From 7a546ffea4b6de017d4d61f10a4d12fdd93d77a0 Mon Sep 17 00:00:00 2001 From: Automated Date: Wed, 24 Jan 2024 10:20:07 +0000 Subject: [PATCH] gcloud: Wed Jan 24 10:20:07 UTC 2024 --- gcloud/_version | 8 +- gcloud/alpha/alloydb/instances/create | 13 +- gcloud/alpha/alloydb/instances/update | 22 +- gcloud/alpha/batch/jobs/submit | 27 +- gcloud/alpha/composer/operations/list | 6 +- .../compute/instance-groups/managed/create | 12 + .../compute/instances/network-interfaces/add | 16 +- .../compute/network-endpoint-groups/update | 12 +- .../alpha/compute/service-attachments/create | 14 + .../alpha/compute/service-attachments/update | 14 + gcloud/alpha/config/get | 3 +- gcloud/alpha/config/help | 3 +- gcloud/alpha/config/list | 3 +- gcloud/alpha/config/set | 3 +- gcloud/alpha/config/unset | 3 +- gcloud/alpha/container/clusters/create | 2 +- gcloud/alpha/domains/registrations/export | 79 ------ .../registrations/get-transfer-parameters | 46 ---- gcloud/alpha/domains/registrations/help | 17 -- gcloud/alpha/domains/registrations/import | 88 ------ gcloud/alpha/domains/registrations/register | 5 +- gcloud/alpha/domains/registrations/transfer | 255 ------------------ gcloud/alpha/recaptcha/firewall-policies/help | 3 + .../alpha/recaptcha/firewall-policies/reorder | 42 +++ gcloud/alpha/scc/posture-deployments/create | 62 ++++- gcloud/alpha/scc/posture-deployments/delete | 43 ++- gcloud/alpha/scc/posture-deployments/describe | 48 +++- gcloud/alpha/scc/posture-deployments/help | 8 +- gcloud/alpha/scc/posture-deployments/list | 6 +- gcloud/alpha/scc/posture-deployments/update | 43 ++- gcloud/alpha/scc/posture-templates/describe | 42 ++- gcloud/alpha/scc/posture-templates/help | 8 +- gcloud/alpha/scc/posture-templates/list | 6 +- gcloud/alpha/scc/postures/create | 54 +++- gcloud/alpha/scc/postures/delete | 43 ++- gcloud/alpha/scc/postures/describe | 43 ++- gcloud/alpha/scc/postures/extract | 54 +++- gcloud/alpha/scc/postures/help | 4 +- gcloud/alpha/scc/postures/list | 4 +- gcloud/alpha/scc/postures/list-revisions | 47 +++- gcloud/alpha/scc/postures/update | 8 +- gcloud/alpha/sql/instances/patch | 9 +- gcloud/alpha/workstations/ssh | 16 +- gcloud/batch/jobs/submit | 32 ++- gcloud/beta/alloydb/instances/create | 13 +- gcloud/beta/alloydb/instances/update | 22 +- gcloud/beta/batch/jobs/submit | 32 ++- gcloud/beta/composer/operations/list | 6 +- gcloud/beta/compute/vpn-gateways/create | 2 + gcloud/beta/config/get | 3 +- gcloud/beta/config/help | 3 +- gcloud/beta/config/list | 3 +- gcloud/beta/config/set | 3 +- gcloud/beta/config/unset | 3 +- gcloud/beta/container/clusters/create | 2 +- gcloud/beta/domains/registrations/export | 77 ------ .../registrations/get-transfer-parameters | 44 --- gcloud/beta/domains/registrations/help | 17 -- gcloud/beta/domains/registrations/import | 86 ------ gcloud/beta/domains/registrations/register | 5 +- gcloud/beta/domains/registrations/transfer | 253 ----------------- gcloud/beta/sql/instances/patch | 9 +- gcloud/beta/workstations/ssh | 16 +- gcloud/composer/operations/list | 6 +- gcloud/compute/connect-to-serial-port | 7 +- gcloud/config/get | 3 +- gcloud/config/help | 3 +- gcloud/config/list | 3 +- gcloud/config/set | 3 +- gcloud/config/unset | 3 +- gcloud/container/clusters/create | 2 +- gcloud/domains/registrations/export | 75 ------ .../registrations/get-transfer-parameters | 42 --- gcloud/domains/registrations/help | 17 -- gcloud/domains/registrations/import | 85 ------ gcloud/domains/registrations/register | 5 +- gcloud/domains/registrations/transfer | 252 ----------------- gcloud/recaptcha/firewall-policies/help | 3 + gcloud/recaptcha/firewall-policies/reorder | 38 +++ gcloud/scc/help | 9 + gcloud/scc/posture-deployments/create | 107 ++++++++ gcloud/scc/posture-deployments/delete | 94 +++++++ gcloud/scc/posture-deployments/describe | 78 ++++++ gcloud/scc/posture-deployments/help | 40 +++ .../posture-deployments/list} | 47 ++-- gcloud/scc/posture-deployments/update | 112 ++++++++ gcloud/scc/posture-templates/describe | 87 ++++++ gcloud/scc/posture-templates/help | 30 +++ .../posture-templates/list} | 54 ++-- gcloud/scc/postures/create | 84 ++++++ gcloud/scc/postures/delete | 91 +++++++ gcloud/scc/postures/describe | 85 ++++++ gcloud/scc/postures/extract | 87 ++++++ gcloud/scc/postures/help | 44 +++ .../postures/list} | 53 ++-- gcloud/scc/postures/list-revisions | 97 +++++++ gcloud/scc/postures/update | 140 ++++++++++ gcloud/sql/instances/patch | 13 +- gcloud/workstations/ssh | 16 +- 99 files changed, 2090 insertions(+), 1700 deletions(-) delete mode 100644 gcloud/alpha/domains/registrations/export delete mode 100644 gcloud/alpha/domains/registrations/get-transfer-parameters delete mode 100644 gcloud/alpha/domains/registrations/import delete mode 100644 gcloud/alpha/domains/registrations/transfer create mode 100644 gcloud/alpha/recaptcha/firewall-policies/reorder delete mode 100644 gcloud/beta/domains/registrations/export delete mode 100644 gcloud/beta/domains/registrations/get-transfer-parameters delete mode 100644 gcloud/beta/domains/registrations/import delete mode 100644 gcloud/beta/domains/registrations/transfer delete mode 100644 gcloud/domains/registrations/export delete mode 100644 gcloud/domains/registrations/get-transfer-parameters delete mode 100644 gcloud/domains/registrations/import delete mode 100644 gcloud/domains/registrations/transfer create mode 100644 gcloud/recaptcha/firewall-policies/reorder create mode 100644 gcloud/scc/posture-deployments/create create mode 100644 gcloud/scc/posture-deployments/delete create mode 100644 gcloud/scc/posture-deployments/describe create mode 100644 gcloud/scc/posture-deployments/help rename gcloud/{domains/registrations/list-importable-domains => scc/posture-deployments/list} (60%) create mode 100644 gcloud/scc/posture-deployments/update create mode 100644 gcloud/scc/posture-templates/describe create mode 100644 gcloud/scc/posture-templates/help rename gcloud/{alpha/domains/registrations/list-importable-domains => scc/posture-templates/list} (52%) create mode 100644 gcloud/scc/postures/create create mode 100644 gcloud/scc/postures/delete create mode 100644 gcloud/scc/postures/describe create mode 100644 gcloud/scc/postures/extract create mode 100644 gcloud/scc/postures/help rename gcloud/{beta/domains/registrations/list-importable-domains => scc/postures/list} (55%) create mode 100644 gcloud/scc/postures/list-revisions create mode 100644 gcloud/scc/postures/update diff --git a/gcloud/_version b/gcloud/_version index d4f2ea179..880383042 100644 --- a/gcloud/_version +++ b/gcloud/_version @@ -1,8 +1,8 @@ -Google Cloud SDK 460.0.0 -alpha 2024.01.12 -beta 2024.01.12 +Google Cloud SDK 461.0.0 +alpha 2024.01.22 +beta 2024.01.22 bq 2.0.101 bundled-python3-unix 3.11.6 -core 2024.01.12 +core 2024.01.22 gcloud-crc32c 1.0.0 gsutil 5.27 diff --git a/gcloud/alpha/alloydb/instances/create b/gcloud/alpha/alloydb/instances/create index 88cdb6668..588fe1d24 100644 --- a/gcloud/alpha/alloydb/instances/create +++ b/gcloud/alpha/alloydb/instances/create @@ -5,7 +5,8 @@ NAME SYNOPSIS gcloud alpha alloydb instances create INSTANCE --cluster=CLUSTER --cpu-count=CPU_COUNT --instance-type=INSTANCE_TYPE --region=REGION - [--async] [--availability-type=AVAILABILITY_TYPE] + [--assign-inbound-public-ip=ASSIGN_INBOUND_PUBLIC_IP] [--async] + [--availability-type=AVAILABILITY_TYPE] [--database-flags=FLAG=VALUE,[FLAG=VALUE,...]] [--insights-config-query-plans-per-minute=INSIGHTS_CONFIG_QUERY_PLANS_PER_MINUTE] [--insights-config-query-string-length=INSIGHTS_CONFIG_QUERY_STRING_LENGTH] @@ -62,6 +63,16 @@ REQUIRED FLAGS regions at https://cloud.google.com/sql/docs/instance-locations. OPTIONAL FLAGS + --assign-inbound-public-ip=ASSIGN_INBOUND_PUBLIC_IP + Specify to enable or disable public IP on an instance. On instance + creation only disabling public IP is allowed. If you want to enable + public IP, an instance must be created with public IP disabled first, + then update the instance to enable public IP. ASSIGN_INBOUND_PUBLIC_IP + must be (only one value is supported): + + NO_PUBLIC_IP + This disables public IP on the instance. + --async Return immediately, without waiting for the operation in progress to complete. diff --git a/gcloud/alpha/alloydb/instances/update b/gcloud/alpha/alloydb/instances/update index 00a9bcb57..98928859a 100644 --- a/gcloud/alpha/alloydb/instances/update +++ b/gcloud/alpha/alloydb/instances/update @@ -4,8 +4,10 @@ NAME SYNOPSIS gcloud alpha alloydb instances update INSTANCE --cluster=CLUSTER - --region=REGION [--async] [--availability-type=AVAILABILITY_TYPE] - [--cpu-count=CPU_COUNT] [--database-flags=FLAG=VALUE,[FLAG=VALUE,...]] + --region=REGION [--assign-inbound-public-ip=ASSIGN_INBOUND_PUBLIC_IP] + [--async] [--authorized-external-networks=[AUTHORIZED_NETWORK,...]] + [--availability-type=AVAILABILITY_TYPE] [--cpu-count=CPU_COUNT] + [--database-flags=FLAG=VALUE,[FLAG=VALUE,...]] [--insights-config-query-plans-per-minute=INSIGHTS_CONFIG_QUERY_PLANS_PER_MINUTE] [--insights-config-query-string-length=INSIGHTS_CONFIG_QUERY_STRING_LENGTH] [--[no-]insights-config-record-application-tags] @@ -37,11 +39,27 @@ REQUIRED FLAGS regions at https://cloud.google.com/sql/docs/instance-locations. OPTIONAL FLAGS + --assign-inbound-public-ip=ASSIGN_INBOUND_PUBLIC_IP + Specify to enable or disable public IP on an instance. + ASSIGN_INBOUND_PUBLIC_IP must be one of: + ◆ NO_PUBLIC_IP + ▸ This disables public IP on the instance. Updating an instance to + disable public IP will clear the list of authorized networks. + ◆ ASSIGN_IPV4 + ▸ Assign an inbound public IPv4 address for the instance. public IP + is enabled. + --async Return immediately, without waiting for the operation in progress to complete. The default is True. Enabled by default, use --no-async to disable. + --authorized-external-networks=[AUTHORIZED_NETWORK,...] + Comma-separated list of authorized external networks to set on the + instance. Authorized networks should use CIDR notation (e.g. + 1.2.3.4/30). This flag is only allowed to be set for instances with + public IP enabled. + --availability-type=AVAILABILITY_TYPE Specifies level of availability. AVAILABILITY_TYPE must be one of: diff --git a/gcloud/alpha/batch/jobs/submit b/gcloud/alpha/batch/jobs/submit index f6cb31e1b..a0e9f6b57 100644 --- a/gcloud/alpha/batch/jobs/submit +++ b/gcloud/alpha/batch/jobs/submit @@ -13,22 +13,23 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) This command can fail for the following reasons: - ▪ The active account does not have permission