From 8b80260bd970f256e65ba30f0de49fea5a81c777 Mon Sep 17 00:00:00 2001 From: Automated Date: Thu, 23 Jun 2022 08:40:08 +0000 Subject: [PATCH] gcloud: Thu Jun 23 08:40:08 UTC 2022 --- gcloud/_version | 8 +- .../active-directory/domains/extend-schema | 79 +++++++++ gcloud/alpha/active-directory/domains/help | 3 + gcloud/alpha/anthos/config/controller/create | 6 +- gcloud/alpha/artifacts/repositories/create | 30 ++-- gcloud/alpha/assured/workloads/create | 2 +- gcloud/alpha/auth/application-default/help | 69 ++++++++ gcloud/alpha/auth/application-default/login | 124 +++++++++++++++ .../application-default/print-access-token | 74 +++++++++ gcloud/alpha/auth/application-default/revoke | 35 ++++ .../application-default/set-quota-project | 45 ++++++ gcloud/alpha/auth/help | 8 +- gcloud/alpha/compute/os-config/help | 4 + gcloud/alpha/compute/os-config/troubleshoot | 64 ++++++++ .../alpha/compute/target-grpc-proxies/create | 10 ++ gcloud/alpha/config/help | 9 ++ gcloud/alpha/config/list | 9 ++ gcloud/alpha/config/set | 9 ++ gcloud/alpha/config/unset | 9 ++ gcloud/alpha/container/aws/node-pools/update | 6 +- gcloud/alpha/container/node-pools/create | 2 +- gcloud/alpha/container/node-pools/update | 2 +- .../edge-cloud/networking/routers/create | 9 +- gcloud/alpha/filestore/instances/create | 4 +- gcloud/alpha/functions/deploy | 2 +- .../create-cred-config | 32 +++- gcloud/alpha/iap/oauth-brands/create | 4 +- gcloud/alpha/iap/oauth-brands/describe | 4 +- gcloud/alpha/iap/oauth-brands/help | 4 +- gcloud/alpha/iap/oauth-brands/list | 4 +- gcloud/alpha/iap/oauth-clients/create | 4 +- gcloud/alpha/iap/oauth-clients/delete | 8 +- gcloud/alpha/iap/oauth-clients/describe | 4 +- gcloud/alpha/iap/oauth-clients/help | 4 +- gcloud/alpha/iap/oauth-clients/list | 4 +- gcloud/alpha/iap/oauth-clients/reset-secret | 4 +- .../federations/add-iam-policy-binding | 97 +++++++++++ gcloud/alpha/metastore/federations/create | 114 +++++++++++++ gcloud/alpha/metastore/federations/delete | 80 ++++++++++ gcloud/alpha/metastore/federations/describe | 75 +++++++++ .../metastore/federations/get-iam-policy | 103 ++++++++++++ gcloud/alpha/metastore/federations/help | 54 +++++++ gcloud/alpha/metastore/federations/list | 92 +++++++++++ .../federations/remove-iam-policy-binding | 98 ++++++++++++ .../metastore/federations/set-iam-policy | 82 ++++++++++ gcloud/alpha/metastore/federations/update | 150 ++++++++++++++++++ gcloud/alpha/metastore/help | 3 + gcloud/alpha/run/deploy | 8 +- gcloud/alpha/run/services/update | 9 +- gcloud/alpha/sql/flags/list | 9 +- gcloud/alpha/sql/instances/create | 26 ++- gcloud/alpha/sql/instances/patch | 21 ++- gcloud/artifacts/repositories/create | 28 ++-- gcloud/assured/workloads/create | 2 +- gcloud/auth/application-default/help | 4 +- gcloud/auth/application-default/login | 12 +- .../application-default/print-access-token | 4 +- gcloud/auth/application-default/revoke | 4 +- .../application-default/set-quota-project | 4 +- .../active-directory/domains/extend-schema | 77 +++++++++ gcloud/beta/active-directory/domains/help | 3 + gcloud/beta/artifacts/repositories/create | 30 ++-- gcloud/beta/assured/workloads/create | 2 +- gcloud/beta/auth/application-default/help | 6 +- gcloud/beta/auth/application-default/login | 14 +- .../application-default/print-access-token | 6 +- gcloud/beta/auth/application-default/revoke | 6 +- .../application-default/set-quota-project | 6 +- gcloud/beta/compute/start-iap-tunnel | 15 +- .../beta/compute/target-grpc-proxies/create | 10 ++ gcloud/beta/config/get | 9 ++ gcloud/beta/config/help | 9 ++ gcloud/beta/config/list | 9 ++ gcloud/beta/config/set | 9 ++ gcloud/beta/config/unset | 9 ++ gcloud/beta/container/node-pools/create | 2 +- gcloud/beta/container/node-pools/update | 2 +- gcloud/beta/dataflow/jobs/cancel | 9 +- gcloud/beta/filestore/instances/create | 4 +- gcloud/beta/functions/deploy | 2 +- .../create-cred-config | 32 +++- gcloud/beta/iap/oauth-brands/create | 6 +- gcloud/beta/iap/oauth-brands/describe | 6 +- gcloud/beta/iap/oauth-brands/help | 6 +- gcloud/beta/iap/oauth-brands/list | 6 +- gcloud/beta/iap/oauth-clients/create | 6 +- gcloud/beta/iap/oauth-clients/delete | 6 +- gcloud/beta/iap/oauth-clients/describe | 6 +- gcloud/beta/iap/oauth-clients/help | 6 +- gcloud/beta/iap/oauth-clients/list | 6 +- gcloud/beta/iap/oauth-clients/reset-secret | 6 +- .../federations/add-iam-policy-binding | 95 +++++++++++ gcloud/beta/metastore/federations/create | 112 +++++++++++++ gcloud/beta/metastore/federations/delete | 77 +++++++++ gcloud/beta/metastore/federations/describe | 73 +++++++++ .../beta/metastore/federations/get-iam-policy | 101 ++++++++++++ gcloud/beta/metastore/federations/help | 52 ++++++ gcloud/beta/metastore/federations/list | 90 +++++++++++ .../federations/remove-iam-policy-binding | 96 +++++++++++ .../beta/metastore/federations/set-iam-policy | 80 ++++++++++ gcloud/beta/metastore/federations/update | 147 +++++++++++++++++ gcloud/beta/metastore/help | 3 + gcloud/beta/sql/flags/list | 9 +- gcloud/beta/sql/instances/create | 26 ++- gcloud/beta/sql/instances/patch | 21 ++- gcloud/compute/target-grpc-proxies/create | 10 ++ gcloud/config/get | 9 ++ gcloud/config/help | 9 ++ gcloud/config/list | 9 ++ gcloud/config/set | 9 ++ gcloud/config/unset | 9 ++ gcloud/container/aws/node-pools/update | 6 +- gcloud/container/node-pools/create | 2 +- gcloud/container/node-pools/update | 2 +- gcloud/dataflow/jobs/cancel | 9 +- gcloud/eventarc/channels/create | 8 + gcloud/filestore/instances/create | 12 +- gcloud/functions/deploy | 2 +- .../create-cred-config | 32 +++- gcloud/iap/help | 6 + gcloud/iap/oauth-brands/create | 58 +++++++ gcloud/iap/oauth-brands/describe | 54 +++++++ gcloud/iap/oauth-brands/help | 33 ++++ gcloud/iap/oauth-brands/list | 65 ++++++++ gcloud/iap/oauth-clients/create | 64 ++++++++ gcloud/iap/oauth-clients/delete | 67 ++++++++ gcloud/iap/oauth-clients/describe | 65 ++++++++ gcloud/iap/oauth-clients/help | 39 +++++ gcloud/iap/oauth-clients/list | 79 +++++++++ gcloud/iap/oauth-clients/reset-secret | 66 ++++++++ .../federations/add-iam-policy-binding | 94 +++++++++++ gcloud/metastore/federations/create | 111 +++++++++++++ gcloud/metastore/federations/delete | 76 +++++++++ gcloud/metastore/federations/describe | 72 +++++++++ gcloud/metastore/federations/get-iam-policy | 100 ++++++++++++ gcloud/metastore/federations/help | 51 ++++++ gcloud/metastore/federations/list | 88 ++++++++++ .../federations/remove-iam-policy-binding | 95 +++++++++++ gcloud/metastore/federations/set-iam-policy | 79 +++++++++ gcloud/metastore/federations/update | 146 +++++++++++++++++ gcloud/metastore/help | 3 + gcloud/sql/flags/list | 9 +- gcloud/sql/instances/create | 26 ++- gcloud/sql/instances/patch | 21 ++- 144 files changed, 4593 insertions(+), 192 deletions(-) create mode 100644 gcloud/alpha/active-directory/domains/extend-schema create mode 100644 gcloud/alpha/auth/application-default/help create mode 100644 gcloud/alpha/auth/application-default/login create mode 100644 gcloud/alpha/auth/application-default/print-access-token create mode 100644 gcloud/alpha/auth/application-default/revoke create mode 100644 gcloud/alpha/auth/application-default/set-quota-project create mode 100644 gcloud/alpha/compute/os-config/troubleshoot create mode 100644 gcloud/alpha/metastore/federations/add-iam-policy-binding create mode 100644 gcloud/alpha/metastore/federations/create create