gcloud: Thu Jun 2 08:41:25 UTC 2022

2026-07-16 12:22:03 +00:00 · 2022-06-02 08:41:25 +00:00 · 2022-06-02 08:41:25 +00:00 · 82063cbb03
commit 82063cbb03
parent 5b5ff68a0d
153 changed files with 3508 additions and 223 deletions
--- a/gcloud/alpha/compute/images/export
+++ b/gcloud/alpha/compute/images/export
@ -19,6 +19,11 @@ DESCRIPTION
    The --export-format flag exports the image to a format supported by QEMU
    using qemu-img. Valid formats include vmdk, vhdx, vpc, vdi, and qcow2.

+    Before exporting an image, set up access to Cloud Storage and grant
+    required roles to the user accounts and service accounts. For more
+    information, see
+    https://cloud.google.com/compute/docs/import/requirements-export-import-images.
+
 EXAMPLES
    To export a VMDK file my-image from a project my-project to a Cloud Storage
    bucket my-bucket, run:
--- a/gcloud/alpha/compute/network-firewall-policies/associations/create
+++ b/gcloud/alpha/compute/network-firewall-policies/associations/create
@ -68,5 +68,9 @@ NOTES
    This command is currently in alpha and might change without notice. If this
    command fails with API permission errors despite specifying the correct
    project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. These variants are also available:
+
+        $ gcloud compute network-firewall-policies associations create
+
+        $ gcloud beta compute network-firewall-policies associations create

--- a/gcloud/alpha/compute/network-firewall-policies/associations/delete
+++ b/gcloud/alpha/compute/network-firewall-policies/associations/delete
@ -58,5 +58,9 @@ NOTES
    This command is currently in alpha and might change without notice. If this
    command fails with API permission errors despite specifying the correct
    project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. These variants are also available:
+
+        $ gcloud compute network-firewall-policies associations delete
+
+        $ gcloud beta compute network-firewall-policies associations delete

--- a/gcloud/alpha/compute/network-firewall-policies/associations/help
+++ b/gcloud/alpha/compute/network-firewall-policies/associations/help
@ -30,5 +30,9 @@ NOTES
    This command is currently in alpha and might change without notice. If this
    command fails with API permission errors despite specifying the correct
    project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. These variants are also available:
+
+        $ gcloud compute network-firewall-policies associations
+
+        $ gcloud beta compute network-firewall-policies associations

--- a/gcloud/alpha/compute/network-firewall-policies/clone-rules
+++ b/gcloud/alpha/compute/network-firewall-policies/clone-rules
@ -58,5 +58,9 @@ NOTES
    This command is currently in alpha and might change without notice. If this
    command fails with API permission errors despite specifying the correct
    project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. These variants are also available:
+
+        $ gcloud compute network-firewall-policies clone-rules
+
+        $ gcloud beta compute network-firewall-policies clone-rules

--- a/gcloud/alpha/compute/network-firewall-policies/create
+++ b/gcloud/alpha/compute/network-firewall-policies/create
@ -13,14 +13,14 @@ DESCRIPTION
    rules that controls access to various resources.

 EXAMPLES
-    To create a global network firewall policy named ``my-policy" under project
+    To create a global network firewall policy named my-policy under project
    with ID test-project, run:

        $ gcloud alpha compute network-firewall-policies create my-policy \
            --project=test-project --global

-    To create a regional network firewall policy named ``my-region-policy"
-    under project with ID test-project, in region my-region, run:
+    To create a regional network firewall policy named my-region-policy under
+    project with ID test-project, in region my-region, run:

        $ gcloud alpha compute network-firewall-policies create \
            my-region-policy --project=test-project --region=my-region
@ -54,5 +54,9 @@ NOTES
    This command is currently in alpha and might change without notice. If this
    command fails with API permission errors despite specifying the correct
    project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. These variants are also available:
+
+        $ gcloud compute network-firewall-policies create
+
+        $ gcloud beta compute network-firewall-policies create

--- a/gcloud/alpha/compute/network-firewall-policies/delete
+++ b/gcloud/alpha/compute/network-firewall-policies/delete
@ -49,5 +49,9 @@ NOTES
    This command is currently in alpha and might change without notice. If this
    command fails with API permission errors despite specifying the correct
    project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. These variants are also available:
+
+        $ gcloud compute network-firewall-policies delete
+
+        $ gcloud beta compute network-firewall-policies delete

--- a/gcloud/alpha/compute/network-firewall-policies/describe
+++ b/gcloud/alpha/compute/network-firewall-policies/describe
@ -49,5 +49,9 @@ NOTES
    This command is currently in alpha and might change without notice. If this
    command fails with API permission errors despite specifying the correct
    project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. These variants are also available:
+
+        $ gcloud compute network-firewall-policies describe
+
+        $ gcloud beta compute network-firewall-policies describe

--- a/gcloud/alpha/compute/network-firewall-policies/get-effective-firewalls
+++ b/gcloud/alpha/compute/network-firewall-policies/get-effective-firewalls
@ -100,5 +100,10 @@ NOTES
    This command is currently in alpha and might change without notice. If this
    command fails with API permission errors despite specifying the correct
    project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. These variants are also available:
+
+        $ gcloud compute network-firewall-policies get-effective-firewalls
+
+        $ gcloud beta compute network-firewall-policies \
+            get-effective-firewalls

--- a/gcloud/alpha/compute/network-firewall-policies/help
+++ b/gcloud/alpha/compute/network-firewall-policies/help
@ -55,5 +55,9 @@ NOTES
    This command is currently in alpha and might change without notice. If this
    command fails with API permission errors despite specifying the correct
    project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. These variants are also available:
+
+        $ gcloud compute network-firewall-policies
+
+        $ gcloud beta compute network-firewall-policies

--- a/gcloud/alpha/compute/network-firewall-policies/list
+++ b/gcloud/alpha/compute/network-firewall-policies/list
@ -100,5 +100,9 @@ NOTES
    This command is currently in alpha and might change without notice. If this
    command fails with API permission errors despite specifying the correct
    project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. These variants are also available:
+
+        $ gcloud compute network-firewall-policies list
+
+        $ gcloud beta compute network-firewall-policies list

--- a/gcloud/alpha/compute/network-firewall-policies/rules/create
+++ b/gcloud/alpha/compute/network-firewall-policies/rules/create
@ -122,5 +122,9 @@ NOTES
    This command is currently in alpha and might change without notice. If this
    command fails with API permission errors despite specifying the correct
    project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. These variants are also available:
+
+        $ gcloud compute network-firewall-policies rules create
+
+        $ gcloud beta compute network-firewall-policies rules create

--- a/gcloud/alpha/compute/network-firewall-policies/rules/delete
+++ b/gcloud/alpha/compute/network-firewall-policies/rules/delete
@ -13,13 +13,13 @@ DESCRIPTION
    to delete network firewall policy rules.

 EXAMPLES
-    To delete a rule with priority ``10" in a global network firewall policy
-    with name my-policy, run:
+    To delete a rule with priority 10 in a global network firewall policy with
+    name my-policy, run:

        $ gcloud alpha compute network-firewall-policies rules delete 10 \
            --firewall-policy=my-policy --global-firewall-policy

-    To delete a rule with priority ``10" in a regional network firewall policy
+    To delete a rule with priority 10 in a regional network firewall policy
    with name my-policy, in region region-a, run:

        $ gcloud alpha compute network-firewall-policies rules delete 10 \
@ -55,5 +55,9 @@ NOTES
    This command is currently in alpha and might change without notice. If this
    command fails with API permission errors despite specifying the correct
    project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. These variants are also available:
+
+        $ gcloud compute network-firewall-policies rules delete
+
+        $ gcloud beta compute network-firewall-policies rules delete

--- a/gcloud/alpha/compute/network-firewall-policies/rules/describe
+++ b/gcloud/alpha/compute/network-firewall-policies/rules/describe
@ -55,5 +55,9 @@ NOTES
    This command is currently in alpha and might change without notice. If this
    command fails with API permission errors despite specifying the correct
    project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. These variants are also available:
+
+        $ gcloud compute network-firewall-policies rules describe
+
+        $ gcloud beta compute network-firewall-policies rules describe

--- a/gcloud/alpha/compute/network-firewall-policies/rules/help
+++ b/gcloud/alpha/compute/network-firewall-policies/rules/help
@ -27,11 +27,15 @@ COMMANDS
        (ALPHA) Describes a Compute Engine network firewall policy rule.

     update
-        (ALPHA) Updates a Compute Engine network firewall policy rule.
+        (ALPHA) Creates a Compute Engine network firewall policy rule.

 NOTES
    This command is currently in alpha and might change without notice. If this
    command fails with API permission errors despite specifying the correct
    project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. These variants are also available:
+
+        $ gcloud compute network-firewall-policies rules
+
+        $ gcloud beta compute network-firewall-policies rules

--- a/gcloud/alpha/compute/network-firewall-policies/rules/update
+++ b/gcloud/alpha/compute/network-firewall-policies/rules/update
@ -1,5 +1,5 @@
 NAME
-    gcloud alpha compute network-firewall-policies rules update - updates a
+    gcloud alpha compute network-firewall-policies rules update - creates a
        Compute Engine network firewall policy rule

 SYNOPSIS
@ -17,7 +17,7 @@ SYNOPSIS

 DESCRIPTION
    (ALPHA) gcloud alpha compute network-firewall-policies rules update is used
-    to update network firewall policy rules.
+    to create network firewall policy rules.

 EXAMPLES
    To update a rule with priority 10 in a global network firewall policy with
@ -118,5 +118,9 @@ NOTES
    This command is currently in alpha and might change without notice. If this
    command fails with API permission errors despite specifying the correct
    project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. These variants are also available:
+
+        $ gcloud compute network-firewall-policies rules update
+
+        $ gcloud beta compute network-firewall-policies rules update

--- a/gcloud/alpha/compute/network-firewall-policies/update
+++ b/gcloud/alpha/compute/network-firewall-policies/update
@ -54,5 +54,9 @@ NOTES
    This command is currently in alpha and might change without notice. If this
    command fails with API permission errors despite specifying the correct
    project, you might be trying to access an API with an invitation-only early
-    access allowlist.
+    access allowlist. These variants are also available:
+
+        $ gcloud compute network-firewall-policies update
+
+        $ gcloud beta compute network-firewall-policies update

--- a/gcloud/alpha/compute/networks/create
+++ b/gcloud/alpha/compute/networks/create
@ -5,8 +5,9 @@ SYNOPSIS
    gcloud alpha compute networks create NAME
        [--bgp-routing-mode=MODE; default="regional"]
        [--description=DESCRIPTION] [--[no-]enable-ula-internal-ipv6]
-        [--internal-ipv6-range=INTERNAL_IPV6_RANGE] [--mtu=MTU] [--range=RANGE]
-        [--subnet-mode=MODE] [GCLOUD_WIDE_FLAG ...]
+        [--internal-ipv6-range=INTERNAL_IPV6_RANGE] [--mtu=MTU]
+        [--network-firewall-policy-enforcement-order=NETWORK_FIREWALL_POLICY_ENFORCEMENT_ORDER]
+        [--range=RANGE] [--subnet-mode=MODE] [GCLOUD_WIDE_FLAG ...]

 DESCRIPTION
    (ALPHA) gcloud alpha compute networks create is used to create virtual
@ -59,6 +60,17 @@ FLAGS
        and the maximum is 1500 bytes. The MTU advertised via DHCP to all
        instances attached to this network.

+     --network-firewall-policy-enforcement-order=NETWORK_FIREWALL_POLICY_ENFORCEMENT_ORDER
+        The Network Firewall Policy enforcement order of this network. If not
+        specified, defaults to AFTER_CLASSIC_FIREWALL.
+
+        NETWORK_FIREWALL_POLICY_ENFORCEMENT_ORDER must be one of:
+
+         AFTER_CLASSIC_FIREWALL
+            Network Firewall Policy is enforced after classic firewall.
+         BEFORE_CLASSIC_FIREWALL
+            Network Firewall Policy is enforced before classic firewall.
+
     --range=RANGE
        Specifies the IPv4 address range of legacy mode networks. The range
        must be specified in CIDR format:
--- a/gcloud/alpha/compute/networks/update
+++ b/gcloud/alpha/compute/networks/update
@ -5,6 +5,7 @@ SYNOPSIS
    gcloud alpha compute networks update NAME [--async]
        [--[no-]enable-ula-internal-ipv6]
        [--internal-ipv6-range=INTERNAL_IPV6_RANGE] [--mtu=MTU]
+        [--network-firewall-policy-enforcement-order=NETWORK_FIREWALL_POLICY_ENFORCEMENT_ORDER]
        [--bgp-routing-mode=MODE | --switch-to-custom-subnet-mode]
        [GCLOUD_WIDE_FLAG ...]

@ -42,6 +43,17 @@ FLAGS
        and the maximum is 1500 bytes. The MTU advertised via DHCP to all
        instances attached to this network.

+     --network-firewall-policy-enforcement-order=NETWORK_FIREWALL_POLICY_ENFORCEMENT_ORDER
+        The Network Firewall Policy enforcement order of this network. If not
+        specified, defaults to AFTER_CLASSIC_FIREWALL.
+
+        NETWORK_FIREWALL_POLICY_ENFORCEMENT_ORDER must be one of:
+
+         AFTER_CLASSIC_FIREWALL
+            Network Firewall Policy is enforced after classic firewall.
+         BEFORE_CLASSIC_FIREWALL
+            Network Firewall Policy is enforced before classic firewall.
+
     At most one of these can be specified:

       --bgp-routing-mode=MODE