute/url-maps/help b/gcloud/beta/compute/url-maps/help index c0ff466d7..d7f43c886 100644 --- a/gcloud/beta/compute/url-maps/help +++ b/gcloud/beta/compute/url-maps/help @@ -5,8 +5,8 @@ SYNOPSIS gcloud beta compute url-maps COMMAND [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) List, create, and delete URL maps for external HTTP(S) Load - Balancing, internal HTTP(S) Load Balancing, and Traffic Director. + (BETA) List, create, and delete URL maps for external Application Load + Balancer, internal Application Load Balancer, and Traffic Director. For more information about URL maps, see the URL maps documentation (https://cloud.google.com/load-balancing/docs/url-map-concepts). diff --git a/gcloud/beta/compute/url-maps/validate b/gcloud/beta/compute/url-maps/validate index 6a2beecc9..1311642b8 100644 --- a/gcloud/beta/compute/url-maps/validate +++ b/gcloud/beta/compute/url-maps/validate @@ -18,10 +18,9 @@ EXAMPLES FLAGS --load-balancing-scheme=LOAD_BALANCING_SCHEME - Specifies the load balancer type(s) this validation request is for. Use - EXTERNAL_MANAGED for HTTP/HTTPS External Global Load Balancer with - Advanced Traffic Management. Use EXTERNAL for Classic HTTP/HTTPS - External Global Load Balancer. + Specifies the load balancer type this validation request is for. Use + EXTERNAL_MANAGED for global external Application Load Balancer. Use + EXTERNAL for classic Application Load Balancer. Other load balancer types are not supported. For more information, refer to Choosing a load balancer diff --git a/gcloud/beta/container/clusters/create b/gcloud/beta/container/clusters/create index f9ebb61e5..4fad1251c 100644 --- a/gcloud/beta/container/clusters/create +++ b/gcloud/beta/container/clusters/create @@ -70,11 +70,11 @@ SYNOPSIS [--workload-metadata=WORKLOAD_METADATA] [--workload-pool=WORKLOAD_POOL] [--workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING] [--additional-zones=ZONE,[ZONE,...] | --node-locations=ZONE,[ZONE,...]] + [--cluster-dns=CLUSTER_DNS --cluster-dns-domain=CLUSTER_DNS_DOMAIN + --cluster-dns-scope=CLUSTER_DNS_SCOPE] [--binauthz-policy-bindings=[name=BINAUTHZ_POLICY,...] --binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE | --enable-binauthz] - [--cluster-dns=CLUSTER_DNS --cluster-dns-domain=CLUSTER_DNS_DOMAIN - --cluster-dns-scope=CLUSTER_DNS_SCOPE] [--disable-dataplane-v2-metrics | --enable-dataplane-v2-metrics] [[--enable-autoprovisioning : --autoprovisioning-config-file=AUTOPROVISIONING_CONFIG_FILE @@ -1232,7 +1232,8 @@ FLAGS To disable in an existing cluster, explicitly set the flag to --workload-vulnerability-scanning=disabled. - WORKLOAD_VULNERABILITY_SCANNING must be one of: disabled, standard. + WORKLOAD_VULNERABILITY_SCANNING must be one of: disabled, standard, + enterprise. At most one of these can be specified: @@ -1277,28 +1278,6 @@ FLAGS --location us-central1-a \ --node-locations us-central1-a,us-central1-b - Flags for Binary Authorization: - - --binauthz-policy-bindings=[name=BINAUTHZ_POLICY,...] - The relative resource name of the Binary Authorization policy to - audit and/or enforce. GKE policies have the following format: - projects/{project_number}/platforms/gke/policies/{policy_id}. - - At most one of these can be specified: - - --binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE - Enable Binary Authorization for this cluster. - BINAUTHZ_EVALUATION_MODE must be one of: DISABLED, MONITORING, - MONITORING_AND_PROJECT_SINGLETON_POLICY_ENFORCE, POLICY_BINDINGS, - POLICY_BINDINGS_AND_PROJECT_SINGLETON_POLICY_ENFORCE, - PROJECT_SINGLETON_POLICY_ENFORCE. - - --enable-binauthz - (DEPRECATED) Enable Binary Authorization for this cluster. - - The --enable-binauthz flag is deprecated. Please use - --binauthz-evaluation-mode instead. - ClusterDNS --cluster-dns=CLUSTER_DNS @@ -1328,6 +1307,27 @@ FLAGS vpc Configures the Cloud DNS zone to be private to the VPC Network. + Flags for Binary Authorization: + + --binauthz-policy-bindings=[name=BINAUTHZ_POLICY,...] + The relative resource name of the Binary Authorization policy to + audit and/or enforce. GKE policies have the following format: + projects/{project_number}/platforms/gke/policies/{policy_id}. + + At most one of these can be specified: + + --binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE + Enable Binary Authorization for this cluster. + BINAUTHZ_EVALUATION_MODE must be one of: DISABLED, POLICY_BINDINGS, + POLICY_BINDINGS_AND_PROJECT_SINGLETON_POLICY_ENFORCE, + PROJECT_SINGLETON_POLICY_ENFORCE. + + --enable-binauthz + (DEPRECATED) Enable Binary Authorization for this cluster. + + The --enable-binauthz flag is deprecated. Please use + --binauthz-evaluation-mode instead. + At most one of these can be specified: --disable-dataplane-v2-metrics diff --git a/gcloud/beta/container/clusters/create-auto b/gcloud/beta/container/clusters/create-auto index 0edddf90c..ab51bcfa2 100644 --- a/gcloud/beta/container/clusters/create-auto +++ b/gcloud/beta/container/clusters/create-auto @@ -355,14 +355,14 @@ FLAGS To disable in an existing cluster, explicitly set the flag to --workload-vulnerability-scanning=disabled. - WORKLOAD_VULNERABILITY_SCANNING must be one of: disabled, standard. + WORKLOAD_VULNERABILITY_SCANNING must be one of: disabled, standard, + enterprise. Flags for Binary Authorization: --binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE Enable Binary Authorization for this cluster. - BINAUTHZ_EVALUATION_MODE must be one of: DISABLED, MONITORING, - MONITORING_AND_PROJECT_SINGLETON_POLICY_ENFORCE, POLICY_BINDINGS, + BINAUTHZ_EVALUATION_MODE must be one of: DISABLED, POLICY_BINDINGS, POLICY_BINDINGS_AND_PROJECT_SINGLETON_POLICY_ENFORCE, PROJECT_SINGLETON_POLICY_ENFORCE. diff --git a/gcloud/beta/container/clusters/update b/gcloud/beta/container/clusters/update index c2d0312e9..c4b7445f3 100644 --- a/gcloud/beta/container/clusters/update +++ b/gcloud/beta/container/clusters/update @@ -42,6 +42,8 @@ SYNOPSIS | --additional-pod-ipv4-ranges=NAME,[NAME,...] --remove-additional-pod-ipv4-ranges=NAME,[NAME,...] | --additional-zones=[ZONE,...] | --node-locations=ZONE,[ZONE,...] + | --cluster-dns=CLUSTER_DNS --cluster-dns-domain=CLUSTER_DNS_DOMAIN + --cluster-dns-scope=CLUSTER_DNS_SCOPE | --binauthz-policy-bindings=[name=BINAUTHZ_POLICY,...] --binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE | --enable-binauthz | --clear-maintenance-window @@ -57,8 +59,6 @@ SYNOPSIS | --enable-network-egress-metering --enable-resource-consumption-metering --resource-usage-bigquery-dataset=RESOURCE_USAGE_BIGQUERY_DATASET - | --cluster-dns=CLUSTER_DNS --cluster-dns-domain=CLUSTER_DNS_DOMAIN - --cluster-dns-scope=CLUSTER_DNS_SCOPE | --dataplane-v2-observability-mode=DATAPLANE_V2_OBSERVABILITY_MODE --disable-dataplane-v2-metrics | --enable-dataplane-v2-metrics | [--enable-autoprovisioning @@ -636,7 +636,8 @@ REQUIRED FLAGS To disable in an existing cluster, explicitly set the flag to --workload-vulnerability-scanning=disabled. - WORKLOAD_VULNERABILITY_SCANNING must be one of: disabled, standard. + WORKLOAD_VULNERABILITY_SCANNING must be one of: disabled, standard, + enterprise. --additional-pod-ipv4-ranges=NAME,[NAME,...] Additional IP address ranges(by name) for pods that need to be added @@ -705,6 +706,35 @@ REQUIRED FLAGS --location us-central1-a \ --node-locations us-central1-a,us-central1-b + ClusterDNS + + --cluster-dns=CLUSTER_DNS + DNS provider to use for this cluster. CLUSTER_DNS must be one of: + + clouddns + Selects Cloud DNS as the DNS provider for the cluster. + default + Selects the default DNS provider (kube-dns) for the cluster. + kubedns + Selects Kube DNS as the DNS provider for the cluster. + + --cluster-dns-domain=CLUSTER_DNS_DOMAIN + DNS domain for this cluster. The default value is cluster.local. + This is configurable when --cluster-dns=clouddns and + --cluster-dns-scope=vpc are set. The value must be a valid DNS + subdomain as defined in RFC 1123. + + --cluster-dns-scope=CLUSTER_DNS_SCOPE + DNS scope for the Cloud DNS zone created - valid only with + --cluster-dns=clouddns. Defaults to cluster. + + CLUSTER_DNS_SCOPE must be one of: + + cluster + Configures the Cloud DNS zone to be private to the cluster. + vpc + Configures the Cloud DNS zone to be private to the VPC Network. + Flags for Binary Authorization: --binauthz-policy-bindings=[name=BINAUTHZ_POLICY,...] @@ -716,8 +746,8 @@ REQUIRED FLAGS --binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE Enable Binary Authorization for this cluster. - BINAUTHZ_EVALUATION_MODE must be one of: DISABLED, MONITORING, - MONITORING_AND_PROJECT_SINGLETON_POLICY_ENFORCE, POLICY_BINDINGS, + BINAUTHZ_EVALUATION_MODE must be one of: DISABLED, + POLICY_BINDINGS, POLICY_BINDINGS_AND_PROJECT_SINGLETON_POLICY_ENFORCE, PROJECT_SINGLETON_POLICY_ENFORCE. @@ -863,35 +893,6 @@ REQUIRED FLAGS $ gcloud beta container clusters update example-cluster \ --resource-usage-bigquery-dataset=example_bigquery_dataset_name - ClusterDNS - - --cluster-dns=CLUSTER_DNS - DNS provider to use for this cluster. CLUSTER_DNS must be one of: - - clouddns - Selects Cloud DNS as the DNS provider for the cluster. - default - Selects the default DNS provider (kube-dns) for the cluster. - kubedns - Selects Kube DNS as the DNS provider for the cluster. - - --cluster-dns-domain=CLUSTER_DNS_DOMAIN - DNS domain for this cluster. The default value is cluster.local. - This is configurable when --cluster-dns=clouddns and - --cluster-dns-scope=vpc are set. The value must be a valid DNS - subdomain as defined in RFC 1123. - - --cluster-dns-scope=CLUSTER_DNS_SCOPE - DNS scope for the Cloud DNS zone created - valid only with - --cluster-dns=clouddns. Defaults to cluster. - - CLUSTER_DNS_SCOPE must be one of: - - cluster - Configures the Cloud DNS zone to be private to the cluster. - vpc - Configures the Cloud DNS zone to be private to the VPC Network. - --dataplane-v2-observability-mode=DATAPLANE_V2_OBSERVABILITY_MODE Select Advanced Datapath Observability mode for the cluster. Defaults to DISABLED. diff --git a/gcloud/beta/container/fleet/create b/gcloud/beta/container/fleet/create index adead2f33..2aaed7b0b 100644 --- a/gcloud/beta/container/fleet/create +++ b/gcloud/beta/container/fleet/create @@ -3,10 +3,7 @@ NAME SYNOPSIS gcloud beta container fleet create [--async] [--display-name=DISPLAY_NAME] - [--labels=[KEY=VALUE,...]] - [--security-posture=SECURITY_POSTURE - --workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING] - [GCLOUD_WIDE_FLAG ...] + [--labels=[KEY=VALUE,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) This command can fail for the following reasons: @@ -39,26 +36,6 @@ FLAGS contain only hyphens (-), underscores (_), lowercase characters, and numbers. - Default cluster configurations to apply across the fleet. - - Security posture config. - - --security-posture=SECURITY_POSTURE - To apply basic security posture to the clusters of the fleet, - - $ gcloud beta container fleet create --security-posture=basic - - SECURITY_POSTURE must be one of: disabled, basic, enterprise. - - --workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING - To apply basic vulnerability scanning to the clusters of the fleet, - - $ gcloud beta container fleet create \ - --workload-vulnerability-scanning=disabled - - WORKLOAD_VULNERABILITY_SCANNING must be one of: disabled, basic, - enterprise. - GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/beta/container/fleet/memberships/generate-gateway-rbac b/gcloud/beta/container/fleet/memberships/generate-gateway-rbac index 985f45882..f07a19729 100644 --- a/gcloud/beta/container/fleet/memberships/generate-gateway-rbac +++ b/gcloud/beta/container/fleet/memberships/generate-gateway-rbac @@ -4,10 +4,10 @@ NAME SYNOPSIS gcloud beta container fleet memberships generate-gateway-rbac - [--anthos-support] [--apply] [--context=CONTEXT] - [--kubeconfig=KUBECONFIG] [--membership=MEMBERSHIP] + (--anthos-support | --groups=GROUPS | --users=USERS) [--apply] + [--context=CONTEXT] [--kubeconfig=KUBECONFIG] [--membership=MEMBERSHIP] [--rbac-output-file=RBAC_OUTPUT_FILE] [--revoke] [--role=ROLE] - [--users=USERS] [GCLOUD_WIDE_FLAG ...] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) gcloud beta container fleet memberships generate-gateway-rbac @@ -85,11 +85,31 @@ EXAMPLES --role=clusterrole/cluster-admin --context=my-cluster-context \ --kubeconfig=/home/user/custom_kubeconfig --apply -FLAGS - --anthos-support - If specified, this command will generate RBAC policy file for anthos - support. + The groups can be provided as a Google identity (only email) or an external + identity (starting with "principalSet://iam.googleapis.com"): + $ gcloud beta container fleet memberships generate-gateway-rbac \ + --membership=my-cluster \ + --groups=group@example.com,principalSet://iam.googleapis.com/\ + locations/global/workforcePools/pool/group/ExampleGroup \ + --role=clusterrole/cluster-admin --context=my-cluster-context \ + --kubeconfig=/home/user/custom_kubeconfig --apply + +REQUIRED FLAGS + Exactly one of these must be specified: + + --anthos-support + If specified, this command will generate RBAC policy file for anthos + support. + + --groups=GROUPS + Group email address or third-party IAM group principal. + + --users=USERS + User's email address, service account email address, or third-party + IAM subject principal. + +OPTIONAL FLAGS --apply If specified, this command will generate RBAC policy and apply to the specified cluster. @@ -120,9 +140,6 @@ FLAGS --role=ROLE Namespace scoped role or cluster role. - --users=USERS - User's email address or service account email address. - GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/beta/container/fleet/update b/gcloud/beta/container/fleet/update index aebcbe82e..2846cbf5a 100644 --- a/gcloud/beta/container/fleet/update +++ b/gcloud/beta/container/fleet/update @@ -4,10 +4,7 @@ NAME SYNOPSIS gcloud beta container fleet update [--async] [--display-name=DISPLAY_NAME] [--update-labels=[KEY=VALUE,...]] - [--clear-labels | --remove-labels=[KEY,...]] - [--security-posture=SECURITY_POSTURE - --workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING] - [GCLOUD_WIDE_FLAG ...] + [--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) This command can fail for the following reasons: @@ -61,26 +58,6 @@ FLAGS silently ignored. If --update-labels is also specified then --update-labels is applied first. - Default cluster configurations to apply across the fleet. - - Security posture config. - - --security-posture=SECURITY_POSTURE - To apply basic security posture to the clusters of the fleet, - - $ gcloud beta container fleet update --security-posture=basic - - SECURITY_POSTURE must be one of: disabled, basic, enterprise. - - --workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING - To apply basic vulnerability scanning to the clusters of the fleet, - - $ gcloud beta container fleet update \ - --workload-vulnerability-scanning=disabled - - WORKLOAD_VULNERABILITY_SCANNING must be one of: disabled, basic, - enterprise. - GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/beta/container/hub/create b/gcloud/beta/container/hub/create index 115b29f41..9a8f5a701 100644 --- a/gcloud/beta/container/hub/create +++ b/gcloud/beta/container/hub/create @@ -3,10 +3,7 @@ NAME SYNOPSIS gcloud beta container hub create [--async] [--display-name=DISPLAY_NAME] - [--labels=[KEY=VALUE,...]] - [--security-posture=SECURITY_POSTURE - --workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING] - [GCLOUD_WIDE_FLAG ...] + [--labels=[KEY=VALUE,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) This command can fail for the following reasons: @@ -39,26 +36,6 @@ FLAGS contain only hyphens (-), underscores (_), lowercase characters, and numbers. - Default cluster configurations to apply across the fleet. - - Security posture config. - - --security-posture=SECURITY_POSTURE - To apply basic security posture to the clusters of the fleet, - - $ gcloud beta container hub create --security-posture=basic - - SECURITY_POSTURE must be one of: disabled, basic, enterprise. - - --workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING - To apply basic vulnerability scanning to the clusters of the fleet, - - $ gcloud beta container hub create \ - --workload-vulnerability-scanning=disabled - - WORKLOAD_VULNERABILITY_SCANNING must be one of: disabled, basic, - enterprise. - GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/beta/container/hub/memberships/generate-gateway-rbac b/gcloud/beta/container/hub/memberships/generate-gateway-rbac index e09747f38..b8ad6e7ec 100644 --- a/gcloud/beta/container/hub/memberships/generate-gateway-rbac +++ b/gcloud/beta/container/hub/memberships/generate-gateway-rbac @@ -4,10 +4,10 @@ NAME SYNOPSIS gcloud beta container hub memberships generate-gateway-rbac - [--anthos-support] [--apply] [--context=CONTEXT] - [--kubeconfig=KUBECONFIG] [--membership=MEMBERSHIP] + (--anthos-support | --groups=GROUPS | --users=USERS) [--apply] + [--context=CONTEXT] [--kubeconfig=KUBECONFIG] [--membership=MEMBERSHIP] [--rbac-output-file=RBAC_OUTPUT_FILE] [--revoke] [--role=ROLE] - [--users=USERS] [GCLOUD_WIDE_FLAG ...] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) gcloud beta container hub memberships generate-gateway-rbac @@ -85,11 +85,31 @@ EXAMPLES --role=clusterrole/cluster-admin --context=my-cluster-context \ --kubeconfig=/home/user/custom_kubeconfig --apply -FLAGS - --anthos-support - If specified, this command will generate RBAC policy file for anthos - support. + The groups can be provided as a Google identity (only email) or an external + identity (starting with "principalSet://iam.googleapis.com"): + $ gcloud beta container hub memberships generate-gateway-rbac \ + --membership=my-cluster \ + --groups=group@example.com,principalSet://iam.googleapis.com/\ + locations/global/workforcePools/pool/group/ExampleGroup \ + --role=clusterrole/cluster-admin --context=my-cluster-context \ + --kubeconfig=/home/user/custom_kubeconfig --apply + +REQUIRED FLAGS + Exactly one of these must be specified: + + --anthos-support + If specified, this command will generate RBAC policy file for anthos + support. + + --groups=GROUPS + Group email address or third-party IAM group principal. + + --users=USERS + User's email address, service account email address, or third-party + IAM subject principal. + +OPTIONAL FLAGS --apply If specified, this command will generate RBAC policy and apply to the specified cluster. @@ -120,9 +140,6 @@ FLAGS --role=ROLE Namespace scoped role or cluster role. - --users=USERS - User's email address or service account email address. - GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/beta/container/hub/update b/gcloud/beta/container/hub/update index c9e09fa64..f2505e0d6 100644 --- a/gcloud/beta/container/hub/update +++ b/gcloud/beta/container/hub/update @@ -4,10 +4,7 @@ NAME SYNOPSIS gcloud beta container hub update [--async] [--display-name=DISPLAY_NAME] [--update-labels=[KEY=VALUE,...]] - [--clear-labels | --remove-labels=[KEY,...]] - [--security-posture=SECURITY_POSTURE - --workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING] - [GCLOUD_WIDE_FLAG ...] + [--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) This command can fail for the following reasons: @@ -61,26 +58,6 @@ FLAGS silently ignored. If --update-labels is also specified then --update-labels is applied first. - Default cluster configurations to apply across the fleet. - - Security posture config. - - --security-posture=SECURITY_POSTURE - To apply basic security posture to the clusters of the fleet, - - $ gcloud beta container hub update --security-posture=basic - - SECURITY_POSTURE must be one of: disabled, basic, enterprise. - - --workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING - To apply basic vulnerability scanning to the clusters of the fleet, - - $ gcloud beta container hub update \ - --workload-vulnerability-scanning=disabled - - WORKLOAD_VULNERABILITY_SCANNING must be one of: disabled, basic, - enterprise. - GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/beta/dataproc/clusters/create b/gcloud/beta/dataproc/clusters/create index 22af356d6..16009fb15 100644 --- a/gcloud/beta/dataproc/clusters/create +++ b/gcloud/beta/dataproc/clusters/create @@ -757,8 +757,8 @@ FLAGS Multi-node cluster flags --min-num-workers=MIN_NUM_WORKERS - The minimum number of workers nodes to provision for cluster create - operations to succeed. + Minimum number of primary worker nodes to provision for cluster + creation to succeed. --num-secondary-workers=NUM_SECONDARY_WORKERS The number of secondary worker nodes in the cluster. diff --git a/gcloud/beta/dataproc/workflow-templates/set-managed-cluster b/gcloud/beta/dataproc/workflow-templates/set-managed-cluster index ad3748a91..903b4e11d 100644 --- a/gcloud/beta/dataproc/workflow-templates/set-managed-cluster +++ b/gcloud/beta/dataproc/workflow-templates/set-managed-cluster @@ -633,8 +633,8 @@ FLAGS Multi-node cluster flags --min-num-workers=MIN_NUM_WORKERS - The minimum number of workers nodes to provision for cluster create - operations to succeed. + Minimum number of primary worker nodes to provision for cluster + creation to succeed. --num-secondary-workers=NUM_SECONDARY_WORKERS The number of secondary worker nodes in the cluster. diff --git a/gcloud/beta/deploy/get-config b/gcloud/beta/deploy/get-config new file mode 100644 index 000000000..70a0bbc6e --- /dev/null +++ b/gcloud/beta/deploy/get-config @@ -0,0 +1,51 @@ +NAME + gcloud beta deploy get-config - get the Cloud Deploy config for the + provided region and project + +SYNOPSIS + gcloud beta deploy get-config [--region=REGION] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Get the Cloud Deploy config for the provided region and project. + +EXAMPLES + To get the config for project test-project in region us-central1: + + $ gcloud beta deploy get-config --project=test-project \ + --region=us-central1 + +FLAGS + Location resource - The Cloud region of {resource}. This represents a + Cloud resource. (NOTE) Some attributes are not given arguments in this + group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument --region on the command line with a fully + specified name; + ◆ set the property deploy/region with a fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + --region=REGION + ID of the location or fully qualified identifier for the location. + + To set the region attribute: + ▸ provide the argument --region on the command line; + ▸ set the property deploy/region. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud deploy get-config + + $ gcloud alpha deploy get-config + diff --git a/gcloud/beta/deploy/help b/gcloud/beta/deploy/help index c554198ec..dcd5e6706 100644 --- a/gcloud/beta/deploy/help +++ b/gcloud/beta/deploy/help @@ -42,6 +42,9 @@ COMMANDS (BETA) Deletes delivery pipeline(s) and target(s) in a yaml configuration. + get-config + (BETA) Get the Cloud Deploy config for the provided region and project. + NOTES This command is currently in beta and might change without notice. These variants are also available: diff --git a/gcloud/beta/filestore/instances/create b/gcloud/beta/filestore/instances/create index 86eb5e4db..6648c1de7 100644 --- a/gcloud/beta/filestore/instances/create +++ b/gcloud/beta/filestore/instances/create @@ -120,9 +120,10 @@ REQUIRED FLAGS nfs-export-options The NfsExportOptions for the Cloud Filestore instance file share. - Configuring NfsExportOptions is optional. Use the --flags-file flag - to specify the path to a JSON or YAML configuration file that - contains the required NfsExportOptions flags. + Configuring NfsExportOptions is optional and can only be set using + flags-file. Use the --flags-file flag to specify the path to a JSON + or YAML configuration file that contains the required + NfsExportOptions flags. ip-ranges A list of IPv4 addresses or CIDR ranges that are allowed to mount diff --git a/gcloud/beta/filestore/instances/update b/gcloud/beta/filestore/instances/update index b5f110faa..69cfaede3 100644 --- a/gcloud/beta/filestore/instances/update +++ b/gcloud/beta/filestore/instances/update @@ -3,12 +3,12 @@ NAME SYNOPSIS gcloud beta filestore instances update (INSTANCE : --zone=ZONE) [--async] - [--description=DESCRIPTION] - [--file-share=[capacity=CAPACITY], - [name=NAME],[nfs-export-options=NFS-EXPORT-OPTIONS]] - [--location=LOCATION] [--region=REGION] + [--description=DESCRIPTION] [--location=LOCATION] [--region=REGION] [--update-labels=[KEY=VALUE,...]] - [--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...] + [--clear-labels | --remove-labels=[KEY,...]] + [[--file-share=[capacity=CAPACITY], + [name=NAME],[nfs-export-options=NFS-EXPORT-OPTIONS] + : --clear-nfs-export-options]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) Update a Filestore instance. @@ -99,80 +99,6 @@ FLAGS --description=DESCRIPTION A description of the Cloud Filestore instance. - --file-share=[capacity=CAPACITY],[name=NAME],[nfs-export-options=NFS-EXPORT-OPTIONS] - File share configuration for an instance. Specifying both name and - capacity is required. - - capacity - The desired capacity of the volume in GB or TB units. If no - capacity unit is specified, GB is assumed. Acceptable instance - capacities for each tier are as follows: - ▸ BASIC_HDD: 1TB-63.9TB in 1GB increments or its multiples. - ▸ BASIC_SSD: 2.5TB-63.9TB in 1GB increments or its multiples. - ▸ HIGH_SCALE_SSD: 10TB-100TB in 2.5TB increments or its - multiples. - ▸ ZONAL: 1TB-100TB: - ▫ 1TB-9.75TB in 256GB increments or its multiples. - ▫ 10TB-100TB in 2.5TB increments or its multiples. - ▸ ENTERPRISE: 1TB-10TB in 256GB increments or its multiples. - - name - The desired logical name of the volume. - - nfs-export-options - The NfsExportOptions for the Cloud Filestore instance file share. - Configuring NfsExportOptions is optional. Use the --flags-file flag - to specify the path to a JSON or YAML configuration file that - contains the required NfsExportOptions flags. - - ip-ranges - A list of IPv4 addresses or CIDR ranges that are allowed to mount - the file share. IPv4 addresses format: {octet 1}.{octet 2}.{octet - 3}.{octet 4}. CIDR range format: {octet 1}.{octet 2}.{octet - 3}.{octet 4}/{mask size}. Overlapping IP ranges are allowed for all - tiers other than BASIC_HDD and BASIC_SSD. The limit of IP - ranges/addresses for each FileShareConfig among all - NfsExportOptions is 64 per instance. - - access-mode - The type of access allowed for the specified IP-addresses or CIDR - ranges. READ_ONLY: Allows only read requests on the exported file - share. READ_WRITE: Allows both read and write requests on the - exported file share. The default setting is READ_WRITE. - - squash-mode - Enables or disables root squash for the specified IP addresses or - CIDR ranges. NO_ROOT_SQUASH: Disables root squash to allow root - access on the exported file share. ROOT_SQUASH. Enables root squash - to remove root access on the exported file share. The default - setting is NO_ROOT_SQUASH. - - anon_uid - An integer that represents the user ID of anonymous users. Anon_uid - may only be set when squash_mode is set to ROOT_SQUASH. If - NO_ROOT_SQUASH is specified, an error will be returned. The default - value is 65534. - - anon_gid - An integer that represents the group ID of anonymous groups. - Anon_gid may only be set when squash_mode is set to ROOT_SQUASH. If - NO_ROOT_SQUASH is specified, an error will be returned. The default - value is 65534. - - security-flavors - A list of security flavors that are allowed to be used during mount - command in NFSv4.1 filestore instances. The security flavors - supported are: - ◆ SECURITY_FLAVOR_UNSPECIFIED: SecurityFlavor not set. Defaults to - AUTH_SYS. - ◆ AUTH_SYS: The user's UNIX user-id and group-ids are passed in the - clear. - ◆ KRB5: The end-user authentication is done using Kerberos V5. - ◆ KRB5I: KRB5 plus integrity protection (data packets are tamper - proof). - ◆ KRB5P: KRB5I plus privacy protection (data packets are tamper - proof and encrypted). - --location=LOCATION Location of the Cloud Filestore instance/operation. @@ -208,6 +134,89 @@ FLAGS silently ignored. If --update-labels is also specified then --update-labels is applied first. + Parameters for file-share. + + --file-share=[capacity=CAPACITY],[name=NAME],[nfs-export-options=NFS-EXPORT-OPTIONS] + File share configuration for an instance. Specifying both name and + capacity is required. + + capacity + The desired capacity of the volume in GB or TB units. If no + capacity unit is specified, GB is assumed. Acceptable instance + capacities for each tier are as follows: + ▸ BASIC_HDD: 1TB-63.9TB in 1GB increments or its multiples. + ▸ BASIC_SSD: 2.5TB-63.9TB in 1GB increments or its multiples. + ▸ HIGH_SCALE_SSD: 10TB-100TB in 2.5TB increments or its multiples. + ▸ ZONAL: 1TB-100TB: + ▫ 1TB-9.75TB in 256GB increments or its multiples. + ▫ 10TB-100TB in 2.5TB increments or its multiples. + ▸ ENTERPRISE: 1TB-10TB in 256GB increments or its multiples. + + name + The desired logical name of the volume. + + nfs-export-options + The NfsExportOptions for the Cloud Filestore instance file share. + Configuring NfsExportOptions is optional and can only be set + using flags-file. Use the --flags-file flag to specify the path + to a JSON or YAML configuration file that contains the required + NfsExportOptions flags. + + ip-ranges + A list of IPv4 addresses or CIDR ranges that are allowed to mount + the file share. IPv4 addresses format: {octet 1}.{octet 2}.{octet + 3}.{octet 4}. CIDR range format: {octet 1}.{octet 2}.{octet + 3}.{octet 4}/{mask size}. Overlapping IP ranges are allowed for + all tiers other than BASIC_HDD and BASIC_SSD. The limit of IP + ranges/addresses for each FileShareConfig among all + NfsExportOptions is 64 per instance. + + access-mode + The type of access allowed for the specified IP-addresses or CIDR + ranges. READ_ONLY: Allows only read requests on the exported file + share. READ_WRITE: Allows both read and write requests on the + exported file share. The default setting is READ_WRITE. + + squash-mode + Enables or disables root squash for the specified IP addresses or + CIDR ranges. NO_ROOT_SQUASH: Disables root squash to allow root + access on the exported file share. ROOT_SQUASH. Enables root + squash to remove root access on the exported file share. The + default setting is NO_ROOT_SQUASH. + + anon_uid + An integer that represents the user ID of anonymous users. + Anon_uid may only be set when squash_mode is set to ROOT_SQUASH. + If NO_ROOT_SQUASH is specified, an error will be returned. The + default value is 65534. + + anon_gid + An integer that represents the group ID of anonymous groups. + Anon_gid may only be set when squash_mode is set to ROOT_SQUASH. + If NO_ROOT_SQUASH is specified, an error will be returned. The + default value is 65534. + + security-flavors + A list of security flavors that are allowed to be used during + mount command in NFSv4.1 filestore instances. The security + flavors supported are: + ◆ SECURITY_FLAVOR_UNSPECIFIED: SecurityFlavor not set. Defaults to + AUTH_SYS. + ◆ AUTH_SYS: The user's UNIX user-id and group-ids are passed in the + clear. + ◆ KRB5: The end-user authentication is done using Kerberos V5. + ◆ KRB5I: KRB5 plus integrity protection (data packets are tamper + proof). + ◆ KRB5P: KRB5I plus privacy protection (data packets are tamper proof + and encrypted). + + This flag argument must be specified if any of the other arguments in this + group are specified. + + --clear-nfs-export-options + Clears the NfsExportOptions. Must specify --file-share flag if + --clear-nfs-export-options is specified. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/beta/firestore/databases/create b/gcloud/beta/firestore/databases/create index c1e4a4b8a..b9a5c0e10 100644 --- a/gcloud/beta/firestore/databases/create +++ b/gcloud/beta/firestore/databases/create @@ -4,7 +4,7 @@ NAME SYNOPSIS gcloud beta firestore databases create --location=LOCATION - [--database=DATABASE; default="(default)"] + [--database=DATABASE; default="(default)"] [--delete-protection] [--type=TYPE; default="firestore-native"] [GCLOUD_WIDE_FLAG ...] EXAMPLES @@ -17,11 +17,17 @@ EXAMPLES $ gcloud beta firestore databases create --location=us-east1 \ --type=datastore-mode - To create a Datastore Mode database in us-east1 with a databaseId foo. + To create a Datastore Mode database in us-east1 with a database ID foo. $ gcloud beta firestore databases create --database=foo \ --location=us-east1 --type=datastore-mode + To create a Firestore Native database in nam5 with delete protection + enabled. + + $ gcloud beta firestore databases create --location=nam5 \ + --delete-protection + REQUIRED FLAGS --location=LOCATION The location to operate on. Available locations are listed at @@ -43,6 +49,14 @@ OPTIONAL FLAGS Using "(default)" database ID is also allowed. + --delete-protection + Whether to enable delete protection on the created database. + + If set to true, delete protection of the new database will be enabled + and delete operations will fail unless delete protection is disabled. + + Default to false. + --type=TYPE; default="firestore-native" The type of the database. TYPE must be one of: firestore-native, datastore-mode. diff --git a/gcloud/beta/healthcare/dicom-stores/import/gcs b/gcloud/beta/healthcare/dicom-stores/import/gcs index 33ccc1990..b212f128e 100644 --- a/gcloud/beta/healthcare/dicom-stores/import/gcs +++ b/gcloud/beta/healthcare/dicom-stores/import/gcs @@ -65,7 +65,21 @@ POSITIONAL ARGUMENTS REQUIRED FLAGS --gcs-uri=GCS_URI Google Cloud Storage URI containing DICOM object data. It must match - individual DICOM files or co + individual DICOM files or use wildcards to import multiple files from + one or more directories. + ◆ Use * to match 0 or more non-separator characters. For example, + gs://BUCKET/DIRECTORY/Example*.dcm matches Example.dcm and + Example22.dcm in DIRECTORY. + ◆ Use ** to match 0 or more characters (including separators). Must + be used at the end of a path and with no other wildcards in the path. + Can also be used with a filename extension (such as .dcm), which + imports all files with the filename extension in the specified + directory and its subdirectories. For example, + gs://BUCKET/DIRECTORY/**.dcm imports all files with the .dcm filename + extension in DIRECTORY and its subdirectories. + ◆ Use ? to match 1 character. For example, + gs://BUCKET/DIRECTORY/Example?.dcm matches Example1.dcm but does not + match Example.dcm or Example01.dcm. OPTIONAL FLAGS --async diff --git a/gcloud/beta/iot/devices/commands/help b/gcloud/beta/iot/devices/commands/help index dc376931a..19b7cc72f 100644 --- a/gcloud/beta/iot/devices/commands/help +++ b/gcloud/beta/iot/devices/commands/help @@ -5,7 +5,9 @@ SYNOPSIS gcloud beta iot devices commands COMMAND [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) Manage commands for Cloud IoT devices. + (BETA) (DEPRECATED) Manage commands for Cloud IoT devices. + + This command is deprecated. Google Cloud IoT Core has been retired. GCLOUD WIDE FLAGS These flags are available to all commands: --help. @@ -16,7 +18,7 @@ COMMANDS COMMAND is one of the following: send - (BETA) Sends a command to a device. + (BETA) (DEPRECATED) Sends a command to a device. NOTES This command is currently in beta and might change without notice. These diff --git a/gcloud/beta/iot/devices/commands/send b/gcloud/beta/iot/devices/commands/send index faffb8778..f95efe459 100644 --- a/gcloud/beta/iot/devices/commands/send +++ b/gcloud/beta/iot/devices/commands/send @@ -8,7 +8,10 @@ SYNOPSIS [--subfolder=SUBFOLDER] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) Sends a command to a device. + (BETA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + Sends a command to a device. EXAMPLES To send a simple command to a device in 'my-registry' and region diff --git a/gcloud/beta/iot/devices/configs/describe b/gcloud/beta/iot/devices/configs/describe index f2c132d40..5fae7e1d0 100644 --- a/gcloud/beta/iot/devices/configs/describe +++ b/gcloud/beta/iot/devices/configs/describe @@ -8,7 +8,10 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) Show details about the latest configuration for a device. + (BETA) (DEPRECATED) Show details about the latest configuration for a + device. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To show the details of the latest configuration for a device in region diff --git a/gcloud/beta/iot/devices/configs/get-value b/gcloud/beta/iot/devices/configs/get-value index e6f78213d..c736339b5 100644 --- a/gcloud/beta/iot/devices/configs/get-value +++ b/gcloud/beta/iot/devices/configs/get-value @@ -8,7 +8,10 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) Show the binary data of a device's latest configuration. + (BETA) (DEPRECATED) Show the binary data of a device's latest + configuration. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To show the binary data of the latest configuration of a device in region diff --git a/gcloud/beta/iot/devices/configs/help b/gcloud/beta/iot/devices/configs/help index a7ded4ec1..ae4388234 100644 --- a/gcloud/beta/iot/devices/configs/help +++ b/gcloud/beta/iot/devices/configs/help @@ -6,7 +6,11 @@ SYNOPSIS gcloud beta iot devices configs COMMAND [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) Commands for managing configurations for Google Cloud IoT devices. + (BETA) (DEPRECATED) Manage configurations for Cloud IoT devices. + + This command is deprecated. Google Cloud IoT Core has been retired. + + Commands for managing configurations for Google Cloud IoT devices. GCLOUD WIDE FLAGS These flags are available to all commands: --help. @@ -17,16 +21,18 @@ COMMANDS COMMAND is one of the following: describe - (BETA) Show details about the latest configuration for a device. + (BETA) (DEPRECATED) Show details about the latest configuration for a + device. get-value - (BETA) Show the binary data of a device's latest configuration. + (BETA) (DEPRECATED) Show the binary data of a device's latest + configuration. list - (BETA) List configs for a device. + (BETA) (DEPRECATED) List configs for a device. update - (BETA) Update a specific device configuration. + (BETA) (DEPRECATED) Update a specific device configuration. NOTES This command is currently in beta and might change without notice. These diff --git a/gcloud/beta/iot/devices/configs/list b/gcloud/beta/iot/devices/configs/list index f822b690c..46c26c9bf 100644 --- a/gcloud/beta/iot/devices/configs/list +++ b/gcloud/beta/iot/devices/configs/list @@ -8,8 +8,12 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) This command lists all available configurations in the history of - the device. Up to 10 are kept; you may restrict the output to fewer via the + (BETA) (DEPRECATED) List configs for a device. + + This command is deprecated. Google Cloud IoT Core has been retired. + + This command lists all available configurations in the history of the + device. Up to 10 are kept; you may restrict the output to fewer via the --limit flag. EXAMPLES diff --git a/gcloud/beta/iot/devices/configs/update b/gcloud/beta/iot/devices/configs/update index 07665114d..73c01135d 100644 --- a/gcloud/beta/iot/devices/configs/update +++ b/gcloud/beta/iot/devices/configs/update @@ -9,7 +9,11 @@ SYNOPSIS [--version-to-update=VERSION_TO_UPDATE] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) This command updates the current configuration of the device. + (BETA) (DEPRECATED) Update a specific device configuration. + + This command is deprecated. Google Cloud IoT Core has been retired. + + This command updates the current configuration of the device. It always creates a new config with a new version number; if --version-to-update is provided, the config at that version is used as a diff --git a/gcloud/beta/iot/devices/create b/gcloud/beta/iot/devices/create index a47984c59..c859ceef1 100644 --- a/gcloud/beta/iot/devices/create +++ b/gcloud/beta/iot/devices/create @@ -12,7 +12,10 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) Create a new device. + (BETA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + Create a new device. EXAMPLES To create a new device 'my-device' in device registry 'my-registry' and diff --git a/gcloud/beta/iot/devices/credentials/clear b/gcloud/beta/iot/devices/credentials/clear index 38ce6a51c..f841e2344 100644 --- a/gcloud/beta/iot/devices/credentials/clear +++ b/gcloud/beta/iot/devices/credentials/clear @@ -8,7 +8,9 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) Delete all credentials from a device. + (BETA) (DEPRECATED) Delete all credentials from a device. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To delete all credentials from a device in region 'us-central1', run: diff --git a/gcloud/beta/iot/devices/credentials/create b/gcloud/beta/iot/devices/credentials/create index 664763a3e..5f51bb64c 100644 --- a/gcloud/beta/iot/devices/credentials/create +++ b/gcloud/beta/iot/devices/credentials/create @@ -8,7 +8,11 @@ SYNOPSIS [--expiration-time=EXPIRATION_TIME] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) A device may have at most 3 credentials. + (BETA) (DEPRECATED) Add a new credential to a device. + + This command is deprecated. Google Cloud IoT Core has been retired. + + A device may have at most 3 credentials. EXAMPLES To add an RSA public key wrapped in an X.509v3 certificate to a device, diff --git a/gcloud/beta/iot/devices/credentials/delete b/gcloud/beta/iot/devices/credentials/delete index c1fa48b61..172f9f391 100644 --- a/gcloud/beta/iot/devices/credentials/delete +++ b/gcloud/beta/iot/devices/credentials/delete @@ -8,7 +8,9 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) Delete a credential from a device. + (BETA) (DEPRECATED) Delete a credential from a device. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To delete the first credential from a device in region 'us-central1', run: diff --git a/gcloud/beta/iot/devices/credentials/describe b/gcloud/beta/iot/devices/credentials/describe index 109af3d28..52a453b37 100644 --- a/gcloud/beta/iot/devices/credentials/describe +++ b/gcloud/beta/iot/devices/credentials/describe @@ -8,7 +8,9 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) Show details about a specific device credential. + (BETA) (DEPRECATED) Show details about a specific device credential. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To describe the first credential of a device in region 'us-central1', run: diff --git a/gcloud/beta/iot/devices/credentials/help b/gcloud/beta/iot/devices/credentials/help index c87b6a6a8..09b6f7b7d 100644 --- a/gcloud/beta/iot/devices/credentials/help +++ b/gcloud/beta/iot/devices/credentials/help @@ -6,7 +6,11 @@ SYNOPSIS gcloud beta iot devices credentials COMMAND [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) Commands for managing credentials for Google Cloud IoT devices. + (BETA) (DEPRECATED) Manage credentials for Cloud IoT devices. + + This command is deprecated. Google Cloud IoT Core has been retired. + + Commands for managing credentials for Google Cloud IoT devices. GCLOUD WIDE FLAGS These flags are available to all commands: --help. @@ -17,22 +21,22 @@ COMMANDS COMMAND is one of the following: clear - (BETA) Delete all credentials from a device. + (BETA) (DEPRECATED) Delete all credentials from a device. create - (BETA) Add a new credential to a device. + (BETA) (DEPRECATED) Add a new credential to a device. delete - (BETA) Delete a credential from a device. + (BETA) (DEPRECATED) Delete a credential from a device. describe - (BETA) Show details about a specific device credential. + (BETA) (DEPRECATED) Show details about a specific device credential. list - (BETA) List credentials for a device. + (BETA) (DEPRECATED) List credentials for a device. update - (BETA) Update a specific device credential. + (BETA) (DEPRECATED) Update a specific device credential. NOTES This command is currently in beta and might change without notice. These diff --git a/gcloud/beta/iot/devices/credentials/list b/gcloud/beta/iot/devices/credentials/list index 5826b2b14..07ffa5d79 100644 --- a/gcloud/beta/iot/devices/credentials/list +++ b/gcloud/beta/iot/devices/credentials/list @@ -8,7 +8,9 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) List credentials for a device. + (BETA) (DEPRECATED) List credentials for a device. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To list the credentials of a device in region 'us-central1', run: diff --git a/gcloud/beta/iot/devices/credentials/update b/gcloud/beta/iot/devices/credentials/update index 012da68e6..d24652a46 100644 --- a/gcloud/beta/iot/devices/credentials/update +++ b/gcloud/beta/iot/devices/credentials/update @@ -8,7 +8,9 @@ SYNOPSIS [--expiration-time=EXPIRATION_TIME] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) Update a specific device credential. + (BETA) (DEPRECATED) Update a specific device credential. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To update the expiration time of the first credential of a device in region diff --git a/gcloud/beta/iot/devices/delete b/gcloud/beta/iot/devices/delete index fa84b1560..dd26e430e 100644 --- a/gcloud/beta/iot/devices/delete +++ b/gcloud/beta/iot/devices/delete @@ -6,7 +6,12 @@ SYNOPSIS (DEVICE : --region=REGION --registry=REGISTRY) [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) Delete a device. + (BETA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + (BETA) (DEPRECATED) Delete a device. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To delete a device from device registry 'my-registry', run: diff --git a/gcloud/beta/iot/devices/describe b/gcloud/beta/iot/devices/describe index 3b96cbd89..60f354e46 100644 --- a/gcloud/beta/iot/devices/describe +++ b/gcloud/beta/iot/devices/describe @@ -6,7 +6,12 @@ SYNOPSIS (DEVICE : --region=REGION --registry=REGISTRY) [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) Show details about a device. + (BETA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + (BETA) (DEPRECATED) Show details about a device. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To show details about a device, run: diff --git a/gcloud/beta/iot/devices/gateways/bind b/gcloud/beta/iot/devices/gateways/bind index a8223e502..323ed4330 100644 --- a/gcloud/beta/iot/devices/gateways/bind +++ b/gcloud/beta/iot/devices/gateways/bind @@ -9,7 +9,10 @@ SYNOPSIS --gateway-registry=GATEWAY_REGISTRY) [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) Associate a device with a gateway. + (BETA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + Associate a device with a gateway. EXAMPLES To associate 'my-device' with 'my-gateway' in region 'us-central1', run: diff --git a/gcloud/beta/iot/devices/gateways/help b/gcloud/beta/iot/devices/gateways/help index b78fdb022..262577053 100644 --- a/gcloud/beta/iot/devices/gateways/help +++ b/gcloud/beta/iot/devices/gateways/help @@ -6,7 +6,9 @@ SYNOPSIS gcloud beta iot devices gateways COMMAND [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) Manage Cloud IoT Core Gateway Associations. + (BETA) (DEPRECATED) Manage Cloud IoT Core Gateway Associations. + + This command is deprecated. Google Cloud IoT Core has been retired. GCLOUD WIDE FLAGS These flags are available to all commands: --help. @@ -17,13 +19,14 @@ COMMANDS COMMAND is one of the following: bind - (BETA) Associate a device with a gateway. + (BETA) (DEPRECATED) Associate a device with a gateway. list-bound-devices - (BETA) Lists all of the devices bound to the gateway. + (BETA) (DEPRECATED) Lists all of the devices bound to the gateway. unbind - (BETA) Remove the association between a device and a gateway. + (BETA) (DEPRECATED) Remove the association between a device and a + gateway. NOTES This command is currently in beta and might change without notice. These diff --git a/gcloud/beta/iot/devices/gateways/list-bound-devices b/gcloud/beta/iot/devices/gateways/list-bound-devices index fdcabfe80..1703e1544 100644 --- a/gcloud/beta/iot/devices/gateways/list-bound-devices +++ b/gcloud/beta/iot/devices/gateways/list-bound-devices @@ -9,7 +9,10 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) Lists all of the devices bound to the gateway. + (BETA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + Lists all of the devices bound to the gateway. EXAMPLES To list all of the devices bound to the gateway 'my-gateway' in region diff --git a/gcloud/beta/iot/devices/gateways/unbind b/gcloud/beta/iot/devices/gateways/unbind index 14485813d..08299b516 100644 --- a/gcloud/beta/iot/devices/gateways/unbind +++ b/gcloud/beta/iot/devices/gateways/unbind @@ -10,7 +10,10 @@ SYNOPSIS --gateway-registry=GATEWAY_REGISTRY) [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) Remove the association between a device and a gateway. + (BETA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + Remove the association between a device and a gateway. EXAMPLES To remove the association between 'my-device' and 'my-gateway' in region diff --git a/gcloud/beta/iot/devices/help b/gcloud/beta/iot/devices/help index 2904c89e5..99f03e93d 100644 --- a/gcloud/beta/iot/devices/help +++ b/gcloud/beta/iot/devices/help @@ -5,7 +5,11 @@ SYNOPSIS gcloud beta iot devices GROUP | COMMAND [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) Commands for managing Google Cloud IoT Devices. + (BETA) (DEPRECATED) Manage Cloud IoT Devices. + + This command is deprecated. Google Cloud IoT Core has been retired. + + Commands for managing Google Cloud IoT Devices. GCLOUD WIDE FLAGS These flags are available to all commands: --help. @@ -16,37 +20,37 @@ GROUPS GROUP is one of the following: commands - (BETA) Manage commands for Cloud IoT devices. + (BETA) (DEPRECATED) Manage commands for Cloud IoT devices. configs - (BETA) Manage configurations for Cloud IoT devices. + (BETA) (DEPRECATED) Manage configurations for Cloud IoT devices. credentials - (BETA) Manage credentials for Cloud IoT devices. + (BETA) (DEPRECATED) Manage credentials for Cloud IoT devices. gateways - (BETA) Manage Cloud IoT Core Gateway Associations. + (BETA) (DEPRECATED) Manage Cloud IoT Core Gateway Associations. states - (BETA) Manage states for Cloud IoT devices. + (BETA) (DEPRECATED) Manage states for Cloud IoT devices. COMMANDS COMMAND is one of the following: create - (BETA) Create a new device. + (BETA) (DEPRECATED) Create a new device. delete - (BETA) Delete a device. + (BETA) (DEPRECATED) Delete a device. describe - (BETA) Show details about a device. + (BETA) (DEPRECATED) Show details about a device. list - (BETA) List devices. + (BETA) (DEPRECATED) List devices. update - (BETA) Update an existing device. + (BETA) (DEPRECATED) Update an existing device. NOTES This command is currently in beta and might change without notice. These diff --git a/gcloud/beta/iot/devices/list b/gcloud/beta/iot/devices/list index 86ca3d244..4f7ba7135 100644 --- a/gcloud/beta/iot/devices/list +++ b/gcloud/beta/iot/devices/list @@ -10,7 +10,10 @@ SYNOPSIS [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) List devices. + (BETA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + List devices. EXAMPLES To list all devices in the device registry 'my-registry' and region diff --git a/gcloud/beta/iot/devices/states/help b/gcloud/beta/iot/devices/states/help index 1f9675c4c..738686af7 100644 --- a/gcloud/beta/iot/devices/states/help +++ b/gcloud/beta/iot/devices/states/help @@ -5,7 +5,11 @@ SYNOPSIS gcloud beta iot devices states COMMAND [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) Commands for managing states for Google Cloud IoT devices. + (BETA) (DEPRECATED) Manage states for Cloud IoT devices. + + This command is deprecated. Google Cloud IoT Core has been retired. + + Commands for managing states for Google Cloud IoT devices. GCLOUD WIDE FLAGS These flags are available to all commands: --help. @@ -16,7 +20,7 @@ COMMANDS COMMAND is one of the following: list - (BETA) List states for a device. + (BETA) (DEPRECATED) List states for a device. NOTES This command is currently in beta and might change without notice. These diff --git a/gcloud/beta/iot/devices/states/list b/gcloud/beta/iot/devices/states/list index c4d000cc1..fab13c8cc 100644 --- a/gcloud/beta/iot/devices/states/list +++ b/gcloud/beta/iot/devices/states/list @@ -8,9 +8,15 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) This command lists all available states in the history of the - device. Up to 10 are kept; you may restrict the output to fewer via the - --limit flag. + (BETA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + (BETA) (DEPRECATED) List states for a device. + + This command is deprecated. Google Cloud IoT Core has been retired. + + This command lists all available states in the history of the device. Up to + 10 are kept; you may restrict the output to fewer via the --limit flag. EXAMPLES To list states for the device 'my-device' in region 'us-central1' and in diff --git a/gcloud/beta/iot/devices/update b/gcloud/beta/iot/devices/update index a5ee371ad..f1e20e670 100644 --- a/gcloud/beta/iot/devices/update +++ b/gcloud/beta/iot/devices/update @@ -9,7 +9,12 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) Update an existing device. + (BETA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + (BETA) (DEPRECATED) Update an existing device. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES The following command updates the device 'my-device' in device registry diff --git a/gcloud/beta/iot/help b/gcloud/beta/iot/help index cb96a1fa2..fe2daedd0 100644 --- a/gcloud/beta/iot/help +++ b/gcloud/beta/iot/help @@ -5,7 +5,11 @@ SYNOPSIS gcloud beta iot GROUP [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) Commands for managing Google Cloud IoT resources. + (BETA) (DEPRECATED) Manage Cloud IoT resources. + + This command is deprecated. Google Cloud IoT Core has been retired. + + Commands for managing Google Cloud IoT resources. GCLOUD WIDE FLAGS These flags are available to all commands: --help. @@ -16,10 +20,10 @@ GROUPS GROUP is one of the following: devices - (BETA) Manage Cloud IoT Devices. + (BETA) (DEPRECATED) Manage Cloud IoT Devices. registries - (BETA) Manage Cloud IoT Registries. + (BETA) (DEPRECATED) Manage Cloud IoT Registries. NOTES This command is currently in beta and might change without notice. These diff --git a/gcloud/beta/iot/registries/add-iam-policy-binding b/gcloud/beta/iot/registries/add-iam-policy-binding index 92765f0a1..b9e9b472b 100644 --- a/gcloud/beta/iot/registries/add-iam-policy-binding +++ b/gcloud/beta/iot/registries/add-iam-policy-binding @@ -8,7 +8,10 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) Add an IAM policy binding to a device registry. + (BETA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + Add an IAM policy binding to a device registry. EXAMPLES To add an IAM policy binding for the role of 'roles/editor' for the user diff --git a/gcloud/beta/iot/registries/create b/gcloud/beta/iot/registries/create index a0a063733..8426baba7 100644 --- a/gcloud/beta/iot/registries/create +++ b/gcloud/beta/iot/registries/create @@ -9,7 +9,10 @@ SYNOPSIS [--state-pubsub-topic=STATE_PUBSUB_TOPIC] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) Create a new device registry. + (BETA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + Create a new device registry. EXAMPLES To create a new device registry 'my-registry' in region 'us-central1', run: diff --git a/gcloud/beta/iot/registries/credentials/clear b/gcloud/beta/iot/registries/credentials/clear index e6a6ad190..28bc7c501 100644 --- a/gcloud/beta/iot/registries/credentials/clear +++ b/gcloud/beta/iot/registries/credentials/clear @@ -7,7 +7,9 @@ SYNOPSIS (--registry=REGISTRY : --region=REGION) [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) Delete all credentials from a registry. + (BETA) (DEPRECATED) Delete all credentials from a registry. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To delete all credentials from a registry in region 'us-central1', run: diff --git a/gcloud/beta/iot/registries/credentials/create b/gcloud/beta/iot/registries/credentials/create index ebc1ffbfd..837e3731a 100644 --- a/gcloud/beta/iot/registries/credentials/create +++ b/gcloud/beta/iot/registries/credentials/create @@ -7,7 +7,14 @@ SYNOPSIS (--registry=REGISTRY : --region=REGION) [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) A registry may have at most 10 credentials. + (BETA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + (BETA) (DEPRECATED) Add a new credential to a registry. + + This command is deprecated. Google Cloud IoT Core has been retired. + + A registry may have at most 10 credentials. EXAMPLES To add a credential located in '/path/to/cert.pem' to a registry, run: diff --git a/gcloud/beta/iot/registries/credentials/delete b/gcloud/beta/iot/registries/credentials/delete index 198deb86c..ccb18109d 100644 --- a/gcloud/beta/iot/registries/credentials/delete +++ b/gcloud/beta/iot/registries/credentials/delete @@ -7,7 +7,9 @@ SYNOPSIS (--registry=REGISTRY : --region=REGION) [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) Delete a credential from a registry. + (BETA) (DEPRECATED) Delete a credential from a registry. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To delete the first credential from a registry, run: diff --git a/gcloud/beta/iot/registries/credentials/describe b/gcloud/beta/iot/registries/credentials/describe index 7f3144f3f..5dd0ed348 100644 --- a/gcloud/beta/iot/registries/credentials/describe +++ b/gcloud/beta/iot/registries/credentials/describe @@ -7,7 +7,9 @@ SYNOPSIS (--registry=REGISTRY : --region=REGION) [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) Show details about a specific registry credential. + (BETA) (DEPRECATED) Show details about a specific registry credential. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To describe the first credential of a registry in region 'us-central1', diff --git a/gcloud/beta/iot/registries/credentials/help b/gcloud/beta/iot/registries/credentials/help index ca2e46454..232072e87 100644 --- a/gcloud/beta/iot/registries/credentials/help +++ b/gcloud/beta/iot/registries/credentials/help @@ -6,7 +6,11 @@ SYNOPSIS gcloud beta iot registries credentials COMMAND [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) Commands for managing credentials for Google Cloud IoT devices. + (BETA) (DEPRECATED) Manage credentials for Cloud IoT devices. + + This command is deprecated. Google Cloud IoT Core has been retired. + + Commands for managing credentials for Google Cloud IoT devices. GCLOUD WIDE FLAGS These flags are available to all commands: --help. @@ -17,19 +21,19 @@ COMMANDS COMMAND is one of the following: clear - (BETA) Delete all credentials from a registry. + (BETA) (DEPRECATED) Delete all credentials from a registry. create - (BETA) Add a new credential to a registry. + (BETA) (DEPRECATED) Add a new credential to a registry. delete - (BETA) Delete a credential from a registry. + (BETA) (DEPRECATED) Delete a credential from a registry. describe - (BETA) Show details about a specific registry credential. + (BETA) (DEPRECATED) Show details about a specific registry credential. list - (BETA) List credentials for a registry. + (BETA) (DEPRECATED) List credentials for a registry. NOTES This command is currently in beta and might change without notice. These diff --git a/gcloud/beta/iot/registries/credentials/list b/gcloud/beta/iot/registries/credentials/list index 387ac2459..8dcfabd43 100644 --- a/gcloud/beta/iot/registries/credentials/list +++ b/gcloud/beta/iot/registries/credentials/list @@ -8,7 +8,9 @@ SYNOPSIS [--limit=LIMIT] [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) List credentials for a registry. + (BETA) (DEPRECATED) List credentials for a registry. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To list the credentials of a registry, run: diff --git a/gcloud/beta/iot/registries/delete b/gcloud/beta/iot/registries/delete index e19a10b28..b7eaad3d3 100644 --- a/gcloud/beta/iot/registries/delete +++ b/gcloud/beta/iot/registries/delete @@ -6,7 +6,12 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) Delete a device registry. + (BETA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + (BETA) (DEPRECATED) Delete a device registry. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To delete a device registry, run: diff --git a/gcloud/beta/iot/registries/describe b/gcloud/beta/iot/registries/describe index 05588d2af..1dd9e45de 100644 --- a/gcloud/beta/iot/registries/describe +++ b/gcloud/beta/iot/registries/describe @@ -6,7 +6,12 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) Show details about a device registry. + (BETA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + (BETA) (DEPRECATED) Show details about a device registry. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To show details about a device registry, run: diff --git a/gcloud/beta/iot/registries/get-iam-policy b/gcloud/beta/iot/registries/get-iam-policy index a1048c877..4559cd801 100644 --- a/gcloud/beta/iot/registries/get-iam-policy +++ b/gcloud/beta/iot/registries/get-iam-policy @@ -8,8 +8,15 @@ SYNOPSIS [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) This command gets the IAM policy for a device registry. If formatted - as JSON, the output can be edited and used as a policy file for + (BETA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + (BETA) (DEPRECATED) Get the IAM policy for a device registry. + + This command is deprecated. Google Cloud IoT Core has been retired. + + This command gets the IAM policy for a device registry. If formatted as + JSON, the output can be edited and used as a policy file for set-iam-policy. The output includes an "etag" field identifying the version emitted and allowing detection of concurrent policy updates; see $ gcloud iot registries set-iam-policy for additional details. diff --git a/gcloud/beta/iot/registries/help b/gcloud/beta/iot/registries/help index 7275b019b..fadd87411 100644 --- a/gcloud/beta/iot/registries/help +++ b/gcloud/beta/iot/registries/help @@ -5,7 +5,11 @@ SYNOPSIS gcloud beta iot registries GROUP | COMMAND [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) Commands for managing Google Cloud IoT Registries. + (BETA) (DEPRECATED) Manage Cloud IoT Registries. + + This command is deprecated. Google Cloud IoT Core has been retired. + + Commands for managing Google Cloud IoT Registries. GCLOUD WIDE FLAGS These flags are available to all commands: --help. @@ -16,37 +20,37 @@ GROUPS GROUP is one of the following: credentials - (BETA) Manage credentials for Cloud IoT devices. + (BETA) (DEPRECATED) Manage credentials for Cloud IoT devices. COMMANDS COMMAND is one of the following: add-iam-policy-binding - (BETA) Add IAM policy binding to a device registry. + (BETA) (DEPRECATED) Add IAM policy binding to a device registry. create - (BETA) Create a new device registry. + (BETA) (DEPRECATED) Create a new device registry. delete - (BETA) Delete a device registry. + (BETA) (DEPRECATED) Delete a device registry. describe - (BETA) Show details about a device registry. + (BETA) (DEPRECATED) Show details about a device registry. get-iam-policy - (BETA) Get the IAM policy for a device registry. + (BETA) (DEPRECATED) Get the IAM policy for a device registry. list - (BETA) List device registries. + (BETA) (DEPRECATED) List device registries. remove-iam-policy-binding - (BETA) Remove IAM policy binding of a device registry. + (BETA) (DEPRECATED) Remove IAM policy binding of a device registry. set-iam-policy - (BETA) Set IAM policy for a device registry. + (BETA) (DEPRECATED) Set IAM policy for a device registry. update - (BETA) Update a device registry. + (BETA) (DEPRECATED) Update a device registry. NOTES This command is currently in beta and might change without notice. These diff --git a/gcloud/beta/iot/registries/list b/gcloud/beta/iot/registries/list index fa16e58f5..540ba7ad8 100644 --- a/gcloud/beta/iot/registries/list +++ b/gcloud/beta/iot/registries/list @@ -7,7 +7,12 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) List device registries. + (BETA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + (BETA) (DEPRECATED) List device registries. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To list all device registries in a project and region 'us-central1', run: diff --git a/gcloud/beta/iot/registries/remove-iam-policy-binding b/gcloud/beta/iot/registries/remove-iam-policy-binding index 534201db6..4b8cfda9f 100644 --- a/gcloud/beta/iot/registries/remove-iam-policy-binding +++ b/gcloud/beta/iot/registries/remove-iam-policy-binding @@ -8,7 +8,10 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) Remove an IAM policy binding of a device registry. + (BETA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + Remove an IAM policy binding of a device registry. EXAMPLES To Remove an IAM policy binding for the role of 'roles/editor' for the user diff --git a/gcloud/beta/iot/registries/set-iam-policy b/gcloud/beta/iot/registries/set-iam-policy index d7f27c178..7f4a3642f 100644 --- a/gcloud/beta/iot/registries/set-iam-policy +++ b/gcloud/beta/iot/registries/set-iam-policy @@ -7,14 +7,21 @@ SYNOPSIS POLICY_FILE [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) This command replaces the existing IAM policy for a device registry, - given a REGISTRY and a file encoded in JSON or YAML that contains the IAM - policy. If the given policy file specifies an "etag" value, then the - replacement will succeed only if the policy already in place matches that - etag. (An etag obtained via $ gcloud iot registries get-iam-policy will - prevent the replacement if the policy for the device registry has been - subsequently updated.) A policy file that does not contain an etag value - will replace any existing policy for the device registry. + (BETA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + (BETA) (DEPRECATED) Set IAM policy for a device registry. + + This command is deprecated. Google Cloud IoT Core has been retired. + + This command replaces the existing IAM policy for a device registry, given + a REGISTRY and a file encoded in JSON or YAML that contains the IAM policy. + If the given policy file specifies an "etag" value, then the replacement + will succeed only if the policy already in place matches that etag. (An + etag obtained via $ gcloud iot registries get-iam-policy will prevent the + replacement if the policy for the device registry has been subsequently + updated.) A policy file that does not contain an etag value will replace + any existing policy for the device registry. EXAMPLES The following command will read an IAM policy from 'policy.json' and set it diff --git a/gcloud/beta/iot/registries/update b/gcloud/beta/iot/registries/update index 6a6014551..4a9f30019 100644 --- a/gcloud/beta/iot/registries/update +++ b/gcloud/beta/iot/registries/update @@ -9,7 +9,12 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) Update a device registry. + (BETA) (DEPRECATED) This command is deprecated. Google Cloud IoT Core has + been retired. + + (BETA) (DEPRECATED) Update a device registry. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES The following command updates the device registry 'my-registry' in region diff --git a/gcloud/beta/logging/copy b/gcloud/beta/logging/copy index e35c2c6c5..c00d9b677 100644 --- a/gcloud/beta/logging/copy +++ b/gcloud/beta/logging/copy @@ -27,14 +27,15 @@ EXAMPLES POSITIONAL ARGUMENTS BUCKET_ID - Id of the bucket to copy. + Id of the log bucket to copy logs from. Example: my-bucket DESTINATION - destination to which to copy logs. + Destination to copy logs to. Example: Cloud Storage bucket: + storage.googleapis.com/my-cloud-storage-bucket REQUIRED FLAGS --location=LOCATION - Location of the bucket. + Location of the log bucket. OPTIONAL FLAGS --log-filter=LOG_FILTER diff --git a/gcloud/beta/netapp/volumes/create b/gcloud/beta/netapp/volumes/create index 563f2e433..1fb745ad9 100644 --- a/gcloud/beta/netapp/volumes/create +++ b/gcloud/beta/netapp/volumes/create @@ -15,6 +15,7 @@ SYNOPSIS [kerberos-5p-read-only=KERBEROS-5P-READ-ONLY], [kerberos-5p-read-write=KERBEROS-5P-READ-WRITE], [nfsv3=NFSV3],[nfsv4=NFSV4]] [--labels=[KEY=VALUE,...]] + [--restricted-actions=RESTRICTED_ACTION,[...]] [--security-style=SECURITY_STYLE; default="SECURITY_STYLE_UNSPECIFIED"] [--smb-settings=SMB_SETTING,[SMB_SETTING,...]] [--snap-reserve=SNAP_RESERVE] @@ -154,6 +155,13 @@ OPTIONAL FLAGS contain only hyphens (-), underscores (_), lowercase characters, and numbers. + --restricted-actions=RESTRICTED_ACTION,[...] + Actions to be restricted for a volume.Valid restricted action options + are: 'DELETE' + + For more information, look at + https://cloud.google.com/netapp/volumes/docs/reference/rest/v1/projects.locations.volumes#restrictedaction. + --security-style=SECURITY_STYLE; default="SECURITY_STYLE_UNSPECIFIED" The security style of the Volume. This can either be UNIX or NTFS. diff --git a/gcloud/beta/netapp/volumes/update b/gcloud/beta/netapp/volumes/update index 37d2caa66..5ade21f2a 100644 --- a/gcloud/beta/netapp/volumes/update +++ b/gcloud/beta/netapp/volumes/update @@ -14,6 +14,7 @@ SYNOPSIS [kerberos-5p-read-only=KERBEROS-5P-READ-ONLY], [kerberos-5p-read-write=KERBEROS-5P-READ-WRITE], [nfsv3=NFSV3],[nfsv4=NFSV4]] [--protocols=PROTOCOL,[PROTOCOL,...]] + [--restricted-actions=RESTRICTED_ACTION,[...]] [--security-style=SECURITY_STYLE; default="SECURITY_STYLE_UNSPECIFIED"] [--share-name=SHARE_NAME] [--smb-settings=SMB_SETTING,[SMB_SETTING,...]] @@ -108,6 +109,13 @@ FLAGS For more information, look athttps://cloud.google.com/netapp/docs/reference/rest/v1alpha1/projects.locations.volumes#protocols. + --restricted-actions=RESTRICTED_ACTION,[...] + Actions to be restricted for a volume.Valid restricted action options + are: 'DELETE' + + For more information, look at + https://cloud.google.com/netapp/volumes/docs/reference/rest/v1/projects.locations.volumes#restrictedaction. + --security-style=SECURITY_STYLE; default="SECURITY_STYLE_UNSPECIFIED" The security style of the Volume. This can either be UNIX or NTFS. diff --git a/gcloud/beta/notebooks/instances/diagnose b/gcloud/beta/notebooks/instances/diagnose index ea58872e3..44a2431c0 100644 --- a/gcloud/beta/notebooks/instances/diagnose +++ b/gcloud/beta/notebooks/instances/diagnose @@ -5,7 +5,8 @@ SYNOPSIS gcloud beta notebooks instances diagnose (INSTANCE : --location=LOCATION) --gcs-bucket=GCS_BUCKET [--async] [--enable-copy-home-files] [--enable-packet-capture] [--enable-repair] - [--relative-path=RELATIVE_PATH] [GCLOUD_WIDE_FLAG ...] + [--relative-path=RELATIVE_PATH] [--timeout-minutes=TIMEOUT_MINUTES] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) (DEPRECATED) This command is deprecated. Please use gcloud notebooks @@ -94,6 +95,9 @@ OPTIONAL FLAGS directory of the Cloud Storage bucketFormat of full path: gs://{gcs_bucket}/{relative_path}/ + --timeout-minutes=TIMEOUT_MINUTES + Maximum amount of time in minutes before the operation times out + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/beta/run/services/replace b/gcloud/beta/run/services/replace index 8db13cc6f..fc519c9c2 100644 --- a/gcloud/beta/run/services/replace +++ b/gcloud/beta/run/services/replace @@ -3,8 +3,8 @@ NAME service specification SYNOPSIS - gcloud beta run services replace FILE [--async] [--namespace=NAMESPACE] - [--platform=PLATFORM; default="managed"] + gcloud beta run services replace FILE [--async] [--dry-run] + [--namespace=NAMESPACE] [--platform=PLATFORM; default="managed"] [--region=REGION | --cluster=CLUSTER --cluster-location=CLUSTER_LOCATION | --context=CONTEXT --kubeconfig=KUBECONFIG] [GCLOUD_WIDE_FLAG ...] @@ -27,6 +27,10 @@ FLAGS Return immediately, without waiting for the operation in progress to complete. + --dry-run + If set to true, only validates the configuration. The configuration + will not be applied. + Only applicable if connecting to Cloud Run for Anthos deployed on Google Cloud or Cloud Run for Anthos deployed on VMware. Specify --platform=gke or --platform=kubernetes to use: diff --git a/gcloud/beta/services/disable b/gcloud/beta/services/disable index c85cc72aa..61faa781a 100644 --- a/gcloud/beta/services/disable +++ b/gcloud/beta/services/disable @@ -52,10 +52,8 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. These - variants are also available: + This command is currently in beta and might change without notice. This + variant is also available: $ gcloud services disable - $ gcloud alpha services disable - diff --git a/gcloud/beta/services/enable b/gcloud/beta/services/enable index 9ffa3d76b..1735781bb 100644 --- a/gcloud/beta/services/enable +++ b/gcloud/beta/services/enable @@ -48,10 +48,8 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. These - variants are also available: + This command is currently in beta and might change without notice. This + variant is also available: $ gcloud services enable - $ gcloud alpha services enable - diff --git a/gcloud/beta/sql/instances/create b/gcloud/beta/sql/instances/create index 1ec1e0d73..664b53ca0 100644 --- a/gcloud/beta/sql/instances/create +++ b/gcloud/beta/sql/instances/create @@ -341,9 +341,10 @@ FLAGS implies that complexity check is not enabled. --[no-]password-policy-disallow-compromised-credentials - Disallow credentials that have been compromised by a data breach. Use - --password-policy-disallow-compromised-credentials to enable and - --no-password-policy-disallow-compromised-credentials to disable. + Prohibits the use of credentials that have been compromised by a data + breach. Use --password-policy-disallow-compromised-credentials to + enable and --no-password-policy-disallow-compromised-credentials to + disable. --[no-]password-policy-disallow-username-substring Disallow username as a part of the password. Use diff --git a/gcloud/beta/sql/instances/patch b/gcloud/beta/sql/instances/patch index 1e39b2b0c..aba27717a 100644 --- a/gcloud/beta/sql/instances/patch +++ b/gcloud/beta/sql/instances/patch @@ -287,9 +287,10 @@ FLAGS implies that complexity check is not enabled. --[no-]password-policy-disallow-compromised-credentials - Disallow credentials that have been compromised by a data breach. Use - --password-policy-disallow-compromised-credentials to enable and - --no-password-policy-disallow-compromised-credentials to disable. + Prohibits the use of credentials that have been compromised by a data + breach. Use --password-policy-disallow-compromised-credentials to + enable and --no-password-policy-disallow-compromised-credentials to + disable. --[no-]password-policy-disallow-username-substring Disallow username as a part of the password. Use diff --git a/gcloud/builds/submit b/gcloud/builds/submit index 5677ac551..884ff050c 100644 --- a/gcloud/builds/submit +++ b/gcloud/builds/submit @@ -3,12 +3,12 @@ NAME SYNOPSIS gcloud builds submit [[SOURCE] --no-source] [--async] [--no-cache] - [--default-buckets-behavior=DEFAULT_BUCKETS_BEHAVIOR] + [--default-buckets-behavior=DEFAULT_BUCKETS_BEHAVIOR] [--dir=DIR] [--disk-size=DISK_SIZE] [--gcs-log-dir=GCS_LOG_DIR] [--gcs-source-staging-dir=GCS_SOURCE_STAGING_DIR] [--git-source-dir=GIT_SOURCE_DIR] [--git-source-revision=GIT_SOURCE_REVISION] [--ignore-file=IGNORE_FILE] - [--machine-type=MACHINE_TYPE] [--region=REGION] + [--machine-type=MACHINE_TYPE] [--region=REGION] [--revision=REVISION] [--substitutions=[KEY=VALUE,...]] [--suppress-logs] [--timeout=TIMEOUT] [--worker-pool=WORKER_POOL] [--config=CONFIG; default="cloudbuild.yaml" @@ -77,6 +77,13 @@ FLAGS How default buckets are setup. DEFAULT_BUCKETS_BEHAVIOR must be one of: default-logs-bucket-behavior-unspecified, regional-user-owned-bucket. + --dir=DIR + Directory, relative to the source root, in which to run the build. This + is used when the build source is a 2nd-gen Google Cloud Build + repository resource. This must be a relative path. If a step's dir is + specified and is an absolute path, this value is ignored for that + step's execution. + --disk-size=DISK_SIZE Machine disk size (GB) to run the build. @@ -126,6 +133,18 @@ FLAGS which is the default region to use when working with Cloud Build resources, is used. If builds/region is unset, region is set to global. + --revision=REVISION + Revision to fetch from the Git repository such as a branch, a tag, a + commit SHA, or any Git ref to run the build. This is used when the + build source is a 2nd-gen Google Cloud Build repository resource. + + Cloud Build uses git fetch to fetch the revision from the Git + repository; therefore make sure that the string you provide for + revision is parsable by the command. For information on string values + accepted by git fetch, see + https://git-scm.com/docs/gitrevisions#_specifying_revisions. For + information on git fetch, see https://git-scm.com/docs/git-fetch. + --substitutions=[KEY=VALUE,...] Parameters to be substituted in the build specification. diff --git a/gcloud/compute/commitments/create b/gcloud/compute/commitments/create index c5159304b..5a5f42986 100644 --- a/gcloud/compute/commitments/create +++ b/gcloud/compute/commitments/create @@ -97,10 +97,10 @@ OPTIONAL FLAGS Type of commitment. memory-optimized indicates that the commitment is for memory-optimized VMs. TYPE must be one of: accelerator-optimized, accelerator-optimized-a3, compute-optimized, compute-optimized-c2d, - compute-optimized-c3, compute-optimized-h3, general-purpose, - general-purpose-e2, general-purpose-n2, general-purpose-n2d, - general-purpose-t2d, graphics-optimized, memory-optimized, - memory-optimized-m3. + compute-optimized-c3, compute-optimized-c3d, compute-optimized-h3, + general-purpose, general-purpose-e2, general-purpose-n2, + general-purpose-n2d, general-purpose-t2d, graphics-optimized, + memory-optimized, memory-optimized-m3. Manage the reservations to be created with the commitment. diff --git a/gcloud/compute/instance-templates/create b/gcloud/compute/instance-templates/create index dc0d23f93..89d6d0687 100644 --- a/gcloud/compute/instance-templates/create +++ b/gcloud/compute/instance-templates/create @@ -16,6 +16,7 @@ SYNOPSIS [--[no-]enable-nested-virtualization] [--[no-]enable-uefi-networking] [--external-ipv6-address=EXTERNAL_IPV6_ADDRESS] [--external-ipv6-prefix-length=EXTERNAL_IPV6_PREFIX_LENGTH] + [--instance-template-region=INSTANCE_TEMPLATE_REGION] [--instance-termination-action=INSTANCE_TERMINATION_ACTION] [--internal-ipv6-address=INTERNAL_IPV6_ADDRESS] [--internal-ipv6-prefix-length=INTERNAL_IPV6_PREFIX_LENGTH] @@ -363,6 +364,9 @@ FLAGS be used together with --external-ipv6-address. Only the /96 IP address range is supported, and the default value is 96. + --instance-template-region=INSTANCE_TEMPLATE_REGION + Specifies the region of the regional instance template. + --instance-termination-action=INSTANCE_TERMINATION_ACTION Specifies the termination action that will be taken upon VM preemption (--provisioning-model=SPOT or --preemptible) or automatic instance diff --git a/gcloud/compute/instance-templates/delete b/gcloud/compute/instance-templates/delete index d5f18b17f..2962a98b1 100644 --- a/gcloud/compute/instance-templates/delete +++ b/gcloud/compute/instance-templates/delete @@ -4,7 +4,7 @@ NAME SYNOPSIS gcloud compute instance-templates delete NAME [NAME ...] - [GCLOUD_WIDE_FLAG ...] + [--global | --region=REGION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION gcloud compute instance-templates delete deletes one or more Compute Engine @@ -19,6 +19,16 @@ POSITIONAL ARGUMENTS NAME [NAME ...] Names of the instance templates to delete. +FLAGS + At most one of these can be specified: + + --global + If set, the instance templates are global. + + --region=REGION + Region of the instance templates to delete. Overrides the default + compute/region property value for this command invocation. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/compute/instance-templates/describe b/gcloud/compute/instance-templates/describe index 376e37cec..553f5dbd3 100644 --- a/gcloud/compute/instance-templates/describe +++ b/gcloud/compute/instance-templates/describe @@ -3,7 +3,8 @@ NAME instance template SYNOPSIS - gcloud compute instance-templates describe NAME [GCLOUD_WIDE_FLAG ...] + gcloud compute instance-templates describe NAME + [--global | --region=REGION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION gcloud compute instance-templates describe displays all data associated @@ -18,6 +19,16 @@ POSITIONAL ARGUMENTS NAME Name of the instance template to describe. +FLAGS + At most one of these can be specified: + + --global + If set, the instance template is global. + + --region=REGION + Region of the instance template to describe. Overrides the default + compute/region property value for this command invocation. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/compute/instance-templates/list b/gcloud/compute/instance-templates/list index 051ef43d7..9c831e2d0 100644 --- a/gcloud/compute/instance-templates/list +++ b/gcloud/compute/instance-templates/list @@ -4,9 +4,9 @@ NAME SYNOPSIS gcloud compute instance-templates list [NAME ...] - [--regexp=REGEXP, -r REGEXP] [--filter=EXPRESSION] [--limit=LIMIT] - [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri] - [GCLOUD_WIDE_FLAG ...] + [--regexp=REGEXP, -r REGEXP] [--global | --regions=[REGION,...]] + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] DESCRIPTION gcloud compute instance-templates list displays all Google Compute Engine @@ -37,6 +37,15 @@ FLAGS Flag --regexp is deprecated. Use --filter="name~'REGEXP'" instead. + At most one of these can be specified: + + --global + If provided, only global resources are shown. + + --regions=[REGION,...] + If provided, only regional resources are shown. If arguments are + provided, only resources from the given regions are shown. + LIST COMMAND FLAGS --filter=EXPRESSION Apply a Boolean filter EXPRESSION to each resource item to be listed. diff --git a/gcloud/compute/url-maps/help b/gcloud/compute/url-maps/help index 0ff3172f1..fb2a0e2d3 100644 --- a/gcloud/compute/url-maps/help +++ b/gcloud/compute/url-maps/help @@ -5,8 +5,8 @@ SYNOPSIS gcloud compute url-maps COMMAND [GCLOUD_WIDE_FLAG ...] DESCRIPTION - List, create, and delete URL maps for external HTTP(S) Load Balancing, - internal HTTP(S) Load Balancing, and Traffic Director. + List, create, and delete URL maps for external Application Load Balancer, + internal Application Load Balancer, and Traffic Director. For more information about URL maps, see the URL maps documentation (https://cloud.google.com/load-balancing/docs/url-map-concepts). diff --git a/gcloud/compute/url-maps/validate b/gcloud/compute/url-maps/validate index 7a03186a5..a141d9e85 100644 --- a/gcloud/compute/url-maps/validate +++ b/gcloud/compute/url-maps/validate @@ -18,10 +18,9 @@ EXAMPLES FLAGS --load-balancing-scheme=LOAD_BALANCING_SCHEME - Specifies the load balancer type(s) this validation request is for. Use - EXTERNAL_MANAGED for HTTP/HTTPS External Global Load Balancer with - Advanced Traffic Management. Use EXTERNAL for Classic HTTP/HTTPS - External Global Load Balancer. + Specifies the load balancer type this validation request is for. Use + EXTERNAL_MANAGED for global external Application Load Balancer. Use + EXTERNAL for classic Application Load Balancer. Other load balancer types are not supported. For more information, refer to Choosing a load balancer diff --git a/gcloud/container/attached/clusters/generate-install-manifest b/gcloud/container/attached/clusters/generate-install-manifest index 58656439a..e5a21f554 100644 --- a/gcloud/container/attached/clusters/generate-install-manifest +++ b/gcloud/container/attached/clusters/generate-install-manifest @@ -5,7 +5,10 @@ NAME SYNOPSIS gcloud container attached clusters generate-install-manifest (CLUSTER : --location=LOCATION) --platform-version=PLATFORM_VERSION - [--output-file=OUTPUT_FILE] [GCLOUD_WIDE_FLAG ...] + [--output-file=OUTPUT_FILE] + [--proxy-secret-name=PROXY_SECRET_NAME + --proxy-secret-namespace=PROXY_SECRET_NAMESPACE] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION Generate Install Manifest for an Attached cluster. @@ -71,6 +74,22 @@ OPTIONAL FLAGS --output-file=OUTPUT_FILE Path to the output file to store manifest. + Proxy config + + --proxy-secret-name=PROXY_SECRET_NAME + Name of the Kubernetes secret that contains the HTTP/HTTPS proxy + configuration. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --proxy-secret-namespace=PROXY_SECRET_NAMESPACE + Namespace of the Kubernetes secret that contains the HTTP/HTTPS proxy + configuration. + + This flag argument must be specified if any of the other arguments in + this group are specified. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/container/attached/clusters/register b/gcloud/container/attached/clusters/register index d71f23d41..5f0b094a4 100644 --- a/gcloud/container/attached/clusters/register +++ b/gcloud/container/attached/clusters/register @@ -7,9 +7,13 @@ SYNOPSIS --platform-version=PLATFORM_VERSION (--context=CONTEXT : --kubeconfig=KUBECONFIG) (--has-private-issuer | --issuer-url=ISSUER_URL) - [--admin-users=[USER,...]] [--annotations=ANNOTATION,[ANNOTATION,...]] + [--admin-groups=[GROUP,...]] [--admin-users=[USER,...]] + [--annotations=ANNOTATION,[ANNOTATION,...]] + [--binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE] [--description=DESCRIPTION] [--enable-managed-prometheus] [--logging=COMPONENT,[COMPONENT,...]] [--validate-only] + [--proxy-secret-name=PROXY_SECRET_NAME + --proxy-secret-namespace=PROXY_SECRET_NAMESPACE] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -131,14 +135,20 @@ REQUIRED FLAGS Issuer url of the cluster to attach. OPTIONAL FLAGS + --admin-groups=[GROUP,...] + Groups of users that can perform operations as a cluster administrator. + --admin-users=[USER,...] Users that can perform operations as a cluster administrator. - There is no way to completely remove admin users after setting. - --annotations=ANNOTATION,[ANNOTATION,...] Annotations for the cluster. + --binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE + Set Binary Authorization evaluation mode for this cluster. + BINAUTHZ_EVALUATION_MODE must be one of: DISABLED, + PROJECT_SINGLETON_POLICY_ENFORCE. + --description=DESCRIPTION Description for the cluster. @@ -160,6 +170,22 @@ OPTIONAL FLAGS --validate-only Validate the cluster to create, but don't actually perform it. + Proxy config + + --proxy-secret-name=PROXY_SECRET_NAME + Name of the Kubernetes secret that contains the HTTP/HTTPS proxy + configuration. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --proxy-secret-namespace=PROXY_SECRET_NAMESPACE + Namespace of the Kubernetes secret that contains the HTTP/HTTPS proxy + configuration. + + This flag argument must be specified if any of the other arguments in + this group are specified. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/container/attached/clusters/update b/gcloud/container/attached/clusters/update index 6b5f3e71d..56d8b18cc 100644 --- a/gcloud/container/attached/clusters/update +++ b/gcloud/container/attached/clusters/update @@ -3,11 +3,16 @@ NAME SYNOPSIS gcloud container attached clusters update (CLUSTER : --location=LOCATION) - [--admin-users=[USER,...]] [--annotations=ANNOTATION,[ANNOTATION,...]] - [--async] [--clear-description] [--description=DESCRIPTION] + [--annotations=ANNOTATION,[ANNOTATION,...]] [--async] + [--binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE] + [--clear-description] [--description=DESCRIPTION] [--logging=COMPONENT,[COMPONENT,...]] [--platform-version=PLATFORM_VERSION] [--validate-only] + [--admin-groups=[GROUP,...] | --clear-admin-groups] + [--admin-users=[USER,...] | --clear-admin-users] [--disable-managed-prometheus | --enable-managed-prometheus] + [--proxy-secret-name=PROXY_SECRET_NAME + --proxy-secret-namespace=PROXY_SECRET_NAMESPACE] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -51,11 +56,6 @@ POSITIONAL ARGUMENTS ▸ set the property container_attached/location. FLAGS - --admin-users=[USER,...] - Users that can perform operations as a cluster administrator. - - There is no way to completely remove admin users after setting. - --annotations=ANNOTATION,[ANNOTATION,...] Annotations for the cluster. @@ -63,6 +63,11 @@ FLAGS Return immediately, without waiting for the operation in progress to complete. + --binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE + Set Binary Authorization evaluation mode for this cluster. + BINAUTHZ_EVALUATION_MODE must be one of: DISABLED, + PROJECT_SINGLETON_POLICY_ENFORCE. + --clear-description Clear the description for the cluster. @@ -93,6 +98,27 @@ FLAGS --validate-only Validate the update of the cluster, but don't actually perform it. + Admin groups + + At most one of these can be specified: + + --admin-groups=[GROUP,...] + Groups of users that can perform operations as a cluster + administrator. + + --clear-admin-groups + Clear the admin groups associated with the cluster + + Admin users + + At most one of these can be specified: + + --admin-users=[USER,...] + Users that can perform operations as a cluster administrator. + + --clear-admin-users + Clear the admin users associated with the cluster + Monitoring Config At most one of these can be specified: @@ -103,6 +129,22 @@ FLAGS --enable-managed-prometheus Enable managed collection for Managed Service for Prometheus. + Proxy config + + --proxy-secret-name=PROXY_SECRET_NAME + Name of the Kubernetes secret that contains the HTTP/HTTPS proxy + configuration. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --proxy-secret-namespace=PROXY_SECRET_NAMESPACE + Namespace of the Kubernetes secret that contains the HTTP/HTTPS proxy + configuration. + + This flag argument must be specified if any of the other arguments in + this group are specified. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/container/aws/clusters/create b/gcloud/container/aws/clusters/create index 4019fc158..cc492183c 100644 --- a/gcloud/container/aws/clusters/create +++ b/gcloud/container/aws/clusters/create @@ -11,8 +11,9 @@ SYNOPSIS --pod-address-cidr-blocks=POD_ADDRESS_CIDR_BLOCKS --role-arn=ROLE_ARN --service-address-cidr-blocks=SERVICE_ADDRESS_CIDR_BLOCKS --subnet-ids=[SUBNET_ID,...] --vpc-id=VPC_ID - [--admin-users=USER,[USER,...]] + [--admin-groups=[GROUP,...]] [--admin-users=USER,[USER,...]] [--annotations=ANNOTATION,[ANNOTATION,...]] [--async] + [--binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE] [--description=DESCRIPTION] [--disable-per-node-pool-sg-rules] [--enable-managed-prometheus] [--instance-type=INSTANCE_TYPE] [--logging=COMPONENT,[COMPONENT,...]] @@ -120,6 +121,9 @@ REQUIRED FLAGS VPC associated with the cluster. OPTIONAL FLAGS + --admin-groups=[GROUP,...] + Groups of users that can perform operations as a cluster administrator. + --admin-users=USER,[USER,...] Users that can perform operations as a cluster administrator. If not specified, the value of property core/account is used. @@ -131,6 +135,11 @@ OPTIONAL FLAGS Return immediately, without waiting for the operation in progress to complete. + --binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE + Set Binary Authorization evaluation mode for this cluster. + BINAUTHZ_EVALUATION_MODE must be one of: DISABLED, + PROJECT_SINGLETON_POLICY_ENFORCE. + --description=DESCRIPTION Description for the cluster. diff --git a/gcloud/container/aws/clusters/update b/gcloud/container/aws/clusters/update index 314b52405..73d124881 100644 --- a/gcloud/container/aws/clusters/update +++ b/gcloud/container/aws/clusters/update @@ -3,7 +3,8 @@ NAME SYNOPSIS gcloud container aws clusters update (CLUSTER : --location=LOCATION) - [--admin-users=USER,[USER,...]] [--async] + [--admin-groups=[GROUP,...]] [--admin-users=USER,[USER,...]] [--async] + [--binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE] [--cluster-version=CLUSTER_VERSION] [--config-encryption-kms-key-arn=CONFIG_ENCRYPTION_KMS_KEY_ARN] [--iam-instance-profile=IAM_INSTANCE_PROFILE] @@ -67,6 +68,9 @@ POSITIONAL ARGUMENTS ▸ set the property container_aws/location. FLAGS + --admin-groups=[GROUP,...] + Groups of users that can perform operations as a cluster administrator. + --admin-users=USER,[USER,...] Users that can perform operations as a cluster administrator. @@ -74,6 +78,11 @@ FLAGS Return immediately, without waiting for the operation in progress to complete. + --binauthz-evaluation-mode=BINAUTHZ_EVALUATION_MODE + Set Binary Authorization evaluation mode for this cluster. + BINAUTHZ_EVALUATION_MODE must be one of: DISABLED, + PROJECT_SINGLETON_POLICY_ENFORCE. + --cluster-version=CLUSTER_VERSION Kubernetes version to use for the cluster. diff --git a/gcloud/container/aws/node-pools/create b/gcloud/container/aws/node-pools/create index bc0450f22..2ecb3d2d4 100644 --- a/gcloud/container/aws/node-pools/create +++ b/gcloud/container/aws/node-pools/create @@ -10,7 +10,7 @@ SYNOPSIS --max-pods-per-node=MAX_PODS_PER_NODE --node-version=NODE_VERSION --subnet-id=SUBNET_ID (--max-nodes=MAX_NODES --min-nodes=MIN_NODES) [--annotations=ANNOTATION,[ANNOTATION,...]] [--async] - [--node-labels=NODE_LABEL,[NODE_LABEL,...]] + [--enable-autorepair] [--node-labels=NODE_LABEL,[NODE_LABEL,...]] [--node-taints=NODE_TAINT,[NODE_TAINT,...]] [--root-volume-iops=ROOT_VOLUME_IOPS] [--root-volume-kms-key-arn=ROOT_VOLUME_KMS_KEY_ARN] @@ -119,6 +119,14 @@ OPTIONAL FLAGS Return immediately, without waiting for the operation in progress to complete. + --enable-autorepair + Enable node autorepair feature for a node pool. Use + --no-enable-autorepair to disable. + + $ gcloud container aws node-pools create --enable-autorepair + + Node autorepair is disabled by default. + --node-labels=NODE_LABEL,[NODE_LABEL,...] Labels assigned to the node pool's nodes. @@ -186,10 +194,10 @@ OPTIONAL FLAGS --spot-instance-types=[INSTANCE_TYPE,...] List of AWS EC2 instance types for creating a spot node pool's nodes. - The specified instance types must have the same number of CPUs and - memory. You can use the Amazon EC2 Instance Selector tool - (https://github.com/aws/amazon-ec2-instance-selector) to choose - instance types with matching CPU and memory configurations. + The specified instance types must have the same CPU architecture, the + same number of CPUs and memory. You can use the Amazon EC2 Instance + Selector tool (https://github.com/aws/amazon-ec2-instance-selector) + to choose instance types with matching CPU and memory configurations. Proxy config diff --git a/gcloud/container/aws/node-pools/update b/gcloud/container/aws/node-pools/update index 8711eee56..857939085 100644 --- a/gcloud/container/aws/node-pools/update +++ b/gcloud/container/aws/node-pools/update @@ -6,7 +6,7 @@ SYNOPSIS gcloud container aws node-pools update (NODE_POOL : --cluster=CLUSTER --location=LOCATION) [--async] [--config-encryption-kms-key-arn=CONFIG_ENCRYPTION_KMS_KEY_ARN] - [--iam-instance-profile=IAM_INSTANCE_PROFILE] + [--enable-autorepair] [--iam-instance-profile=IAM_INSTANCE_PROFILE] [--node-version=NODE_VERSION] [--root-volume-iops=ROOT_VOLUME_IOPS] [--root-volume-kms-key-arn=ROOT_VOLUME_KMS_KEY_ARN] [--root-volume-size=ROOT_VOLUME_SIZE] @@ -83,6 +83,12 @@ FLAGS --config-encryption-kms-key-arn=CONFIG_ENCRYPTION_KMS_KEY_ARN Amazon Resource Name (ARN) of the AWS KMS key to encrypt the user data. + --enable-autorepair + Enable node autorepair feature for a node pool. Use + --no-enable-autorepair