to create the Batch job. + (ALPHA) This command creates and submits a Batch job. After you create and + submit the job, Batch automatically queues, schedules, and executes it. EXAMPLES - To submit the job with config.json or config.yaml sample config file and + To submit a job with a sample JSON configuration file (config.json) and name projects/foo/locations/us-central1/jobs/bar, run: $ gcloud alpha batch jobs submit \ projects/foo/locations/us-central1/jobs/bar --config=config.json - or + To submit a job with a sample YAML configuration file (config.yaml) and + name projects/foo/locations/us-central1/jobs/bar, run: $ gcloud alpha batch jobs submit \ projects/foo/locations/us-central1/jobs/bar --config=config.yaml - To submit the job through stdin with json job config and name + To submit a job through stdin with a sample job configuration and name projects/foo/locations/us-central1/jobs/bar, run: $ gcloud alpha batch jobs submit \ @@ -36,20 +37,24 @@ EXAMPLES then input json job config via stdin { - json job config + job config } - To submit the job through HereDoc with json job config and name + To submit a job through HereDoc with a sample job configuration and name projects/foo/locations/us-central1/jobs/bar, run: $ gcloud alpha batch jobs submit \ projects/foo/locations/us-central1/jobs/bar --config=- << EOF { - json job config + job config } EOF + For details about how to define a job's configuration using JSON, see the + projects.locations.jobs resource in the Batch API Reference. If you want to + define a job's configuration using YAML, convert the JSON syntax to YAML. + POSITIONAL ARGUMENTS Job resource - The Batch job resource. If --location not specified,the current batch/location is used. The arguments in this group can be used to @@ -86,9 +91,9 @@ REQUIRED FLAGS At least one of these must be specified: --config=CONFIG - The file path of the JSON job config JSON. It also supports direct - input from stdin with '-' or HereDoc (in shells with HereDoc support - like Bash) with '- </locations/ +EXAMPLES + Create a posture deployment named posture-deployment-foo-1 within parent + organizations/123/locations/global(i.e. a posture-deployment in + organization 123, location global, with id posture-deployment-foo-1, which + deploys posture organizations/123/locations/foo-posture with revision-id + foo-posture-revision-id): - POSTURE_DEPLOYMENT_ID - Name of the posture deployment to be created. It has to be unique for - an organization. + $ gcloud alpha scc posture-deployments create \ + organizations/123/locations/global posture-deployment-foo-1 \ + --posture-name=organizations/123/locations/global/foo-posture \ + --posture-revision-id=foo-posture-revision-id + +POSITIONAL ARGUMENTS + Posture deployment resource - The name of the posture deployment to be + created. For example + organizations//locations//postureDeployments/. + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + POSTURE_DEPLOYMENT + ID of the posture_deployment or fully qualified identifier for the + posture_deployment. + + To set the posture_deployment attribute: + ▸ provide the argument posture_deployment on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + ID of the location where the resource exists (for example, global). + + To set the location attribute: + ▸ provide the argument posture_deployment on the command line with + a fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + ID of the organization which is the parent of the resource. + + To set the organization attribute: + ▸ provide the argument posture_deployment on the command line with + a fully specified name; + ▸ provide the argument --organization on the command line. REQUIRED FLAGS --posture-name=POSTURE_NAME @@ -67,5 +105,7 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. + access allowlist. This variant is also available: + + $ gcloud scc posture-deployments create diff --git a/gcloud/alpha/scc/posture-deployments/delete b/gcloud/alpha/scc/posture-deployments/delete index 389ef3f5c..6b9a15c9e 100644 --- a/gcloud/alpha/scc/posture-deployments/delete +++ b/gcloud/alpha/scc/posture-deployments/delete @@ -3,7 +3,8 @@ NAME Command Center posture deployment SYNOPSIS - gcloud alpha scc posture-deployments delete POSTURE_DEPLOYMENT_NAME + gcloud alpha scc posture-deployments delete + (POSTURE_DEPLOYMENT : --location=LOCATION --organization=ORGANIZATION) [--async] [--etag=ETAG] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -31,9 +32,39 @@ EXAMPLES --etag=ABcdO1Rf5clu7Yhlkwgelo7Vl4tiqd7Sy5iI5SdkSVU POSITIONAL ARGUMENTS - POSTURE_DEPLOYMENT_NAME - Relative resource name of the posture deployment, like - organizations//locations//postureDeployments/. + Posture deployment resource - The posture deployment to delete. For + example + organizations//locations//postureDeployments/. + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + POSTURE_DEPLOYMENT + ID of the posture_deployment or fully qualified identifier for the + posture_deployment. + + To set the posture_deployment attribute: + ▸ provide the argument posture_deployment on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + ID of the location where the resource exists (for example, global). + + To set the location attribute: + ▸ provide the argument posture_deployment on the command line with + a fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + ID of the organization which is the parent of the resource. + + To set the organization attribute: + ▸ provide the argument posture_deployment on the command line with + a fully specified name; + ▸ provide the argument --organization on the command line. FLAGS --async @@ -61,5 +92,7 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. + access allowlist. This variant is also available: + + $ gcloud scc posture-deployments delete diff --git a/gcloud/alpha/scc/posture-deployments/describe b/gcloud/alpha/scc/posture-deployments/describe index 9ab2903ce..cabbd09d8 100644 --- a/gcloud/alpha/scc/posture-deployments/describe +++ b/gcloud/alpha/scc/posture-deployments/describe @@ -3,7 +3,8 @@ NAME Command Center posture deployment SYNOPSIS - gcloud alpha scc posture-deployments describe POSTURE_DEPLOYMENT_NAME + gcloud alpha scc posture-deployments describe + (POSTURE_DEPLOYMENT : --location=LOCATION --organization=ORGANIZATION) [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -18,10 +19,45 @@ EXAMPLES organizations/123/locations/global/postureDeployments/\ posture-deployment-foo-1 + or, run: + + $ gcloud alpha scc posture-deployments describe \ + posture-deployment-foo-1 --organization=123 --location=global + POSITIONAL ARGUMENTS - POSTURE_DEPLOYMENT_NAME - Relative resource name of the posture deployment, like - organizations//locations//postureDeployments/. + Posture deployment resource - The posture deployment to describe. For + example + organizations//locations//postureDeployments/. + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + POSTURE_DEPLOYMENT + ID of the posture_deployment or fully qualified identifier for the + posture_deployment. + + To set the posture_deployment attribute: + ▸ provide the argument posture_deployment on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + ID of the location where the resource exists (for example, global). + + To set the location attribute: + ▸ provide the argument posture_deployment on the command line with + a fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + ID of the organization which is the parent of the resource. + + To set the organization attribute: + ▸ provide the argument posture_deployment on the command line with + a fully specified name; + ▸ provide the argument --organization on the command line. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, @@ -40,5 +76,7 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. + access allowlist. This variant is also available: + + $ gcloud scc posture-deployments describe diff --git a/gcloud/alpha/scc/posture-deployments/help b/gcloud/alpha/scc/posture-deployments/help index 96f0d01d3..6c351998a 100644 --- a/gcloud/alpha/scc/posture-deployments/help +++ b/gcloud/alpha/scc/posture-deployments/help @@ -29,8 +29,8 @@ COMMANDS deployment. list - (ALPHA) List the details of Cloud Security Command Center (SCC) posture - deployments. + (ALPHA) List the details of the Cloud Security Command Center (SCC) + posture deployments. update (ALPHA) Update the given Cloud Security Command Center (SCC) posture @@ -40,5 +40,7 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. + access allowlist. This variant is also available: + + $ gcloud scc posture-deployments diff --git a/gcloud/alpha/scc/posture-deployments/list b/gcloud/alpha/scc/posture-deployments/list index 0f6e33451..8ffd11ce7 100644 --- a/gcloud/alpha/scc/posture-deployments/list +++ b/gcloud/alpha/scc/posture-deployments/list @@ -1,5 +1,5 @@ NAME - gcloud alpha scc posture-deployments list - list the details of Cloud + gcloud alpha scc posture-deployments list - list the details of the Cloud Security Command Center posture deployments SYNOPSIS @@ -67,5 +67,7 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. + access allowlist. This variant is also available: + + $ gcloud scc posture-deployments list diff --git a/gcloud/alpha/scc/posture-deployments/update b/gcloud/alpha/scc/posture-deployments/update index 666af7caa..a00866121 100644 --- a/gcloud/alpha/scc/posture-deployments/update +++ b/gcloud/alpha/scc/posture-deployments/update @@ -3,7 +3,8 @@ NAME Security Command Center posture deployment SYNOPSIS - gcloud alpha scc posture-deployments update POSTURE_DEPLOYMENT_NAME + gcloud alpha scc posture-deployments update + (POSTURE_DEPLOYMENT : --location=LOCATION --organization=ORGANIZATION) [--async] [--description=DESCRIPTION] [--etag=ETAG] [--update-mask=UPDATE_MASK] [--posture-id=POSTURE_ID --posture-revision-id=POSTURE_REVISION_ID] @@ -36,9 +37,39 @@ EXAMPLES --posture-id=foo-posture --posture-revision-id=abcdefgh POSITIONAL ARGUMENTS - POSTURE_DEPLOYMENT_NAME - Relative resource name of the posture deployment, like - organizations//locations//postureDeployments/. + Posture deployment resource - The posture deployment to update. For + example + organizations//locations//postureDeployments/. + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + POSTURE_DEPLOYMENT + ID of the posture_deployment or fully qualified identifier for the + posture_deployment. + + To set the posture_deployment attribute: + ▸ provide the argument posture_deployment on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + ID of the location where the resource exists (for example, global). + + To set the location attribute: + ▸ provide the argument posture_deployment on the command line with + a fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + ID of the organization which is the parent of the resource. + + To set the organization attribute: + ▸ provide the argument posture_deployment on the command line with + a fully specified name; + ▸ provide the argument --organization on the command line. FLAGS --async @@ -79,5 +110,7 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. + access allowlist. This variant is also available: + + $ gcloud scc posture-deployments update diff --git a/gcloud/alpha/scc/posture-templates/describe b/gcloud/alpha/scc/posture-templates/describe index a2414fc53..ba707b9a7 100644 --- a/gcloud/alpha/scc/posture-templates/describe +++ b/gcloud/alpha/scc/posture-templates/describe @@ -3,7 +3,8 @@ NAME Command Center posture template SYNOPSIS - gcloud alpha scc posture-templates describe POSTURE_TEMPLATE_NAME + gcloud alpha scc posture-templates describe + (POSTURE_TEMPLATE : --location=LOCATION --organization=ORGANIZATION) [--revision-id=REVISION_ID] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -29,9 +30,38 @@ EXAMPLES secure_by_default --revision-id=v1.0.0 POSITIONAL ARGUMENTS - POSTURE_TEMPLATE_NAME - Relative resource name of the posture template, like - organizations//locations//postureTemplates/. + Posture template resource - The posture template to describe. For example + organizations//locations//postureTemplates/. + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + POSTURE_TEMPLATE + ID of the posture_template or fully qualified identifier for the + posture_template. + + To set the posture_template attribute: + ▸ provide the argument posture_template on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + ID of the location where the resource exists (for example, global). + + To set the location attribute: + ▸ provide the argument posture_template on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + ID of the organization which is the parent of the resource. + + To set the organization attribute: + ▸ provide the argument posture_template on the command line with a + fully specified name; + ▸ provide the argument --organization on the command line. FLAGS --revision-id=REVISION_ID @@ -55,5 +85,7 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. + access allowlist. This variant is also available: + + $ gcloud scc posture-templates describe diff --git a/gcloud/alpha/scc/posture-templates/help b/gcloud/alpha/scc/posture-templates/help index 19b45ac1f..245df8ab9 100644 --- a/gcloud/alpha/scc/posture-templates/help +++ b/gcloud/alpha/scc/posture-templates/help @@ -21,12 +21,14 @@ COMMANDS template. list - (ALPHA) List the details of Cloud Security Command Center (SCC) posture - templates. + (ALPHA) List the details of the Cloud Security Command Center (SCC) + posture templates. NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. + access allowlist. This variant is also available: + + $ gcloud scc posture-templates diff --git a/gcloud/alpha/scc/posture-templates/list b/gcloud/alpha/scc/posture-templates/list index d5bbec789..74f02a65a 100644 --- a/gcloud/alpha/scc/posture-templates/list +++ b/gcloud/alpha/scc/posture-templates/list @@ -1,5 +1,5 @@ NAME - gcloud alpha scc posture-templates list - list the details of Cloud + gcloud alpha scc posture-templates list - list the details of the Cloud Security Command Center posture templates SYNOPSIS @@ -67,5 +67,7 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. + access allowlist. This variant is also available: + + $ gcloud scc posture-templates list diff --git a/gcloud/alpha/scc/postures/create b/gcloud/alpha/scc/postures/create index 2dc096b2e..6580489ce 100644 --- a/gcloud/alpha/scc/postures/create +++ b/gcloud/alpha/scc/postures/create @@ -3,7 +3,8 @@ NAME posture SYNOPSIS - gcloud alpha scc postures create POSTURE_PARENT POSTURE_ID + gcloud alpha scc postures create + (POSTURE : --location=LOCATION --organization=ORGANIZATION) --posture-from-file=POSTURE_FROM_FILE [--async] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -15,14 +16,47 @@ DESCRIPTION Created posture is returned as the response of the command. LRO operation ID is printed as the standard output. -POSITIONAL ARGUMENTS - POSTURE_PARENT - Organization where posture is to be created. Format: - organizations//locations/ +EXAMPLES + Create a posture named posture-foo-1 within parent + organizations/123/locations/global(i.e. a posture in organization 123, + location global, with id posture-foo-1): - POSTURE_ID - Name of the posture to be created. It has to be unique for an - organization. + $ gcloud alpha scc postures create \ + organizations/123/locations/global posture-foo-1 \ + --posture-from-file=posture.yaml + +POSITIONAL ARGUMENTS + Posture resource - The name of the posture to be created. For example + organizations//locations//postures/. + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + POSTURE + ID of the posture or fully qualified identifier for the posture. + + To set the posture attribute: + ▸ provide the argument posture on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + ID of the location where the resource exists (for example, global). + + To set the location attribute: + ▸ provide the argument posture on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + ID of the organization which is the parent of the resource. + + To set the organization attribute: + ▸ provide the argument posture on the command line with a fully + specified name; + ▸ provide the argument --organization on the command line. REQUIRED FLAGS --posture-from-file=POSTURE_FROM_FILE @@ -50,5 +84,7 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. + access allowlist. This variant is also available: + + $ gcloud scc postures create diff --git a/gcloud/alpha/scc/postures/delete b/gcloud/alpha/scc/postures/delete index a9b06c37d..00f2a47fb 100644 --- a/gcloud/alpha/scc/postures/delete +++ b/gcloud/alpha/scc/postures/delete @@ -3,8 +3,9 @@ NAME posture SYNOPSIS - gcloud alpha scc postures delete POSTURE_NAME [--async] [--etag=ETAG] - [GCLOUD_WIDE_FLAG ...] + gcloud alpha scc postures delete + (POSTURE : --location=LOCATION --organization=ORGANIZATION) [--async] + [--etag=ETAG] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Delete a Cloud Security Command Center (SCC) posture. @@ -31,9 +32,37 @@ EXAMPLES --etag=ABcdO1Rf5clu7Yhlkwgelo7Vl4tiqd7Sy5iI5SdkSVU POSITIONAL ARGUMENTS - POSTURE_NAME - Relative resource name of the posture, like - organizations//locations//postures/. + Posture resource - The posture to delete. For example + organizations//locations//postures/. + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + POSTURE + ID of the posture or fully qualified identifier for the posture. + + To set the posture attribute: + ▸ provide the argument posture on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + ID of the location where the resource exists (for example, global). + + To set the location attribute: + ▸ provide the argument posture on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + ID of the organization which is the parent of the resource. + + To set the organization attribute: + ▸ provide the argument posture on the command line with a fully + specified name; + ▸ provide the argument --organization on the command line. FLAGS --async @@ -61,5 +90,7 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. + access allowlist. This variant is also available: + + $ gcloud scc postures delete diff --git a/gcloud/alpha/scc/postures/describe b/gcloud/alpha/scc/postures/describe index f82a068f4..b96f03d28 100644 --- a/gcloud/alpha/scc/postures/describe +++ b/gcloud/alpha/scc/postures/describe @@ -3,8 +3,9 @@ NAME Center posture SYNOPSIS - gcloud alpha scc postures describe POSTURE_NAME [--revision-id=REVISION_ID] - [GCLOUD_WIDE_FLAG ...] + gcloud alpha scc postures describe + (POSTURE : --location=LOCATION --organization=ORGANIZATION) + [--revision-id=REVISION_ID] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Describe a Cloud Security Command Center (SCC) posture. @@ -28,9 +29,37 @@ EXAMPLES --revision-id=abcdefg POSITIONAL ARGUMENTS - POSTURE_NAME - Relative resource name of the posture, like - organizations//locations//postures/. + Posture resource - The posture to describe. For example + organizations//locations//postures/. + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + POSTURE + ID of the posture or fully qualified identifier for the posture. + + To set the posture attribute: + ▸ provide the argument posture on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + ID of the location where the resource exists (for example, global). + + To set the location attribute: + ▸ provide the argument posture on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + ID of the organization which is the parent of the resource. + + To set the organization attribute: + ▸ provide the argument posture on the command line with a fully + specified name; + ▸ provide the argument --organization on the command line. FLAGS --revision-id=REVISION_ID @@ -54,5 +83,7 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. + access allowlist. This variant is also available: + + $ gcloud scc postures describe diff --git a/gcloud/alpha/scc/postures/extract b/gcloud/alpha/scc/postures/extract index fe5aa82f1..cadf9b2df 100644 --- a/gcloud/alpha/scc/postures/extract +++ b/gcloud/alpha/scc/postures/extract @@ -3,7 +3,8 @@ NAME posture from a workload SYNOPSIS - gcloud alpha scc postures extract POSTURE_PARENT POSTURE_ID + gcloud alpha scc postures extract + (POSTURE : --location=LOCATION --organization=ORGANIZATION) --workload=WORKLOAD [--async] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -16,14 +17,47 @@ DESCRIPTION Extracted posture is returned as the response of the command. LRO operation ID is printed as the standard output. -POSITIONAL ARGUMENTS - POSTURE_PARENT - Organization where posture is to be created. Format: - organizations//locations/ +EXAMPLES + Extract a posture named posture-foo-1 within parent + organizations/123/locations/global(i.e. a posture in organization 123, + location global, with id posture-foo-1) from workload projects/456: - POSTURE_ID - Name of the posture to be created. It has to be unique for an - organization. + $ gcloud alpha scc postures extract \ + organizations/123/locations/global posture-foo-1 \ + --workload=projects/456 + +POSITIONAL ARGUMENTS + Posture resource - The name of the posture to be created. For example + organizations//locations//postures/. + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + POSTURE + ID of the posture or fully qualified identifier for the posture. + + To set the posture attribute: + ▸ provide the argument posture on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + ID of the location where the resource exists (for example, global). + + To set the location attribute: + ▸ provide the argument posture on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + ID of the organization which is the parent of the resource. + + To set the organization attribute: + ▸ provide the argument posture on the command line with a fully + specified name; + ▸ provide the argument --organization on the command line. REQUIRED FLAGS --workload=WORKLOAD @@ -53,5 +87,7 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. + access allowlist. This variant is also available: + + $ gcloud scc postures extract diff --git a/gcloud/alpha/scc/postures/help b/gcloud/alpha/scc/postures/help index 22aa40eb6..88a6c5f7d 100644 --- a/gcloud/alpha/scc/postures/help +++ b/gcloud/alpha/scc/postures/help @@ -43,5 +43,7 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. + access allowlist. This variant is also available: + + $ gcloud scc postures diff --git a/gcloud/alpha/scc/postures/list b/gcloud/alpha/scc/postures/list index 300269d3b..642d74b08 100644 --- a/gcloud/alpha/scc/postures/list +++ b/gcloud/alpha/scc/postures/list @@ -71,5 +71,7 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. + access allowlist. This variant is also available: + + $ gcloud scc postures list diff --git a/gcloud/alpha/scc/postures/list-revisions b/gcloud/alpha/scc/postures/list-revisions index 04e72a8d0..c40050ea2 100644 --- a/gcloud/alpha/scc/postures/list-revisions +++ b/gcloud/alpha/scc/postures/list-revisions @@ -3,9 +3,10 @@ NAME Security Command Center posture SYNOPSIS - gcloud alpha scc postures list-revisions POSTURE_NAME [--filter=EXPRESSION] - [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] - [GCLOUD_WIDE_FLAG ...] + gcloud alpha scc postures list-revisions + (POSTURE : --location=LOCATION --organization=ORGANIZATION) + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) List the revisions of a Cloud Security Command Center (SCC) @@ -19,10 +20,38 @@ EXAMPLES organizations/123/locations/global/postures/posture123 POSITIONAL ARGUMENTS - POSTURE_NAME - Posture name of the Cloud Security Command Center posture for listing - the revisions. Formatted as - organizations//locations//postures/ + Posture resource - The posture whose revisions are to be listed. For + example + organizations//locations//postures/. + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + POSTURE + ID of the posture or fully qualified identifier for the posture. + + To set the posture attribute: + ▸ provide the argument posture on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + ID of the location where the resource exists (for example, global). + + To set the location attribute: + ▸ provide the argument posture on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + ID of the organization which is the parent of the resource. + + To set the organization attribute: + ▸ provide the argument posture on the command line with a fully + specified name; + ▸ provide the argument --organization on the command line. LIST COMMAND FLAGS --filter=EXPRESSION @@ -67,5 +96,7 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. + access allowlist. This variant is also available: + + $ gcloud scc postures list-revisions diff --git a/gcloud/alpha/scc/postures/update b/gcloud/alpha/scc/postures/update index 9b399851a..1d3c915fa 100644 --- a/gcloud/alpha/scc/postures/update +++ b/gcloud/alpha/scc/postures/update @@ -87,7 +87,7 @@ POSITIONAL ARGUMENTS arguments in this group are specified. --location=LOCATION - The location Id. + ID of the location where the resource exists (for example, global). To set the location attribute: ▸ provide the argument posture on the command line with a fully @@ -95,7 +95,7 @@ POSITIONAL ARGUMENTS ▸ provide the argument --location on the command line. --organization=ORGANIZATION - The organization Id. + ID of the organization which is the parent of the resource. To set the organization attribute: ▸ provide the argument posture on the command line with a fully @@ -138,5 +138,7 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. + access allowlist. This variant is also available: + + $ gcloud scc postures update diff --git a/gcloud/alpha/sql/instances/patch b/gcloud/alpha/sql/instances/patch index 91d11eb80..df506621f 100644 --- a/gcloud/alpha/sql/instances/patch +++ b/gcloud/alpha/sql/instances/patch @@ -38,8 +38,8 @@ SYNOPSIS [--pricing-plan=PRICING_PLAN, -p PRICING_PLAN] [--[no-]recreate-replicas-on-primary-crash] [--remove-deny-maintenance-period] [--replication=REPLICATION] - [--[no-]require-ssl] [--ssl-mode=SSL_MODE] - [--[no-]storage-auto-increase] + [--[no-]require-ssl] [--simulate-maintenance-event] + [--ssl-mode=SSL_MODE] [--[no-]storage-auto-increase] [--storage-auto-increase-limit=STORAGE_AUTO_INCREASE_LIMIT] [--storage-size=STORAGE_SIZE] [--threads-per-core=THREADS_PER_CORE] [--tier=TIER, -t TIER] [--update-labels=[KEY=VALUE,...]] @@ -332,6 +332,11 @@ FLAGS mysqld should default to 'REQUIRE X509' for users connecting over IP. Use --require-ssl to enable and --no-require-ssl to disable. + --simulate-maintenance-event + Simulate a maintenance event without changing the version. Only + applicable to instances that support near-zero downtime planned + maintenance. + --ssl-mode=SSL_MODE Set the SSL mode of the instance. SSL_MODE must be one of: diff --git a/gcloud/alpha/workstations/ssh b/gcloud/alpha/workstations/ssh index b8d92af2e..735521a88 100644 --- a/gcloud/alpha/workstations/ssh +++ b/gcloud/alpha/workstations/ssh @@ -4,8 +4,10 @@ NAME SYNOPSIS gcloud alpha workstations ssh (WORKSTATION : --cluster=CLUSTER --config=CONFIG --region=REGION) - [--command=COMMAND] [--port=PORT; default=22] - [--user=USER; default="user"] [GCLOUD_WIDE_FLAG ...] [-- SSH_ARGS ...] + [--command=COMMAND] + [--local-host-port=LOCAL_HOST_PORT; default="localhost:0"] + [--port=PORT; default=22] [--user=USER; default="user"] + [GCLOUD_WIDE_FLAG ...] [-- SSH_ARGS ...] DESCRIPTION (ALPHA) SSH into a running workstation. @@ -89,6 +91,16 @@ FLAGS Runs the command on the target workstation and then exits. + --local-host-port=LOCAL_HOST_PORT; default="localhost:0" + LOCAL_HOST:LOCAL_PORT on which gcloud should bind and listen for + connections that should be tunneled. + + LOCAL_PORT may be omitted, in which case it is treated as 0 and an + arbitrary unused local port is chosen. The colon also may be omitted in + that case. + + If LOCAL_PORT is 0, an arbitrary unused local port is chosen. + --port=PORT; default=22 The port on the workstation to which traffic should be sent. diff --git a/gcloud/batch/jobs/submit b/gcloud/batch/jobs/submit index 09908fb3e..a7a8bbbfe 100644 --- a/gcloud/batch/jobs/submit +++ b/gcloud/batch/jobs/submit @@ -13,17 +13,23 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - This command can fail for the following reasons: - ▪ The active account does not have permission to create the Batch job. + This command creates and submits a Batch job. After you create and submit + the job, Batch automatically queues, schedules, and executes it. EXAMPLES - To submit the job with config.json sample config file and name - projects/foo/locations/us-central1/jobs/bar, run: + To submit a job with a sample JSON configuration file (config.json) and + name projects/foo/locations/us-central1/jobs/bar, run: $ gcloud batch jobs submit \ projects/foo/locations/us-central1/jobs/bar --config=config.json - To submit the job through stdin with json job config and name + To submit a job with a sample YAML configuration file (config.yaml) and + name projects/foo/locations/us-central1/jobs/bar, run: + + $ gcloud batch jobs submit \ + projects/foo/locations/us-central1/jobs/bar --config=config.yaml + + To submit a job through stdin with a sample job configuration and name projects/foo/locations/us-central1/jobs/bar, run: $ gcloud batch jobs submit \ @@ -31,20 +37,24 @@ EXAMPLES then input json job config via stdin { - json job config + job config } - To submit the job through HereDoc with json job config and name + To submit a job through HereDoc with a sample job configuration and name projects/foo/locations/us-central1/jobs/bar, run: $ gcloud batch jobs submit \ projects/foo/locations/us-central1/jobs/bar --config=- << EOF { - json job config + job config } EOF + For details about how to define a job's configuration using JSON, see the + projects.locations.jobs resource in the Batch API Reference. If you want to + define a job's configuration using YAML, convert the JSON syntax to YAML. + POSITIONAL ARGUMENTS Job resource - The Batch job resource. If --location not specified,the current batch/location is used. The arguments in this group can be used to @@ -81,9 +91,9 @@ REQUIRED FLAGS At least one of these must be specified: --config=CONFIG - The file path of the JSON job config JSON. It also supports direct - input from stdin with '-' or HereDoc (in shells with HereDoc support - like Bash) with '- </locations//postureDeployments/. + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + POSTURE_DEPLOYMENT + ID of the posture_deployment or fully qualified identifier for the + posture_deployment. + + To set the posture_deployment attribute: + ▸ provide the argument posture_deployment on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + ID of the location where the resource exists (for example, global). + + To set the location attribute: + ▸ provide the argument posture_deployment on the command line with + a fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + ID of the organization which is the parent of the resource. + + To set the organization attribute: + ▸ provide the argument posture_deployment on the command line with + a fully specified name; + ▸ provide the argument --organization on the command line. + +REQUIRED FLAGS + --posture-name=POSTURE_NAME + Posture that needs to be deployed. Format: + organizations//locations/global/postures/ + + --posture-revision-id=POSTURE_REVISION_ID + Posture revision that needs to be deployed. + + --target-resource=TARGET_RESOURCE + Name of the workload on which posture deployment is to be created. It + could be an organization, folder or a project. Possible formats: | + organizations/ | folders/ | + projects/ The above mentioned IDs need to have numeric + format. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --description=DESCRIPTION + User-provided description of the posture deployment. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the securityposture/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/security-command-center + +NOTES + This variant is also available: + + $ gcloud alpha scc posture-deployments create + diff --git a/gcloud/scc/posture-deployments/delete b/gcloud/scc/posture-deployments/delete new file mode 100644 index 000000000..5efa9a274 --- /dev/null +++ b/gcloud/scc/posture-deployments/delete @@ -0,0 +1,94 @@ +NAME + gcloud scc posture-deployments delete - delete a Cloud Security Command + Center posture deployment + +SYNOPSIS + gcloud scc posture-deployments delete + (POSTURE_DEPLOYMENT : --location=LOCATION --organization=ORGANIZATION) + [--async] [--etag=ETAG] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Delete a Cloud Security Command Center (SCC) posture deployment. + +EXAMPLES + Delete the posture deployment named + organizations/123/locations/global/postureDeployments/posture-deployment-foo + (i.e. a posture deployment in organization 123, location global, with id + posture-deployment-foo): + + $ gcloud scc posture-deployments delete \ + organizations/123/locations/global/postureDeployments/\ + posture-deployment-foo + + Delete the posture deployment named + organizations/123/locations/global/postureDeployments/posture-deployment-foo + (i.e. a posture deployment in organization 123, location global, with id + posture-deployment-foo) for the ETAG + ABcdO1Rf5clu7Yhlkwgelo7Vl4tiqd7Sy5iP5SdkSVU + + $ gcloud scc posture-deployments delete \ + organizations/123/locations/global/postureDeployments/\ + posture-deployment-foo \ + --etag=ABcdO1Rf5clu7Yhlkwgelo7Vl4tiqd7Sy5iI5SdkSVU + +POSITIONAL ARGUMENTS + Posture deployment resource - The posture deployment to delete. For + example + organizations//locations//postureDeployments/. + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + POSTURE_DEPLOYMENT + ID of the posture_deployment or fully qualified identifier for the + posture_deployment. + + To set the posture_deployment attribute: + ▸ provide the argument posture_deployment on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + ID of the location where the resource exists (for example, global). + + To set the location attribute: + ▸ provide the argument posture_deployment on the command line with + a fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + ID of the organization which is the parent of the resource. + + To set the organization attribute: + ▸ provide the argument posture_deployment on the command line with + a fully specified name; + ▸ provide the argument --organization on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --etag=ETAG + Etag is an optional flag. If the provided Etag doesn't match the server + generated Etag, the delete operation won't proceed. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the securityposture/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/security-command-center + +NOTES + This variant is also available: + + $ gcloud alpha scc posture-deployments delete + diff --git a/gcloud/scc/posture-deployments/describe b/gcloud/scc/posture-deployments/describe new file mode 100644 index 000000000..aa9901985 --- /dev/null +++ b/gcloud/scc/posture-deployments/describe @@ -0,0 +1,78 @@ +NAME + gcloud scc posture-deployments describe - describe a Cloud Security Command + Center posture deployment + +SYNOPSIS + gcloud scc posture-deployments describe + (POSTURE_DEPLOYMENT : --location=LOCATION --organization=ORGANIZATION) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Describe a Cloud Security Command Center (SCC) posture deployment. + +EXAMPLES + To describe posture deployment + organizations/123/locations/global/postureDeployments/posture-deployment-foo-1 (i.e. a posture deployment + in organization `123`, location `global`, with ID `posture-deployment-foo-1`), run: + + $ gcloud scc posture-deployments describe \ + organizations/123/locations/global/postureDeployments/\ + posture-deployment-foo-1 + + or, run: + + $ gcloud scc posture-deployments describe posture-deployment-foo-1 \ + --organization=123 --location=global + +POSITIONAL ARGUMENTS + Posture deployment resource - The posture deployment to describe. For + example + organizations//locations//postureDeployments/. + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + POSTURE_DEPLOYMENT + ID of the posture_deployment or fully qualified identifier for the + posture_deployment. + + To set the posture_deployment attribute: + ▸ provide the argument posture_deployment on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + ID of the location where the resource exists (for example, global). + + To set the location attribute: + ▸ provide the argument posture_deployment on the command line with + a fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + ID of the organization which is the parent of the resource. + + To set the organization attribute: + ▸ provide the argument posture_deployment on the command line with + a fully specified name; + ▸ provide the argument --organization on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the securityposture/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/security-command-center + +NOTES + This variant is also available: + + $ gcloud alpha scc posture-deployments describe + diff --git a/gcloud/scc/posture-deployments/help b/gcloud/scc/posture-deployments/help new file mode 100644 index 000000000..85a9ba69e --- /dev/null +++ b/gcloud/scc/posture-deployments/help @@ -0,0 +1,40 @@ +NAME + gcloud scc posture-deployments - manage Cloud Security Command Center + posture deployments + +SYNOPSIS + gcloud scc posture-deployments COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Manage Cloud Security Command Center (SCC) posture deployments. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + create + Create a Cloud Security Command Center (SCC) posture deployment. + + delete + Delete a Cloud Security Command Center (SCC) posture deployment. + + describe + Describe a Cloud Security Command Center (SCC) posture deployment. + + list + List the details of the Cloud Security Command Center (SCC) posture + deployments. + + update + Update the given Cloud Security Command Center (SCC) posture + deployment. + +NOTES + This variant is also available: + + $ gcloud alpha scc posture-deployments + diff --git a/gcloud/domains/registrations/list-importable-domains b/gcloud/scc/posture-deployments/list similarity index 60% rename from gcloud/domains/registrations/list-importable-domains rename to gcloud/scc/posture-deployments/list index f401dc54c..eac41f776 100644 --- a/gcloud/domains/registrations/list-importable-domains +++ b/gcloud/scc/posture-deployments/list @@ -1,35 +1,28 @@ NAME - gcloud domains registrations list-importable-domains - list Google Domains - registrations importable into Cloud Domains + gcloud scc posture-deployments list - list the details of the Cloud + Security Command Center posture deployments SYNOPSIS - gcloud domains registrations list-importable-domains [--filter=EXPRESSION] + gcloud scc posture-deployments list PARENT [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (DEPRECATED) List Google Domains registrations importable into Cloud - Domains. - - This command is deprecated. See - https://cloud.google.com/domains/docs/deprecations/feature-deprecations. - - List Google Domains registrations that can be imported to a Cloud Domains - project. - - Registrations with an IMPORTABLE resource state can be imported from Google - Domains registrar to Cloud Domains. - - Registrations with a SUSPENDED, EXPIRED, or DELETED resource state must - have their states resolved with Google Domains registrar to be imported. - - Registrations with an UNSUPPORTED resource state are not currently - supported for import. + List the details of the Cloud Security Command Center (SCC) posture + deployments for the specified organization. EXAMPLES - To list Google Domains registrations that can be imported, run: + To list Cloud Security Command Center posture deployments for organization + 123, run: - $ gcloud domains registrations list-importable-domains + $ gcloud scc posture-deployments list \ + organizations/123/locations/global + +POSITIONAL ARGUMENTS + PARENT + Organization for listing the Cloud Security Command Center posture + deployments available at the organization level. Formatted as + organizations//locations/. LIST COMMAND FLAGS --filter=EXPRESSION @@ -65,10 +58,12 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. +API REFERENCE + This command uses the securityposture/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/security-command-center + NOTES - These variants are also available: + This variant is also available: - $ gcloud alpha domains registrations list-importable-domains - - $ gcloud beta domains registrations list-importable-domains + $ gcloud alpha scc posture-deployments list diff --git a/gcloud/scc/posture-deployments/update b/gcloud/scc/posture-deployments/update new file mode 100644 index 000000000..77d67e23c --- /dev/null +++ b/gcloud/scc/posture-deployments/update @@ -0,0 +1,112 @@ +NAME + gcloud scc posture-deployments update - update the given Cloud Security + Command Center posture deployment + +SYNOPSIS + gcloud scc posture-deployments update + (POSTURE_DEPLOYMENT : --location=LOCATION --organization=ORGANIZATION) + [--async] [--description=DESCRIPTION] [--etag=ETAG] + [--update-mask=UPDATE_MASK] + [--posture-id=POSTURE_ID --posture-revision-id=POSTURE_REVISION_ID] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Update a Cloud Security Command Center (SCC) posture deployment. + + Fields specified in update-mask flag are updated. Updatable fields are + description and posture_name with posture_revision-id. The target_resource + for a posture deployment cannot be updated. The posture deployment to be + updated should be in ACTIVE State. If posture details of posture deployment + need to be updated, then the desired posture needs to be in ACTIVE state. + LRO operation ID is returned as the response of the command. + +EXAMPLES + Update the description of the posture deployment named + foo-posture-deployment in the organization + organizations/123/locations/global: $ gcloud scc posture-deployments update \ + organizations/123/locations/global/postureDeployments/\ + foo-posture-deployment --update-mask=description \ + --description="updated-description" + + Update posture deployment named foo-posture-deployment with the posture + named foo-posture and revision_id abcdefgh in the organization + organizations/123/locations/global: $ gcloud scc posture-deployments update \ + organizations/123/locations/global/postureDeployments/\ + foo-posture-deployment \ + --update-mask=posture_id,posture_revision-id \ + --posture-id=foo-posture --posture-revision-id=abcdefgh + +POSITIONAL ARGUMENTS + Posture deployment resource - The posture deployment to update. For + example + organizations//locations//postureDeployments/. + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + POSTURE_DEPLOYMENT + ID of the posture_deployment or fully qualified identifier for the + posture_deployment. + + To set the posture_deployment attribute: + ▸ provide the argument posture_deployment on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + ID of the location where the resource exists (for example, global). + + To set the location attribute: + ▸ provide the argument posture_deployment on the command line with + a fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + ID of the organization which is the parent of the resource. + + To set the organization attribute: + ▸ provide the argument posture_deployment on the command line with + a fully specified name; + ▸ provide the argument --organization on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --description=DESCRIPTION + Updated description of posture deployment. + + --etag=ETAG + Etag is an optional flag. If the provided Etag doesn't match the server + generated Etag, the update operation won't proceed. + + --update-mask=UPDATE_MASK + Comma-separated string containing list of fields to be updated. + + --posture-id=POSTURE_ID + Relative name of the posture to be updated, like + organizations//locations//postures/. + + --posture-revision-id=POSTURE_REVISION_ID + Revision ID of the posture to be updated. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the securityposture/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/security-command-center + +NOTES + This variant is also available: + + $ gcloud alpha scc posture-deployments update + diff --git a/gcloud/scc/posture-templates/describe b/gcloud/scc/posture-templates/describe new file mode 100644 index 000000000..364e66c62 --- /dev/null +++ b/gcloud/scc/posture-templates/describe @@ -0,0 +1,87 @@ +NAME + gcloud scc posture-templates describe - describe a Cloud Security Command + Center posture template + +SYNOPSIS + gcloud scc posture-templates describe + (POSTURE_TEMPLATE : --location=LOCATION --organization=ORGANIZATION) + [--revision-id=REVISION_ID] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Describe a Cloud Security Command Center (SCC) posture template. + + By default, the latest created revision of the posture template is + described. Users must provide revision ID to describe a specific revision. + +EXAMPLES + Describe a posture template named + organizations/123/locations/global/postureTemplates/secure_by_default (i.e. + a posture in organization 123, location global, with id secure_by_default): + + $ gcloud scc posture-templates describe \ + organizations/123/locations/global/postureTemplates/\ + secure_by_default + + Describe a specific revision v1.0.0 of posture template named + organizations/123/locations/global/postureTemplates/secure_by_default: + + $ gcloud scc posture-templates describe \ + organizations/123/locations/global/postureTemplates/\ + secure_by_default --revision-id=v1.0.0 + +POSITIONAL ARGUMENTS + Posture template resource - The posture template to describe. For example + organizations//locations//postureTemplates/. + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + POSTURE_TEMPLATE + ID of the posture_template or fully qualified identifier for the + posture_template. + + To set the posture_template attribute: + ▸ provide the argument posture_template on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + ID of the location where the resource exists (for example, global). + + To set the location attribute: + ▸ provide the argument posture_template on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + ID of the organization which is the parent of the resource. + + To set the organization attribute: + ▸ provide the argument posture_template on the command line with a + fully specified name; + ▸ provide the argument --organization on the command line. + +FLAGS + --revision-id=REVISION_ID + ID of the specific posture template revision to describe. If not + specified, latest revision is described. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the securityposture/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/security-command-center + +NOTES + This variant is also available: + + $ gcloud alpha scc posture-templates describe + diff --git a/gcloud/scc/posture-templates/help b/gcloud/scc/posture-templates/help new file mode 100644 index 000000000..28975a968 --- /dev/null +++ b/gcloud/scc/posture-templates/help @@ -0,0 +1,30 @@ +NAME + gcloud scc posture-templates - manage Cloud Security Command Center posture + templates + +SYNOPSIS + gcloud scc posture-templates COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Manage Cloud Security Command Center (SCC) posture templates. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + describe + Describe a Cloud Security Command Center (SCC) posture template. + + list + List the details of the Cloud Security Command Center (SCC) posture + templates. + +NOTES + This variant is also available: + + $ gcloud alpha scc posture-templates + diff --git a/gcloud/alpha/domains/registrations/list-importable-domains b/gcloud/scc/posture-templates/list similarity index 52% rename from gcloud/alpha/domains/registrations/list-importable-domains rename to gcloud/scc/posture-templates/list index 3105bf2a6..57d5f34e1 100644 --- a/gcloud/alpha/domains/registrations/list-importable-domains +++ b/gcloud/scc/posture-templates/list @@ -1,35 +1,28 @@ NAME - gcloud alpha domains registrations list-importable-domains - list Google - Domains registrations importable into Cloud Domains + gcloud scc posture-templates list - list the details of the Cloud Security + Command Center posture templates SYNOPSIS - gcloud alpha domains registrations list-importable-domains - [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] - [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] + gcloud scc posture-templates list PARENT [--filter=EXPRESSION] + [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) (DEPRECATED) List Google Domains registrations importable into - Cloud Domains. - - This command is deprecated. See - https://cloud.google.com/domains/docs/deprecations/feature-deprecations. - - List Google Domains registrations that can be imported to a Cloud Domains - project. - - Registrations with an IMPORTABLE resource state can be imported from Google - Domains registrar to Cloud Domains. - - Registrations with a SUSPENDED, EXPIRED, or DELETED resource state must - have their states resolved with Google Domains registrar to be imported. - - Registrations with an UNSUPPORTED resource state are not currently - supported for import. + List the details of the Cloud Security Command Center (SCC) posture + templates for the specified organization. EXAMPLES - To list Google Domains registrations that can be imported, run: + To list Cloud Security Command Center posture templates for organization + 123, run: - $ gcloud alpha domains registrations list-importable-domains + $ gcloud scc posture-templates list \ + organizations/123/locations/global + +POSITIONAL ARGUMENTS + PARENT + Organization for listing the Cloud Security Command Center posture + templates available at the organization level. Formatted as + organizations//locations/. LIST COMMAND FLAGS --filter=EXPRESSION @@ -65,13 +58,12 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. +API REFERENCE + This command uses the securityposture/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/security-command-center + NOTES - This command is currently in alpha and might change without notice. If this - command fails with API permission errors despite specifying the correct - project, you might be trying to access an API with an invitation-only early - access allowlist. These variants are also available: + This variant is also available: - $ gcloud domains registrations list-importable-domains - - $ gcloud beta domains registrations list-importable-domains + $ gcloud alpha scc posture-templates list diff --git a/gcloud/scc/postures/create b/gcloud/scc/postures/create new file mode 100644 index 000000000..56b1a5949 --- /dev/null +++ b/gcloud/scc/postures/create @@ -0,0 +1,84 @@ +NAME + gcloud scc postures create - create a Cloud Security Command Center posture + +SYNOPSIS + gcloud scc postures create + (POSTURE : --location=LOCATION --organization=ORGANIZATION) + --posture-from-file=POSTURE_FROM_FILE [--async] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Create a Cloud Security Command Center (SCC) posture. First argument is the + parent of the posture to be created. Second argument is the name of the + posture to be created. The posture details are provided in YAML file. The + file path is mentioned in posture-from-file flag. + + Created posture is returned as the response of the command. LRO operation + ID is printed as the standard output. + +EXAMPLES + Create a posture named posture-foo-1 within parent + organizations/123/locations/global(i.e. a posture in organization 123, + location global, with id posture-foo-1): + + $ gcloud scc postures create organizations/123/locations/global \ + posture-foo-1 --posture-from-file=posture.yaml + +POSITIONAL ARGUMENTS + Posture resource - The name of the posture to be created. For example + organizations//locations//postures/. + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + POSTURE + ID of the posture or fully qualified identifier for the posture. + + To set the posture attribute: + ▸ provide the argument posture on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + ID of the location where the resource exists (for example, global). + + To set the location attribute: + ▸ provide the argument posture on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + ID of the organization which is the parent of the resource. + + To set the organization attribute: + ▸ provide the argument posture on the command line with a fully + specified name; + ▸ provide the argument --organization on the command line. + +REQUIRED FLAGS + --posture-from-file=POSTURE_FROM_FILE + YAML file containing the body of the posture to be created. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the securityposture/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/security-command-center + +NOTES + This variant is also available: + + $ gcloud alpha scc postures create + diff --git a/gcloud/scc/postures/delete b/gcloud/scc/postures/delete new file mode 100644 index 000000000..b91b25940 --- /dev/null +++ b/gcloud/scc/postures/delete @@ -0,0 +1,91 @@ +NAME + gcloud scc postures delete - delete a Cloud Security Command Center posture + +SYNOPSIS + gcloud scc postures delete + (POSTURE : --location=LOCATION --organization=ORGANIZATION) [--async] + [--etag=ETAG] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Delete a Cloud Security Command Center (SCC) posture. + + Posture with all it's revisions is deleted. Deletion won't be allowed in + case any of the versions of the posture is deployed on a workload. ETAG can + be provided as an optional flag. + +EXAMPLES + Delete the posture named + organizations/123/locations/global/postures/posture-foo-1 (i.e. a posture + in organization 123, location global, with id posture-foo-1): + + $ gcloud scc postures delete \ + organizations/123/locations/global/postures/posture-foo-1 + + Delete the posture named + organizations/123/locations/global/postures/posture-foo-1 (i.e. a posture + in organization 123, location global, with id posture-foo-1) for the ETAG + ABcdO1Rf5clu7Yhlkwgelo7Vl4tiqd7Sy5iP5SdkSVU + + $ gcloud scc postures delete \ + organizations/123/locations/global/postures/posture-foo-1 \ + --etag=ABcdO1Rf5clu7Yhlkwgelo7Vl4tiqd7Sy5iI5SdkSVU + +POSITIONAL ARGUMENTS + Posture resource - The posture to delete. For example + organizations//locations//postures/. + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + POSTURE + ID of the posture or fully qualified identifier for the posture. + + To set the posture attribute: + ▸ provide the argument posture on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + ID of the location where the resource exists (for example, global). + + To set the location attribute: + ▸ provide the argument posture on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + ID of the organization which is the parent of the resource. + + To set the organization attribute: + ▸ provide the argument posture on the command line with a fully + specified name; + ▸ provide the argument --organization on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --etag=ETAG + Etag is an optional flag. If the provided Etag doesn't match the server + generated Etag, the delete operation won't proceed. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the securityposture/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/security-command-center + +NOTES + This variant is also available: + + $ gcloud alpha scc postures delete + diff --git a/gcloud/scc/postures/describe b/gcloud/scc/postures/describe new file mode 100644 index 000000000..646a54549 --- /dev/null +++ b/gcloud/scc/postures/describe @@ -0,0 +1,85 @@ +NAME + gcloud scc postures describe - describe a Cloud Security Command Center + posture + +SYNOPSIS + gcloud scc postures describe + (POSTURE : --location=LOCATION --organization=ORGANIZATION) + [--revision-id=REVISION_ID] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Describe a Cloud Security Command Center (SCC) posture. + + By default, the latest updated revision of the posture is described. Users + must provide revision ID to describe a specific revision. + +EXAMPLES + Describe the latest updated revision of a posture named + organizations/123/locations/global/postures/posture-foo-1 (i.e. a posture + in organization 123, location global, with id posture-foo-1): + + $ gcloud scc postures describe \ + organizations/123/locations/global/postures/posture-foo-1 + + Describe a specific revision abcdefg of posture named + organizations/123/locations/global/postures/posture-foo-1: + + $ gcloud scc postures describe \ + organizations/123/locations/global/postures/posture-foo-1 \ + --revision-id=abcdefg + +POSITIONAL ARGUMENTS + Posture resource - The posture to describe. For example + organizations//locations//postures/. + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + POSTURE + ID of the posture or fully qualified identifier for the posture. + + To set the posture attribute: + ▸ provide the argument posture on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + ID of the location where the resource exists (for example, global). + + To set the location attribute: + ▸ provide the argument posture on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + ID of the organization which is the parent of the resource. + + To set the organization attribute: + ▸ provide the argument posture on the command line with a fully + specified name; + ▸ provide the argument --organization on the command line. + +FLAGS + --revision-id=REVISION_ID + ID of the specific posture revision to describe. If not specified, + latest revision is described. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the securityposture/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/security-command-center + +NOTES + This variant is also available: + + $ gcloud alpha scc postures describe + diff --git a/gcloud/scc/postures/extract b/gcloud/scc/postures/extract new file mode 100644 index 000000000..66d6f2332 --- /dev/null +++ b/gcloud/scc/postures/extract @@ -0,0 +1,87 @@ +NAME + gcloud scc postures extract - extract a Cloud Security Command Center + posture from a workload + +SYNOPSIS + gcloud scc postures extract + (POSTURE : --location=LOCATION --organization=ORGANIZATION) + --workload=WORKLOAD [--async] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Extract a Cloud Security Command Center (SCC) posture from a workload. + First argument is the parent of the posture to be created. Second argument + is the name of the posture to be created. The workload from where the + organization policies need to be extracted is provided via 'workload' flag. + + Extracted posture is returned as the response of the command. LRO operation + ID is printed as the standard output. + +EXAMPLES + Extract a posture named posture-foo-1 within parent + organizations/123/locations/global(i.e. a posture in organization 123, + location global, with id posture-foo-1) from workload projects/456: + + $ gcloud scc postures extract organizations/123/locations/global \ + posture-foo-1 --workload=projects/456 + +POSITIONAL ARGUMENTS + Posture resource - The name of the posture to be created. For example + organizations//locations//postures/. + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + POSTURE + ID of the posture or fully qualified identifier for the posture. + + To set the posture attribute: + ▸ provide the argument posture on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + ID of the location where the resource exists (for example, global). + + To set the location attribute: + ▸ provide the argument posture on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + ID of the organization which is the parent of the resource. + + To set the organization attribute: + ▸ provide the argument posture on the command line with a fully + specified name; + ▸ provide the argument --organization on the command line. + +REQUIRED FLAGS + --workload=WORKLOAD + Workload from where policies has to be extracted into a posture. It can + be in one of the following formats: projects/projectNumber, + folders/folderNumber, organizations/organizationNumber. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the securityposture/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/security-command-center + +NOTES + This variant is also available: + + $ gcloud alpha scc postures extract + diff --git a/gcloud/scc/postures/help b/gcloud/scc/postures/help new file mode 100644 index 000000000..d8181ca3e --- /dev/null +++ b/gcloud/scc/postures/help @@ -0,0 +1,44 @@ +NAME + gcloud scc postures - manage Cloud Security Command Center postures + +SYNOPSIS + gcloud scc postures COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Manage Cloud Security Command Center (SCC) postures. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + create + Create a Cloud Security Command Center (SCC) posture. + + delete + Delete a Cloud Security Command Center (SCC) posture. + + describe + Describe a Cloud Security Command Center (SCC) posture. + + extract + Extract a Cloud Security Command Center (SCC) posture from a workload. + + list + Lists all the Cloud Security Command Center (SCC) postures for an + organization. + + list-revisions + List the revisions of a Cloud Security Command Center (SCC) posture. + + update + Update the given Cloud Security Command Center (SCC) posture. + +NOTES + This variant is also available: + + $ gcloud alpha scc postures + diff --git a/gcloud/beta/domains/registrations/list-importable-domains b/gcloud/scc/postures/list similarity index 55% rename from gcloud/beta/domains/registrations/list-importable-domains rename to gcloud/scc/postures/list index 1823cd491..0edb1066c 100644 --- a/gcloud/beta/domains/registrations/list-importable-domains +++ b/gcloud/scc/postures/list @@ -1,35 +1,31 @@ NAME - gcloud beta domains registrations list-importable-domains - list Google - Domains registrations importable into Cloud Domains + gcloud scc postures list - lists all the Cloud Security Command Center + postures for an organization SYNOPSIS - gcloud beta domains registrations list-importable-domains - [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] - [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] + gcloud scc postures list PARENT [--filter=EXPRESSION] [--limit=LIMIT] + [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) (DEPRECATED) List Google Domains registrations importable into Cloud - Domains. + Lists all Cloud Security Command Center (SCC) postures for an organization. - This command is deprecated. See - https://cloud.google.com/domains/docs/deprecations/feature-deprecations. - - List Google Domains registrations that can be imported to a Cloud Domains - project. - - Registrations with an IMPORTABLE resource state can be imported from Google - Domains registrar to Cloud Domains. - - Registrations with a SUSPENDED, EXPIRED, or DELETED resource state must - have their states resolved with Google Domains registrar to be imported. - - Registrations with an UNSUPPORTED resource