mode 100644 gcloud/alpha/metastore/federations/delete create mode 100644 gcloud/alpha/metastore/federations/describe create mode 100644 gcloud/alpha/metastore/federations/get-iam-policy create mode 100644 gcloud/alpha/metastore/federations/help create mode 100644 gcloud/alpha/metastore/federations/list create mode 100644 gcloud/alpha/metastore/federations/remove-iam-policy-binding create mode 100644 gcloud/alpha/metastore/federations/set-iam-policy create mode 100644 gcloud/alpha/metastore/federations/update create mode 100644 gcloud/beta/active-directory/domains/extend-schema create mode 100644 gcloud/beta/metastore/federations/add-iam-policy-binding create mode 100644 gcloud/beta/metastore/federations/create create mode 100644 gcloud/beta/metastore/federations/delete create mode 100644 gcloud/beta/metastore/federations/describe create mode 100644 gcloud/beta/metastore/federations/get-iam-policy create mode 100644 gcloud/beta/metastore/federations/help create mode 100644 gcloud/beta/metastore/federations/list create mode 100644 gcloud/beta/metastore/federations/remove-iam-policy-binding create mode 100644 gcloud/beta/metastore/federations/set-iam-policy create mode 100644 gcloud/beta/metastore/federations/update create mode 100644 gcloud/iap/oauth-brands/create create mode 100644 gcloud/iap/oauth-brands/describe create mode 100644 gcloud/iap/oauth-brands/help create mode 100644 gcloud/iap/oauth-brands/list create mode 100644 gcloud/iap/oauth-clients/create create mode 100644 gcloud/iap/oauth-clients/delete create mode 100644 gcloud/iap/oauth-clients/describe create mode 100644 gcloud/iap/oauth-clients/help create mode 100644 gcloud/iap/oauth-clients/list create mode 100644 gcloud/iap/oauth-clients/reset-secret create mode 100644 gcloud/metastore/federations/add-iam-policy-binding create mode 100644 gcloud/metastore/federations/create create mode 100644 gcloud/metastore/federations/delete create mode 100644 gcloud/metastore/federations/describe create mode 100644 gcloud/metastore/federations/get-iam-policy create mode 100644 gcloud/metastore/federations/help create mode 100644 gcloud/metastore/federations/list create mode 100644 gcloud/metastore/federations/remove-iam-policy-binding create mode 100644 gcloud/metastore/federations/set-iam-policy create mode 100644 gcloud/metastore/federations/update diff --git a/gcloud/_version b/gcloud/_version index a74333f22..5a37186c1 100644 --- a/gcloud/_version +++ b/gcloud/_version @@ -1,6 +1,6 @@ -Google Cloud SDK 390.0.0 -alpha 2022.06.10 -beta 2022.06.10 +Google Cloud SDK 391.0.0 +alpha 2022.06.17 +beta 2022.06.17 bq 2.0.75 -core 2022.06.10 +core 2022.06.17 gsutil 5.10 diff --git a/gcloud/alpha/active-directory/domains/extend-schema b/gcloud/alpha/active-directory/domains/extend-schema new file mode 100644 index 000000000..06de115da --- /dev/null +++ b/gcloud/alpha/active-directory/domains/extend-schema @@ -0,0 +1,79 @@ +NAME + gcloud alpha active-directory domains extend-schema - initiate schema + extension for a Managed Microsoft AD domain + +SYNOPSIS + gcloud alpha active-directory domains extend-schema DOMAIN + --description=DESCRIPTION --ldif-file=LDIF_FILE [--async] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Initiate schema extension for a Managed Microsoft AD domain. + + This command can fail for the following reasons: + ▪ The specified domain doesn't exist. + ▪ The specified domain is either being created or updated. + ▪ The specified domain is under maintenance. + ▪ The active account doesn't have permission to initiate schema + extension on the specified domain. + +EXAMPLES + The following command initiates a schema extension for the domain + my-domain.com in project my-project, with description "Test Description", + using the LDIF file "demo.ldif" + + $ gcloud alpha active-directory domains extend-schema \ + my-domain.com --description="Test Description" \ + --ldif-file=demo.ldf --project=my-project --async + +POSITIONAL ARGUMENTS + Domain resource - Name of the Managed Microsoft AD domain for which you + want to extend schema. This represents a Cloud resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. To set the project attribute: + ◆ provide the argument domain on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + DOMAIN + ID of the domain or fully qualified identifier for the domain. To set + the domain attribute: + ▸ provide the argument domain on the command line. + +REQUIRED FLAGS + --description=DESCRIPTION + Description of schema change. + + --ldif-file=LDIF_FILE + Local LDIF file path that contains commands for schema extension. The + file size can't be larger than 1 MB. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the managedidentities/v1alpha1 API. The full + documentation for this API can be found at: + https://cloud.google.com/managed-microsoft-ad/ + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta active-directory domains extend-schema + diff --git a/gcloud/alpha/active-directory/domains/help b/gcloud/alpha/active-directory/domains/help index 736129f43..113d637cf 100644 --- a/gcloud/alpha/active-directory/domains/help +++ b/gcloud/alpha/active-directory/domains/help @@ -41,6 +41,9 @@ COMMANDS describe-ldaps-settings (ALPHA) Describe the LDAPS settings of a Managed Microsoft AD domain. + extend-schema + (ALPHA) Initiate schema extension for a Managed Microsoft AD domain. + get-iam-policy (ALPHA) Describe the IAM policy for a Managed Microsoft AD domain. diff --git a/gcloud/alpha/anthos/config/controller/create b/gcloud/alpha/anthos/config/controller/create index c450f85bf..70c13c1a7 100644 --- a/gcloud/alpha/anthos/config/controller/create +++ b/gcloud/alpha/anthos/config/controller/create @@ -5,7 +5,8 @@ NAME SYNOPSIS gcloud alpha anthos config controller create (NAME : --location=LOCATION) [--async] [--cluster-ipv4-cidr-block=CLUSTER_IPV4_CIDR_BLOCK] - [--cluster-named-range=CLUSTER_NAMED_RANGE] [--man-block=MAN_BLOCK] + [--cluster-named-range=CLUSTER_NAMED_RANGE] + [--experimental-features=[FEATURE,...]] [--man-block=MAN_BLOCK] [--master-ipv4-cidr-block=MASTER_IPV4_CIDR_BLOCK] [--network=NETWORK] [--services-ipv4-cidr-block=SERVICES_IPV4_CIDR_BLOCK] [--services-named-range=SERVICES_NAMED_RANGE] [--subnet=SUBNET] @@ -66,6 +67,9 @@ FLAGS use for pod IP addresses. Alternatively, --cluster_cidr_block can be used to automatically create a GKE-managed one. + --experimental-features=[FEATURE,...] + Enable experimental features. It can only be enabled in ALPHA version. + --man-block=MAN_BLOCK Master Authorized Network. Allows access to the Kubernetes control plane from this block. Defaults to '0.0.0.0/0' if flag is not provided. diff --git a/gcloud/alpha/artifacts/repositories/create b/gcloud/alpha/artifacts/repositories/create index 4a4a6fe19..e1a395f5f 100644 --- a/gcloud/alpha/artifacts/repositories/create +++ b/gcloud/alpha/artifacts/repositories/create @@ -67,20 +67,22 @@ REQUIRED FLAGS --repository-format=REPOSITORY_FORMAT Format of the repository. REPOSITORY_FORMAT must be one of: - apt - APT package format. - docker - Docker image format. - googet - GooGet package format. - maven - Maven package format. - npm - NPM package format. - python - Python package format. - yum - YUM package format. + apt + APT package format. + docker + Docker image format. + googet + GooGet package format. + kfp + KFP package format. + maven + Maven package format. + npm + NPM package format. + python + Python package format. + yum + YUM package format. OPTIONAL FLAGS --allow-snapshot-overwrites diff --git a/gcloud/alpha/assured/workloads/create b/gcloud/alpha/assured/workloads/create index 1ddbe04d3..8b45704a2 100644 --- a/gcloud/alpha/assured/workloads/create +++ b/gcloud/alpha/assured/workloads/create @@ -51,7 +51,7 @@ REQUIRED FLAGS The compliance regime of the new Assured Workloads environment. COMPLIANCE_REGIME must be one of: CJIS, FEDRAMP_HIGH, FEDRAMP_MODERATE, IL4, US_REGIONAL_ACCESS, HIPAA, HITRUST, EU_REGIONS_AND_SUPPORT, - CA_REGIONS_AND_SUPPORT. + CA_REGIONS_AND_SUPPORT, ITAR. --display-name=DISPLAY_NAME The display name of the new Assured Workloads environment diff --git a/gcloud/alpha/auth/application-default/help b/gcloud/alpha/auth/application-default/help new file mode 100644 index 000000000..0fdf7be0e --- /dev/null +++ b/gcloud/alpha/auth/application-default/help @@ -0,0 +1,69 @@ +NAME + gcloud alpha auth application-default - manage your active Application + Default Credentials + +SYNOPSIS + gcloud alpha auth application-default COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Application Default Credentials (ADC) provide a method to get + credentials used in calling Google APIs. The gcloud alpha auth + application-default command group allows you to manage active credentials + on your machine that are used for local application development. + + These credentials are only used by Google client libraries in your own + application. + + For more information about ADC and how it works, see Authenticating as a + service account (https://cloud.google.com/docs/authentication/production). + +EXAMPLES + To use your own user credentials for your application to access an API, + run: + + $ gcloud alpha auth application-default login + + This will take you through a web flow to acquire new user credentials. + + To create a service account and have your application use it for API + access, run: + + $ gcloud iam service-accounts create my-account + $ gcloud iam service-accounts keys create key.json \ + --iam-account=my-account@my-project.iam.gserviceaccount.com + $ export GOOGLE_APPLICATION_CREDENTIALS=key.json + $ ./my_application.sh + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + login + (ALPHA) Acquire new user credentials to use for Application Default + Credentials. + + print-access-token + (ALPHA) Print an access token for your current Application Default + Credentials. + + revoke + (ALPHA) Revoke previously generated Application Default Credentials. + + set-quota-project + (ALPHA) Update or add a quota project in application default + credentials (ADC). + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud auth application-default + + $ gcloud beta auth application-default + diff --git a/gcloud/alpha/auth/application-default/login b/gcloud/alpha/auth/application-default/login new file mode 100644 index 000000000..6ae9f3446 --- /dev/null +++ b/gcloud/alpha/auth/application-default/login @@ -0,0 +1,124 @@ +NAME + gcloud alpha auth application-default login - acquire new user credentials + to use for Application Default Credentials + +SYNOPSIS + gcloud alpha auth application-default login [--no-browser] + [--client-id-file=CLIENT_ID_FILE] [--disable-quota-project] + [--no-launch-browser] [--scopes=SCOPE,[SCOPE,...]] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Obtains user access credentials via a web flow and puts them in the + well-known location for Application Default Credentials (ADC). + + This command is useful when you are developing code that would normally use + a service account but need to run the code in a local development + environment where it's easier to provide user credentials. The credentials + will apply to all API calls that make use of the Application Default + Credentials client library. Do not set the GOOGLE_APPLICATION_CREDENTIALS + environment variable if you want to use the credentials generated by this + command in your local development. This command tries to find a quota + project from gcloud's context and write it to ADC so that Google client + libraries can use it for billing and quota. Alternatively, you can use the + --client-id-file flag. In this case, the project owning the client ID will + be used for billing and quota. You can create the client ID file at + https://console.cloud.google.com/apis/credentials. + + This command has no effect on the user account(s) set up by the gcloud auth + login command. + + Any credentials previously generated by gcloud auth application-default + login will be overwritten. + +EXAMPLES + If you want your local application to temporarily use your own user + credentials for API access, run: + + $ gcloud alpha auth application-default login + + If you'd like to login by passing in a file containing your own client id, + run: + + $ gcloud alpha auth application-default login \ + --client-id-file=clientid.json + +FLAGS + --no-browser + Use this flag to authenticate the client libraries on a machine without + a web browser. + + Run gcloud auth login --no-browser and follow these steps: + + 1. Copy the long command that begins with "gcloud auth login + --remote-bootstrap=". + + 2. Paste and run this command on the command line of a different, + trusted machine that has local installations of both a web browser and + the gcloud CLI tool version 372.0 or later. + + 3. Copy the long URL output from the machine with the web browser. + + 4. Paste the long URL back to the first machine under the prompt, + "Enter the output of the above command", and press Enter to complete + the authorization. + + --client-id-file=CLIENT_ID_FILE + A file containing your own client id to use to login. If + --client-id-file is specified, the quota project will not be written to + ADC. + + --disable-quota-project + By default, the project in billing/quota_project or core/project will + be written to application default credentials (ADC) as the quota + project. When both are set, billing/quota_project takes precedence. You + can use --billing-project to overwrite the value in + billing/quota_project. Similarly, you can use --project to overwrite + the value in core/project. Client libraries will send it to services + and use it for quota and billing. To be able to use a project as the + quota project, the account in ADC must have the + serviceusage.services.use permission on the project. This permission is + granted to the project editor and project owner. You can create custom + roles to include this permission. + + Note that some cloud services may ignore this quota project and still + bill the project owning the resources. + + In the following situations, you may use this flag to skip setting the + quota project: + + ◆ The account in ADC cannot be granted the project editor or owner + role or any role with the serviceusage.services.use permission. + ◆ You always want to bill the project owning the resources. + + --launch-browser + Launch a browser for authorization. If not enabled or if it is not + possible to launch a browser, prints a URL to standard output to be + copied. Enabled by default, use --no-launch-browser to disable. + + --scopes=SCOPE,[SCOPE,...] + The names of the scopes to authorize for. By default openid, + https://www.googleapis.com/auth/userinfo.email, + https://www.googleapis.com/auth/cloud-platform, + https://www.googleapis.com/auth/sqlservice.login scopes are used. The + list of possible scopes can be found at: + https://developers.google.com/identity/protocols/googlescopes. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud auth application-default login + + $ gcloud beta auth application-default login + diff --git a/gcloud/alpha/auth/application-default/print-access-token b/gcloud/alpha/auth/application-default/print-access-token new file mode 100644 index 000000000..bf1f2b613 --- /dev/null +++ b/gcloud/alpha/auth/application-default/print-access-token @@ -0,0 +1,74 @@ +NAME + gcloud alpha auth application-default print-access-token - print an access + token for your current Application Default Credentials + +SYNOPSIS + gcloud alpha auth application-default print-access-token + [--scopes=SCOPE,[SCOPE,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) gcloud alpha auth application-default print-access-token generates + and prints an access token for the current Application Default Credential + (ADC). The ADC (https://google.aip.dev/auth/4110) can be specified either + by using gcloud auth application-default login, gcloud auth login + --cred-file=/path/to/cred/file --update-adc, or by setting the + GOOGLE_APPLICATION_CREDENTIALS environment variable. + + The access token generated by gcloud alpha auth application-default + print-access-token is useful for manually testing APIs via curl or similar + tools. + + In order to print details of the access token, such as the associated + account and the token's expiration time in seconds, run: + + $ curl -H "Content-Type: application/x-www-form-urlencoded" \ + -d "access_token=$(gcloud auth application-default print-access-token)" \ + https://www.googleapis.com/oauth2/v1/tokeninfo + + Note that token itself may not be enough to access some services. If you + use the token with curl or similar tools, you may see permission errors + similar to "Your application has authenticated using end user credentials + from the Google Cloud SDK or Google Cloud Shell". If it happens, you may + need to provide a quota project in the "X-Goog-User-Project" header. For + example, + + $ curl -H "X-Goog-User-Project: your-project" \ + -H \ + "Authorization: Bearer $(gcloud auth application-default \ + print-access-token)" foo.googleapis.com + + The identity that granted the token must have the serviceusage.services.use + permission on the provided project. See + https://cloud.google.com/apis/docs/system-parameters for more information. + +FLAGS + --scopes=SCOPE,[SCOPE,...] + The scopes to authorize for. This flag is supported for user accounts + and service accounts only. The list of possible scopes can be found at: + https://developers.google.com/identity/protocols/googlescopes. + + For end-user accounts, the provided scopes must be from [openid, + https://www.googleapis.com/auth/userinfo.email, + https://www.googleapis.com/auth/cloud-platform, + https://www.googleapis.com/auth/sqlservice.login], or the scopes + previously specified through gcloud auth application-default login + --scopes. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud auth application-default print-access-token + + $ gcloud beta auth application-default print-access-token + diff --git a/gcloud/alpha/auth/application-default/revoke b/gcloud/alpha/auth/application-default/revoke new file mode 100644 index 000000000..975592cdd --- /dev/null +++ b/gcloud/alpha/auth/application-default/revoke @@ -0,0 +1,35 @@ +NAME + gcloud alpha auth application-default revoke - revoke previously generated + Application Default Credentials + +SYNOPSIS + gcloud alpha auth application-default revoke [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Revokes Application Default Credentials that have been previously + generated by gcloud alpha auth application-default login and deletes the + local credential file. + + This does not affect any credentials set up through other means, such as + credentials referenced by the Application Default Credentials environment + variable or service account credentials that are active on a Google Compute + Engine virtual machine. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud auth application-default revoke + + $ gcloud beta auth application-default revoke + diff --git a/gcloud/alpha/auth/application-default/set-quota-project b/gcloud/alpha/auth/application-default/set-quota-project new file mode 100644 index 000000000..ae79fb684 --- /dev/null +++ b/gcloud/alpha/auth/application-default/set-quota-project @@ -0,0 +1,45 @@ +NAME + gcloud alpha auth application-default set-quota-project - update or add a + quota project in application default credentials (ADC) + +SYNOPSIS + gcloud alpha auth application-default set-quota-project QUOTA_PROJECT_ID + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Before running this command, an ADC must already be generated using + $ gcloud auth application-default login. The quota project can be used by + client libraries for the billing purpose. The existing application default + credentials must have the serviceusage.services.use permission on the given + project. + +EXAMPLES + To update the quota project in application default credentials to + my-quota-project, run: + + $ gcloud alpha auth application-default set-quota-project \ + my-quota-project + +POSITIONAL ARGUMENTS + QUOTA_PROJECT_ID + Quota project ID to add to application default credentials. If a quota + project already exists, it will be updated. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud auth application-default set-quota-project + + $ gcloud beta auth application-default set-quota-project + diff --git a/gcloud/alpha/auth/help b/gcloud/alpha/auth/help index 3216a72d9..00ad2905d 100644 --- a/gcloud/alpha/auth/help +++ b/gcloud/alpha/auth/help @@ -2,7 +2,7 @@ NAME gcloud alpha auth - manage oauth2 credentials for the Google Cloud CLI SYNOPSIS - gcloud alpha auth COMMAND [GCLOUD_WIDE_FLAG ...] + gcloud alpha auth GROUP | COMMAND [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) The gcloud auth command group lets you grant and revoke @@ -41,6 +41,12 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. +GROUPS + GROUP is one of the following: + + application-default + (ALPHA) Manage your active Application Default Credentials. + COMMANDS COMMAND is one of the following: diff --git a/gcloud/alpha/compute/os-config/help b/gcloud/alpha/compute/os-config/help index bc121ada6..7eb52a0d6 100644 --- a/gcloud/alpha/compute/os-config/help +++ b/gcloud/alpha/compute/os-config/help @@ -48,6 +48,10 @@ COMMANDS os-upgrade (ALPHA) Upgrade the instances OS version. + troubleshoot + (ALPHA) Troubleshoot issues with the setup of VM Manager on a specified + VM instance. + NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct diff --git a/gcloud/alpha/compute/os-config/troubleshoot b/gcloud/alpha/compute/os-config/troubleshoot new file mode 100644 index 000000000..714b21750 --- /dev/null +++ b/gcloud/alpha/compute/os-config/troubleshoot @@ -0,0 +1,64 @@ +NAME + gcloud alpha compute os-config troubleshoot - troubleshoot issues with the + setup of VM Manager on a specified VM instance + +SYNOPSIS + gcloud alpha compute os-config troubleshoot INSTANCE_NAME [--zone=ZONE] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) gcloud alpha compute os-config troubleshoot troubleshoots issues + with the setup of VM Manager on a specified VM instance + + Troubleshoot checks if the OS Config API is enabled for the