to disable. + + $ gcloud container aws node-pools update --enable-autorepair + --iam-instance-profile=IAM_INSTANCE_PROFILE Name or ARN of the IAM instance profile associated with the node pool. diff --git a/gcloud/container/azure/clusters/create b/gcloud/container/azure/clusters/create index b79ec9870..cb138f115 100644 --- a/gcloud/container/azure/clusters/create +++ b/gcloud/container/azure/clusters/create @@ -10,7 +10,8 @@ SYNOPSIS --service-address-cidr-blocks=SERVICE_ADDRESS_CIDR_BLOCKS --ssh-public-key=SSH_PUBLIC_KEY --vnet-id=VNET_ID (--client=CLIENT | --azure-application-id=AZURE_APPLICATION_ID - --azure-tenant-id=AZURE_TENANT_ID) [--admin-users=USER,[USER,...]] + --azure-tenant-id=AZURE_TENANT_ID) [--admin-groups=[GROUP,...]] + [--admin-users=USER,[USER,...]] [--annotations=ANNOTATION,[ANNOTATION,...]] [--async] [--config-encryption-key-id=CONFIG_ENCRYPTION_KEY_ID] [--config-encryption-public-key=CONFIG_ENCRYPTION_PUBLIC_KEY] @@ -142,6 +143,9 @@ REQUIRED FLAGS in this group are specified. OPTIONAL FLAGS + --admin-groups=[GROUP,...] + Groups of users that can perform operations as a cluster administrator. + --admin-users=USER,[USER,...] Users that can perform operations as a cluster administrator. If not specified, the value of property core/account is used. diff --git a/gcloud/container/azure/clusters/update b/gcloud/container/azure/clusters/update index 21be15ad4..f89b3be77 100644 --- a/gcloud/container/azure/clusters/update +++ b/gcloud/container/azure/clusters/update @@ -3,7 +3,7 @@ NAME SYNOPSIS gcloud container azure clusters update (CLUSTER : --location=LOCATION) - [--admin-users=USER,[USER,...]] [--async] + [--admin-groups=[GROUP,...]] [--admin-users=USER,[USER,...]] [--async] [--cluster-version=CLUSTER_VERSION] [--logging=COMPONENT,[COMPONENT,...]] [--ssh-public-key=SSH_PUBLIC_KEY] [--validate-only] [--vm-size=VM_SIZE] @@ -57,6 +57,9 @@ POSITIONAL ARGUMENTS ▸ set the property container_azure/location. FLAGS + --admin-groups=[GROUP,...] + Groups of users that can perform operations as a cluster administrator. + --admin-users=USER,[USER,...] Users that can perform operations as a cluster administrator. diff --git a/gcloud/container/azure/node-pools/create b/gcloud/container/azure/node-pools/create index 05939eb7e..c6fb7b70b 100644 --- a/gcloud/container/azure/node-pools/create +++ b/gcloud/container/azure/node-pools/create @@ -12,7 +12,7 @@ SYNOPSIS [--azure-availability-zone=AZURE_AVAILABILITY_ZONE] [--config-encryption-key-id=CONFIG_ENCRYPTION_KEY_ID] [--config-encryption-public-key=CONFIG_ENCRYPTION_PUBLIC_KEY] - [--node-labels=NODE_LABEL,[NODE_LABEL,...]] + [--enable-autorepair] [--node-labels=NODE_LABEL,[NODE_LABEL,...]] [--node-taints=NODE_TAINT,[NODE_TAINT,...]] [--root-volume-size=ROOT_VOLUME_SIZE] [--tags=TAG,[TAG,...]] [--validate-only] [--vm-size=VM_SIZE] @@ -118,6 +118,14 @@ OPTIONAL FLAGS RSA key of the Azure Key Vault public key to use for encrypting config data. + --enable-autorepair + Enable node autorepair feature for a node pool. Use + --no-enable-autorepair to disable. + + $ gcloud container azure node-pools create --enable-autorepair + + Node autorepair is disabled by default. + --node-labels=NODE_LABEL,[NODE_LABEL,...] Labels assigned to the node pool's nodes. diff --git a/gcloud/container/azure/node-pools/update b/gcloud/container/azure/node-pools/update index 5ec93f41b..027366aff 100644 --- a/gcloud/container/azure/node-pools/update +++ b/gcloud/container/azure/node-pools/update @@ -5,8 +5,8 @@ NAME SYNOPSIS gcloud container azure node-pools update (NODE_POOL : --cluster=CLUSTER --location=LOCATION) [--async] - [--node-version=NODE_VERSION] [--ssh-public-key=SSH_PUBLIC_KEY] - [--validate-only] + [--enable-autorepair] [--node-version=NODE_VERSION] + [--ssh-public-key=SSH_PUBLIC_KEY] [--validate-only] [--annotations=ANNOTATION,[ANNOTATION,...] | --clear-annotations] [--max-nodes=MAX_NODES --min-nodes=MIN_NODES] [GCLOUD_WIDE_FLAG ...] @@ -65,6 +65,12 @@ FLAGS Return immediately, without waiting for the operation in progress to complete. + --enable-autorepair + Enable node autorepair feature for a node pool. Use + --no-enable-autorepair to disable. + + $ gcloud container azure node-pools update --enable-autorepair + --node-version=NODE_VERSION Kubernetes version to use for the node pool. diff --git a/gcloud/container/fleet/create b/gcloud/container/fleet/create index 7b80da9e1..535f42401 100644 --- a/gcloud/container/fleet/create +++ b/gcloud/container/fleet/create @@ -3,10 +3,7 @@ NAME SYNOPSIS gcloud container fleet create [--async] [--display-name=DISPLAY_NAME] - [--labels=[KEY=VALUE,...]] - [--security-posture=SECURITY_POSTURE - --workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING] - [GCLOUD_WIDE_FLAG ...] + [--labels=[KEY=VALUE,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION This command can fail for the following reasons: @@ -39,26 +36,6 @@ FLAGS contain only hyphens (-), underscores (_), lowercase characters, and numbers. - Default cluster configurations to apply across the fleet. - - Security posture config. - - --security-posture=SECURITY_POSTURE - To apply basic security posture to the clusters of the fleet, - - $ gcloud container fleet create --security-posture=basic - - SECURITY_POSTURE must be one of: disabled, basic, enterprise. - - --workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING - To apply basic vulnerability scanning to the clusters of the fleet, - - $ gcloud container fleet create \ - --workload-vulnerability-scanning=disabled - - WORKLOAD_VULNERABILITY_SCANNING must be one of: disabled, basic, - enterprise. - GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/container/fleet/memberships/generate-gateway-rbac b/gcloud/container/fleet/memberships/generate-gateway-rbac index e404cbb75..ecf6d2aaa 100644 --- a/gcloud/container/fleet/memberships/generate-gateway-rbac +++ b/gcloud/container/fleet/memberships/generate-gateway-rbac @@ -3,10 +3,11 @@ NAME policy files for connected clusters by the user SYNOPSIS - gcloud container fleet memberships generate-gateway-rbac [--anthos-support] - [--apply] [--context=CONTEXT] [--kubeconfig=KUBECONFIG] - [--membership=MEMBERSHIP] [--rbac-output-file=RBAC_OUTPUT_FILE] - [--revoke] [--role=ROLE] [--users=USERS] [GCLOUD_WIDE_FLAG ...] + gcloud container fleet memberships generate-gateway-rbac + (--anthos-support | --groups=GROUPS | --users=USERS) [--apply] + [--context=CONTEXT] [--kubeconfig=KUBECONFIG] [--membership=MEMBERSHIP] + [--rbac-output-file=RBAC_OUTPUT_FILE] [--revoke] [--role=ROLE] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION gcloud container fleet memberships generate-gateway-rbac generates RBAC @@ -84,11 +85,31 @@ EXAMPLES --role=clusterrole/cluster-admin --context=my-cluster-context \ --kubeconfig=/home/user/custom_kubeconfig --apply -FLAGS - --anthos-support - If specified, this command will generate RBAC policy file for anthos - support. + The groups can be provided as a Google identity (only email) or an external + identity (starting with "principalSet://iam.googleapis.com"): + $ gcloud container fleet memberships generate-gateway-rbac \ + --membership=my-cluster \ + --groups=group@example.com,principalSet://iam.googleapis.com/\ + locations/global/workforcePools/pool/group/ExampleGroup \ + --role=clusterrole/cluster-admin --context=my-cluster-context \ + --kubeconfig=/home/user/custom_kubeconfig --apply + +REQUIRED FLAGS + Exactly one of these must be specified: + + --anthos-support + If specified, this command will generate RBAC policy file for anthos + support. + + --groups=GROUPS + Group email address or third-party IAM group principal. + + --users=USERS + User's email address, service account email address, or third-party + IAM subject principal. + +OPTIONAL FLAGS --apply If specified, this command will generate RBAC policy and apply to the specified cluster. @@ -119,9 +140,6 @@ FLAGS --role=ROLE Namespace scoped role or cluster role. - --users=USERS - User's email address or service account email address. - GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/container/fleet/update b/gcloud/container/fleet/update index 2532bdd89..7bddb5ef8 100644 --- a/gcloud/container/fleet/update +++ b/gcloud/container/fleet/update @@ -4,10 +4,7 @@ NAME SYNOPSIS gcloud container fleet update [--async] [--display-name=DISPLAY_NAME] [--update-labels=[KEY=VALUE,...]] - [--clear-labels | --remove-labels=[KEY,...]] - [--security-posture=SECURITY_POSTURE - --workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING] - [GCLOUD_WIDE_FLAG ...] + [--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION This command can fail for the following reasons: @@ -61,26 +58,6 @@ FLAGS silently ignored. If --update-labels is also specified then --update-labels is applied first. - Default cluster configurations to apply across the fleet. - - Security posture config. - - --security-posture=SECURITY_POSTURE - To apply basic security posture to the clusters of the fleet, - - $ gcloud container fleet update --security-posture=basic - - SECURITY_POSTURE must be one of: disabled, basic, enterprise. - - --workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING - To apply basic vulnerability scanning to the clusters of the fleet, - - $ gcloud container fleet update \ - --workload-vulnerability-scanning=disabled - - WORKLOAD_VULNERABILITY_SCANNING must be one of: disabled, basic, - enterprise. - GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/container/hub/create b/gcloud/container/hub/create index ca60b5ade..a8fad8825 100644 --- a/gcloud/container/hub/create +++ b/gcloud/container/hub/create @@ -3,10 +3,7 @@ NAME SYNOPSIS gcloud container hub create [--async] [--display-name=DISPLAY_NAME] - [--labels=[KEY=VALUE,...]] - [--security-posture=SECURITY_POSTURE - --workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING] - [GCLOUD_WIDE_FLAG ...] + [--labels=[KEY=VALUE,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION This command can fail for the following reasons: @@ -39,26 +36,6 @@ FLAGS contain only hyphens (-), underscores (_), lowercase characters, and numbers. - Default cluster configurations to apply across the fleet. - - Security posture config. - - --security-posture=SECURITY_POSTURE - To apply basic security posture to the clusters of the fleet, - - $ gcloud container hub create --security-posture=basic - - SECURITY_POSTURE must be one of: disabled, basic, enterprise. - - --workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING - To apply basic vulnerability scanning to the clusters of the fleet, - - $ gcloud container hub create \ - --workload-vulnerability-scanning=disabled - - WORKLOAD_VULNERABILITY_SCANNING must be one of: disabled, basic, - enterprise. - GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/container/hub/memberships/generate-gateway-rbac b/gcloud/container/hub/memberships/generate-gateway-rbac index 005ee312f..ed4b18544 100644 --- a/gcloud/container/hub/memberships/generate-gateway-rbac +++ b/gcloud/container/hub/memberships/generate-gateway-rbac @@ -3,10 +3,11 @@ NAME policy files for connected clusters by the user SYNOPSIS - gcloud container hub memberships generate-gateway-rbac [--anthos-support] - [--apply] [--context=CONTEXT] [--kubeconfig=KUBECONFIG] - [--membership=MEMBERSHIP] [--rbac-output-file=RBAC_OUTPUT_FILE] - [--revoke] [--role=ROLE] [--users=USERS] [GCLOUD_WIDE_FLAG ...] + gcloud container hub memberships generate-gateway-rbac + (--anthos-support | --groups=GROUPS | --users=USERS) [--apply] + [--context=CONTEXT] [--kubeconfig=KUBECONFIG] [--membership=MEMBERSHIP] + [--rbac-output-file=RBAC_OUTPUT_FILE] [--revoke] [--role=ROLE] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION gcloud container hub memberships generate-gateway-rbac generates RBAC @@ -84,11 +85,31 @@ EXAMPLES --role=clusterrole/cluster-admin --context=my-cluster-context \ --kubeconfig=/home/user/custom_kubeconfig --apply -FLAGS - --anthos-support - If specified, this command will generate RBAC policy file for anthos - support. + The groups can be provided as a Google identity (only email) or an external + identity (starting with "principalSet://iam.googleapis.com"): + $ gcloud container hub memberships generate-gateway-rbac \ + --membership=my-cluster \ + --groups=group@example.com,principalSet://iam.googleapis.com/\ + locations/global/workforcePools/pool/group/ExampleGroup \ + --role=clusterrole/cluster-admin --context=my-cluster-context \ + --kubeconfig=/home/user/custom_kubeconfig --apply + +REQUIRED FLAGS + Exactly one of these must be specified: + + --anthos-support + If specified, this command will generate RBAC policy file for anthos + support. + + --groups=GROUPS + Group email address or third-party IAM group principal. + + --users=USERS + User's email address, service account email address, or third-party + IAM subject principal. + +OPTIONAL FLAGS --apply If specified, this command will generate RBAC policy and apply to the specified cluster. @@ -119,9 +140,6 @@ FLAGS --role=ROLE Namespace scoped role or cluster role. - --users=USERS - User's email address or service account email address. - GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/container/hub/update b/gcloud/container/hub/update index e29831707..dab2e8d25 100644 --- a/gcloud/container/hub/update +++ b/gcloud/container/hub/update @@ -4,10 +4,7 @@ NAME SYNOPSIS gcloud container hub update [--async] [--display-name=DISPLAY_NAME] [--update-labels=[KEY=VALUE,...]] - [--clear-labels | --remove-labels=[KEY,...]] - [--security-posture=SECURITY_POSTURE - --workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING] - [GCLOUD_WIDE_FLAG ...] + [--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION This command can fail for the following reasons: @@ -61,26 +58,6 @@ FLAGS silently ignored. If --update-labels is also specified then --update-labels is applied first. - Default cluster configurations to apply across the fleet. - - Security posture config. - - --security-posture=SECURITY_POSTURE - To apply basic security posture to the clusters of the fleet, - - $ gcloud container hub update --security-posture=basic - - SECURITY_POSTURE must be one of: disabled, basic, enterprise. - - --workload-vulnerability-scanning=WORKLOAD_VULNERABILITY_SCANNING - To apply basic vulnerability scanning to the clusters of the fleet, - - $ gcloud container hub update \ - --workload-vulnerability-scanning=disabled - - WORKLOAD_VULNERABILITY_SCANNING must be one of: disabled, basic, - enterprise. - GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/dataproc/clusters/create b/gcloud/dataproc/clusters/create index 57d2dabb4..b9c1bcdc6 100644 --- a/gcloud/dataproc/clusters/create +++ b/gcloud/dataproc/clusters/create @@ -842,8 +842,8 @@ FLAGS Multi-node cluster flags --min-num-workers=MIN_NUM_WORKERS - The minimum number of workers nodes to provision for cluster create - operations to succeed. + Minimum number of primary worker nodes to provision for cluster + creation to succeed. --num-secondary-workers=NUM_SECONDARY_WORKERS The number of secondary worker nodes in the cluster. diff --git a/gcloud/dataproc/workflow-templates/set-managed-cluster b/gcloud/dataproc/workflow-templates/set-managed-cluster index 64d191c2f..a96d1a3fc 100644 --- a/gcloud/dataproc/workflow-templates/set-managed-cluster +++ b/gcloud/dataproc/workflow-templates/set-managed-cluster @@ -708,8 +708,8 @@ FLAGS Multi-node cluster flags --min-num-workers=MIN_NUM_WORKERS - The minimum number of workers nodes to provision for cluster create - operations to succeed. + Minimum number of primary worker nodes to provision for cluster + creation to succeed. --num-secondary-workers=NUM_SECONDARY_WORKERS The number of secondary worker nodes in the cluster. diff --git a/gcloud/deploy/get-config b/gcloud/deploy/get-config new file mode 100644 index 000000000..e299f120c --- /dev/null +++ b/gcloud/deploy/get-config @@ -0,0 +1,50 @@ +NAME + gcloud deploy get-config - get the Cloud Deploy config for the provided + region and project + +SYNOPSIS + gcloud deploy get-config [--region=REGION] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Get the Cloud Deploy config for the provided region and project. + +EXAMPLES + To get the config for project test-project in region us-central1: + + $ gcloud deploy get-config --project=test-project \ + --region=us-central1 + +FLAGS + Location resource - The Cloud region of {resource}. This represents a + Cloud resource. (NOTE) Some attributes are not given arguments in this + group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument --region on the command line with a fully + specified name; + ◆ set the property deploy/region with a fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + --region=REGION + ID of the location or fully qualified identifier for the location. + + To set the region attribute: + ▸ provide the argument --region on the command line; + ▸ set the property deploy/region. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha deploy get-config + + $ gcloud beta deploy get-config + diff --git a/gcloud/deploy/help b/gcloud/deploy/help index 27a08e561..9faf9d6c2 100644 --- a/gcloud/deploy/help +++ b/gcloud/deploy/help @@ -40,6 +40,9 @@ COMMANDS delete Deletes delivery pipeline(s) and target(s) in a yaml configuration. + get-config + Get the Cloud Deploy config for the provided region and project. + NOTES These variants are also available: diff --git a/gcloud/filestore/instances/create b/gcloud/filestore/instances/create index 556f8da42..8af37e161 100644 --- a/gcloud/filestore/instances/create +++ b/gcloud/filestore/instances/create @@ -107,9 +107,10 @@ REQUIRED FLAGS nfs-export-options The NfsExportOptions for the Cloud Filestore instance file share. - Configuring NfsExportOptions is optional. Use the --flags-file flag - to specify the path to a JSON or YAML configuration file that - contains the required NfsExportOptions flags. + Configuring NfsExportOptions is optional and can only be set using + flags-file. Use the --flags-file flag to specify the path to a JSON + or YAML configuration file that contains the required + NfsExportOptions flags. ip-ranges A list of IPv4 addresses or CIDR ranges that are allowed to mount diff --git a/gcloud/filestore/instances/update b/gcloud/filestore/instances/update index fcd2ce417..0cea41792 100644 --- a/gcloud/filestore/instances/update +++ b/gcloud/filestore/instances/update @@ -3,12 +3,12 @@ NAME SYNOPSIS gcloud filestore instances update (INSTANCE : --zone=ZONE) [--async] - [--description=DESCRIPTION] - [--file-share=[capacity=CAPACITY], - [name=NAME],[nfs-export-options=NFS-EXPORT-OPTIONS]] - [--location=LOCATION] [--region=REGION] + [--description=DESCRIPTION] [--location=LOCATION] [--region=REGION] [--update-labels=[KEY=VALUE,...]] - [--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...] + [--clear-labels | --remove-labels=[KEY,...]] + [[--file-share=[capacity=CAPACITY], + [name=NAME],[nfs-export-options=NFS-EXPORT-OPTIONS] + : --clear-nfs-export-options]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION Update a Filestore instance. @@ -99,61 +99,6 @@ FLAGS --description=DESCRIPTION A description of the Cloud Filestore instance. - --file-share=[capacity=CAPACITY],[name=NAME],[nfs-export-options=NFS-EXPORT-OPTIONS] - File share configuration for an instance. Specifying both name and - capacity is required. - - capacity - The desired capacity of the volume in GB or TB units. If no - capacity unit is specified, GB is assumed. Acceptable instance - capacities for each tier are as follows: - ▸ BASIC_HDD: 1TB-63.9TB in 1GB increments or its multiples. - ▸ BASIC_SSD: 2.5TB-63.9TB in 1GB increments or its multiples. - ▸ ENTERPRISE: 1TB-10TB in 256GB increments or its multiples. - - name - The desired logical name of the volume. - - nfs-export-options - The NfsExportOptions for the Cloud Filestore instance file share. - Configuring NfsExportOptions is optional. Use the --flags-file flag - to specify the path to a JSON or YAML configuration file that - contains the required NfsExportOptions flags. - - ip-ranges - A list of IPv4 addresses or CIDR ranges that are allowed to mount - the file share. IPv4 addresses format: {octet 1}.{octet 2}.{octet - 3}.{octet 4}. CIDR range format: {octet 1}.{octet 2}.{octet - 3}.{octet 4}/{mask size}. Overlapping IP ranges are allowed for all - tiers other than BASIC_HDD and BASIC_SSD. The limit of IP - ranges/addresses for each FileShareConfig among all - NfsExportOptions is 64 per instance. - - access-mode - The type of access allowed for the specified IP-addresses or CIDR - ranges. READ_ONLY: Allows only read requests on the exported file - share. READ_WRITE: Allows both read and write requests on the - exported file share. The default setting is READ_WRITE. - - squash-mode - Enables or disables root squash for the specified IP addresses or - CIDR ranges. NO_ROOT_SQUASH: Disables root squash to allow root - access on the exported file share. ROOT_SQUASH. Enables root squash - to remove root access on the exported file share. The default - setting is NO_ROOT_SQUASH. - - anon_uid - An integer that represents the user ID of anonymous users. Anon_uid - may only be set when squash_mode is set to ROOT_SQUASH. If - NO_ROOT_SQUASH is specified, an error will be returned. The default - value is 65534. - - anon_gid - An integer that represents the group ID of anonymous groups. - Anon_gid may only be set when squash_mode is set to ROOT_SQUASH. If - NO_ROOT_SQUASH is specified, an error will be returned. The default - value is 65534. - --location=LOCATION Location of the Cloud Filestore instance/operation. @@ -189,6 +134,71 @@ FLAGS silently ignored. If --update-labels is also specified then --update-labels is applied first. + Parameters for file-share. + + --file-share=[capacity=CAPACITY],[name=NAME],[nfs-export-options=NFS-EXPORT-OPTIONS] + File share configuration for an instance. Specifying both name and + capacity is required. + + capacity + The desired capacity of the volume in GB or TB units. If no + capacity unit is specified, GB is assumed. Acceptable instance + capacities for each tier are as follows: + ▸ BASIC_HDD: 1TB-63.9TB in 1GB increments or its multiples. + ▸ BASIC_SSD: 2.5TB-63.9TB in 1GB increments or its multiples. + ▸ ENTERPRISE: 1TB-10TB in 256GB increments or its multiples. + + name + The desired logical name of the volume. + + nfs-export-options + The NfsExportOptions for the Cloud Filestore instance file share. + Configuring NfsExportOptions is optional and can only be set + using flags-file. Use the --flags-file flag to specify the path + to a JSON or YAML configuration file that contains the required + NfsExportOptions flags. + + ip-ranges + A list of IPv4 addresses or CIDR ranges that are allowed to mount + the file share. IPv4 addresses format: {octet 1}.{octet 2}.{octet + 3}.{octet 4}. CIDR range format: {octet 1}.{octet 2}.{octet + 3}.{octet 4}/{mask size}. Overlapping IP ranges are allowed for + all tiers other than BASIC_HDD and BASIC_SSD. The limit of IP + ranges/addresses for each FileShareConfig among all + NfsExportOptions is 64 per instance. + + access-mode + The type of access allowed for the specified IP-addresses or CIDR + ranges. READ_ONLY: Allows only read requests on the exported file + share. READ_WRITE: Allows both read and write requests on the + exported file share. The default setting is READ_WRITE. + + squash-mode + Enables or disables root squash for the specified IP addresses or + CIDR ranges. NO_ROOT_SQUASH: Disables root squash to allow root + access on the exported file share. ROOT_SQUASH. Enables root + squash to remove root access on the exported file share. The + default setting is NO_ROOT_SQUASH. + + anon_uid + An integer that represents the user ID of anonymous users. + Anon_uid may only be set when squash_mode is set to ROOT_SQUASH. + If NO_ROOT_SQUASH is specified, an error will be returned. The + default value is 65534. + + anon_gid + An integer that represents the group ID of anonymous groups. + Anon_gid may only be set when squash_mode is set to ROOT_SQUASH. + If NO_ROOT_SQUASH is specified, an error will be returned. The + default value is 65534. + + This flag argument must be specified if any of the other + arguments in this group are specified. + + --clear-nfs-export-options + Clears the NfsExportOptions. Must specify --file-share flag if + --clear-nfs-export-options is specified. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/healthcare/dicom-stores/import/gcs b/gcloud/healthcare/dicom-stores/import/gcs index d0c579f21..1a4e9810f 100644 --- a/gcloud/healthcare/dicom-stores/import/gcs +++ b/gcloud/healthcare/dicom-stores/import/gcs @@ -65,7 +65,21 @@ POSITIONAL ARGUMENTS REQUIRED FLAGS --gcs-uri=GCS_URI Google Cloud Storage URI containing DICOM object data. It must match - individual DICOM files or co + individual DICOM files or use wildcards to import multiple files from + one or more directories. + ◆ Use * to match 0 or more non-separator characters. For example, + gs://BUCKET/DIRECTORY/Example*.dcm matches Example.dcm and + Example22.dcm in DIRECTORY. + ◆ Use ** to match 0 or more characters (including separators). Must + be used at the end of a path and with no other wildcards in the path. + Can also be used with a filename extension (such as .dcm), which + imports all files with the filename extension in the specified + directory and its subdirectories. For example, + gs://BUCKET/DIRECTORY/**.dcm imports all files with the .dcm filename + extension in DIRECTORY and its subdirectories. + ◆ Use ? to match 1 character. For example, + gs://BUCKET/DIRECTORY/Example?.dcm matches Example1.dcm but does not + match Example.dcm or Example01.dcm. OPTIONAL FLAGS --async diff --git a/gcloud/iot/devices/commands/help b/gcloud/iot/devices/commands/help index dcecf4c59..96b297a89 100644 --- a/gcloud/iot/devices/commands/help +++ b/gcloud/iot/devices/commands/help @@ -5,7 +5,9 @@ SYNOPSIS gcloud iot devices commands COMMAND [GCLOUD_WIDE_FLAG ...] DESCRIPTION - Manage commands for Cloud IoT devices. + (DEPRECATED) Manage commands for Cloud IoT devices. + + This command is deprecated. Google Cloud IoT Core has been retired. GCLOUD WIDE FLAGS These flags are available to all commands: --help. @@ -16,7 +18,7 @@ COMMANDS COMMAND is one of the following: send - Sends a command to a device. + (DEPRECATED) Sends a command to a device. NOTES These variants are also available: diff --git a/gcloud/iot/devices/commands/send b/gcloud/iot/devices/commands/send index 6f82553a9..78e128dcb 100644 --- a/gcloud/iot/devices/commands/send +++ b/gcloud/iot/devices/commands/send @@ -8,6 +8,9 @@ SYNOPSIS [--subfolder=SUBFOLDER] [GCLOUD_WIDE_FLAG ...] DESCRIPTION + (DEPRECATED) This command is deprecated. Google Cloud IoT Core has been + retired. + Sends a command to a device. EXAMPLES diff --git a/gcloud/iot/devices/configs/describe b/gcloud/iot/devices/configs/describe index 4660171e7..c8c301521 100644 --- a/gcloud/iot/devices/configs/describe +++ b/gcloud/iot/devices/configs/describe @@ -8,7 +8,9 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - Show details about the latest configuration for a device. + (DEPRECATED) Show details about the latest configuration for a device. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To show the details of the latest configuration for a device in region diff --git a/gcloud/iot/devices/configs/get-value b/gcloud/iot/devices/configs/get-value index 451d715f8..998647b20 100644 --- a/gcloud/iot/devices/configs/get-value +++ b/gcloud/iot/devices/configs/get-value @@ -8,7 +8,9 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - Show the binary data of a device's latest configuration. + (DEPRECATED) Show the binary data of a device's latest configuration. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To show the binary data of the latest configuration of a device in region diff --git a/gcloud/iot/devices/configs/help b/gcloud/iot/devices/configs/help index 8e8d377e3..738ea4e4a 100644 --- a/gcloud/iot/devices/configs/help +++ b/gcloud/iot/devices/configs/help @@ -5,6 +5,10 @@ SYNOPSIS gcloud iot devices configs COMMAND [GCLOUD_WIDE_FLAG ...] DESCRIPTION + (DEPRECATED) Manage configurations for Cloud IoT devices. + + This command is deprecated. Google Cloud IoT Core has been retired. + Commands for managing configurations for Google Cloud IoT devices. GCLOUD WIDE FLAGS @@ -16,16 +20,16 @@ COMMANDS COMMAND is one of the following: describe - Show details about the latest configuration for a device. + (DEPRECATED) Show details about the latest configuration for a device. get-value - Show the binary data of a device's latest configuration. + (DEPRECATED) Show the binary data of a device's latest configuration. list - List configs for a device. + (DEPRECATED) List configs for a device. update - Update a specific device configuration. + (DEPRECATED) Update a specific device configuration. NOTES These variants are also available: diff --git a/gcloud/iot/devices/configs/list b/gcloud/iot/devices/configs/list index ca7a2604e..0dad1e069 100644 --- a/gcloud/iot/devices/configs/list +++ b/gcloud/iot/devices/configs/list @@ -8,6 +8,10 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION + (DEPRECATED) List configs for a device. + + This command is deprecated. Google Cloud IoT Core has been retired. + This command lists all available configurations in the history of the device. Up to 10 are kept; you may restrict the output to fewer via the --limit flag. diff --git a/gcloud/iot/devices/configs/update b/gcloud/iot/devices/configs/update index 258387fcf..c25ac3038 100644 --- a/gcloud/iot/devices/configs/update +++ b/gcloud/iot/devices/configs/update @@ -8,6 +8,10 @@ SYNOPSIS [--version-to-update=VERSION_TO_UPDATE] [GCLOUD_WIDE_FLAG ...] DESCRIPTION + (DEPRECATED) Update a specific device configuration. + + This command is deprecated. Google Cloud IoT Core has been retired. + This command updates the current configuration of the device. It always creates a new config with a new version number; if diff --git a/gcloud/iot/devices/create b/gcloud/iot/devices/create index a5ac204c7..904f2d9ed 100644 --- a/gcloud/iot/devices/create +++ b/gcloud/iot/devices/create @@ -11,6 +11,9 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION + (DEPRECATED) This command is deprecated. Google Cloud IoT Core has been + retired. + Create a new device. EXAMPLES diff --git a/gcloud/iot/devices/credentials/clear b/gcloud/iot/devices/credentials/clear index 7c7def081..ec20d6ee5 100644 --- a/gcloud/iot/devices/credentials/clear +++ b/gcloud/iot/devices/credentials/clear @@ -7,7 +7,9 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - Delete all credentials from a device. + (DEPRECATED) Delete all credentials from a device. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To delete all credentials from a device in region 'us-central1', run: diff --git a/gcloud/iot/devices/credentials/create b/gcloud/iot/devices/credentials/create index 3fbfa9dfd..7ac5a9b27 100644 --- a/gcloud/iot/devices/credentials/create +++ b/gcloud/iot/devices/credentials/create @@ -7,6 +7,10 @@ SYNOPSIS [--expiration-time=EXPIRATION_TIME] [GCLOUD_WIDE_FLAG ...] DESCRIPTION + (DEPRECATED) Add a new credential to a device. + + This command is deprecated. Google Cloud IoT Core has been retired. + A device may have at most 3 credentials. EXAMPLES diff --git a/gcloud/iot/devices/credentials/delete b/gcloud/iot/devices/credentials/delete index 63d10956e..9e663f65f 100644 --- a/gcloud/iot/devices/credentials/delete +++ b/gcloud/iot/devices/credentials/delete @@ -7,7 +7,9 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - Delete a credential from a device. + (DEPRECATED) Delete a credential from a device. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To delete the first credential from a device in region 'us-central1', run: diff --git a/gcloud/iot/devices/credentials/describe b/gcloud/iot/devices/credentials/describe index 30a253e57..49333393e 100644 --- a/gcloud/iot/devices/credentials/describe +++ b/gcloud/iot/devices/credentials/describe @@ -8,7 +8,9 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - Show details about a specific device credential. + (DEPRECATED) Show details about a specific device credential. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To describe the first credential of a device in region 'us-central1', run: diff --git a/gcloud/iot/devices/credentials/help b/gcloud/iot/devices/credentials/help index 8e6a664cb..ffd0f27c0 100644 --- a/gcloud/iot/devices/credentials/help +++ b/gcloud/iot/devices/credentials/help @@ -5,6 +5,10 @@ SYNOPSIS gcloud iot devices credentials COMMAND [GCLOUD_WIDE_FLAG ...] DESCRIPTION + (DEPRECATED) Manage credentials for Cloud IoT devices. + + This command is deprecated. Google Cloud IoT Core has been retired. + Commands for managing credentials for Google Cloud IoT devices. GCLOUD WIDE FLAGS @@ -16,22 +20,22 @@ COMMANDS COMMAND is one of the following: clear - Delete all credentials from a device. + (DEPRECATED) Delete all credentials from a device. create - Add a new credential to a device. + (DEPRECATED) Add a new credential to a device. delete - Delete a credential from a device. + (DEPRECATED) Delete a credential from a device. describe - Show details about a specific device credential. + (DEPRECATED) Show details about a specific device credential. list - List credentials for a device. + (DEPRECATED) List credentials for a device. update - Update a specific device credential. + (DEPRECATED) Update a specific device credential. NOTES These variants are also available: diff --git a/gcloud/iot/devices/credentials/list b/gcloud/iot/devices/credentials/list index 8ff2379ba..b6ed79f5d 100644 --- a/gcloud/iot/devices/credentials/list +++ b/gcloud/iot/devices/credentials/list @@ -8,7 +8,9 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - List credentials for a device. + (DEPRECATED) List credentials for a device. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To list the credentials of a device in region 'us-central1', run: diff --git a/gcloud/iot/devices/credentials/update b/gcloud/iot/devices/credentials/update index 3c8676c24..ae1c3aab9 100644 --- a/gcloud/iot/devices/credentials/update +++ b/gcloud/iot/devices/credentials/update @@ -7,7 +7,9 @@ SYNOPSIS [--expiration-time=EXPIRATION_TIME] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - Update a specific device credential. + (DEPRECATED) Update a specific device credential. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To update the expiration time of the first credential of a device in region diff --git a/gcloud/iot/devices/delete b/gcloud/iot/devices/delete index 052103f8b..012896c9e 100644 --- a/gcloud/iot/devices/delete +++ b/gcloud/iot/devices/delete @@ -6,7 +6,12 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - Delete a device. + (DEPRECATED) This command is deprecated. Google Cloud IoT Core has been + retired. + + (DEPRECATED) Delete a device. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To delete a device from device registry 'my-registry', run: diff --git a/gcloud/iot/devices/describe b/gcloud/iot/devices/describe index 5b3a532ed..d0ace154d 100644 --- a/gcloud/iot/devices/describe +++ b/gcloud/iot/devices/describe @@ -6,7 +6,12 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - Show details about a device. + (DEPRECATED) This command is deprecated. Google Cloud IoT Core has been + retired. + + (DEPRECATED) Show details about a device. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To show details about a device, run: diff --git a/gcloud/iot/devices/gateways/bind b/gcloud/iot/devices/gateways/bind index 6e88b11df..6862bf654 100644 --- a/gcloud/iot/devices/gateways/bind +++ b/gcloud/iot/devices/gateways/bind @@ -9,6 +9,9 @@ SYNOPSIS --gateway-registry=GATEWAY_REGISTRY) [GCLOUD_WIDE_FLAG ...] DESCRIPTION + (DEPRECATED) This command is deprecated. Google Cloud IoT Core has been + retired. + Associate a device with a gateway. EXAMPLES diff --git a/gcloud/iot/devices/gateways/help b/gcloud/iot/devices/gateways/help index 8f8df99ac..47268cc2a 100644 --- a/gcloud/iot/devices/gateways/help +++ b/gcloud/iot/devices/gateways/help @@ -5,7 +5,9 @@ SYNOPSIS gcloud iot devices gateways COMMAND [GCLOUD_WIDE_FLAG ...] DESCRIPTION - Manage Cloud IoT Core Gateway Associations. + (DEPRECATED) Manage Cloud IoT Core Gateway Associations. + + This command is deprecated. Google Cloud IoT Core has been retired. GCLOUD WIDE FLAGS These flags are available to all commands: --help. @@ -16,13 +18,13 @@ COMMANDS COMMAND is one of the following: bind - Associate a device with a gateway. + (DEPRECATED) Associate a device with a gateway. list-bound-devices - Lists all of the devices bound to the gateway. + (DEPRECATED) Lists all of the devices bound to the gateway. unbind - Remove the association between a device and a gateway. + (DEPRECATED) Remove the association between a device and a gateway. NOTES These variants are also available: diff --git a/gcloud/iot/devices/gateways/list-bound-devices b/gcloud/iot/devices/gateways/list-bound-devices index 4ad7365fc..a41724d8e 100644 --- a/gcloud/iot/devices/gateways/list-bound-devices +++ b/gcloud/iot/devices/gateways/list-bound-devices @@ -9,6 +9,9 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION + (DEPRECATED) This command is deprecated. Google Cloud IoT Core has been + retired. + Lists all of the devices bound to the gateway. EXAMPLES diff --git a/gcloud/iot/devices/gateways/unbind b/gcloud/iot/devices/gateways/unbind index dcf4ce1eb..f8725d952 100644 --- a/gcloud/iot/devices/gateways/unbind +++ b/gcloud/iot/devices/gateways/unbind @@ -10,6 +10,9 @@ SYNOPSIS --gateway-registry=GATEWAY_REGISTRY) [GCLOUD_WIDE_FLAG ...] DESCRIPTION + (DEPRECATED) This command is deprecated. Google Cloud IoT Core has been + retired. + Remove the association between a device and a gateway. EXAMPLES diff --git a/gcloud/iot/devices/help b/gcloud/iot/devices/help index 105032f33..e458472c3 100644 --- a/gcloud/iot/devices/help +++ b/gcloud/iot/devices/help @@ -5,6 +5,10 @@ SYNOPSIS gcloud iot devices GROUP | COMMAND [GCLOUD_WIDE_FLAG ...] DESCRIPTION + (DEPRECATED) Manage Cloud IoT Devices. + + This command is deprecated. Google Cloud IoT Core has been retired. + Commands for managing Google Cloud IoT Devices. GCLOUD WIDE FLAGS @@ -16,37 +20,37 @@ GROUPS GROUP is one of the following: commands - Manage commands for Cloud IoT devices. + (DEPRECATED) Manage commands for Cloud IoT devices. configs - Manage configurations for Cloud IoT devices. + (DEPRECATED) Manage configurations for Cloud IoT devices. credentials - Manage credentials for Cloud IoT devices. + (DEPRECATED) Manage credentials for Cloud IoT devices. gateways - Manage Cloud IoT Core Gateway Associations. + (DEPRECATED) Manage Cloud IoT Core Gateway Associations. states - Manage states for Cloud IoT devices. + (DEPRECATED) Manage states for Cloud IoT devices. COMMANDS COMMAND is one of the following: create - Create a new device. + (DEPRECATED) Create a new device. delete - Delete a device. + (DEPRECATED) Delete a device. describe - Show details about a device. + (DEPRECATED) Show details about a device. list - List devices. + (DEPRECATED) List devices. update - Update an existing device. + (DEPRECATED) Update an existing device. NOTES These variants are also available: diff --git a/gcloud/iot/devices/list b/gcloud/iot/devices/list index 8d9d99269..2875157a2 100644 --- a/gcloud/iot/devices/list +++ b/gcloud/iot/devices/list @@ -10,6 +10,9 @@ SYNOPSIS [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] DESCRIPTION + (DEPRECATED) This command is deprecated. Google Cloud IoT Core has been + retired. + List devices. EXAMPLES diff --git a/gcloud/iot/devices/states/help b/gcloud/iot/devices/states/help index 85b27be1d..3fdcb7b25 100644 --- a/gcloud/iot/devices/states/help +++ b/gcloud/iot/devices/states/help @@ -5,6 +5,10 @@ SYNOPSIS gcloud iot devices states COMMAND [GCLOUD_WIDE_FLAG ...] DESCRIPTION + (DEPRECATED) Manage states for Cloud IoT devices. + + This command is deprecated. Google Cloud IoT Core has been retired. + Commands for managing states for Google Cloud IoT devices. GCLOUD WIDE FLAGS @@ -16,7 +20,7 @@ COMMANDS COMMAND is one of the following: list - List states for a device. + (DEPRECATED) List states for a device. NOTES These variants are also available: diff --git a/gcloud/iot/devices/states/list b/gcloud/iot/devices/states/list index f7b652f54..b498cdb29 100644 --- a/gcloud/iot/devices/states/list +++ b/gcloud/iot/devices/states/list @@ -8,6 +8,13 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION + (DEPRECATED) This command is deprecated. Google Cloud IoT Core has been + retired. + + (DEPRECATED) List states for a device. + + This command is deprecated. Google Cloud IoT Core has been retired. + This command lists all available states in the history of the device. Up to 10 are kept; you may restrict the output to fewer via the --limit flag. diff --git a/gcloud/iot/devices/update b/gcloud/iot/devices/update index 89814ec14..a13bc5fe9 100644 --- a/gcloud/iot/devices/update +++ b/gcloud/iot/devices/update @@ -7,7 +7,12 @@ SYNOPSIS [--metadata-from-file=[KEY=PATH,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - Update an existing device. + (DEPRECATED) This command is deprecated. Google Cloud IoT Core has been + retired. + + (DEPRECATED) Update an existing device. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES The following command updates the device 'my-device' in device registry diff --git a/gcloud/iot/help b/gcloud/iot/help index 7f995201c..cd41b5184 100644 --- a/gcloud/iot/help +++ b/gcloud/iot/help @@ -5,6 +5,10 @@ SYNOPSIS gcloud iot GROUP [GCLOUD_WIDE_FLAG ...] DESCRIPTION + (DEPRECATED) Manage Cloud IoT resources. + + This command is deprecated. Google Cloud IoT Core has been retired. + Commands for managing Google Cloud IoT resources. GCLOUD WIDE FLAGS @@ -16,10 +20,10 @@ GROUPS GROUP is one of the following: devices - Manage Cloud IoT Devices. + (DEPRECATED) Manage Cloud IoT Devices. registries - Manage Cloud IoT Registries. + (DEPRECATED) Manage Cloud IoT Registries. NOTES These variants are also available: diff --git a/gcloud/iot/registries/create b/gcloud/iot/registries/create index 53b974bee..dd2f29990 100644 --- a/gcloud/iot/registries/create +++ b/gcloud/iot/registries/create @@ -9,6 +9,9 @@ SYNOPSIS [--state-pubsub-topic=STATE_PUBSUB_TOPIC] [GCLOUD_WIDE_FLAG ...] DESCRIPTION + (DEPRECATED) This command is deprecated. Google Cloud IoT Core has been + retired. + Create a new device registry. EXAMPLES diff --git a/gcloud/iot/registries/credentials/clear b/gcloud/iot/registries/credentials/clear index 2fdf93c70..e62dd8e20 100644 --- a/gcloud/iot/registries/credentials/clear +++ b/gcloud/iot/registries/credentials/clear @@ -7,7 +7,9 @@ SYNOPSIS (--registry=REGISTRY : --region=REGION) [GCLOUD_WIDE_FLAG ...] DESCRIPTION - Delete all credentials from a registry. + (DEPRECATED) Delete all credentials from a registry. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To delete all credentials from a registry in region 'us-central1', run: diff --git a/gcloud/iot/registries/credentials/create b/gcloud/iot/registries/credentials/create index c1cb4c995..2561fb592 100644 --- a/gcloud/iot/registries/credentials/create +++ b/gcloud/iot/registries/credentials/create @@ -7,6 +7,13 @@ SYNOPSIS (--registry=REGISTRY : --region=REGION) [GCLOUD_WIDE_FLAG ...] DESCRIPTION + (DEPRECATED) This command is deprecated. Google Cloud IoT Core has been + retired. + + (DEPRECATED) Add a new credential to a registry. + + This command is deprecated. Google Cloud IoT Core has been retired. + A registry may have at most 10 credentials. EXAMPLES diff --git a/gcloud/iot/registries/credentials/delete b/gcloud/iot/registries/credentials/delete index 4666b1249..c9d8e3cf7 100644 --- a/gcloud/iot/registries/credentials/delete +++ b/gcloud/iot/registries/credentials/delete @@ -7,7 +7,9 @@ SYNOPSIS (--registry=REGISTRY : --region=REGION) [GCLOUD_WIDE_FLAG ...] DESCRIPTION - Delete a credential from a registry. + (DEPRECATED) Delete a credential from a registry. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To delete the first credential from a registry, run: diff --git a/gcloud/iot/registries/credentials/describe b/gcloud/iot/registries/credentials/describe index 352f2c683..a3d783ae4 100644 --- a/gcloud/iot/registries/credentials/describe +++ b/gcloud/iot/registries/credentials/describe @@ -7,7 +7,9 @@ SYNOPSIS (--registry=REGISTRY : --region=REGION) [GCLOUD_WIDE_FLAG ...] DESCRIPTION - Show details about a specific registry credential. + (DEPRECATED) Show details about a specific registry credential. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To describe the first credential of a registry in region 'us-central1', diff --git a/gcloud/iot/registries/credentials/help b/gcloud/iot/registries/credentials/help index 25c5a1786..c2f4e7d7b 100644 --- a/gcloud/iot/registries/credentials/help +++ b/gcloud/iot/registries/credentials/help @@ -6,6 +6,10 @@ SYNOPSIS gcloud iot registries credentials COMMAND [GCLOUD_WIDE_FLAG ...] DESCRIPTION + (DEPRECATED) Manage credentials for Cloud IoT devices. + + This command is deprecated. Google Cloud IoT Core has been retired. + Commands for managing credentials for Google Cloud IoT devices. GCLOUD WIDE FLAGS @@ -17,19 +21,19 @@ COMMANDS COMMAND is one of the following: clear - Delete all credentials from a registry. + (DEPRECATED) Delete all credentials from a registry. create - Add a new credential to a registry. + (DEPRECATED) Add a new credential to a registry. delete - Delete a credential from a registry. + (DEPRECATED) Delete a credential from a registry. describe - Show details about a specific registry credential. + (DEPRECATED) Show details about a specific registry credential. list - List credentials for a registry. + (DEPRECATED) List credentials for a registry. NOTES These variants are also available: diff --git a/gcloud/iot/registries/credentials/list b/gcloud/iot/registries/credentials/list index ea254bba2..531705a26 100644 --- a/gcloud/iot/registries/credentials/list +++ b/gcloud/iot/registries/credentials/list @@ -7,7 +7,9 @@ SYNOPSIS [--limit=LIMIT] [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - List credentials for a registry. + (DEPRECATED) List credentials for a registry. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To list the credentials of a registry, run: diff --git a/gcloud/iot/registries/delete b/gcloud/iot/registries/delete index 994b03d23..ec5675367 100644 --- a/gcloud/iot/registries/delete +++ b/gcloud/iot/registries/delete @@ -6,7 +6,12 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - Delete a device registry. + (DEPRECATED) This command is deprecated. Google Cloud IoT Core has been + retired. + + (DEPRECATED) Delete a device registry. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To delete a device registry, run: diff --git a/gcloud/iot/registries/describe b/gcloud/iot/registries/describe index a1ecad299..811399911 100644 --- a/gcloud/iot/registries/describe +++ b/gcloud/iot/registries/describe @@ -6,7 +6,12 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - Show details about a device registry. + (DEPRECATED) This command is deprecated. Google Cloud IoT Core has been + retired. + + (DEPRECATED) Show details about a device registry. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To show details about a device registry, run: diff --git a/gcloud/iot/registries/get-iam-policy b/gcloud/iot/registries/get-iam-policy index 0c00dcb36..eda2aba2a 100644 --- a/gcloud/iot/registries/get-iam-policy +++ b/gcloud/iot/registries/get-iam-policy @@ -8,6 +8,13 @@ SYNOPSIS [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION + (DEPRECATED) This command is deprecated. Google Cloud IoT Core has been + retired. + + (DEPRECATED) Get the IAM policy for a device registry. + + This command is deprecated. Google Cloud IoT Core has been retired. + This command gets the IAM policy for a device registry. If formatted as JSON, the output can be edited and used as a policy file for set-iam-policy. The output includes an "etag" field identifying the version diff --git a/gcloud/iot/registries/help b/gcloud/iot/registries/help index cc95dcdf8..af0d56b9b 100644 --- a/gcloud/iot/registries/help +++ b/gcloud/iot/registries/help @@ -5,6 +5,10 @@ SYNOPSIS gcloud iot registries GROUP | COMMAND [GCLOUD_WIDE_FLAG ...] DESCRIPTION + (DEPRECATED) Manage Cloud IoT Registries. + + This command is deprecated. Google Cloud IoT Core has been retired. + Commands for managing Google Cloud IoT Registries. GCLOUD WIDE FLAGS @@ -16,31 +20,31 @@ GROUPS GROUP is one of the following: credentials - Manage credentials for Cloud IoT devices. + (DEPRECATED) Manage credentials for Cloud IoT devices. COMMANDS COMMAND is one of the following: create - Create a new device registry. + (DEPRECATED) Create a new device registry. delete - Delete a device registry. + (DEPRECATED) Delete a device registry. describe - Show details about a device registry. + (DEPRECATED) Show details about a device registry. get-iam-policy - Get the IAM policy for a device registry. + (DEPRECATED) Get the IAM policy for a device registry. list - List device registries. + (DEPRECATED) List device registries. set-iam-policy - Set IAM policy for a device registry. + (DEPRECATED) Set IAM policy for a device registry. update - Update a device registry. + (DEPRECATED) Update a device registry. NOTES These variants are also available: diff --git a/gcloud/iot/registries/list b/gcloud/iot/registries/list index 14782a86e..87b8a94f6 100644 --- a/gcloud/iot/registries/list +++ b/gcloud/iot/registries/list @@ -7,7 +7,12 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - List device registries. + (DEPRECATED) This command is deprecated. Google Cloud IoT Core has been + retired. + + (DEPRECATED) List device registries. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES To list all device registries in a project and region 'us-central1', run: diff --git a/gcloud/iot/registries/set-iam-policy b/gcloud/iot/registries/set-iam-policy index 41c4b29c4..da9eb7eec 100644 --- a/gcloud/iot/registries/set-iam-policy +++ b/gcloud/iot/registries/set-iam-policy @@ -6,6 +6,13 @@ SYNOPSIS POLICY_FILE [GCLOUD_WIDE_FLAG ...] DESCRIPTION + (DEPRECATED) This command is deprecated. Google Cloud IoT Core has been + retired. + + (DEPRECATED) Set IAM policy for a device registry. + + This command is deprecated. Google Cloud IoT Core has been retired. + This command replaces the existing IAM policy for a device registry, given a REGISTRY and a file encoded in JSON or YAML that contains the IAM policy. If the given policy file specifies an "etag" value, then the replacement diff --git a/gcloud/iot/registries/update b/gcloud/iot/registries/update index 91c413fec..c320f9ad0 100644 --- a/gcloud/iot/registries/update +++ b/gcloud/iot/registries/update @@ -9,7 +9,12 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - Update a device registry. + (DEPRECATED) This command is deprecated. Google Cloud IoT Core has been + retired. + + (DEPRECATED) Update a device registry. + + This command is deprecated. Google Cloud IoT Core has been retired. EXAMPLES The following command updates the device registry 'my-registry' in region diff --git a/gcloud/logging/copy b/gcloud/logging/copy index 57fa21423..e4d2c4253 100644 --- a/gcloud/logging/copy +++ b/gcloud/logging/copy @@ -26,14 +26,15 @@ EXAMPLES POSITIONAL ARGUMENTS BUCKET_ID - Id of the bucket to copy. + Id of the log bucket to copy logs from. Example: my-bucket DESTINATION - destination to which to copy logs. + Destination to copy logs to. Example: Cloud Storage bucket: + storage.googleapis.com/my-cloud-storage-bucket REQUIRED FLAGS --location=LOCATION - Location of the bucket. + Location of the log bucket. OPTIONAL FLAGS --log-filter=LOG_FILTER diff --git a/gcloud/netapp/volumes/create b/gcloud/netapp/volumes/create index 1ca2b73b5..964d76bc1 100644 --- a/gcloud/netapp/volumes/create +++ b/gcloud/netapp/volumes/create @@ -15,6 +15,7 @@ SYNOPSIS [kerberos-5p-read-only=KERBEROS-5P-READ-ONLY], [kerberos-5p-read-write=KERBEROS-5P-READ-WRITE], [nfsv3=NFSV3],[nfsv4=NFSV4]] [--labels=[KEY=VALUE,...]] + [--restricted-actions=RESTRICTED_ACTION,[...]] [--security-style=SECURITY_STYLE; default="SECURITY_STYLE_UNSPECIFIED"] [--smb-settings=SMB_SETTING,[SMB_SETTING,...]] [--snap-reserve=SNAP_RESERVE] @@ -154,6 +155,13 @@ OPTIONAL FLAGS contain only hyphens (-), underscores (_), lowercase characters, and numbers. + --restricted-actions=RESTRICTED_ACTION,[...] + Actions to be restricted for a volume.Valid restricted action options + are: 'DELETE' + + For more information, look at + https://cloud.google.com/netapp/volumes/docs/reference/rest/v1/projects.locations.volumes#restrictedaction. + --security-style=SECURITY_STYLE; default="SECURITY_STYLE_UNSPECIFIED" The security style of the Volume. This can either be UNIX or NTFS. diff --git a/gcloud/netapp/volumes/update b/gcloud/netapp/volumes/update index 594948640..e937167a2 100644 --- a/gcloud/netapp/volumes/update +++ b/gcloud/netapp/volumes/update @@ -14,6 +14,7 @@ SYNOPSIS [kerberos-5p-read-only=KERBEROS-5P-READ-ONLY], [kerberos-5p-read-write=KERBEROS-5P-READ-WRITE], [nfsv3=NFSV3],[nfsv4=NFSV4]] [--protocols=PROTOCOL,[PROTOCOL,...]] + [--restricted-actions=RESTRICTED_ACTION,[...]] [--security-style=SECURITY_STYLE; default="SECURITY_STYLE_UNSPECIFIED"] [--share-name=SHARE_NAME] [--smb-settings=SMB_SETTING,[SMB_SETTING,...]] @@ -108,6 +109,13 @@ FLAGS For more information, look athttps://cloud.google.com/netapp/docs/reference/rest/v1alpha1/projects.locations.volumes#protocols. + --restricted-actions=RESTRICTED_ACTION,[...] + Actions to be restricted for a volume.Valid restricted action options + are: 'DELETE' + + For more information, look at + https://cloud.google.com/netapp/volumes/docs/reference/rest/v1/projects.locations.volumes#restrictedaction. + --security-style=SECURITY_STYLE; default="SECURITY_STYLE_UNSPECIFIED" The security style of the Volume. This can either be UNIX or NTFS. diff --git a/gcloud/network-connectivity/hubs/groups/add-iam-policy-binding b/gcloud/network-connectivity/hubs/groups/add-iam-policy-binding new file mode 100644 index 000000000..4d8630e16 --- /dev/null +++ b/gcloud/network-connectivity/hubs/groups/add-iam-policy-binding @@ -0,0 +1,85 @@ +NAME + gcloud network-connectivity hubs groups add-iam-policy-binding - add an IAM + policy binding to the IAM policy of a group resource + +SYNOPSIS + gcloud network-connectivity hubs groups add-iam-policy-binding + (GROUP : --hub=HUB) --member=PRINCIPAL --role=ROLE + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Add an IAM policy binding to the IAM policy of a group resource. One + binding consists of a member, a role, and an optional condition. + +EXAMPLES + To grant a user the roles/networkconnectivity.groupUser role on the group + called my-group in the hub called my-hub', run the following command: + + $ gcloud network-connectivity hubs groups add-iam-policy-binding \ + my-group --member="user:username@gmail.com" \ + --role="roles/networkconnectivity.groupUser" --hub="my-hub" + +POSITIONAL ARGUMENTS + Group resource - The group that you want to update. The arguments in this + group can be used to specify the attributes of this resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. + + To set the project attribute: + ◆ provide the argument group on the command line with a fully specified + name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + GROUP + ID of the group or fully qualified identifier for the group. + + To set the group attribute: + ▸ provide the argument group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --hub=HUB + Id of the hub. + + To set the hub attribute: + ▸ provide the argument group on the command line with a fully + specified name; + ▸ provide the argument --hub on the command line. + +REQUIRED FLAGS + --member=PRINCIPAL + The principal to add the binding for. Should be of the form + user|group|serviceAccount:email or domain:domain. + + Examples: user:test-user@gmail.com, group:admins@example.com, + serviceAccount:test123@example.domain.com, or + domain:example.domain.com. + + Some resources also accept the following special values: + ◆ allUsers - Special identifier that represents anyone who is on the + internet, with or without a Google account. + ◆ allAuthenticatedUsers - Special identifier that represents anyone + who is authenticated with a Google account or a service account. + + --role=ROLE + Role name to assign to the principal. The role name is the complete + path of a predefined role, such as roles/logging.viewer, or the role ID + for a custom role, such as + organizations/{ORGANIZATION_ID}/roles/logging.viewer. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networkconnectivity/v1 API. The full documentation + for this API can be found at: + https://cloud.google.com/network-connectivity/docs/reference/networkconnectivity/rest diff --git a/gcloud/network-connectivity/hubs/groups/describe b/gcloud/network-connectivity/hubs/groups/describe new file mode 100644 index 000000000..4fb36d345 --- /dev/null +++ b/gcloud/network-connectivity/hubs/groups/describe @@ -0,0 +1,58 @@ +NAME + gcloud network-connectivity hubs groups describe - describe a group + +SYNOPSIS + gcloud network-connectivity hubs groups describe (GROUP : --hub=HUB) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Retrieve and display details about a group. + +EXAMPLES + To display details about a group named my-group, run: + + $ gcloud network-connectivity hubs groups describe my-group + +POSITIONAL ARGUMENTS + Group resource - Name of the group to describe. The arguments in this + group can be used to specify the attributes of this resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. + + To set the project attribute: + ◆ provide the argument group on the command line with a fully specified + name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + GROUP + ID of the group or fully qualified identifier for the group. + + To set the group attribute: + ▸ provide the argument group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --hub=HUB + Id of the hub. + + To set the hub attribute: + ▸ provide the argument group on the command line with a fully + specified name; + ▸ provide the argument --hub on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networkconnectivity/v1 API. The full documentation + for this API can be found at: + https://cloud.google.com/network-connectivity/docs/reference/networkconnectivity/rest diff --git a/gcloud/network-connectivity/hubs/groups/get-iam-policy b/gcloud/network-connectivity/hubs/groups/get-iam-policy new file mode 100644 index 000000000..13e27338d --- /dev/null +++ b/gcloud/network-connectivity/hubs/groups/get-iam-policy @@ -0,0 +1,89 @@ +NAME + gcloud network-connectivity hubs groups get-iam-policy - get the IAM policy + for a group resource + +SYNOPSIS + gcloud network-connectivity hubs groups get-iam-policy (GROUP : --hub=HUB) + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Get the IAM policy of a group. If formatted as JSON, the output can be + edited and used as a policy file for set-iam-policy. + +EXAMPLES + To get the IAM policy for a group named my-group in the hub named my-hub, + run: + + $ gcloud network-connectivity hubs groups get-iam-policy my-group \ + --hub="my-hub" + +POSITIONAL ARGUMENTS + Group resource - The group for which you want the IAM policy. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument group on the command line with a fully specified + name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + GROUP + ID of the group or fully qualified identifier for the group. + + To set the group attribute: + ▸ provide the argument group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --hub=HUB + Id of the hub. + + To set the hub attribute: + ▸ provide the argument group on the command line with a fully + specified name; + ▸ provide the argument --hub on the command line. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networkconnectivity/v1 API. The full documentation + for this API can be found at: + https://cloud.google.com/network-connectivity/docs/reference/networkconnectivity/rest diff --git a/gcloud/network-connectivity/hubs/groups/help b/gcloud/network-connectivity/hubs/groups/help new file mode 100644 index 000000000..cced4dbb2 --- /dev/null +++ b/gcloud/network-connectivity/hubs/groups/help @@ -0,0 +1,35 @@ +NAME + gcloud network-connectivity hubs groups - manage Network Connectivity + Center groups + +SYNOPSIS + gcloud network-connectivity hubs groups COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Manage Network Connectivity Center groups. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + add-iam-policy-binding + Add an IAM policy binding to the IAM policy of a group resource. + + describe + Describe a group. + + get-iam-policy + Get the IAM policy for a group resource. + + list + List groups. + + remove-iam-policy-binding + Remove an IAM policy binding from the IAM policy of a group resource. + + set-iam-policy + Set the IAM policy of a group resource. diff --git a/gcloud/network-connectivity/hubs/groups/list b/gcloud/network-connectivity/hubs/groups/list new file mode 100644 index 000000000..2b9b8b6f3 --- /dev/null +++ b/gcloud/network-connectivity/hubs/groups/list @@ -0,0 +1,77 @@ +NAME + gcloud network-connectivity hubs groups list - list groups + +SYNOPSIS + gcloud network-connectivity hubs groups list --hub=HUB + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Retrieve and display a list of all groups in the specified hub. + +EXAMPLES + To list all groups across all hubs, run: + + $ gcloud network-connectivity hubs groups list --hub=- + + To list all groups in hub my-hub, run: + + $gcloud network-connectivity hubs groups list --hub=my-hub + +REQUIRED FLAGS + Hub resource - Parent hub of the groups to display. This represents a + Cloud resource. (NOTE) Some attributes are not given arguments in this + group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument --hub on the command line with a fully specified + name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + --hub=HUB + ID of the hub or fully qualified identifier for the hub. + + To set the hub attribute: + ▸ provide the argument --hub on the command line. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networkconnectivity/v1 API. The full documentation + for this API can be found at: + https://cloud.google.com/network-connectivity/docs/reference/networkconnectivity/rest diff --git a/gcloud/network-connectivity/hubs/groups/remove-iam-policy-binding b/gcloud/network-connectivity/hubs/groups/remove-iam-policy-binding new file mode 100644 index 000000000..a7c79417d --- /dev/null +++ b/gcloud/network-connectivity/hubs/groups/remove-iam-policy-binding @@ -0,0 +1,86 @@ +NAME + gcloud network-connectivity hubs groups remove-iam-policy-binding - remove + an IAM policy binding from the IAM policy of a group resource + +SYNOPSIS + gcloud network-connectivity hubs groups remove-iam-policy-binding + (GROUP : --hub=HUB) --member=PRINCIPAL --role=ROLE + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Remove an IAM policy binding from the IAM policy of a group resource. + +EXAMPLES + To remove the roles/networkconnectivity.groupUser role from a user of the + group my-group in the hub my-hub, run: + + $ gcloud network-connectivity hubs groups \ + remove-iam-policy-binding my-group \ + --member="user:username@gmail.com" \ + --role="roles/networkconnectivity.groupUser" --hub="my-hub" + +POSITIONAL ARGUMENTS + Group resource - The group that you want to update. The arguments in this + group can be used to specify the attributes of this resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. + + To set the project attribute: + ◆ provide the argument group on the command line with a fully specified + name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + GROUP + ID of the group or fully qualified identifier for the group. + + To set the group attribute: + ▸ provide the argument group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --hub=HUB + Id of the hub. + + To set the hub attribute: + ▸ provide the argument group on the command line with a fully + specified name; + ▸ provide the argument --hub on the command line. + +REQUIRED FLAGS + --member=PRINCIPAL + The principal to remove the binding for. Should be of the form + user|group|serviceAccount:email or domain:domain. + + Examples: user:test-user@gmail.com, group:admins@example.com, + serviceAccount:test123@example.domain.com, or + domain:example.domain.com. + + Deleted principals have an additional deleted: prefix and a ?uid=UID + suffix, where UID is a unique identifier for the principal. Example: + deleted:user:test-user@gmail.com?uid=123456789012345678901. + + Some resources also accept the following special values: + ◆ allUsers - Special identifier that represents anyone who is on the + internet, with or without a Google account. + ◆ allAuthenticatedUsers - Special identifier that represents anyone + who is authenticated with a Google account or a service account. + + --role=ROLE + The role to remove the principal from. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networkconnectivity/v1 API. The full documentation + for this API can be found at: + https://cloud.google.com/network-connectivity/docs/reference/networkconnectivity/rest diff --git a/gcloud/network-connectivity/hubs/groups/set-iam-policy b/gcloud/network-connectivity/hubs/groups/set-iam-policy new file mode 100644 index 000000000..9a64f7061 --- /dev/null +++ b/gcloud/network-connectivity/hubs/groups/set-iam-policy @@ -0,0 +1,69 @@ +NAME + gcloud network-connectivity hubs groups set-iam-policy - set the IAM policy + of a group resource + +SYNOPSIS + gcloud network-connectivity hubs groups set-iam-policy (GROUP : --hub=HUB) + POLICY_FILE [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Replace the existing IAM policy of a group resource with a policy encoded + in a JSON or YAML file. + +EXAMPLES + To replace the IAM policy of a group resource with the policy defined in a + file called policy.json, run: + + $ gcloud network-connectivity hubs groups set-iam-policy my-group \ + policy.json --hub="my-hub" + +POSITIONAL ARGUMENTS + Group resource - The hub for which to set the IAM policy. The arguments in + this group can be used to specify the attributes of this resource. (NOTE) + Some attributes are not given arguments in this group but can be set in + other ways. + + To set the project attribute: + ◆ provide the argument group on the command line with a fully specified + name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + GROUP + ID of the group or fully qualified identifier for the group. + + To set the group attribute: + ▸ provide the argument group on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --hub=HUB + Id of the hub. + + To set the hub attribute: + ▸ provide the argument group on the command line with a fully + specified name; + ▸ provide the argument --hub on the command line. + + POLICY_FILE + Path to a local JSON or YAML formatted file containing a valid policy. + + The output of the get-iam-policy command is a valid file, as is any + JSON or YAML file conforming to the structure of a Policy + (https://cloud.google.com/iam/reference/rest/v1/Policy). + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networkconnectivity/v1 API. The full documentation + for this API can be found at: + https://cloud.google.com/network-connectivity/docs/reference/networkconnectivity/rest diff --git a/gcloud/network-connectivity/hubs/help b/gcloud/network-connectivity/hubs/help index c696e075a..31d273a5e 100644 --- a/gcloud/network-connectivity/hubs/help +++ b/gcloud/network-connectivity/hubs/help @@ -15,6 +15,9 @@ GCLOUD WIDE FLAGS GROUPS GROUP is one of the following: + groups + Manage Network Connectivity Center groups. + route-tables Manage Network Connectivity Center route tables. diff --git a/gcloud/network-connectivity/policy-based-routes/create b/gcloud/network-connectivity/policy-based-routes/create index a6a991eed..d23692149 100644 --- a/gcloud/network-connectivity/policy-based-routes/create +++ b/gcloud/network-connectivity/policy-based-routes/create @@ -4,14 +4,16 @@ NAME SYNOPSIS gcloud network-connectivity policy-based-routes create POLICY_BASED_ROUTE - --network=NETWORK --next-hop-ilb-ip=NEXT_HOP_ILB_IP [--async] - [--description=DESCRIPTION] [--destination-range=DESTINATION_RANGE] - [--ip-protocol=IP_PROTOCOL] [--labels=[KEY=VALUE,...]] - [--priority=PRIORITY] + --network=NETWORK [--async] [--description=DESCRIPTION] + [--destination-range=DESTINATION_RANGE] [--ip-protocol=IP_PROTOCOL] + [--labels=[KEY=VALUE,...]] [--priority=PRIORITY] [--protocol-version=PROTOCOL_VERSION; default="IPv4"] [--source-range=SOURCE_RANGE] [--interconnect-attachment-region=INTERCONNECT_ATTACHMENT_REGION - | --tags=[TAGS,...]] [GCLOUD_WIDE_FLAG ...] + | --tags=[TAGS,...]] + [--next-hop-ilb-ip=NEXT_HOP_ILB_IP + | --next-hop-other-routes=NEXT_HOP_OTHER_ROUTES] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION Create a new policy based route with the given name. @@ -49,10 +51,6 @@ REQUIRED FLAGS Fully-qualified URL of the network that this route applies to. E.g. projects/my-project/global/networks/my-network - --next-hop-ilb-ip=NEXT_HOP_ILB_IP - IP of a global access enabled L4 ILB that should be the next hop to - handle packets. - OPTIONAL FLAGS --async Return immediately, without waiting for the operation in progress to @@ -113,6 +111,18 @@ OPTIONAL FLAGS the policy based route will be installed in all endpoints, including VMs, VPNs, and Interconnect attachements, in the network. + At most one of these can be specified: + + --next-hop-ilb-ip=NEXT_HOP_ILB_IP + IP of a global access enabled L4 ILB that should be the next hop to + handle packets. + + --next-hop-other-routes=NEXT_HOP_OTHER_ROUTES + Next hop should be other routes that handle packets. This will + effectively exclude matching packets being applied on other PBRs with + a lower priority. NEXT_HOP_OTHER_ROUTES must be one of: + default-routing, other-routes-unspecified. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/network-connectivity/service-connection-policies/help b/gcloud/network-connectivity/service-connection-policies/help index 6477fd819..ad63e4bca 100644 --- a/gcloud/network-connectivity/service-connection-policies/help +++ b/gcloud/network-connectivity/service-connection-policies/help @@ -28,3 +28,6 @@ COMMANDS list List service connection policies. + + update + Update a service connection policy. diff --git a/gcloud/network-connectivity/service-connection-policies/update b/gcloud/network-connectivity/service-connection-policies/update new file mode 100644 index 000000000..ae1be5bc5 --- /dev/null +++ b/gcloud/network-connectivity/service-connection-policies/update @@ -0,0 +1,106 @@ +NAME + gcloud network-connectivity service-connection-policies update - update a + service connection policy + +SYNOPSIS + gcloud network-connectivity service-connection-policies update + SERVICE_CONNECTION_POLICY + (--subnets=[SUBNETS,...] : --psc-connection-limit=PSC_CONNECTION_LIMIT) + [--async] [--description=DESCRIPTION] [--labels=[KEY=VALUE,...]] + [--region=REGION] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Update a Service Connection Policy with the given name. + +EXAMPLES + Update a Service Connection Policy with name my-service-conn-policy in + region us-central1. + + $ gcloud network-connectivity service-connection-policies update \ + my-service-conn-policy --region=us-central1 \ + --psc-connection-limit=5 --subnets=my-subnet + +POSITIONAL ARGUMENTS + Service connection policy resource - Name of the Service Connection Policy + to be updated. This represents a Cloud resource. (NOTE) Some attributes + are not given arguments in this group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument service_connection_policy on the command line + with a fully specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + To set the region attribute: + ◆ provide the argument service_connection_policy on the command line + with a fully specified name; + ◆ provide the argument --region on the command line. + + This must be specified. + + SERVICE_CONNECTION_POLICY + ID of the service connection policy or fully qualified identifier for + the service connection policy. + + To set the service_connection_policy attribute: + ▸ provide the argument service_connection_policy on the command + line. + +REQUIRED FLAGS + This must be specified. + + Subnetwork resource - Subnetwork to use for IP address management. This + represents a Cloud resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. + + To set the project attribute: + ▸ provide the argument --subnets on the command line with a fully + specified name; + ▸ set the property core/project; + ▸ provide the argument --project on the command line. + + To set the region attribute: + ▸ provide the argument --subnets on the command line with a fully + specified name; + ▸ provide the argument --region on the command line. + + This must be specified. + + --subnets=[SUBNETS,...] + IDs of the subnetworks or fully qualified identifiers for the + subnetworks. + + To set the subnetwork attribute: + ▫ provide the argument --subnets on the command line. + + --psc-connection-limit=PSC_CONNECTION_LIMIT + Max number of PSC connections for this policy. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --description=DESCRIPTION + Description of the Service Connection Policy to be updated. + + --labels=[KEY=VALUE,...] + List of label KEY=VALUE pairs to add. + + --region=REGION + For resources [service connection policy, subnetwork], provides + fallback value for resource region attribute. When the resource's full + URI path is not provided, region will fallback to this flag value. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networkconnectivity/v1 API. The full documentation + for this API can be found at: + https://cloud.google.com/network-connectivity/docs/reference/networkconnectivity/rest diff --git a/gcloud/notebooks/instances/diagnose b/gcloud/notebooks/instances/diagnose index 1609372d7..23fe19f3d 100644 --- a/gcloud/notebooks/instances/diagnose +++ b/gcloud/notebooks/instances/diagnose @@ -5,7 +5,8 @@ SYNOPSIS gcloud notebooks instances diagnose (INSTANCE : --location=LOCATION) --gcs-bucket=GCS_BUCKET [--async] [--enable-copy-home-files] [--enable-packet-capture] [--enable-repair] - [--relative-path=RELATIVE_PATH] [GCLOUD_WIDE_FLAG ...] + [--relative-path=RELATIVE_PATH] [--timeout-minutes=TIMEOUT_MINUTES] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION Request for diagnose notebook instances. @@ -91,6 +92,9 @@ OPTIONAL FLAGS directory of the Cloud Storage bucketFormat of full path: gs://{gcs_bucket}/{relative_path}/ + --timeout-minutes=TIMEOUT_MINUTES + Maximum amount of time in minutes before the operation times out + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/notebooks/runtimes/diagnose b/gcloud/notebooks/runtimes/diagnose index 973a646b0..b7722ab80 100644 --- a/gcloud/notebooks/runtimes/diagnose +++ b/gcloud/notebooks/runtimes/diagnose @@ -5,7 +5,8 @@ SYNOPSIS gcloud notebooks runtimes diagnose (RUNTIME : --location=LOCATION) --gcs-bucket=GCS_BUCKET [--async] [--enable-copy-home-files] [--enable-packet-capture] [--enable-repair] - [--relative-path=RELATIVE_PATH] [GCLOUD_WIDE_FLAG ...] + [--relative-path=RELATIVE_PATH] [--timeout-minutes=TIMEOUT_MINUTES] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION Request for diagnose notebook runtimes. @@ -91,6 +92,9 @@ OPTIONAL FLAGS directory of the Cloud Storage bucketFormat of full path: gs://{gcs_bucket}/{relative_path}/ + --timeout-minutes=TIMEOUT_MINUTES + Maximum amount of time in minutes before the operation times out + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/policy-intelligence/help b/gcloud/policy-intelligence/help index 19bed1095..1769b82f6 100644 --- a/gcloud/policy-intelligence/help +++ b/gcloud/policy-intelligence/help @@ -3,7 +3,7 @@ NAME manage policies at scale SYNOPSIS - gcloud policy-intelligence COMMAND [GCLOUD_WIDE_FLAG ...] + gcloud policy-intelligence GROUP | COMMAND [GCLOUD_WIDE_FLAG ...] DESCRIPTION A platform to help better understand, use and manage policies at scale. @@ -13,6 +13,12 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. +GROUPS + GROUP is one of the following: + + troubleshoot-policy + Troubleshoot IAM policies. + COMMANDS COMMAND is one of the following: diff --git a/gcloud/policy-intelligence/troubleshoot-policy/help b/gcloud/policy-intelligence/troubleshoot-policy/help new file mode 100644 index 000000000..63be2e614 --- /dev/null +++ b/gcloud/policy-intelligence/troubleshoot-policy/help @@ -0,0 +1,23 @@ +NAME + gcloud policy-intelligence troubleshoot-policy - troubleshoot IAM policies + +SYNOPSIS + gcloud policy-intelligence troubleshoot-policy COMMAND + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Troubleshoot IAM policies. + + More information can be found here: + https://cloud.google.com/iam/docs/troubleshooting-access + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + iam + Troubleshoot IAM allow and deny policies. diff --git a/gcloud/policy-intelligence/troubleshoot-policy/iam b/gcloud/policy-intelligence/troubleshoot-policy/iam new file mode 100644 index 000000000..65c209d3c --- /dev/null +++ b/gcloud/policy-intelligence/troubleshoot-policy/iam @@ -0,0 +1,97 @@ +NAME + gcloud policy-intelligence troubleshoot-policy iam - troubleshoot IAM allow + and deny policies + +SYNOPSIS + gcloud policy-intelligence troubleshoot-policy iam RESOURCE + --permission=PERMISSION --principal-email=EMAIL + [--destination-ip=DESTINATION_IP] [--destination-port=DESTINATION_PORT] + [--request-time=REQUEST_TIME] [--resource-name=RESOURCE_NAME] + [--resource-service=RESOURCE_SERVICE] [--resource-type=RESOURCE_TYPE] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Uses a resource's effective IAM allow policy and IAM deny policy to check + whether a principal has a specific permission on the resource. + +EXAMPLES + The following command checks whether the principal my-user@example.com has + the permission resourcemanager.projects.get on the project my-project: + + $ gcloud policy-intelligence troubleshoot-policy iam \ + //cloudresourcemanager.googleapis.com/projects/my-project \ + --principal-email=my-user@example.com \ + --permission=resourcemanager.projects.get + + The following command checks whether the principal my-user@example.com has + the compute.images.get permission on the project my-project. The command + also provides additional context that lets Troubleshooter evaluate + conditional role bindings: + + $ gcloud policy-intelligence troubleshoot-policy iam \ + //cloudresourcemanager.googleapis.com/projects/my-project \ + --principal-email=my-user@example.com \ + --permission=compute.images.get \ + --resource-name=//compute.googleapis.com/projects/my-project/\ + zones/images/my-image' + --resource-service='compute.googleapis.com' \ + --resource-type='compute.googleapis.com/Image' \ + --destination-ip='192.2.2.2'--destination-port=8080 \ + --request-time='2023-01-01T00:00:00Z' + +POSITIONAL ARGUMENTS + RESOURCE + Full resource name that access is checked against. For a list of full + resource name formats, see: + https://cloud.google.com/iam/docs/resource-names. + +REQUIRED FLAGS + --permission=PERMISSION + IAM permission to check. The permssion can be in the v1 or v2 format. + For example, resourcemanager.projects.get or + cloudresourcemanager.googleapis.com/projects.get. For a list of + permissions, see + https://cloud.google.com/iam/docs/permissions-reference and + https://cloud.google.com/iam/docs/deny-permissions-support + + --principal-email=EMAIL + Email address that identifies the principal to check. Only Google + Accounts and service accounts are supported. + +OPTIONAL FLAGS + --destination-ip=DESTINATION_IP + The request destination IP address to use when checking conditional + bindings. For example, 198.1.1.1. + + --destination-port=DESTINATION_PORT + The request destination port to use when checking conditional bindings. + For example, 8080. + + --request-time=REQUEST_TIME + The request timestamp to use when checking conditional bindings. This + string must adhere to UTC format (RFC 3339). For + example,2021-01-01T00:00:00Z. For more information, see: + https://tools.ietf.org/html/rfc3339 + + --resource-name=RESOURCE_NAME + The resource name value to use when checking conditional bindings. For + accepted values, see: + https://cloud.google.com/iam/docs/conditions-resource-attributes#resource-name. + + --resource-service=RESOURCE_SERVICE + The resource service value to use when checking conditional bindings. + For accepted values, see: + https://cloud.google.com/iam/docs/conditions-resource-attributes#resource-service + + --resource-type=RESOURCE_TYPE + The resource type value to use when checking conditional bindings. For + accepted values, see: + https://cloud.google.com/iam/docs/conditions-resource-attributes#resource-type + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. diff --git a/gcloud/services/disable b/gcloud/services/disable index 62627a407..5f89f429b 100644 --- a/gcloud/services/disable +++ b/gcloud/services/disable @@ -51,9 +51,7 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - These variants are also available: - - $ gcloud alpha services disable + This variant is also available: $ gcloud beta services disable diff --git a/gcloud/services/enable b/gcloud/services/enable index 425744ad4..d2c458ff8 100644 --- a/gcloud/services/enable +++ b/gcloud/services/enable @@ -47,9 +47,7 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - These variants are also available: - - $ gcloud alpha services enable + This variant is also available: $ gcloud beta services enable diff --git a/gcloud/sql/instances/create b/gcloud/sql/instances/create index 258b736f3..ac88063ee 100644 --- a/gcloud/sql/instances/create +++ b/gcloud/sql/instances/create @@ -34,6 +34,7 @@ SYNOPSIS [--master-instance-name=MASTER_INSTANCE_NAME] [--memory=MEMORY] [--network=NETWORK] [--password-policy-complexity=PASSWORD_POLICY_COMPLEXITY] + [--[no-]password-policy-disallow-compromised-credentials] [--[no-]password-policy-disallow-username-substring] [--password-policy-min-length=PASSWORD_POLICY_MIN_LENGTH] [--password-policy-password-change-interval=PASSWORD_POLICY_PASSWORD_CHANGE_INTERVAL] @@ -323,6 +324,12 @@ FLAGS The default value if COMPLEXITY_DEFAULT is not specified. It implies that complexity check is not enabled. + --[no-]password-policy-disallow-compromised-credentials + Prohibits the use of credentials that have been compromised by a data + breach. Use --password-policy-disallow-compromised-credentials to + enable and --no-password-policy-disallow-compromised-credentials to + disable. + --[no-]password-policy-disallow-username-substring Disallow username as a part of the password. Use --password-policy-disallow-username-substring to enable and diff --git a/gcloud/sql/instances/patch b/gcloud/sql/instances/patch index 133254f5d..20e6cbbd3 100644 --- a/gcloud/sql/instances/patch +++ b/gcloud/sql/instances/patch @@ -28,6 +28,7 @@ SYNOPSIS [--maintenance-window-hour=MAINTENANCE_WINDOW_HOUR] [--memory=MEMORY] [--network=NETWORK] [--password-policy-complexity=PASSWORD_POLICY_COMPLEXITY] + [--[no-]password-policy-disallow-compromised-credentials] [--[no-]password-policy-disallow-username-substring] [--password-policy-min-length=PASSWORD_POLICY_MIN_LENGTH] [--password-policy-password-change-interval=PASSWORD_POLICY_PASSWORD_CHANGE_INTERVAL] @@ -283,6 +284,12 @@ FLAGS The default value if COMPLEXITY_DEFAULT is not specified. It implies that complexity check is not enabled. + --[no-]password-policy-disallow-compromised-credentials + Prohibits the use of credentials that have been compromised by a data + breach. Use --password-policy-disallow-compromised-credentials to + enable and --no-password-policy-disallow-compromised-credentials to + disable. + --[no-]password-policy-disallow-username-substring Disallow username as a part of the password. Use --password-policy-disallow-username-substring to enable and diff --git a/gcloud/storage/buckets/update b/gcloud/storage/buckets/update index dc35dd5d4..6581b8a88 100644 --- a/gcloud/storage/buckets/update +++ b/gcloud/storage/buckets/update @@ -117,13 +117,15 @@ FLAGS --acl-file=ACL_FILE Path to a local JSON or YAML formatted file containing a valid policy. - The output of gcloud storage [buckets|objects] describe - --format="multi(acl:format=json)" is a valid file and can be edited for - more fine-grained control. + See the ObjectAccessControls resource + (https://cloud.google.com/storage/docs/json_api/v1/objectAccessControls) + for a representation of JSON formatted files. The output of gcloud + storage [buckets|objects] describe --format="multi(acl:format=json)" is + a valid file and can be edited for more fine-grained control. --add-acl-grant=[ACL_GRANT,...] Key-value pairs mirroring the JSON accepted by your cloud provider. For - example, for Google Cloud + example, for Cloud Storage,--add-acl-grant=entity=user-tim@gmail.com,role=OWNER --canned-acl=PREDEFINED_ACL, --predefined-acl=PREDEFINED_ACL, -a PREDEFINED_ACL @@ -133,9 +135,9 @@ FLAGS --remove-acl-grant=REMOVE_ACL_GRANT Key-value pairs mirroring the JSON accepted by your cloud provider. For - example, for Google Cloud Storage, --remove-acl-grant=ENTITY, where - ENTITY has a valid ACL entity format, such as user-tim@gmail.com, - group-admins, allUsers, etc. + example, for Cloud Storage, --remove-acl-grant=ENTITY, where ENTITY has + a valid ACL entity format, such as user-tim@gmail.com, group-admins, + allUsers, etc. --add-default-object-acl-grant=[DEFAULT_OBJECT_ACL_GRANT,...] Adds default object ACL grant. See --add-acl-grant help text for more diff --git a/gcloud/storage/cat b/gcloud/storage/cat index c209bd80f..fe8c1bcd0 100644 --- a/gcloud/storage/cat +++ b/gcloud/storage/cat @@ -63,7 +63,7 @@ ENCRYPTION FLAGS --decryption-keys=[DECRYPTION_KEY,...] A comma-separated list of customer-supplied encryption keys (RFC 4648 section 4 base64-encoded AES256 strings) that will be used to decrypt - Google Cloud Storage objects. Data encrypted with a customer-managed + Cloud Storage objects. Data encrypted with a customer-managed encryption key (CMEK) is decrypted automatically, so CMEKs do not need to be listed here. diff --git a/gcloud/storage/cp b/gcloud/storage/cp index 18c42291f..68ab8f200 100644 --- a/gcloud/storage/cp +++ b/gcloud/storage/cp @@ -178,7 +178,7 @@ FLAGS https://cloud.google.com/storage/docs/access-control/lists#predefined-acl --[no-]preserve-acl, -p - Preserves ACLs when copying in the cloud. This option is Google Cloud + Preserves ACLs when copying in the cloud. This option is Cloud Storage-only, and you need OWNER access to all copied objects. If all objects in the destination bucket should have the same ACL, you can also set a default object ACL on that bucket instead of using this @@ -264,7 +264,7 @@ ENCRYPTION FLAGS --decryption-keys=[DECRYPTION_KEY,...] A comma-separated list of customer-supplied encryption keys (RFC 4648 section 4 base64-encoded AES256 strings) that will be used to decrypt - Google Cloud Storage objects. Data encrypted with a customer-managed + Cloud Storage objects. Data encrypted with a customer-managed encryption key (CMEK) is decrypted automatically, so CMEKs do not need to be listed here. @@ -301,7 +301,7 @@ OBJECT METADATA FLAGS Type of data contained in the object (e.g. text/html). --custom-time=CUSTOM_TIME - Custom time for Google Cloud Storage objects in RFC 3339 format. + Custom time for Cloud Storage objects in RFC 3339 format. At most one of these can be specified: diff --git a/gcloud/storage/hash b/gcloud/storage/hash index 5368d2a2a..28c37892c 100644 --- a/gcloud/storage/hash +++ b/gcloud/storage/hash @@ -54,7 +54,7 @@ ENCRYPTION FLAGS --decryption-keys=[DECRYPTION_KEY,...] A comma-separated list of customer-supplied encryption keys (RFC 4648 section 4 base64-encoded AES256 strings) that will be used to decrypt - Google Cloud Storage objects. Data encrypted with a customer-managed + Cloud Storage objects. Data encrypted with a customer-managed encryption key (CMEK) is decrypted automatically, so CMEKs do not need to be listed here. diff --git a/gcloud/storage/ls b/gcloud/storage/ls index 5a1e56fbb..4de7ab747 100644 --- a/gcloud/storage/ls +++ b/gcloud/storage/ls @@ -123,7 +123,7 @@ ENCRYPTION FLAGS --decryption-keys=[DECRYPTION_KEY,...] A comma-separated list of customer-supplied encryption keys (RFC 4648 section 4 base64-encoded AES256 strings) that will be used to decrypt - Google Cloud Storage objects. Data encrypted with a customer-managed + Cloud Storage objects. Data encrypted with a customer-managed encryption key (CMEK) is decrypted automatically, so CMEKs do not need to be listed here. diff --git a/gcloud/storage/mv b/gcloud/storage/mv index 8ecd1779c..9fcdcc6ed 100644 --- a/gcloud/storage/mv +++ b/gcloud/storage/mv @@ -183,7 +183,7 @@ FLAGS https://cloud.google.com/storage/docs/access-control/lists#predefined-acl --[no-]preserve-acl, -p - Preserves ACLs when copying in the cloud. This option is Google Cloud + Preserves ACLs when copying in the cloud. This option is Cloud Storage-only, and you need OWNER access to all copied objects. If all objects in the destination bucket should have the same ACL, you can also set a default object ACL on that bucket instead of using this @@ -269,7 +269,7 @@ ENCRYPTION FLAGS --decryption-keys=[DECRYPTION_KEY,...] A comma-separated list of customer-supplied encryption keys (RFC 4648 section 4 base64-encoded AES256 strings) that will be used to decrypt - Google Cloud Storage objects. Data encrypted with a customer-managed + Cloud Storage objects. Data encrypted with a customer-managed encryption key (CMEK) is decrypted automatically, so CMEKs do not need to be listed here. @@ -306,7 +306,7 @@ OBJECT METADATA FLAGS Type of data contained in the object (e.g. text/html). --custom-time=CUSTOM_TIME - Custom time for Google Cloud Storage objects in RFC 3339 format. + Custom time for Cloud Storage objects in RFC 3339 format. At most one of these can be specified: diff --git a/gcloud/storage/objects/describe b/gcloud/storage/objects/describe index 312ae17be..c773b4c09 100644 --- a/gcloud/storage/objects/describe +++ b/gcloud/storage/objects/describe @@ -45,7 +45,7 @@ ENCRYPTION FLAGS --decryption-keys=[DECRYPTION_KEY,...] A comma-separated list of customer-supplied encryption keys (RFC 4648 section 4 base64-encoded AES256 strings) that will be used to decrypt - Google Cloud Storage objects. Data encrypted with a customer-managed + Cloud Storage objects. Data encrypted with a customer-managed encryption key (CMEK) is decrypted automatically, so CMEKs do not need to be listed here. diff --git a/gcloud/storage/objects/list b/gcloud/storage/objects/list index 4166ac853..6602f6f90 100644 --- a/gcloud/storage/objects/list +++ b/gcloud/storage/objects/list @@ -57,7 +57,7 @@ ENCRYPTION FLAGS --decryption-keys=[DECRYPTION_KEY,...] A comma-separated list of customer-supplied encryption keys (RFC 4648 section 4 base64-encoded AES256 strings) that will be used to decrypt - Google Cloud Storage objects. Data encrypted with a customer-managed + Cloud Storage objects. Data encrypted with a customer-managed encryption key (CMEK) is decrypted automatically, so CMEKs do not need to be listed here. diff --git a/gcloud/storage/objects/update b/gcloud/storage/objects/update index 441d17f6b..e123ed1f1 100644 --- a/gcloud/storage/objects/update +++ b/gcloud/storage/objects/update @@ -90,13 +90,15 @@ FLAGS --acl-file=ACL_FILE Path to a local JSON or YAML formatted file containing a valid policy. - The output of gcloud storage [buckets|objects] describe - --format="multi(acl:format=json)" is a valid file and can be edited for - more fine-grained control. + See the ObjectAccessControls resource + (https://cloud.google.com/storage/docs/json_api/v1/objectAccessControls) + for a representation of JSON formatted files. The output of gcloud + storage [buckets|objects] describe --format="multi(acl:format=json)" is + a valid file and can be edited for more fine-grained control. --add-acl-grant=[ACL_GRANT,...] Key-value pairs mirroring the JSON accepted by your cloud provider. For - example, for Google Cloud + example, for Cloud Storage,--add-acl-grant=entity=user-tim@gmail.com,role=OWNER --canned-acl=PREDEFINED_ACL, --predefined-acl=PREDEFINED_ACL, -a PREDEFINED_ACL @@ -105,7 +107,7 @@ FLAGS https://cloud.google.com/storage/docs/access-control/lists#predefined-acl --[no-]preserve-acl, -p - Preserves ACLs when copying in the cloud. This option is Google Cloud + Preserves ACLs when copying in the cloud. This option is Cloud Storage-only, and you need OWNER access to all copied objects. If all objects in the destination bucket should have the same ACL, you can also set a default object ACL on that bucket instead of using this @@ -114,9 +116,9 @@ FLAGS --remove-acl-grant=REMOVE_ACL_GRANT Key-value pairs mirroring the JSON accepted by your cloud provider. For - example, for Google Cloud Storage, --remove-acl-grant=ENTITY, where - ENTITY has a valid ACL entity format, such as user-tim@gmail.com, - group-admins, allUsers, etc. + example, for Cloud Storage, --remove-acl-grant=ENTITY, where ENTITY has + a valid ACL entity format, such as user-tim@gmail.com, group-admins, + allUsers, etc. ENCRYPTION FLAGS --clear-encryption-key @@ -128,7 +130,7 @@ ENCRYPTION FLAGS --decryption-keys=[DECRYPTION_KEY,...] A comma-separated list of customer-supplied encryption keys (RFC 4648 section 4 base64-encoded AES256 strings) that will be used to decrypt - Google Cloud Storage objects. Data encrypted with a customer-managed + Cloud Storage objects. Data encrypted with a customer-managed encryption key (CMEK) is decrypted automatically, so CMEKs do not need to be listed here. @@ -186,7 +188,7 @@ OBJECT METADATA FLAGS Type of data contained in the object (e.g. text/html). --custom-time=CUSTOM_TIME - Custom time for Google Cloud Storage objects in RFC 3339 format. + Custom time for Cloud Storage objects in RFC 3339 format. At most one of these can be specified: diff --git a/gcloud/storage/rsync b/gcloud/storage/rsync index 12de411f6..0ef47820f 100644 --- a/gcloud/storage/rsync +++ b/gcloud/storage/rsync @@ -203,7 +203,7 @@ ENCRYPTION FLAGS --decryption-keys=[DECRYPTION_KEY,...] A comma-separated list of customer-supplied encryption keys (RFC 4648 section 4 base64-encoded AES256 strings) that will be used to decrypt - Google Cloud Storage objects. Data encrypted with a customer-managed + Cloud Storage objects. Data encrypted with a customer-managed encryption key (CMEK) is decrypted automatically, so CMEKs do not need to be listed here. @@ -240,7 +240,7 @@ OBJECT METADATA FLAGS Type of data contained in the object (e.g. text/html). --custom-time=CUSTOM_TIME - Custom time for Google Cloud Storage objects in RFC 3339 format. + Custom time for Cloud Storage objects in RFC 3339 format. At most one of these can be specified: