From 78a4d78e9e3c2efba4f8acb821f07ad8edbbd446 Mon Sep 17 00:00:00 2001 From: Automated Date: Thu, 5 Sep 2024 09:45:25 +0000 Subject: [PATCH] gcloud: Thu Sep 5 09:45:25 UTC 2024 --- gcloud/_version | 8 +-- .../cloud-bindings/list | 31 ++++++++++ .../cloud-bindings/update | 5 ++ gcloud/alpha/artifacts/docker/images/describe | 4 +- .../instance-templates/create-with-container | 5 +- .../compute/instances/create-with-container | 5 +- .../connection-profiles/create/cloudsql | 3 +- .../edge-cloud/container/clusters/create | 11 +++- gcloud/alpha/iap/settings/get | 2 +- gcloud/alpha/iap/settings/set | 2 +- gcloud/alpha/iap/web/add-iam-policy-binding | 12 ++-- gcloud/alpha/iap/web/get-iam-policy | 12 ++-- .../alpha/iap/web/remove-iam-policy-binding | 12 ++-- gcloud/alpha/iap/web/set-iam-policy | 12 ++-- gcloud/alpha/netapp/volumes/create | 33 +++++++++- gcloud/alpha/recommender/insights/list | 4 +- gcloud/alpha/storage/objects/list | 7 ++- gcloud/alpha/workstations/configs/create | 13 +++- gcloud/artifacts/docker/images/describe | 4 +- gcloud/artifacts/files/download | 8 +-- gcloud/beta/artifacts/docker/images/describe | 4 +- gcloud/beta/dataflow/flex-template/build | 10 +-- gcloud/beta/filestore/instances/create | 39 ------------ gcloud/beta/filestore/instances/update | 51 --------------- gcloud/beta/firestore/databases/restore | 62 ++++++++++++++++++- gcloud/beta/iap/web/add-iam-policy-binding | 12 ++-- gcloud/beta/iap/web/get-iam-policy | 12 ++-- gcloud/beta/iap/web/remove-iam-policy-binding | 12 ++-- gcloud/beta/iap/web/set-iam-policy | 12 ++-- gcloud/beta/netapp/volumes/create | 33 +++++++++- gcloud/beta/workstations/configs/create | 13 +++- gcloud/components/help | 4 -- gcloud/components/restore | 36 ----------- gcloud/dataflow/flex-template/build | 10 +-- gcloud/filestore/instances/create | 41 +----------- gcloud/filestore/instances/update | 51 --------------- gcloud/firestore/databases/restore | 62 ++++++++++++++++++- gcloud/iap/web/add-iam-policy-binding | 12 ++-- gcloud/iap/web/get-iam-policy | 12 ++-- gcloud/iap/web/remove-iam-policy-binding | 12 ++-- gcloud/iap/web/set-iam-policy | 12 ++-- gcloud/netapp/volumes/create | 33 +++++++++- gcloud/storage/objects/list | 7 ++- gcloud/workstations/configs/create | 13 +++- 44 files changed, 416 insertions(+), 342 deletions(-) delete mode 100644 gcloud/components/restore diff --git a/gcloud/_version b/gcloud/_version index 2631168dd..f197b4cb0 100644 --- a/gcloud/_version +++ b/gcloud/_version @@ -1,8 +1,8 @@ -Google Cloud SDK 490.0.0 -alpha 2024.08.23 -beta 2024.08.23 +Google Cloud SDK 491.0.0 +alpha 2024.08.30 +beta 2024.08.30 bq 2.1.8 bundled-python3-unix 3.11.9 -core 2024.08.23 +core 2024.08.30 gcloud-crc32c 1.0.0 gsutil 5.30 diff --git a/gcloud/alpha/access-context-manager/cloud-bindings/list b/gcloud/alpha/access-context-manager/cloud-bindings/list index 58492d4ff..2cd5325e1 100644 --- a/gcloud/alpha/access-context-manager/cloud-bindings/list +++ b/gcloud/alpha/access-context-manager/cloud-bindings/list @@ -31,6 +31,37 @@ EXAMPLES - name: Cloud Console - name: Google Cloud SDK + Or + + --- + accessLevels: + - accessPolicies/9522/accessLevels/device_trusted + dryRunAccessLevels: + - accessPolicies/9522/accessLevels/specific_location + groupKey: a3dad + name: organizations/256/gcpUserAccessBindings/b3-BhcX_Ud5N + scopedAccessSettings: + - activeSettings: + accessLevels: + - accessPolicies/9522/accessLevels/device_trusted + dryRunSettings: + accessLevels: + - accessPolicies/9522/accessLevels/specific_location + scope: + clientScope: + restrictedClientApplication: + clientId: 123.apps.googleusercontent.com + - activeSettings: + accessLevels: + - accessPolicies/9522/accessLevels/device_trusted + dryRunSettings: + accessLevels: + - accessPolicies/9522/accessLevels/specific_location + scope: + clientScope: + restrictedClientApplication: + name: Cloud Console + If filter is specified as principal:serviceAccount OR principal:serviceAccountProjectNumber, the output is printed in the following format: diff --git a/gcloud/alpha/access-context-manager/cloud-bindings/update b/gcloud/alpha/access-context-manager/cloud-bindings/update index cc6a7d5c9..acb6c0ffa 100644 --- a/gcloud/alpha/access-context-manager/cloud-bindings/update +++ b/gcloud/alpha/access-context-manager/cloud-bindings/update @@ -38,6 +38,11 @@ EXAMPLES --restricted-client-application-names='Cloud Console, Google Cloud SDK' + Or + + $ gcloud alpha access-context-manager cloud-bindings update \ + --binding=my-binding-id --binding-file='binding.yaml' + REQUIRED FLAGS Cloud access binding resource - The cloud access binding you want to update. The arguments in this group can be used to specify the attributes diff --git a/gcloud/alpha/artifacts/docker/images/describe b/gcloud/alpha/artifacts/docker/images/describe index 5acbf7505..774433849 100644 --- a/gcloud/alpha/artifacts/docker/images/describe +++ b/gcloud/alpha/artifacts/docker/images/describe @@ -18,7 +18,9 @@ DESCRIPTION This command can fail for the following reasons: ▪ The repository format is invalid. ▪ The specified image does not exist. - ▪ The active account does not have permission to view images. + ▪ The active account does not have permission to run the command + (roles/artifactregistry.reader, roles/containeranalysis.admin and + roles/serviceusage.serviceUsageViewer). EXAMPLES To describe an image digest abcxyz under image busy-box: diff --git a/gcloud/alpha/compute/instance-templates/create-with-container b/gcloud/alpha/compute/instance-templates/create-with-container index adee71cf0..17dc93b4a 100644 --- a/gcloud/alpha/compute/instance-templates/create-with-container +++ b/gcloud/alpha/compute/instance-templates/create-with-container @@ -632,7 +632,8 @@ FLAGS stack-type Specifies whether IPv6 is enabled on the interface. STACK_TYPE must - be one of: IPV4_ONLY, IPV4_IPV6. The default value is IPV4_ONLY. + be one of: IPV4_ONLY, IPV4_IPV6, IPV6_ONLY. The default value is + IPV4_ONLY. ipv6-network-tier Specifies the IPv6 network tier that will be used to configure the @@ -770,6 +771,8 @@ FLAGS The network interface can have both IPv4 and IPv6 addresses IPV4_ONLY The network interface will be assigned IPv4 addresses + IPV6_ONLY + The network interface will be assigned IPv6 addresses --subnet=SUBNET Specifies the subnet that the VM instances are a part of. If --network diff --git a/gcloud/alpha/compute/instances/create-with-container b/gcloud/alpha/compute/instances/create-with-container index cbbe6dc39..cf046983d 100644 --- a/gcloud/alpha/compute/instances/create-with-container +++ b/gcloud/alpha/compute/instances/create-with-container @@ -718,7 +718,8 @@ FLAGS stack-type Specifies whether IPv6 is enabled on the interface. STACK_TYPE must - be one of: IPV4_ONLY, IPV4_IPV6. The default value is IPV4_ONLY. + be one of: IPV4_ONLY, IPV4_IPV6, IPV6_ONLY. The default value is + IPV4_ONLY. ipv6-network-tier Specifies the IPv6 network tier that will be used to configure the @@ -872,6 +873,8 @@ FLAGS The network interface can have both IPv4 and IPv6 addresses IPV4_ONLY The network interface will be assigned IPv4 addresses + IPV6_ONLY + The network interface will be assigned IPv6 addresses --subnet=SUBNET Specifies the subnet that the VM instances are a part of. If --network diff --git a/gcloud/alpha/database-migration/connection-profiles/create/cloudsql b/gcloud/alpha/database-migration/connection-profiles/create/cloudsql index 5aa8becae..46e609e8a 100644 --- a/gcloud/alpha/database-migration/connection-profiles/create/cloudsql +++ b/gcloud/alpha/database-migration/connection-profiles/create/cloudsql @@ -76,8 +76,7 @@ REQUIRED FLAGS --database-version=DATABASE_VERSION Database engine type and version. DATABASE_VERSION must be one of: MYSQL_5_7, MYSQL_5_6, MYSQL_8_0, POSTGRES_9_6, POSTGRES_10, - POSTGRES_11, POSTGRES_12, POSTGRES_13, POSTGRES_14, POSTGRES_15, - POSTGRES_16. + POSTGRES_11, POSTGRES_12, POSTGRES_13, POSTGRES_14, POSTGRES_15. Connection profile resource - Database Migration Service source connection profile ID. This represents a Cloud resource. (NOTE) Some attributes are diff --git a/gcloud/alpha/edge-cloud/container/clusters/create b/gcloud/alpha/edge-cloud/container/clusters/create index bd40b08ac..dc2744819 100644 --- a/gcloud/alpha/edge-cloud/container/clusters/create +++ b/gcloud/alpha/edge-cloud/container/clusters/create @@ -27,7 +27,7 @@ SYNOPSIS [--services-ipv4-cidr=SERVICES_IPV4_CIDR; default="10.96.0.0/12"] [--services-ipv6-cidr=SERVICES_IPV6_CIDR] [--system-addons-config=SYSTEM_ADDONS_CONFIG] [--version=VERSION] - [GCLOUD_WIDE_FLAG ...] + [--zone-storage-kms-key=ZONE_STORAGE_KMS_KEY] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Create an Edge Container cluster. @@ -273,6 +273,15 @@ FLAGS --version=VERSION Target cluster version. For example: "1.5.0". + --zone-storage-kms-key=ZONE_STORAGE_KMS_KEY + Google Cloud KMS key that will be used to encrypt and decrypt the root + key for zone storage encryption. The zone storage KMS key is only + applicable to the storage infra cluster. The Edge Container service + account for this project must have + roles/cloudkms.cryptoKeyEncrypterDecrypter on the key. + + If not provided, a Google-managed key will be used by default. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/iap/settings/get b/gcloud/alpha/iap/settings/get index c20754b94..444d838a1 100644 --- a/gcloud/alpha/iap/settings/get +++ b/gcloud/alpha/iap/settings/get @@ -79,7 +79,7 @@ FLAGS --resource-type=RESOURCE_TYPE Resource type of the IAP resource. RESOURCE_TYPE must be one of: - app-engine, iap_web, compute, organization, folder. + app-engine, iap_web, compute, organization, folder, forwarding-rule. --service=SERVICE Service name. Optional when resource-type is compute or app-engine. diff --git a/gcloud/alpha/iap/settings/set b/gcloud/alpha/iap/settings/set index 58ed3c12a..08b9b6787 100644 --- a/gcloud/alpha/iap/settings/set +++ b/gcloud/alpha/iap/settings/set @@ -131,7 +131,7 @@ FLAGS --resource-type=RESOURCE_TYPE Resource type of the IAP resource. RESOURCE_TYPE must be one of: - app-engine, iap_web, compute, organization, folder. + app-engine, iap_web, compute, organization, folder, forwarding-rule. --service=SERVICE Service name. Optional when resource-type is compute or app-engine. diff --git a/gcloud/alpha/iap/web/add-iam-policy-binding b/gcloud/alpha/iap/web/add-iam-policy-binding index e782e6663..b5f5dd0c0 100644 --- a/gcloud/alpha/iap/web/add-iam-policy-binding +++ b/gcloud/alpha/iap/web/add-iam-policy-binding @@ -5,8 +5,8 @@ NAME SYNOPSIS gcloud alpha iap web add-iam-policy-binding --member=PRINCIPAL --role=ROLE [--condition=[KEY=VALUE,...] | --condition-from-file=PATH_TO_FILE] - [--resource-type=RESOURCE_TYPE - : --region=REGION --service=SERVICE --version=VERSION] + [--region=REGION + --resource-type=RESOURCE_TYPE --service=SERVICE --version=VERSION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -115,15 +115,15 @@ OPTIONAL FLAGS available fields, see the help for --condition. Use a full or relative path to a local file containing the value of condition. - --resource-type=RESOURCE_TYPE - Resource type of the IAP resource. RESOURCE_TYPE must be one of: - app-engine, backend-services. - --region=REGION Region name. Should only be specified with --resource-type=backend-services if it is a regional scoped. Not applicable for global scoped backend services. + --resource-type=RESOURCE_TYPE + Resource type of the IAP resource. RESOURCE_TYPE must be one of: + app-engine, backend-services, forwarding-rule. + --service=SERVICE Service name. diff --git a/gcloud/alpha/iap/web/get-iam-policy b/gcloud/alpha/iap/web/get-iam-policy index c238e99cf..4a3d45061 100644 --- a/gcloud/alpha/iap/web/get-iam-policy +++ b/gcloud/alpha/iap/web/get-iam-policy @@ -4,8 +4,8 @@ NAME SYNOPSIS gcloud alpha iap web get-iam-policy - [--resource-type=RESOURCE_TYPE - : --region=REGION --service=SERVICE --version=VERSION] + [--region=REGION + --resource-type=RESOURCE_TYPE --service=SERVICE --version=VERSION] [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] @@ -65,15 +65,15 @@ EXAMPLES --region=REGION FLAGS - --resource-type=RESOURCE_TYPE - Resource type of the IAP resource. RESOURCE_TYPE must be one of: - app-engine, backend-services. - --region=REGION Region name. Should only be specified with --resource-type=backend-services if it is a regional scoped. Not applicable for global scoped backend services. + --resource-type=RESOURCE_TYPE + Resource type of the IAP resource. RESOURCE_TYPE must be one of: + app-engine, backend-services, forwarding-rule. + --service=SERVICE Service name. diff --git a/gcloud/alpha/iap/web/remove-iam-policy-binding b/gcloud/alpha/iap/web/remove-iam-policy-binding index 17f4f6950..826e521bd 100644 --- a/gcloud/alpha/iap/web/remove-iam-policy-binding +++ b/gcloud/alpha/iap/web/remove-iam-policy-binding @@ -7,8 +7,8 @@ SYNOPSIS --role=ROLE [--all | --condition=[KEY=VALUE,...] | --condition-from-file=PATH_TO_FILE] - [--resource-type=RESOURCE_TYPE - : --region=REGION --service=SERVICE --version=VERSION] + [--region=REGION + --resource-type=RESOURCE_TYPE --service=SERVICE --version=VERSION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -132,15 +132,15 @@ OPTIONAL FLAGS available fields, see the help for --condition. Use a full or relative path to a local file containing the value of condition. - --resource-type=RESOURCE_TYPE - Resource type of the IAP resource. RESOURCE_TYPE must be one of: - app-engine, backend-services. - --region=REGION Region name. Should only be specified with --resource-type=backend-services if it is a regional scoped. Not applicable for global scoped backend services. + --resource-type=RESOURCE_TYPE + Resource type of the IAP resource. RESOURCE_TYPE must be one of: + app-engine, backend-services, forwarding-rule. + --service=SERVICE Service name. diff --git a/gcloud/alpha/iap/web/set-iam-policy b/gcloud/alpha/iap/web/set-iam-policy index d832fb6bd..59cde9f3b 100644 --- a/gcloud/alpha/iap/web/set-iam-policy +++ b/gcloud/alpha/iap/web/set-iam-policy @@ -4,8 +4,8 @@ NAME SYNOPSIS gcloud alpha iap web set-iam-policy POLICY_FILE - [--resource-type=RESOURCE_TYPE - : --region=REGION --service=SERVICE --version=VERSION] + [--region=REGION + --resource-type=RESOURCE_TYPE --service=SERVICE --version=VERSION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -73,15 +73,15 @@ POSITIONAL ARGUMENTS JSON or YAML file containing the IAM policy. FLAGS - --resource-type=RESOURCE_TYPE - Resource type of the IAP resource. RESOURCE_TYPE must be one of: - app-engine, backend-services. - --region=REGION Region name. Should only be specified with --resource-type=backend-services if it is a regional scoped. Not applicable for global scoped backend services. + --resource-type=RESOURCE_TYPE + Resource type of the IAP resource. RESOURCE_TYPE must be one of: + app-engine, backend-services, forwarding-rule. + --service=SERVICE Service name. diff --git a/gcloud/alpha/netapp/volumes/create b/gcloud/alpha/netapp/volumes/create index 4815185c1..8ca1c1e91 100644 --- a/gcloud/alpha/netapp/volumes/create +++ b/gcloud/alpha/netapp/volumes/create @@ -14,8 +14,13 @@ SYNOPSIS [kerberos-5i-read-write=KERBEROS-5I-READ-WRITE], [kerberos-5p-read-only=KERBEROS-5P-READ-ONLY], [kerberos-5p-read-write=KERBEROS-5P-READ-WRITE], - [nfsv3=NFSV3],[nfsv4=NFSV4]] [--labels=[KEY=VALUE,...]] - [--large-capacity=LARGE_CAPACITY] + [nfsv3=NFSV3],[nfsv4=NFSV4]] + [--hybrid-replication-parameters=[cluster-location=CLUSTER-LOCATION], + [description=DESCRIPTION],[labels=LABELS], + [peer-cluster-name=PEER-CLUSTER-NAME], + [peer-ip-addresses=PEER-IP-ADDRESSES],[peer-svm-name=PEER-SVM-NAME], + [peer-volume-name=PEER-VOLUME-NAME],[replication=REPLICATION]] + [--labels=[KEY=VALUE,...]] [--large-capacity=LARGE_CAPACITY] [--multiple-endpoints=MULTIPLE_ENDPOINTS] [--restricted-actions=RESTRICTED_ACTION,[...]] [--security-style=SECURITY_STYLE; default="SECURITY_STYLE_UNSPECIFIED"] @@ -146,6 +151,30 @@ OPTIONAL FLAGS kerberos-5p-read-only=KERBEROS_5P_READ_ONLY, kerberos-5p-read-write=KERBEROS_5P_READ_WRITE + --hybrid-replication-parameters=[cluster-location=CLUSTER-LOCATION],[description=DESCRIPTION],[labels=LABELS],[peer-cluster-name=PEER-CLUSTER-NAME],[peer-ip-addresses=PEER-IP-ADDRESSES],[peer-svm-name=PEER-SVM-NAME],[peer-volume-name=PEER-VOLUME-NAME],[replication=REPLICATION] + Hybrid Replication Parameters contains hybrid replication parameters on + a volume. + + Hybrid Replication Parameters will have the following format + --hybrid-replication-parameters=replication=REPLICATION, + peer-volume-name=PEER_VOLUME_NAME, + peer-cluster-name=PEER_CLUSTER_NAME, + peer-svm-name=PEER_SVM_NAME, + peer-ip-addresses=[PEER-IP-ADDRESS1#PEER-IP-ADDRESS2#...], + cluster-location=CLUSTER_LOCATION, + description=DESCRIPTION, + labels=[KEY1:VALUE1#KEY2:VALUE2#...] + + replication is the desired name for the replication of the volume, + peer-volume-name is the name of the user's local source volume, + peer-cluster-name is the name of the user's local source cluster, + peer-svm-name is the name of the user's local source vserver svm, + peer-ip-addresses is a ampersand-separated(#) list of ip addresses, + cluster-location is the name of the source cluster location, + description is the description of the replication and labels is an + hashtag-separated(#) key value pair of labels with key and value + separated by colon(:) for the replication. + --labels=[KEY=VALUE,...] List of label KEY=VALUE pairs to add. diff --git a/gcloud/alpha/recommender/insights/list b/gcloud/alpha/recommender/insights/list index e161e9f65..2a6f9ebf0 100644 --- a/gcloud/alpha/recommender/insights/list +++ b/gcloud/alpha/recommender/insights/list @@ -60,7 +60,7 @@ FLAGS --[no-]recursive In addition to listing the insights for the specified organization or folder, recursively list all of the insights for the resource's child - resources, including their descendents (for example, a folder's + resources, including their descendants (for example, a folder's sub-folders), and for the resource's child projects. For example, when using the --recursive flag and specifying an organization, the response lists all of the insights associated with that organization, all of the @@ -70,7 +70,7 @@ FLAGS projects, and descendant resources) that can be accessed at once with the --recursive flag is 100. For a larger number of nested resources, use BigQuery Export. Use --recursive to enable and --no-recursive to - disable. + disable. Use --recursive to enable and --no-recursive to disable. LIST COMMAND FLAGS --filter=EXPRESSION diff --git a/gcloud/alpha/storage/objects/list b/gcloud/alpha/storage/objects/list index 874f9eec0..0a842a98f 100644 --- a/gcloud/alpha/storage/objects/list +++ b/gcloud/alpha/storage/objects/list @@ -17,10 +17,15 @@ DESCRIPTION gs://b* fails because it matches a list of buckets. EXAMPLES - List all objects in bucket my-bucket: + List all objects in bucket my-bucket within current directory level: $ gcloud alpha storage objects list gs://my-bucket + List all objects across nested directories using wildcards + (https://cloud.google.com/storage/docs/wildcards): + + $ gcloud alpha storage objects list gs://my-bucket/** + List all objects in bucket beginning with ``o'': $ gcloud alpha storage objects list gs://my-bucket/o* diff --git a/gcloud/alpha/workstations/configs/create b/gcloud/alpha/workstations/configs/create index 231905087..16dd22e7f 100644 --- a/gcloud/alpha/workstations/configs/create +++ b/gcloud/alpha/workstations/configs/create @@ -17,7 +17,7 @@ SYNOPSIS [--disable-public-ip-addresses] [--disable-ssh-to-vm] [--disable-tcp-connections] [--enable-audit-agent] [--enable-confidential-compute] [--enable-nested-virtualization] - [--ephemeral-directory=[PROPERTY=VALUE,...]] + [--enable-ssh-to-vm] [--ephemeral-directory=[PROPERTY=VALUE,...]] [--idle-timeout=IDLE_TIMEOUT; default=7200] [--labels=[LABELS,...]] [--machine-type=MACHINE_TYPE; default="e2-standard-4"] [--network-tags=[NETWORK_TAGS,...]] @@ -234,8 +234,11 @@ FLAGS address. --disable-ssh-to-vm - Default value is False. If set, workstations disable SSH connections to - the root VM. + (DEPRECATED) Default value is False. If set, workstations disable SSH + connections to the root VM. + + The --disable-ssh-to-vm option is deprecated; use --enable-ssh-to-vm + instead. --disable-tcp-connections Default value is false. If set, workstations don't allow plain TCP @@ -254,6 +257,10 @@ FLAGS Default value is false. If set, instances will have nested virtualization enabled. + --enable-ssh-to-vm + Default value is False. If set, workstations enable SSH connections to + the root VM. + --ephemeral-directory=[PROPERTY=VALUE,...] Ephemeral directory which won't persist across workstation sessions. diff --git a/gcloud/artifacts/docker/images/describe b/gcloud/artifacts/docker/images/describe index b5212b558..c7395eab8 100644 --- a/gcloud/artifacts/docker/images/describe +++ b/gcloud/artifacts/docker/images/describe @@ -18,7 +18,9 @@ DESCRIPTION This command can fail for the following reasons: ▪ The repository format is invalid. ▪ The specified image does not exist. - ▪ The active account does not have permission to view images. + ▪ The active account does not have permission to run the command + (roles/artifactregistry.reader, roles/containeranalysis.admin and + roles/serviceusage.serviceUsageViewer). EXAMPLES To describe an image digest abcxyz under image busy-box: diff --git a/gcloud/artifacts/files/download b/gcloud/artifacts/files/download index ef16a21db..2d2357a15 100644 --- a/gcloud/artifacts/files/download +++ b/gcloud/artifacts/files/download @@ -26,10 +26,10 @@ EXAMPLES myfile --allow-overwrite POSITIONAL ARGUMENTS - File resource - The Artifact Registry file name. If not specified, the - current artifacts/location is used. The arguments in this group can be - used to specify the attributes of this resource. (NOTE) Some attributes - are not given arguments in this group but can be set in other ways. + File resource - The Artifact Registry file name. The arguments in this + group can be used to specify the attributes of this resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. To set the project attribute: ◆ provide the argument file on the command line with a fully specified diff --git a/gcloud/beta/artifacts/docker/images/describe b/gcloud/beta/artifacts/docker/images/describe index 0fb5ab09a..44ad9733c 100644 --- a/gcloud/beta/artifacts/docker/images/describe +++ b/gcloud/beta/artifacts/docker/images/describe @@ -18,7 +18,9 @@ DESCRIPTION This command can fail for the following reasons: ▪ The repository format is invalid. ▪ The specified image does not exist. - ▪ The active account does not have permission to view images. + ▪ The active account does not have permission to run the command + (roles/artifactregistry.reader, roles/containeranalysis.admin and + roles/serviceusage.serviceUsageViewer). EXAMPLES To describe an image digest abcxyz under image busy-box: diff --git a/gcloud/beta/dataflow/flex-template/build b/gcloud/beta/dataflow/flex-template/build index 63f4b7646..2431cff52 100644 --- a/gcloud/beta/dataflow/flex-template/build +++ b/gcloud/beta/dataflow/flex-template/build @@ -87,11 +87,11 @@ REQUIRED FLAGS --flex-template-base-image=FLEX_TEMPLATE_BASE_IMAGE Flex template base image to be used while building the container - image. Allowed choices are JAVA8, JAVA11, JAVA17 or gcr.io path of - the specific version of the base image. For JAVA8, JAVA11 and JAVA17 - option, we