instance. + +EXAMPLES + To troubleshoot an instance named my-instance in zone us-west1-a, run + + $ gcloud alpha compute os-config troubleshoot my-instance \ --zone=us-west1-a + +POSITIONAL ARGUMENTS + INSTANCE_NAME + Name of the instance to operate on. For details on valid instance + names, refer to the criteria documented under the field 'name' at: + https://cloud.google.com/compute/docs/reference/rest/v1/instances + +FLAGS + --zone=ZONE + Zone of the instance to operate on. If not specified, you might be + prompted to select a zone (interactive mode only). gcloud attempts to + identify the appropriate zone by searching for resources in your + currently active project. If the zone cannot be determined, gcloud + prompts you for a selection with all available Google Cloud Platform + zones. + + To avoid prompting when this flag is omitted, the user can set the + compute/zone property: + + $ gcloud config set compute/zone ZONE + + A list of zones can be fetched by running: + + $ gcloud compute zones list + + To unset the property, run: + + $ gcloud config unset compute/zone + + Alternatively, the zone can be stored in the environment variable + CLOUDSDK_COMPUTE_ZONE. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/compute/target-grpc-proxies/create b/gcloud/alpha/compute/target-grpc-proxies/create index 1a561b983..47912b190 100644 --- a/gcloud/alpha/compute/target-grpc-proxies/create +++ b/gcloud/alpha/compute/target-grpc-proxies/create @@ -5,6 +5,7 @@ NAME SYNOPSIS gcloud alpha compute target-grpc-proxies create NAME --url-map=URL_MAP [--description=DESCRIPTION] [--validate-for-proxyless] + [--global-url-map | --url-map-region=URL_MAP_REGION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -50,6 +51,15 @@ OPTIONAL FLAGS cause unexpected behavior in gRPC applications if unsupported features are configured. + At most one of these can be specified: + + --global-url-map + If set, the URL map is global. + + --url-map-region=URL_MAP_REGION + Region of the URL map to operate on. Overrides the default + compute/region property value for this command invocation. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/config/help b/gcloud/alpha/config/help index f02d1a033..f2777f793 100644 --- a/gcloud/alpha/config/help +++ b/gcloud/alpha/config/help @@ -644,6 +644,10 @@ AVAILABLE PROPERTIES location Default Google Cloud location to use for Anthos clusters on Azure. + container_vmware + location + Default Google Cloud location to use for Anthos clusters on VMware. + context_aware use_client_certificate If True, use client certificate to authorize user device using @@ -1034,6 +1038,11 @@ AVAILABLE PROPERTIES instead (inexpensively) compare the cloud source and destination hashes. + convert_incompatible_windows_path_characters + Allows automatic conversion of invalid path characters on Windows. + If not enabled, Windows will raise an OSError if an invalid + character is encountered. + copy_chunk_size Chunk size used for copying to in clouds or on disk. diff --git a/gcloud/alpha/config/list b/gcloud/alpha/config/list index 5d8e4792d..69e102a46 100644 --- a/gcloud/alpha/config/list +++ b/gcloud/alpha/config/list @@ -649,6 +649,10 @@ AVAILABLE PROPERTIES location Default Google Cloud location to use for Anthos clusters on Azure. + container_vmware + location + Default Google Cloud location to use for Anthos clusters on VMware. + context_aware use_client_certificate If True, use client certificate to authorize user device using @@ -1039,6 +1043,11 @@ AVAILABLE PROPERTIES instead (inexpensively) compare the cloud source and destination hashes. + convert_incompatible_windows_path_characters + Allows automatic conversion of invalid path characters on Windows. + If not enabled, Windows will raise an OSError if an invalid + character is encountered. + copy_chunk_size Chunk size used for copying to in clouds or on disk. diff --git a/gcloud/alpha/config/set b/gcloud/alpha/config/set index bb3becc9e..17839727d 100644 --- a/gcloud/alpha/config/set +++ b/gcloud/alpha/config/set @@ -662,6 +662,10 @@ AVAILABLE PROPERTIES location Default Google Cloud location to use for Anthos clusters on Azure. + container_vmware + location + Default Google Cloud location to use for Anthos clusters on VMware. + context_aware use_client_certificate If True, use client certificate to authorize user device using @@ -1052,6 +1056,11 @@ AVAILABLE PROPERTIES instead (inexpensively) compare the cloud source and destination hashes. + convert_incompatible_windows_path_characters + Allows automatic conversion of invalid path characters on Windows. + If not enabled, Windows will raise an OSError if an invalid + character is encountered. + copy_chunk_size Chunk size used for copying to in clouds or on disk. diff --git a/gcloud/alpha/config/unset b/gcloud/alpha/config/unset index adba40846..15b5c879e 100644 --- a/gcloud/alpha/config/unset +++ b/gcloud/alpha/config/unset @@ -623,6 +623,10 @@ AVAILABLE PROPERTIES location Default Google Cloud location to use for Anthos clusters on Azure. + container_vmware + location + Default Google Cloud location to use for Anthos clusters on VMware. + context_aware use_client_certificate If True, use client certificate to authorize user device using @@ -1013,6 +1017,11 @@ AVAILABLE PROPERTIES instead (inexpensively) compare the cloud source and destination hashes. + convert_incompatible_windows_path_characters + Allows automatic conversion of invalid path characters on Windows. + If not enabled, Windows will raise an OSError if an invalid + character is encountered. + copy_chunk_size Chunk size used for copying to in clouds or on disk. diff --git a/gcloud/alpha/container/aws/node-pools/update b/gcloud/alpha/container/aws/node-pools/update index eefc099e5..ba208b213 100644 --- a/gcloud/alpha/container/aws/node-pools/update +++ b/gcloud/alpha/container/aws/node-pools/update @@ -6,8 +6,7 @@ SYNOPSIS gcloud alpha container aws node-pools update (NODE_POOL : --cluster=CLUSTER --location=LOCATION) [--async] [--config-encryption-kms-key-arn=CONFIG_ENCRYPTION_KMS_KEY_ARN] - [--instance-type=INSTANCE_TYPE] [--node-version=NODE_VERSION] - [--root-volume-iops=ROOT_VOLUME_IOPS] + [--node-version=NODE_VERSION] [--root-volume-iops=ROOT_VOLUME_IOPS] [--root-volume-kms-key-arn=ROOT_VOLUME_KMS_KEY_ARN] [--root-volume-size=ROOT_VOLUME_SIZE] [--root-volume-type=ROOT_VOLUME_TYPE] [--validate-only] @@ -72,9 +71,6 @@ FLAGS --config-encryption-kms-key-arn=CONFIG_ENCRYPTION_KMS_KEY_ARN Amazon Resource Name (ARN) of the AWS KMS key to encrypt the user data. - --instance-type=INSTANCE_TYPE - AWS EC2 instance type for the node pool's nodes. - --node-version=NODE_VERSION Kubernetes version to use for the node pool. diff --git a/gcloud/alpha/container/node-pools/create b/gcloud/alpha/container/node-pools/create index 99ffef951..f23fded70 100644 --- a/gcloud/alpha/container/node-pools/create +++ b/gcloud/alpha/container/node-pools/create @@ -289,7 +289,7 @@ FLAGS Total egress bandwidth is the available outbound bandwidth from a VM, regardless of whether the traffic is going to internal IP or external IP destinations. The following tier values are allowed: - [DEFAULT,TIER_1] + [TIER_UNSPECIFIED,TIER_1] --node-group=NODE_GROUP Assign instances of this pool to run on the specified Google Compute diff --git a/gcloud/alpha/container/node-pools/update b/gcloud/alpha/container/node-pools/update index 81aedae56..735ede0ef 