state are not currently - supported for import. + By default, postures created in global location are returned. EXAMPLES - To list Google Domains registrations that can be imported, run: + List all postures in organization 123. If location is omitted, this returns + postures from location 'global'. For a posture with multiple revisions, + only the latest updated revision of the posture is returned in the output. - $ gcloud beta domains registrations list-importable-domains + $ gcloud scc postures list organizations/123 + + List all postures in organization 123, location global + + $ gcloud scc postures list organizations/123/locations/global + +POSITIONAL ARGUMENTS + PARENT + Resource name of the parent, like organizations/ or + organizations//locations/. LIST COMMAND FLAGS --filter=EXPRESSION @@ -65,11 +61,12 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. +API REFERENCE + This command uses the securityposture/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/security-command-center + NOTES - This command is currently in beta and might change without notice. These - variants are also available: + This variant is also available: - $ gcloud domains registrations list-importable-domains - - $ gcloud alpha domains registrations list-importable-domains + $ gcloud alpha scc postures list diff --git a/gcloud/scc/postures/list-revisions b/gcloud/scc/postures/list-revisions new file mode 100644 index 000000000..e567748c6 --- /dev/null +++ b/gcloud/scc/postures/list-revisions @@ -0,0 +1,97 @@ +NAME + gcloud scc postures list-revisions - list the revisions of a Cloud Security + Command Center posture + +SYNOPSIS + gcloud scc postures list-revisions + (POSTURE : --location=LOCATION --organization=ORGANIZATION) + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + List the revisions of a Cloud Security Command Center (SCC) posture. + +EXAMPLES + To list Cloud Security Command Center posture revisions for posture + organizations/123/locations/global/postures/posture123 , run: + + $ gcloud scc postures list-revisions \ + organizations/123/locations/global/postures/posture123 + +POSITIONAL ARGUMENTS + Posture resource - The posture whose revisions are to be listed. For + example + organizations//locations//postures/. + The arguments in this group can be used to specify the attributes of this + resource. + + This must be specified. + + POSTURE + ID of the posture or fully qualified identifier for the posture. + + To set the posture attribute: + ▸ provide the argument posture on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + ID of the location where the resource exists (for example, global). + + To set the location attribute: + ▸ provide the argument posture on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + ID of the organization which is the parent of the resource. + + To set the organization attribute: + ▸ provide the argument posture on the command line with a fully + specified name; + ▸ provide the argument --organization on the command line. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the securityposture/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/security-command-center + +NOTES + This variant is also available: + + $ gcloud alpha scc postures list-revisions + diff --git a/gcloud/scc/postures/update b/gcloud/scc/postures/update new file mode 100644 index 000000000..b7c60a8bf --- /dev/null +++ b/gcloud/scc/postures/update @@ -0,0 +1,140 @@ +NAME + gcloud scc postures update - update the given Cloud Security Command Center + posture + +SYNOPSIS + gcloud scc postures update + (POSTURE : --location=LOCATION --organization=ORGANIZATION) + --posture-from-file=POSTURE_FROM_FILE --revision-id=REVISION_ID + [--async] [--update-mask=UPDATE_MASK] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Update a Cloud Security Command Center (SCC) posture. + + Fields specified in update-mask flag are updated. Updatable fields are + state, description and policy_sets. State of the posture can't be updated + along with update of other fields. An empty or "" as field mask will result + in update of policy_sets and description. In case of the update of + policy_sets, the value mentioned in the update posture request overwrites + the exisiting value of policy_sets. + + Valid state transitions are: a) ACTIVE to DRAFT b) ACTIVE to DEPRECATED c) + DRAFT to ACTIVE d) DEPRECATED to ACTIVE + + The update operation will result in the update of the revision-id specified + in the request, unless the posture revision is currently deployed on a + workload. A new revision is created for an already deployed posture + revision. + +EXAMPLES + Update the revision-id abcdefgh of the posture named foo-posture in the + organization organizations/123/locations/global: Change State to ACTIVE. $ gcloud scc postures update \ + organizations/123/locations/global/postures/foo-posture \ + --posture-from-file=update_posture.yaml --revision-id=abcdefgh \ + update_mask=state + + Contents of update_posture.yaml are | + name: organizations/123/locations/global/postures/foo-posture + state: ACTIVE + + Update the revision-id abcdefgh of the posture named foo-posture in the + organization organizations/123/locations/global: Change description and + policy_sets to the values mentioned in update_posture.yaml $ gcloud scc postures update \ + organizations/123/locations/global/postures/foo-posture \ + --posture-from-file=update_posture.yaml --revision-id=abcdefgh \ + update_mask=description,policy_sets + + Contents of update_posture.yaml are | + name: organizations/123/locations/global/postures/foo-posture + description: updated description + policy_sets: + - policy_set_id: newPolicySet1 + policies: + - policy_id: newPolicy + constraint: + org_policy_canned_constraint: + canned_constraint_id: storage.uniformBucketLevelAccess + policy_rules: + enforce: false + - policy_set_id: PolicySet2 + policies: + - policy_id: Policy3 + constraint: + org_policy_custom_constraint: + custom_constraint: + name: organizations/9454078371/customConstraints/custom.newConstraint + resource_types: container.$$UNIVERSE_DOMAIN$$/NodePool + method_types: UPDATE + condition: resource.management.autoUpgrade == false + action_type: ALLOW + policy_rules: + enforce: true + +POSITIONAL ARGUMENTS + Posture resource - Arguments and flags that specify the Posture instance + to update. The arguments in this group can be used to specify the + attributes of this resource. + + This must be specified. + + POSTURE + ID of the posture or fully qualified identifier for the posture. + + To set the posture attribute: + ▸ provide the argument posture on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + ID of the location where the resource exists (for example, global). + + To set the location attribute: + ▸ provide the argument posture on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + + --organization=ORGANIZATION + ID of the organization which is the parent of the resource. + + To set the organization attribute: + ▸ provide the argument posture on the command line with a fully + specified name; + ▸ provide the argument --organization on the command line. + +REQUIRED FLAGS + --posture-from-file=POSTURE_FROM_FILE + Path of the file containing the details of the field to be updated. + Contents include the name of the posture to be updated and value of the + fields to be updated. + + --revision-id=REVISION_ID + Revision ID of the posture to be updated. The same revision ID will be + updated in case the posture revision is not deployed on any workload. A + new revision will be created for a deployed posture. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --update-mask=UPDATE_MASK + Comma separated string containing list of fields to be updated. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the securityposture/v1 API. The full documentation for + this API can be found at: https://cloud.google.com/security-command-center + +NOTES + This variant is also available: + + $ gcloud alpha scc postures update + diff --git a/gcloud/sql/instances/patch b/gcloud/sql/instances/patch index b48372801..5eabb8205 100644 --- a/gcloud/sql/instances/patch +++ b/gcloud/sql/instances/patch @@ -35,10 +35,10 @@ SYNOPSIS [--pricing-plan=PRICING_PLAN, -p PRICING_PLAN] [--[no-]recreate-replicas-on-primary-crash] [--remove-deny-maintenance-period] [--replication=REPLICATION] - [--[no-]require-ssl] [--ssl-mode=SSL_MODE] - [--[no-]storage-auto-increase] [--storage-size=STORAGE_SIZE] - [--threads-per-core=THREADS_PER_CORE] [--tier=TIER, -t TIER] - [--upgrade-sql-network-architecture] + [--[no-]require-ssl] [--simulate-maintenance-event] + [--ssl-mode=SSL_MODE] [--[no-]storage-auto-increase] + [--storage-size=STORAGE_SIZE] [--threads-per-core=THREADS_PER_CORE] + [--tier=TIER, -t TIER] [--upgrade-sql-network-architecture] [--allowed-psc-projects=PROJECT,[PROJECT,...] | --clear-allowed-psc-projects] [--authorized-gae-apps=APP,[APP,...] | --clear-gae-apps] @@ -329,6 +329,11 @@ FLAGS mysqld should default to 'REQUIRE X509' for users connecting over IP. Use --require-ssl to enable and --no-require-ssl to disable. + --simulate-maintenance-event + Simulate a maintenance event without changing the version. Only + applicable to instances that support near-zero downtime planned + maintenance. + --ssl-mode=SSL_MODE Set the SSL mode of the instance. SSL_MODE must be one of: diff --git a/gcloud/workstations/ssh b/gcloud/workstations/ssh index 9a3aafaa7..eb46f474e 100644 --- a/gcloud/workstations/ssh +++ b/gcloud/workstations/ssh @@ -4,8 +4,10 @@ NAME SYNOPSIS gcloud workstations ssh (WORKSTATION : --cluster=CLUSTER --config=CONFIG --region=REGION) - [--command=COMMAND] [--port=PORT; default=22] - [--user=USER; default="user"] [GCLOUD_WIDE_FLAG ...] [-- SSH_ARGS ...] + [--command=COMMAND] + [--local-host-port=LOCAL_HOST_PORT; default="localhost:0"] + [--port=PORT; default=22] [--user=USER; default="user"] + [GCLOUD_WIDE_FLAG ...] [-- SSH_ARGS ...] DESCRIPTION SSH into a running workstation. @@ -89,6 +91,16 @@ FLAGS Runs the command on the target workstation and then exits. + --local-host-port=LOCAL_HOST_PORT; default="localhost:0" + LOCAL_HOST:LOCAL_PORT on which gcloud should bind and listen for + connections that should be tunneled. + + LOCAL_PORT may be omitted, in which case it is treated as 0 and an + arbitrary unused local port is chosen. The colon also may be omitted in + that case. + + If LOCAL_PORT is 0, an arbitrary unused local port is chosen. + --port=PORT; default=22 The port on the workstation to which traffic should be sent.