use the latest base image version to build the container. - You can also provide a specific version from this link - https://gcr.io/dataflow-templates-base/ + image. Allowed choices are JAVA8, JAVA11, JAVA17, JAVA21 or gcr.io + path of the specific version of the base image. For JAVA8, JAVA11, + JAVA17 and JAVA21 option, we use the latest base image version to + build the container. You can also provide a specific version from + this link https://gcr.io/dataflow-templates-base/ This flag argument must be specified if any of the other arguments in this group are specified. diff --git a/gcloud/beta/filestore/instances/create b/gcloud/beta/filestore/instances/create index c1b756a71..1b4c3e747 100644 --- a/gcloud/beta/filestore/instances/create +++ b/gcloud/beta/filestore/instances/create @@ -11,8 +11,6 @@ SYNOPSIS [--description=DESCRIPTION] [--labels=[KEY=VALUE,...]] [--location=LOCATION] [--managed-ad=[computer=COMPUTER],[domain=DOMAIN]] - [--performance=[max-read-iops=MAX-READ-IOPS], - [max-read-iops-per-tb=MAX-READ-IOPS-PER-TB]] [--protocol=PROTOCOL; default="NFS_V3"] [--region=REGION] [--source-instance=SOURCE_INSTANCE] [--tier=TIER; default="BASIC_HDD"] [--kms-key=KMS_KEY : --kms-keyring=KMS_KEYRING @@ -244,43 +242,6 @@ OPTIONAL FLAGS The desired active directory computer name to be created by the filestore instance when connecting to the domain. - --performance=[max-read-iops=MAX-READ-IOPS],[max-read-iops-per-tb=MAX-READ-IOPS-PER-TB] - Performance configuration for the instance. This flag is used to - configure the read IOPS provisioned for the instance. The instance's - write IOPS and read/write throughputs will be derived from the - configured read IOPS. For more information about the derived - performance limits and default performance see: - https://cloud.google.com/filestore/docs/performance. Must be one of: - - max-read-iops - The number of IOPS to provision for the instance. - MAX-READ-IOPS must be in multiple of 1000 and in the supported IOPS - range for the current capacity of the instance. - For more details, see: https://cloud.google.com/filestore/docs/performance. - - max-read-iops-per-tb - Is used for setting the max IOPS of the instance by - specifying the IOPS per TB. When this parameter is used, the - max IOPS are derived from the instance capacity: - The instance max IOPS will be calculated by multiplying the - capacity of the instance (TB) by MAX-READ-IOPS-PER-TB, and rounding - to the nearest 1000. The max IOPS will be changed - dynamically based on the instance capacity. - MAX-READ-IOPS-PER-TB must be in the supported range of the instance. - For more details, see: https://cloud.google.com/filestore/docs/performance. - - Examples: - - Configure an instance with max-read-iops performance: - - $ gcloud beta filestore instances create example-cluster \ - --performance=max-read-iops=17000 - - Configure an instance with max-read-iops-per-tb performance: - - $ gcloud beta filestore instances create example-cluster \ - --performance=max-read-iops-per-tb=17000 - --protocol=PROTOCOL; default="NFS_V3" The service protocol for the Cloud Filestore instance. PROTOCOL must be one of: diff --git a/gcloud/beta/filestore/instances/update b/gcloud/beta/filestore/instances/update index 2e555a52a..e5a20b66c 100644 --- a/gcloud/beta/filestore/instances/update +++ b/gcloud/beta/filestore/instances/update @@ -6,9 +6,6 @@ SYNOPSIS [--description=DESCRIPTION] [--location=LOCATION] [--region=REGION] [--update-labels=[KEY=VALUE,...]] [--clear-labels | --remove-labels=[KEY,...]] - [--clear-performance - | --performance=[max-read-iops=MAX-READ-IOPS], - [max-read-iops-per-tb=MAX-READ-IOPS-PER-TB]] [--disconnect-managed-ad | --managed-ad=[computer=COMPUTER],[domain=DOMAIN]] [[--file-share=[capacity=CAPACITY], @@ -139,54 +136,6 @@ FLAGS silently ignored. If --update-labels is also specified then --update-labels is applied first. - At most one of these can be specified: - - --clear-performance - Clear the performance configuration of the instance and set it to the - default performance mode. In the default performance mode, the - instance performance will be automatically adjusted based on its - capacity (changes in the instance's capacity will automatically - adjust the instance's performance accordingly). For more information - about the default performance mode see: - https://cloud.google.com/filestore/docs/performance. - - --performance=[max-read-iops=MAX-READ-IOPS],[max-read-iops-per-tb=MAX-READ-IOPS-PER-TB] - Performance configuration for the instance. This flag is used to - configure the read IOPS provisioned for the instance. The instance's - write IOPS and read/write throughputs will be derived from the - configured read IOPS. For more information about the derived - performance limits and default performance see: - https://cloud.google.com/filestore/docs/performance. Must be one of: - - max-read-iops - The number of IOPS to provision for the instance. - MAX-READ-IOPS must be in multiple of 1000 and in the supported IOPS - range for the current capacity of the instance. - For more details, see: https://cloud.google.com/filestore/docs/performance. - - max-read-iops-per-tb - Is used for setting the max IOPS of the instance by - specifying the IOPS per TB. When this parameter is used, the - max IOPS are derived from the instance capacity: - The instance max IOPS will be calculated by multiplying the - capacity of the instance (TB) by MAX-READ-IOPS-PER-TB, and rounding - to the nearest 1000. The max IOPS will be changed - dynamically based on the instance capacity. - MAX-READ-IOPS-PER-TB must be in the supported range of the instance. - For more details, see: https://cloud.google.com/filestore/docs/performance. - - Examples: - - Configure an instance with max-read-iops performance: - - $ gcloud beta filestore instances update example-cluster \ - --performance=max-read-iops=17000 - - Configure an instance with max-read-iops-per-tb performance: - - $ gcloud beta filestore instances update example-cluster \ - --performance=max-read-iops-per-tb=17000 - At most one of these can be specified: --disconnect-managed-ad diff --git a/gcloud/beta/firestore/databases/restore b/gcloud/beta/firestore/databases/restore index ae167571f..f3a6c64fd 100644 --- a/gcloud/beta/firestore/databases/restore +++ b/gcloud/beta/firestore/databases/restore @@ -5,7 +5,9 @@ NAME SYNOPSIS gcloud beta firestore databases restore --destination-database=DESTINATION_DATABASE - --source-backup=SOURCE_BACKUP [GCLOUD_WIDE_FLAG ...] + --source-backup=SOURCE_BACKUP + [--encryption-type=ENCRYPTION_TYPE : --kms-key-name=KMS_KEY_NAME] + [GCLOUD_WIDE_FLAG ...] EXAMPLES To restore a database from a backup. @@ -14,6 +16,15 @@ EXAMPLES --source-backup=projects/PROJECT_ID/locations/LOCATION_ID/\ backups/BACKUP_ID --destination-database=DATABASE_ID + To restore to a CMEK-enabled database. + + $ gcloud beta firestore databases restore \ + --source-backup=projects/PROJECT_ID/locations/LOCATION_ID/\ + backups/BACKUP_ID --destination-database=DATABASE_ID \ + --encryption-type=customer-managed-encryption \ + --kms-key-name=projects/PROJECT_ID/locations/LOCATION_ID/\ + keyRings/KEY_RING_ID/cryptoKeys/CRYPTO_KEY_ID + REQUIRED FLAGS --destination-database=DESTINATION_DATABASE Destination database to restore to. Destination database will be @@ -41,6 +52,55 @@ REQUIRED FLAGS --source-backup=projects/PROJECT_ID/locations/us-east1/backups/\ cf9f748a-7980-4703-b1a1-d1ffff591db0 +OPTIONAL FLAGS + The encryption configuration of the new database being created from the + backup. If not specified, the same encryption settings as the backup will + be used. + + To create a CMEK-enabled database: + + $ gcloud beta firestore databases restore \ + --encryption-type=customer-managed-encryption \ + --kms-key-name=projects/PROJECT_ID/locations/LOCATION_ID/\ + keyRings/KEY_RING_ID/cryptoKeys/CRYPTO_KEY_ID + + To create a Google-default-encrypted database: + + $ gcloud beta firestore databases restore \ + --encryption-type=google-default-encryption + + To create a database using the same encryption settings as the backup: + + $ gcloud beta firestore databases restore \ + --encryption-type=use-source-encryption + + --encryption-type=ENCRYPTION_TYPE + The encryption type of the destination database. ENCRYPTION_TYPE must + be one of: use-source-encryption, customer-managed-encryption, + google-default-encryption. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --kms-key-name=KMS_KEY_NAME + The resource ID of a Cloud KMS key. If set, the database created will + be a Customer-Managed Encryption Key (CMEK) database encrypted with + this key. This feature is allowlist only in initial launch. + + Only a key in the same location as this database is allowed to be + used for encryption. For Firestore's nam5 multi-region, this + corresponds to Cloud KMS location us. For Firestore's eur3 + multi-region, this corresponds to Cloud KMS location europe. See + https://cloud.google.com/kms/docs/locations. + + This value should be the KMS key resource ID in the format of + projects/{project_id}/locations/{kms_location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}. + How to retrieve this resource ID is listed at + https://cloud.google.com/kms/docs/getting-resource-ids#getting_the_id_for_a_key_and_version. + + This flag must only be specified when encryption-type is + customer-managed-encryption. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/beta/iap/web/add-iam-policy-binding b/gcloud/beta/iap/web/add-iam-policy-binding index a566a3d27..248aa8fa9 100644 --- a/gcloud/beta/iap/web/add-iam-policy-binding +++ b/gcloud/beta/iap/web/add-iam-policy-binding @@ -5,8 +5,8 @@ NAME SYNOPSIS gcloud beta iap web add-iam-policy-binding --member=PRINCIPAL --role=ROLE [--condition=[KEY=VALUE,...] | --condition-from-file=PATH_TO_FILE] - [--resource-type=RESOURCE_TYPE - : --region=REGION --service=SERVICE --version=VERSION] + [--region=REGION + --resource-type=RESOURCE_TYPE --service=SERVICE --version=VERSION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -115,15 +115,15 @@ OPTIONAL FLAGS available fields, see the help for --condition. Use a full or relative path to a local file containing the value of condition. - --resource-type=RESOURCE_TYPE - Resource type of the IAP resource. RESOURCE_TYPE must be one of: - app-engine, backend-services. - --region=REGION Region name. Should only be specified with --resource-type=backend-services if it is a regional scoped. Not applicable for global scoped backend services. + --resource-type=RESOURCE_TYPE + Resource type of the IAP resource. RESOURCE_TYPE must be one of: + app-engine, backend-services. + --service=SERVICE Service name. diff --git a/gcloud/beta/iap/web/get-iam-policy b/gcloud/beta/iap/web/get-iam-policy index b605d7249..907d1ae37 100644 --- a/gcloud/beta/iap/web/get-iam-policy +++ b/gcloud/beta/iap/web/get-iam-policy @@ -3,8 +3,8 @@ NAME SYNOPSIS gcloud beta iap web get-iam-policy - [--resource-type=RESOURCE_TYPE - : --region=REGION --service=SERVICE --version=VERSION] + [--region=REGION + --resource-type=RESOURCE_TYPE --service=SERVICE --version=VERSION] [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] @@ -63,15 +63,15 @@ EXAMPLES --region=REGION FLAGS - --resource-type=RESOURCE_TYPE - Resource type of the IAP resource. RESOURCE_TYPE must be one of: - app-engine, backend-services. - --region=REGION Region name. Should only be specified with --resource-type=backend-services if it is a regional scoped. Not applicable for global scoped backend services. + --resource-type=RESOURCE_TYPE + Resource type of the IAP resource. RESOURCE_TYPE must be one of: + app-engine, backend-services. + --service=SERVICE Service name. diff --git a/gcloud/beta/iap/web/remove-iam-policy-binding b/gcloud/beta/iap/web/remove-iam-policy-binding index 794f573cf..7524d922f 100644 --- a/gcloud/beta/iap/web/remove-iam-policy-binding +++ b/gcloud/beta/iap/web/remove-iam-policy-binding @@ -7,8 +7,8 @@ SYNOPSIS --role=ROLE [--all | --condition=[KEY=VALUE,...] | --condition-from-file=PATH_TO_FILE] - [--resource-type=RESOURCE_TYPE - : --region=REGION --service=SERVICE --version=VERSION] + [--region=REGION + --resource-type=RESOURCE_TYPE --service=SERVICE --version=VERSION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -132,15 +132,15 @@ OPTIONAL FLAGS available fields, see the help for --condition. Use a full or relative path to a local file containing the value of condition. - --resource-type=RESOURCE_TYPE - Resource type of the IAP resource. RESOURCE_TYPE must be one of: - app-engine, backend-services. - --region=REGION Region name. Should only be specified with --resource-type=backend-services if it is a regional scoped. Not applicable for global scoped backend services. + --resource-type=RESOURCE_TYPE + Resource type of the IAP resource. RESOURCE_TYPE must be one of: + app-engine, backend-services. + --service=SERVICE Service name. diff --git a/gcloud/beta/iap/web/set-iam-policy b/gcloud/beta/iap/web/set-iam-policy index e6ecd22ed..9b22d82ba 100644 --- a/gcloud/beta/iap/web/set-iam-policy +++ b/gcloud/beta/iap/web/set-iam-policy @@ -4,8 +4,8 @@ NAME SYNOPSIS gcloud beta iap web set-iam-policy POLICY_FILE - [--resource-type=RESOURCE_TYPE - : --region=REGION --service=SERVICE --version=VERSION] + [--region=REGION + --resource-type=RESOURCE_TYPE --service=SERVICE --version=VERSION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -72,15 +72,15 @@ POSITIONAL ARGUMENTS JSON or YAML file containing the IAM policy. FLAGS - --resource-type=RESOURCE_TYPE - Resource type of the IAP resource. RESOURCE_TYPE must be one of: - app-engine, backend-services. - --region=REGION Region name. Should only be specified with --resource-type=backend-services if it is a regional scoped. Not applicable for global scoped backend services. + --resource-type=RESOURCE_TYPE + Resource type of the IAP resource. RESOURCE_TYPE must be one of: + app-engine, backend-services. + --service=SERVICE Service name. diff --git a/gcloud/beta/netapp/volumes/create b/gcloud/beta/netapp/volumes/create index 39fa5deb2..ba668a8ba 100644 --- a/gcloud/beta/netapp/volumes/create +++ b/gcloud/beta/netapp/volumes/create @@ -17,8 +17,13 @@ SYNOPSIS [kerberos-5i-read-write=KERBEROS-5I-READ-WRITE], [kerberos-5p-read-only=KERBEROS-5P-READ-ONLY], [kerberos-5p-read-write=KERBEROS-5P-READ-WRITE], - [nfsv3=NFSV3],[nfsv4=NFSV4]] [--labels=[KEY=VALUE,...]] - [--large-capacity=LARGE_CAPACITY] + [nfsv3=NFSV3],[nfsv4=NFSV4]] + [--hybrid-replication-parameters=[cluster-location=CLUSTER-LOCATION], + [description=DESCRIPTION],[labels=LABELS], + [peer-cluster-name=PEER-CLUSTER-NAME], + [peer-ip-addresses=PEER-IP-ADDRESSES],[peer-svm-name=PEER-SVM-NAME], + [peer-volume-name=PEER-VOLUME-NAME],[replication=REPLICATION]] + [--labels=[KEY=VALUE,...]] [--large-capacity=LARGE_CAPACITY] [--multiple-endpoints=MULTIPLE_ENDPOINTS] [--restricted-actions=RESTRICTED_ACTION,[...]] [--security-style=SECURITY_STYLE; default="SECURITY_STYLE_UNSPECIFIED"] @@ -164,6 +169,30 @@ OPTIONAL FLAGS kerberos-5p-read-only=KERBEROS_5P_READ_ONLY, kerberos-5p-read-write=KERBEROS_5P_READ_WRITE + --hybrid-replication-parameters=[cluster-location=CLUSTER-LOCATION],[description=DESCRIPTION],[labels=LABELS],[peer-cluster-name=PEER-CLUSTER-NAME],[peer-ip-addresses=PEER-IP-ADDRESSES],[peer-svm-name=PEER-SVM-NAME],[peer-volume-name=PEER-VOLUME-NAME],[replication=REPLICATION] + Hybrid Replication Parameters contains hybrid replication parameters on + a volume. + + Hybrid Replication Parameters will have the following format + --hybrid-replication-parameters=replication=REPLICATION, + peer-volume-name=PEER_VOLUME_NAME, + peer-cluster-name=PEER_CLUSTER_NAME, + peer-svm-name=PEER_SVM_NAME, + peer-ip-addresses=[PEER-IP-ADDRESS1#PEER-IP-ADDRESS2#...], + cluster-location=CLUSTER_LOCATION, + description=DESCRIPTION, + labels=[KEY1:VALUE1#KEY2:VALUE2#...] + + replication is the desired name for the replication of the volume, + peer-volume-name is the name of the user's local source volume, + peer-cluster-name is the name of the user's local source cluster, + peer-svm-name is the name of the user's local source vserver svm, + peer-ip-addresses is a ampersand-separated(#) list of ip addresses, + cluster-location is the name of the source cluster location, + description is the description of the replication and labels is an + hashtag-separated(#) key value pair of labels with key and value + separated by colon(:) for the replication. + --labels=[KEY=VALUE,...] List of label KEY=VALUE pairs to add. diff --git a/gcloud/beta/workstations/configs/create b/gcloud/beta/workstations/configs/create index 740cd1658..3688a9c8d 100644 --- a/gcloud/beta/workstations/configs/create +++ b/gcloud/beta/workstations/configs/create @@ -17,7 +17,7 @@ SYNOPSIS [--disable-public-ip-addresses] [--disable-ssh-to-vm] [--disable-tcp-connections] [--enable-audit-agent] [--enable-confidential-compute] [--enable-nested-virtualization] - [--ephemeral-directory=[PROPERTY=VALUE,...]] + [--enable-ssh-to-vm] [--ephemeral-directory=[PROPERTY=VALUE,...]] [--idle-timeout=IDLE_TIMEOUT; default=7200] [--labels=[LABELS,...]] [--machine-type=MACHINE_TYPE; default="e2-standard-4"] [--network-tags=[NETWORK_TAGS,...]] @@ -234,8 +234,11 @@ FLAGS address. --disable-ssh-to-vm - Default value is False. If set, workstations disable SSH connections to - the root VM. + (DEPRECATED) Default value is False. If set, workstations disable SSH + connections to the root VM. + + The --disable-ssh-to-vm option is deprecated; use --enable-ssh-to-vm + instead. --disable-tcp-connections Default value is false. If set, workstations don't allow plain TCP @@ -254,6 +257,10 @@ FLAGS Default value is false. If set, instances will have nested virtualization enabled. + --enable-ssh-to-vm + Default value is False. If set, workstations enable SSH connections to + the root VM. + --ephemeral-directory=[PROPERTY=VALUE,...] Ephemeral directory which won't persist across workstation sessions. diff --git a/gcloud/components/help b/gcloud/components/help index 5a89f5501..b7038440d 100644 --- a/gcloud/components/help +++ b/gcloud/components/help @@ -66,9 +66,5 @@ COMMANDS remove Remove one or more installed components. - restore - (DEPRECATED) Restore the Google Cloud CLI installation to its previous - state. - update Update all of your installed components to the latest version. diff --git a/gcloud/components/restore b/gcloud/components/restore deleted file mode 100644 index 7e40dc788..000000000 --- a/gcloud/components/restore +++ /dev/null @@ -1,36 +0,0 @@ -NAME - gcloud components restore - restore the Google Cloud CLI installation to - its previous state - -SYNOPSIS - gcloud components restore [GCLOUD_WIDE_FLAG ...] - -DESCRIPTION - (DEPRECATED) Restore the Google Cloud CLI installation to its previous - state. - - This command is deprecated and will be modified in gcloud v468.0.0. To - restore your installation to a previous version, run "gcloud components - update --version=" or install the previous version - directly from https://cloud.google.com/sdk/docs/install. - - This is an undo operation, which restores the Google Cloud CLI installation - on the local workstation to the state it was in just before the most recent - gcloud components update, gcloud components remove, or gcloud components - install command. Only the state before the most recent such state is - remembered, so it is impossible to restore the state that existed before - the two most recent update commands, for example. A restore command does - not undo a previous restore command. - -EXAMPLES - To restore Google Cloud CLI installation to its previous state, run: - - $ gcloud components restore - -GCLOUD WIDE FLAGS - These flags are available to all commands: --access-token-file, --account, - --billing-project, --configuration, --flags-file, --flatten, --format, - --help, --impersonate-service-account, --log-http, --project, --quiet, - --trace-token, --user-output-enabled, --verbosity. - - Run $ gcloud help for details. diff --git a/gcloud/dataflow/flex-template/build b/gcloud/dataflow/flex-template/build index 1d95ae6a9..a931e435d 100644 --- a/gcloud/dataflow/flex-template/build +++ b/gcloud/dataflow/flex-template/build @@ -85,11 +85,11 @@ REQUIRED FLAGS --flex-template-base-image=FLEX_TEMPLATE_BASE_IMAGE Flex template base image to be used while building the container - image. Allowed choices are JAVA8, JAVA11, JAVA17 or gcr.io path of - the specific version of the base image. For JAVA8, JAVA11 and JAVA17 - option, we use the latest base image version to build the container. - You can also provide a specific version from this link - https://gcr.io/dataflow-templates-base/ + image. Allowed choices are JAVA8, JAVA11, JAVA17, JAVA21 or gcr.io + path of the specific version of the base image. For JAVA8, JAVA11, + JAVA17 and JAVA21 option, we use the latest base image version to + build the container. You can also provide a specific version from + this link https://gcr.io/dataflow-templates-base/ This flag argument must be specified if any of the other arguments in this group are specified. diff --git a/gcloud/filestore/instances/create b/gcloud/filestore/instances/create index cf941fe9e..4151bb65c 100644 --- a/gcloud/filestore/instances/create +++ b/gcloud/filestore/instances/create @@ -9,9 +9,7 @@ SYNOPSIS --network=[connect-mode=CONNECT-MODE], [name=NAME],[reserved-ip-range=RESERVED-IP-RANGE] [--async] [--description=DESCRIPTION] [--labels=[KEY=VALUE,...]] - [--location=LOCATION] - [--performance=[max-read-iops=MAX-READ-IOPS], - [max-read-iops-per-tb=MAX-READ-IOPS-PER-TB]] [--region=REGION] + [--location=LOCATION] [--region=REGION] [--source-instance=SOURCE_INSTANCE] [--tier=TIER; default="BASIC_HDD"] [--kms-key=KMS_KEY : --kms-keyring=KMS_KEYRING --kms-location=KMS_LOCATION --kms-project=KMS_PROJECT] @@ -209,43 +207,6 @@ OPTIONAL FLAGS --location=LOCATION Location of the Cloud Filestore instance/operation. - --performance=[max-read-iops=MAX-READ-IOPS],[max-read-iops-per-tb=MAX-READ-IOPS-PER-TB] - Performance configuration for the instance. This flag is used to - configure the read IOPS provisioned for the instance. The instance's - write IOPS and read/write throughputs will be derived from the - configured read IOPS. For more information about the derived - performance limits and default performance see: - https://cloud.google.com/filestore/docs/performance. Must be one of: - - max-read-iops - The number of IOPS to provision for the instance. - MAX-READ-IOPS must be in multiple of 1000 and in the supported IOPS - range for the current capacity of the instance. - For more details, see: https://cloud.google.com/filestore/docs/performance. - - max-read-iops-per-tb - Is used for setting the max IOPS of the instance by - specifying the IOPS per TB. When this parameter is used, the - max IOPS are derived from the instance capacity: - The instance max IOPS will be calculated by multiplying the - capacity of the instance (TB) by MAX-READ-IOPS-PER-TB, and rounding - to the nearest 1000. The max IOPS will be changed - dynamically based on the instance capacity. - MAX-READ-IOPS-PER-TB must be in the supported range of the instance. - For more details, see: https://cloud.google.com/filestore/docs/performance. - - Examples: - - Configure an instance with max-read-iops performance: - - $ gcloud filestore instances create example-cluster \ - --performance=max-read-iops=17000 - - Configure an instance with max-read-iops-per-tb performance: - - $ gcloud filestore instances create example-cluster \ - --performance=max-read-iops-per-tb=17000 - --region=REGION Region of the Cloud Filestore instance. diff --git a/gcloud/filestore/instances/update b/gcloud/filestore/instances/update index f9f81b056..e65a1efd6 100644 --- a/gcloud/filestore/instances/update +++ b/gcloud/filestore/instances/update @@ -6,9 +6,6 @@ SYNOPSIS [--description=DESCRIPTION] [--location=LOCATION] [--region=REGION] [--update-labels=[KEY=VALUE,...]] [--clear-labels | --remove-labels=[KEY,...]] - [--clear-performance - | --performance=[max-read-iops=MAX-READ-IOPS], - [max-read-iops-per-tb=MAX-READ-IOPS-PER-TB]] [[--file-share=[capacity=CAPACITY], [name=NAME],[nfs-export-options=NFS-EXPORT-OPTIONS] : --clear-nfs-export-options]] [GCLOUD_WIDE_FLAG ...] @@ -137,54 +134,6 @@ FLAGS silently ignored. If --update-labels is also specified then --update-labels is applied first. - At most one of these can be specified: - - --clear-performance - Clear the performance configuration of the instance and set it to the - default performance mode. In the default performance mode, the - instance performance will be automatically adjusted based on its - capacity (changes in the instance's capacity will automatically - adjust the instance's performance accordingly). For more information - about the default performance mode see: - https://cloud.google.com/filestore/docs/performance. - - --performance=[max-read-iops=MAX-READ-IOPS],[max-read-iops-per-tb=MAX-READ-IOPS-PER-TB] - Performance configuration for the instance. This flag is used to - configure the read IOPS provisioned for the instance. The instance's - write IOPS and read/write throughputs will be derived from the - configured read IOPS. For more information about the derived - performance limits and default performance see: - https://cloud.google.com/filestore/docs/performance. Must be one of: - - max-read-iops - The number of IOPS to provision for the instance. - MAX-READ-IOPS must be in multiple of 1000 and in the supported IOPS - range for the current capacity of the instance. - For more details, see: https://cloud.google.com/filestore/docs/performance. - - max-read-iops-per-tb - Is used for setting the max IOPS of the instance by - specifying the IOPS per TB. When this parameter is used, the - max IOPS are derived from the instance capacity: - The instance max IOPS will be calculated by multiplying the - capacity of the instance (TB) by MAX-READ-IOPS-PER-TB, and rounding - to the nearest 1000. The max IOPS will be changed - dynamically based on the instance capacity. - MAX-READ-IOPS-PER-TB must be in the supported range of the instance. - For more details, see: https://cloud.google.com/filestore/docs/performance. - - Examples: - - Configure an instance with max-read-iops performance: - - $ gcloud filestore instances update example-cluster \ - --performance=max-read-iops=17000 - - Configure an instance with max-read-iops-per-tb performance: - - $ gcloud filestore instances update example-cluster \ - --performance=max-read-iops-per-tb=17000 - Parameters for file-share. --file-share=[capacity=CAPACITY],[name=NAME],[nfs-export-options=NFS-EXPORT-OPTIONS] diff --git a/gcloud/firestore/databases/restore b/gcloud/firestore/databases/restore index 4cde3acca..33042a66a 100644 --- a/gcloud/firestore/databases/restore +++ b/gcloud/firestore/databases/restore @@ -5,7 +5,9 @@ NAME SYNOPSIS gcloud firestore databases restore --destination-database=DESTINATION_DATABASE - --source-backup=SOURCE_BACKUP [GCLOUD_WIDE_FLAG ...] + --source-backup=SOURCE_BACKUP + [--encryption-type=ENCRYPTION_TYPE : --kms-key-name=KMS_KEY_NAME] + [GCLOUD_WIDE_FLAG ...] EXAMPLES To restore a database from a backup. @@ -14,6 +16,15 @@ EXAMPLES --source-backup=projects/PROJECT_ID/locations/LOCATION_ID/\ backups/BACKUP_ID --destination-database=DATABASE_ID + To restore to a CMEK-enabled database. + + $ gcloud firestore databases restore \ + --source-backup=projects/PROJECT_ID/locations/LOCATION_ID/\ + backups/BACKUP_ID --destination-database=DATABASE_ID \ + --encryption-type=customer-managed-encryption \ + --kms-key-name=projects/PROJECT_ID/locations/LOCATION_ID/\ + keyRings/KEY_RING_ID/cryptoKeys/CRYPTO_KEY_ID + REQUIRED FLAGS --destination-database=DESTINATION_DATABASE Destination database to restore to. Destination database will be @@ -40,6 +51,55 @@ REQUIRED FLAGS --source-backup=projects/PROJECT_ID/locations/us-east1/backups/\ cf9f748a-7980-4703-b1a1-d1ffff591db0 +OPTIONAL FLAGS + The encryption configuration of the new database being created from the + backup. If not specified, the same encryption settings as the backup will + be used. + + To create a CMEK-enabled database: + + $ gcloud firestore databases restore \ + --encryption-type=customer-managed-encryption \ + --kms-key-name=projects/PROJECT_ID/locations/LOCATION_ID/\ + keyRings/KEY_RING_ID/cryptoKeys/CRYPTO_KEY_ID + + To create a Google-default-encrypted database: + + $ gcloud firestore databases restore \ + --encryption-type=google-default-encryption + + To create a database using the same encryption settings as the backup: + + $ gcloud firestore databases restore \ + --encryption-type=use-source-encryption + + --encryption-type=ENCRYPTION_TYPE + The encryption type of the destination database. ENCRYPTION_TYPE must + be one of: use-source-encryption, customer-managed-encryption, + google-default-encryption. + + This flag argument must be specified if any of the other arguments in + this group are specified. + + --kms-key-name=KMS_KEY_NAME + The resource ID of a Cloud KMS key. If set, the database created will + be a Customer-Managed Encryption Key (CMEK) database encrypted with + this key. This feature is allowlist only in initial launch. + + Only a key in the same location as this database is allowed to be + used for encryption. For Firestore's nam5 multi-region, this + corresponds to Cloud KMS location us. For Firestore's eur3 + multi-region, this corresponds to Cloud KMS location europe. See + https://cloud.google.com/kms/docs/locations. + + This value should be the KMS key resource ID in the format of + projects/{project_id}/locations/{kms_location}/keyRings/{key_ring}/cryptoKeys/{crypto_key}. + How to retrieve this resource ID is listed at + https://cloud.google.com/kms/docs/getting-resource-ids#getting_the_id_for_a_key_and_version. + + This flag must only be specified when encryption-type is + customer-managed-encryption. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/iap/web/add-iam-policy-binding b/gcloud/iap/web/add-iam-policy-binding index f909348a4..3a426fb89 100644 --- a/gcloud/iap/web/add-iam-policy-binding +++ b/gcloud/iap/web/add-iam-policy-binding @@ -5,8 +5,8 @@ NAME SYNOPSIS gcloud iap web add-iam-policy-binding --member=PRINCIPAL --role=ROLE [--condition=[KEY=VALUE,...] | --condition-from-file=PATH_TO_FILE] - [--resource-type=RESOURCE_TYPE - : --region=REGION --service=SERVICE --version=VERSION] + [--region=REGION + --resource-type=RESOURCE_TYPE --service=SERVICE --version=VERSION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -114,15 +114,15 @@ OPTIONAL FLAGS available fields, see the help for --condition. Use a full or relative path to a local file containing the value of condition. - --resource-type=RESOURCE_TYPE - Resource type of the IAP resource. RESOURCE_TYPE must be one of: - app-engine, backend-services. - --region=REGION Region name. Should only be specified with --resource-type=backend-services if it is a regional scoped. Not applicable for global scoped backend services. + --resource-type=RESOURCE_TYPE + Resource type of the IAP resource. RESOURCE_TYPE must be one of: + app-engine, backend-services. + --service=SERVICE Service name. diff --git a/gcloud/iap/web/get-iam-policy b/gcloud/iap/web/get-iam-policy index e4c16e072..0d0c0f189 100644 --- a/gcloud/iap/web/get-iam-policy +++ b/gcloud/iap/web/get-iam-policy @@ -3,8 +3,8 @@ NAME SYNOPSIS gcloud iap web get-iam-policy - [--resource-type=RESOURCE_TYPE - : --region=REGION --service=SERVICE --version=VERSION] + [--region=REGION + --resource-type=RESOURCE_TYPE --service=SERVICE --version=VERSION] [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] @@ -61,15 +61,15 @@ EXAMPLES --service=SERVICE_ID --region=REGION FLAGS - --resource-type=RESOURCE_TYPE - Resource type of the IAP resource. RESOURCE_TYPE must be one of: - app-engine, backend-services. - --region=REGION Region name. Should only be specified with --resource-type=backend-services if it is a regional scoped. Not applicable for global scoped backend services. + --resource-type=RESOURCE_TYPE + Resource type of the IAP resource. RESOURCE_TYPE must be one of: + app-engine, backend-services. + --service=SERVICE Service name. diff --git a/gcloud/iap/web/remove-iam-policy-binding b/gcloud/iap/web/remove-iam-policy-binding index f7dc4e0cf..e507a5f95 100644 --- a/gcloud/iap/web/remove-iam-policy-binding +++ b/gcloud/iap/web/remove-iam-policy-binding @@ -6,8 +6,8 @@ SYNOPSIS gcloud iap web remove-iam-policy-binding --member=PRINCIPAL --role=ROLE [--all | --condition=[KEY=VALUE,...] | --condition-from-file=PATH_TO_FILE] - [--resource-type=RESOURCE_TYPE - : --region=REGION --service=SERVICE --version=VERSION] + [--region=REGION + --resource-type=RESOURCE_TYPE --service=SERVICE --version=VERSION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -131,15 +131,15 @@ OPTIONAL FLAGS available fields, see the help for --condition. Use a full or relative path to a local file containing the value of condition. - --resource-type=RESOURCE_TYPE - Resource type of the IAP resource. RESOURCE_TYPE must be one of: - app-engine, backend-services. - --region=REGION Region name. Should only be specified with --resource-type=backend-services if it is a regional scoped. Not applicable for global scoped backend services. + --resource-type=RESOURCE_TYPE + Resource type of the IAP resource. RESOURCE_TYPE must be one of: + app-engine, backend-services. + --service=SERVICE Service name. diff --git a/gcloud/iap/web/set-iam-policy b/gcloud/iap/web/set-iam-policy index f2dc85ced..fcd5bc107 100644 --- a/gcloud/iap/web/set-iam-policy +++ b/gcloud/iap/web/set-iam-policy @@ -3,8 +3,8 @@ NAME SYNOPSIS gcloud iap web set-iam-policy POLICY_FILE - [--resource-type=RESOURCE_TYPE - : --region=REGION --service=SERVICE --version=VERSION] + [--region=REGION + --resource-type=RESOURCE_TYPE --service=SERVICE --version=VERSION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -71,15 +71,15 @@ POSITIONAL ARGUMENTS JSON or YAML file containing the IAM policy. FLAGS - --resource-type=RESOURCE_TYPE - Resource type of the IAP resource. RESOURCE_TYPE must be one of: - app-engine, backend-services. - --region=REGION Region name. Should only be specified with --resource-type=backend-services if it is a regional scoped. Not applicable for global scoped backend services. + --resource-type=RESOURCE_TYPE + Resource type of the IAP resource. RESOURCE_TYPE must be one of: + app-engine, backend-services. + --service=SERVICE Service name. diff --git a/gcloud/netapp/volumes/create b/gcloud/netapp/volumes/create index 22b7581e0..0579d0f7e 100644 --- a/gcloud/netapp/volumes/create +++ b/gcloud/netapp/volumes/create @@ -17,8 +17,13 @@ SYNOPSIS [kerberos-5i-read-write=KERBEROS-5I-READ-WRITE], [kerberos-5p-read-only=KERBEROS-5P-READ-ONLY], [kerberos-5p-read-write=KERBEROS-5P-READ-WRITE], - [nfsv3=NFSV3],[nfsv4=NFSV4]] [--labels=[KEY=VALUE,...]] - [--large-capacity=LARGE_CAPACITY] + [nfsv3=NFSV3],[nfsv4=NFSV4]] + [--hybrid-replication-parameters=[cluster-location=CLUSTER-LOCATION], + [description=DESCRIPTION],[labels=LABELS], + [peer-cluster-name=PEER-CLUSTER-NAME], + [peer-ip-addresses=PEER-IP-ADDRESSES],[peer-svm-name=PEER-SVM-NAME], + [peer-volume-name=PEER-VOLUME-NAME],[replication=REPLICATION]] + [--labels=[KEY=VALUE,...]] [--large-capacity=LARGE_CAPACITY] [--multiple-endpoints=MULTIPLE_ENDPOINTS] [--restricted-actions=RESTRICTED_ACTION,[...]] [--security-style=SECURITY_STYLE; default="SECURITY_STYLE_UNSPECIFIED"] @@ -163,6 +168,30 @@ OPTIONAL FLAGS kerberos-5p-read-only=KERBEROS_5P_READ_ONLY, kerberos-5p-read-write=KERBEROS_5P_READ_WRITE + --hybrid-replication-parameters=[cluster-location=CLUSTER-LOCATION],[description=DESCRIPTION],[labels=LABELS],[peer-cluster-name=PEER-CLUSTER-NAME],[peer-ip-addresses=PEER-IP-ADDRESSES],[peer-svm-name=PEER-SVM-NAME],[peer-volume-name=PEER-VOLUME-NAME],[replication=REPLICATION] + Hybrid Replication Parameters contains hybrid replication parameters on + a volume. + + Hybrid Replication Parameters will have the following format + --hybrid-replication-parameters=replication=REPLICATION, + peer-volume-name=PEER_VOLUME_NAME, + peer-cluster-name=PEER_CLUSTER_NAME, + peer-svm-name=PEER_SVM_NAME, + peer-ip-addresses=[PEER-IP-ADDRESS1#PEER-IP-ADDRESS2#...], + cluster-location=CLUSTER_LOCATION, + description=DESCRIPTION, + labels=[KEY1:VALUE1#KEY2:VALUE2#...] + + replication is the desired name for the replication of the volume, + peer-volume-name is the name of the user's local source volume, + peer-cluster-name is the name of the user's local source cluster, + peer-svm-name is the name of the user's local source vserver svm, + peer-ip-addresses is a ampersand-separated(#) list of ip addresses, + cluster-location is the name of the source cluster location, + description is the description of the replication and labels is an + hashtag-separated(#) key value pair of labels with key and value + separated by colon(:) for the replication. + --labels=[KEY=VALUE,...] List of label KEY=VALUE pairs to add. diff --git a/gcloud/storage/objects/list b/gcloud/storage/objects/list index 534d03884..89cfbe6a8 100644 --- a/gcloud/storage/objects/list +++ b/gcloud/storage/objects/list @@ -17,10 +17,15 @@ DESCRIPTION gs://b* fails because it matches a list of buckets. EXAMPLES - List all objects in bucket my-bucket: + List all objects in bucket my-bucket within current directory level: $ gcloud storage objects list gs://my-bucket + List all objects across nested directories using wildcards + (https://cloud.google.com/storage/docs/wildcards): + + $ gcloud storage objects list gs://my-bucket/** + List all objects in bucket beginning with ``o'': $ gcloud storage objects list gs://my-bucket/o* diff --git a/gcloud/workstations/configs/create b/gcloud/workstations/configs/create index f9e187e89..afef4c192 100644 --- a/gcloud/workstations/configs/create +++ b/gcloud/workstations/configs/create @@ -14,7 +14,7 @@ SYNOPSIS [--disable-public-ip-addresses] [--disable-ssh-to-vm] [--disable-tcp-connections] [--enable-audit-agent] [--enable-confidential-compute] [--enable-nested-virtualization] - [--ephemeral-directory=[PROPERTY=VALUE,...]] + [--enable-ssh-to-vm] [--ephemeral-directory=[PROPERTY=VALUE,...]] [--idle-timeout=IDLE_TIMEOUT; default=7200] [--labels=[LABELS,...]] [--machine-type=MACHINE_TYPE; default="e2-standard-4"] [--network-tags=[NETWORK_TAGS,...]] @@ -173,8 +173,11 @@ FLAGS address. --disable-ssh-to-vm - Default value is False. If set, workstations disable SSH connections to - the root VM. + (DEPRECATED) Default value is False. If set, workstations disable SSH + connections to the root VM. + + The --disable-ssh-to-vm option is deprecated; use --enable-ssh-to-vm + instead. --disable-tcp-connections Default value is false. If set, workstations don't allow plain TCP @@ -193,6 +196,10 @@ FLAGS Default value is false. If set, instances will have nested virtualization enabled. + --enable-ssh-to-vm + Default value is False. If set, workstations enable SSH connections to + the root VM. + --ephemeral-directory=[PROPERTY=VALUE,...] Ephemeral directory which won't persist across workstation sessions.