100644 --- a/gcloud/alpha/container/node-pools/update +++ b/gcloud/alpha/container/node-pools/update @@ -57,7 +57,7 @@ REQUIRED FLAGS Total egress bandwidth is the available outbound bandwidth from a VM, regardless of whether the traffic is going to internal IP or external IP destinations. The following tier values are allowed: - [DEFAULT,TIER_1] + [TIER_UNSPECIFIED,TIER_1] --node-labels=[NODE_LABEL,...] Replaces all the user specified Kubernetes labels on all nodes in an diff --git a/gcloud/alpha/edge-cloud/networking/routers/create b/gcloud/alpha/edge-cloud/networking/routers/create index 771115424..17fe7711e 100644 --- a/gcloud/alpha/edge-cloud/networking/routers/create +++ b/gcloud/alpha/edge-cloud/networking/routers/create @@ -5,9 +5,8 @@ NAME SYNOPSIS gcloud alpha edge-cloud networking routers create (ROUTER : --location=LOCATION --zone=ZONE) --asn=ASN --network=NETWORK - [--async] [--description=DESCRIPTION] - [--keepalive-interval-in-seconds=KEEPALIVE_INTERVAL_IN_SECONDS] - [--labels=[KEY=VALUE,...]] [GCLOUD_WIDE_FLAG ...] + [--async] [--description=DESCRIPTION] [--labels=[KEY=VALUE,...]] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Create a new Distributed Cloud Edge Network router. @@ -69,10 +68,6 @@ OPTIONAL FLAGS --description=DESCRIPTION An optional, textual description for the subnet. - --keepalive-interval-in-seconds=KEEPALIVE_INTERVAL_IN_SECONDS - The interval in seconds between BGP keepalive messages that are sent to - the peer. - --labels=[KEY=VALUE,...] List of label KEY=VALUE pairs to add. diff --git a/gcloud/alpha/filestore/instances/create b/gcloud/alpha/filestore/instances/create index e31a2323f..f8b071e71 100644 --- a/gcloud/alpha/filestore/instances/create +++ b/gcloud/alpha/filestore/instances/create @@ -218,8 +218,8 @@ OPTIONAL FLAGS ENTERPRISE instances offer the features and availability needed for mission-critical workloads. high-scale-ssd - NFS storage system with expanded capacity and performance scaling - capabilities. + High Scale instances offer NFS storage system with expanded + capacity and performance scaling capabilities. premium Premium Filestore instance, An alias for BASIC_SSD. Use BASIC_SSD instead whenever possible. diff --git a/gcloud/alpha/functions/deploy b/gcloud/alpha/functions/deploy index ff7d86466..b13f954eb 100644 --- a/gcloud/alpha/functions/deploy +++ b/gcloud/alpha/functions/deploy @@ -184,7 +184,7 @@ FLAGS ◆ go113: Go 1.13 ◆ go116: Go 1.16 ◆ java11: Java 11 - ◆ java17: Java 17 (preview) + ◆ java17: Java 17 ◆ dotnet3: .NET Framework 3 ◆ ruby26: Ruby 2.6 ◆ ruby27: Ruby 2.7 diff --git a/gcloud/alpha/iam/workload-identity-pools/create-cred-config b/gcloud/alpha/iam/workload-identity-pools/create-cred-config index b598a89ed..f88a02785 100644 --- a/gcloud/alpha/iam/workload-identity-pools/create-cred-config +++ b/gcloud/alpha/iam/workload-identity-pools/create-cred-config @@ -6,13 +6,16 @@ SYNOPSIS gcloud alpha iam workload-identity-pools create-cred-config AUDIENCE --output-file=OUTPUT_FILE (--aws | --azure | --credential-source-file=CREDENTIAL_SOURCE_FILE - | --credential-source-url=CREDENTIAL_SOURCE_URL) - [--app-id-uri=APP_ID_URI] + | --credential-source-url=CREDENTIAL_SOURCE_URL + | --executable-command=EXECUTABLE_COMMAND) [--app-id-uri=APP_ID_URI] [--credential-source-field-name=CREDENTIAL_SOURCE_FIELD_NAME] [--credential-source-headers=[key=value,...]] [--credential-source-type=CREDENTIAL_SOURCE_TYPE] [--enable-imdsv2] [--service-account=SERVICE_ACCOUNT] - [--subject-token-type=SUBJECT_TOKEN_TYPE] [GCLOUD_WIDE_FLAG ...] + [--subject-token-type=SUBJECT_TOKEN_TYPE] + [--executable-output-file=EXECUTABLE_OUTPUT_FILE + --executable-timeout-millis=EXECUTABLE_TIMEOUT_MILLIS] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) This command creates a configuration file to allow access to @@ -38,6 +41,16 @@ EXAMPLES --credential-source-headers=Key=Value \ --output-file=credentials.json + To create an executable-source credential configuration for your project, + run the following command: + + $ gcloud alpha iam workload-identity-pools create-cred-config \ + locations/$REGION/workforcePools/$WORKFORCE_POOL_ID/providers/\ + $PROVIDER_ID --executable-command=$EXECUTABLE_COMMAND \ + --executable-timeout-millis=30000 \ + --executable-output-file=$CACHE_FILE \ + --output-file=credentials.json + To create an AWS-based credential configuration for your project, run: $ gcloud alpha iam workload-identity-pools create-cred-config \ @@ -83,6 +96,10 @@ REQUIRED FLAGS --credential-source-url=CREDENTIAL_SOURCE_URL URL to obtain the credential from. + --executable-command=EXECUTABLE_COMMAND + The full command to run to retrieve the credential. Must be an + absolute path for the program including arguments. + OPTIONAL FLAGS --app-id-uri=APP_ID_URI The custom Application ID URI for the Azure access token. @@ -106,6 +123,15 @@ OPTIONAL FLAGS --subject-token-type=SUBJECT_TOKEN_TYPE The type of token being used for authorization. + Arguments for an executable type credential source. + + --executable-output-file=EXECUTABLE_OUTPUT_FILE + The absolute path to the file storing the executable response. + + --executable-timeout-millis=EXECUTABLE_TIMEOUT_MILLIS + The timeout duration in milliseconds for waiting for the executable + to finish. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/iap/oauth-brands/create b/gcloud/alpha/iap/oauth-brands/create index 50c935311..bde09317a 100644 --- a/gcloud/alpha/iap/oauth-brands/create +++ b/gcloud/alpha/iap/oauth-brands/create @@ -54,7 +54,9 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. This variant is also available: + access allowlist. These variants are also available: + + $ gcloud iap oauth-brands create $ gcloud beta iap oauth-brands create diff --git a/gcloud/alpha/iap/oauth-brands/describe b/gcloud/alpha/iap/oauth-brands/describe index 951bed985..de838505d 100644 --- a/gcloud/alpha/iap/oauth-brands/describe +++ b/gcloud/alpha/iap/oauth-brands/describe @@ -50,7 +50,9 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. This variant is also available: + access allowlist. These variants are also available: + + $ gcloud iap oauth-brands describe $ gcloud beta iap oauth-brands describe diff --git a/gcloud/alpha/iap/oauth-brands/help b/gcloud/alpha/iap/oauth-brands/help index b75c41b59..74410fdae 100644 --- a/gcloud/alpha/iap/oauth-brands/help +++ b/gcloud/alpha/iap/oauth-brands/help @@ -28,7 +28,9 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. This variant is also available: + access allowlist. These variants are also available: + + $ gcloud iap oauth-brands $ gcloud beta iap oauth-brands diff --git a/gcloud/alpha/iap/oauth-brands/list b/gcloud/alpha/iap/oauth-brands/list index 1f4fb3786..dcef8ba48 100644 --- a/gcloud/alpha/iap/oauth-brands/list +++ b/gcloud/alpha/iap/oauth-brands/list @@ -60,7 +60,9 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. This variant is also available: + access allowlist. These variants are also available: + + $ gcloud iap oauth-brands list $ gcloud beta iap oauth-brands list diff --git a/gcloud/alpha/iap/oauth-clients/create b/gcloud/alpha/iap/oauth-clients/create index 3c2430364..0b53354d6 100644 --- a/gcloud/alpha/iap/oauth-clients/create +++ b/gcloud/alpha/iap/oauth-clients/create @@ -60,7 +60,9 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. This variant is also available: + access allowlist. These variants are also available: + + $ gcloud iap oauth-clients create $ gcloud beta iap oauth-clients create diff --git a/gcloud/alpha/iap/oauth-clients/delete b/gcloud/alpha/iap/oauth-clients/delete index 65a1c372b..05531752d 100644 --- a/gcloud/alpha/iap/oauth-clients/delete +++ b/gcloud/alpha/iap/oauth-clients/delete @@ -13,12 +13,12 @@ EXAMPLES To delete a Cloud OAuth client named CLIENT for the current project and brand BRAND, run: - $ gcloud beta iap oauth-clients delete CLIENT --brand=BRAND + $ gcloud alpha iap oauth-clients delete CLIENT --brand=BRAND To delete a Cloud OAuth client named CLIENT for a specific project PROJECT_ID and brand BRAND, run: - $ gcloud beta iap oauth-clients delete CLIENT --brand=BRAND \ + $ gcloud alpha iap oauth-clients delete CLIENT --brand=BRAND \ --project=PROJECT_ID POSITIONAL ARGUMENTS @@ -63,7 +63,9 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. This variant is also available: + access allowlist. These variants are also available: + + $ gcloud iap oauth-clients delete $ gcloud beta iap oauth-clients delete diff --git a/gcloud/alpha/iap/oauth-clients/describe b/gcloud/alpha/iap/oauth-clients/describe index 0c32a0c49..77388a57c 100644 --- a/gcloud/alpha/iap/oauth-clients/describe +++ b/gcloud/alpha/iap/oauth-clients/describe @@ -60,7 +60,9 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. This variant is also available: + access allowlist. These variants are also available: + + $ gcloud iap oauth-clients describe $ gcloud beta iap oauth-clients describe diff --git a/gcloud/alpha/iap/oauth-clients/help b/gcloud/alpha/iap/oauth-clients/help index d76674c10..4d7d7407c 100644 --- a/gcloud/alpha/iap/oauth-clients/help +++ b/gcloud/alpha/iap/oauth-clients/help @@ -34,7 +34,9 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. This variant is also available: + access allowlist. These variants are also available: + + $ gcloud iap oauth-clients $ gcloud beta iap oauth-clients diff --git a/gcloud/alpha/iap/oauth-clients/list b/gcloud/alpha/iap/oauth-clients/list index 07fe3de87..c3b0f2505 100644 --- a/gcloud/alpha/iap/oauth-clients/list +++ b/gcloud/alpha/iap/oauth-clients/list @@ -75,7 +75,9 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. This variant is also available: + access allowlist. These variants are also available: + + $ gcloud iap oauth-clients list $ gcloud beta iap oauth-clients list diff --git a/gcloud/alpha/iap/oauth-clients/reset-secret b/gcloud/alpha/iap/oauth-clients/reset-secret index ea0bf4cea..174b4366f 100644 --- a/gcloud/alpha/iap/oauth-clients/reset-secret +++ b/gcloud/alpha/iap/oauth-clients/reset-secret @@ -61,7 +61,9 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. This variant is also available: + access allowlist. These variants are also available: + + $ gcloud iap oauth-clients reset-secret $ gcloud beta iap oauth-clients reset-secret diff --git a/gcloud/alpha/metastore/federations/add-iam-policy-binding b/gcloud/alpha/metastore/federations/add-iam-policy-binding new file mode 100644 index 000000000..b21b776d8 --- /dev/null +++ b/gcloud/alpha/metastore/federations/add-iam-policy-binding @@ -0,0 +1,97 @@ +NAME + gcloud alpha metastore federations add-iam-policy-binding - add an IAM + policy binding to a federation + +SYNOPSIS + gcloud alpha metastore federations add-iam-policy-binding + (FEDERATION : --location=LOCATION) --member=PRINCIPAL --role=ROLE + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Add an IAM policy binding to a federation. + +EXAMPLES + To add an IAM policy binding for the role of roles/metastore.admin for the + user test-user@gmail.com, run: + + $ gcloud alpha metastore federations add-iam-policy-binding \ + my-federation --member='user:test-user@gmail.com' \ + --role='roles/metastore.admin' + + See https://cloud.google.com/dataproc-metastore/docs/iam-and-access-control + for details of policy role and member types. + +POSITIONAL ARGUMENTS + Federation resource - Federation for which to add the IAM policy to. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument federation on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + FEDERATION + ID of the federation or fully qualified identifier for the + federation. To set the federation attribute: + ▸ provide the argument federation on the command line. + + This positional must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + The location of the Dataproc Metastore service. + + If not specified, will use default metastore/location. + + To set the location attribute: + ▸ provide the argument federation on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property metastore/location. + +REQUIRED FLAGS + --member=PRINCIPAL + The principal to add the binding for. Should be of the form + user|group|serviceAccount:email or domain:domain. + + Examples: user:test-user@gmail.com, group:admins@example.com, + serviceAccount:test123@example.domain.com, or + domain:example.domain.com. + + Some resources also accept the following special values: + ◆ allUsers - Special identifier that represents anyone who is on the + internet, with or without a Google account. + ◆ allAuthenticatedUsers - Special identifier that represents anyone + who is authenticated with a Google account or a service account. + + --role=ROLE + Role name to assign to the principal. The role name is the complete + path of a predefined role, such as roles/logging.viewer, or the role ID + for a custom role, such as + organizations/{ORGANIZATION_ID}/roles/logging.viewer. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the metastore/v1alpha API. The full documentation for + this API can be found at: https://cloud.google.com/dataproc-metastore/docs + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud metastore federations add-iam-policy-binding + + $ gcloud beta metastore federations add-iam-policy-binding + diff --git a/gcloud/alpha/metastore/federations/create b/gcloud/alpha/metastore/federations/create new file mode 100644 index 000000000..32a1182d6 --- /dev/null +++ b/gcloud/alpha/metastore/federations/create @@ -0,0 +1,114 @@ +NAME + gcloud alpha metastore federations create - create a Dataproc Metastore + federation + +SYNOPSIS + gcloud alpha metastore federations create + (FEDERATION : --location=LOCATION) --backends=RANK=BACKEND [--async] + [--hive-metastore-version=HIVE_METASTORE_VERSION] + [--labels=[KEY=VALUE,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Create a new Dataproc Metastore federation with the given name and + configurations. + + If run asynchronously with --async, exits after printing one operation name + that can be used to poll the status of the creation via: + + gcloud metastore operations describe + +EXAMPLES + To create a Dataproc Metastore federation with the name + my-metastore-federation in location us-central with two backends dpms1 and + dpms2, run: + + $ gcloud alpha metastore federations create \ + my-metastore-federation --location=us-central1 \ + --backends=1=dpms:dpms1,2=dpms:projects/my-project/locations/\ + us-central1/services/dpms2 + +POSITIONAL ARGUMENTS + Federation resource - Arguments and flags that specify the Dataproc + Metastore federation you want to create. The arguments in this group can + be used to specify the attributes of this resource. (NOTE) Some attributes + are not given arguments in this group but can be set in other ways. To set + the project attribute: + ◆ provide the argument federation on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + FEDERATION + ID of the federation or fully qualified identifier for the + federation. To set the federation attribute: + ▸ provide the argument federation on the command line. + + This positional must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + The location of the Dataproc Metastore service. + + If not specified, will use default metastore/location. + + To set the location attribute: + ▸ provide the argument federation on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property metastore/location. + +REQUIRED FLAGS + --backends=RANK=BACKEND + Backends from which the federation service serves metadata at query + time. The backends are specified as a comma-separated list of + RANK=BACKEND pairs. For example: + 1=dpms:dpms1,2=dpms:projects/my-project/locations/us-central1/services/dpms2. + RANK represents the rank of the backend metastore and is used to + resolve database name collisions. BACKEND is specified as + METASTORE_TYPE:METASTORE_NAME where METASTORE_TYPE is the type of + backend metastore and METASTORE_NAME is the relative resource name of + the metastore. If only the name of the metastore is specified (e.g. + dpms1), project and location will be inferred from the project and + location used to create the federation. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --hive-metastore-version=HIVE_METASTORE_VERSION + Hive metastore schema version of the Metastore federation. + HIVE_METASTORE_VERSION must be one of: 2.3.6, 3.1.2. + + --labels=[KEY=VALUE,...] + List of label KEY=VALUE pairs to add. + + Keys must start with a lowercase character and contain only hyphens + (-), underscores (_), lowercase characters, and numbers. Values must + contain only hyphens (-), underscores (_), lowercase characters, and + numbers. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the metastore/v1alpha API. The full documentation for + this API can be found at: https://cloud.google.com/dataproc-metastore/docs + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud metastore federations create + + $ gcloud beta metastore federations create + diff --git a/gcloud/alpha/metastore/federations/delete b/gcloud/alpha/metastore/federations/delete new file mode 100644 index 000000000..40c3c4835 --- /dev/null +++ b/gcloud/alpha/metastore/federations/delete @@ -0,0 +1,80 @@ +NAME + gcloud alpha metastore federations delete - delete one or more Dataproc + Metastore federations + +SYNOPSIS + gcloud alpha metastore federations delete + (FEDERATIONS [FEDERATIONS ...] : --location=LOCATION) [--async] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) If run asynchronously with --async, exits after printing one or + more operation names that can be used to poll the status of the deletion(s) + via: + + gcloud metastore operations describe + +EXAMPLES + To delete a Dataproc Metastore federation with the name + my-metastore-federation in location us-central1, run: + + $ gcloud alpha metastore federations delete \ + my-metastore-federation --location=us-central1 + + To delete multiple Dataproc Metastore federations with the name + federation-1 and federation-2 in the same location us-central1, run: + + $ gcloud alpha metastore federations delete federation-1 \ + federation-2 --location=us-central1 + +POSITIONAL ARGUMENTS + Federation resource - The federations to delete. The arguments in this + group can be used to specify the attributes of this resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. To set the project attribute: + ◆ provide the argument federations on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + FEDERATIONS [FEDERATIONS ...] + IDs of the federations or fully qualified identifiers for the + federations. To set the federation attribute: + ▸ provide the argument federations on the command line. + + This positional must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + Location to which the federations belongs. To set the location + attribute: + ▸ provide the argument federations on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property metastore/location. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud metastore federations delete + + $ gcloud beta metastore federations delete + diff --git a/gcloud/alpha/metastore/federations/describe b/gcloud/alpha/metastore/federations/describe new file mode 100644 index 000000000..810981fc7 --- /dev/null +++ b/gcloud/alpha/metastore/federations/describe @@ -0,0 +1,75 @@ +NAME + gcloud alpha metastore federations describe - describe a Dataproc Metastore + federation + +SYNOPSIS + gcloud alpha metastore federations describe + (FEDERATION : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Describe a Dataproc Metastore federation. + + Displays all details of a Dataproc Metastore federation given a valid + federation ID. + +EXAMPLES + To describe a Dataproc Metastore federation with the ID + my-metastore-federation in us-central1, run: + + $ gcloud alpha metastore federations describe \ + my-metastore-federation --location=us-central1 + +POSITIONAL ARGUMENTS + Federation resource - Arguments and flags that specify the Metastore + federation you want to describe. The arguments in this group can be used + to specify the attributes of this resource. (NOTE) Some attributes are not + given arguments in this group but can be set in other ways. To set the + project attribute: + ◆ provide the argument federation on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + FEDERATION + ID of the federation or fully qualified identifier for the + federation. To set the federation attribute: + ▸ provide the argument federation on the command line. + + This positional must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + The location of the Dataproc Metastore service. + + If not specified, will use default metastore/location. + + To set the location attribute: + ▸ provide the argument federation on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property metastore/location. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the metastore/v1alpha API. The full documentation for + this API can be found at: https://cloud.google.com/dataproc-metastore/docs + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud metastore federations describe + + $ gcloud beta metastore federations describe + diff --git a/gcloud/alpha/metastore/federations/get-iam-policy b/gcloud/alpha/metastore/federations/get-iam-policy new file mode 100644 index 000000000..065d7efe5 --- /dev/null +++ b/gcloud/alpha/metastore/federations/get-iam-policy @@ -0,0 +1,103 @@ +NAME + gcloud alpha metastore federations get-iam-policy - get the IAM policy for + the federation + +SYNOPSIS + gcloud alpha metastore federations get-iam-policy + (FEDERATION : --location=LOCATION) [--filter=EXPRESSION] + [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) gcloud alpha metastore federations get-iam-policy displays the IAM + policy associated with the federation. If formatted as JSON, the output can + be edited and used as a policy file for set-iam-policy. The output includes + an "etag" field identifying the version emitted and allowing detection of + concurrent policy updates. The "etag" field should be removed to be used as + set-iam-policy input; see gcloud alpha metastore federations set-iam-policy + for additional details. + +EXAMPLES + To print the IAM policy for a given federation, run: + + $ gcloud alpha metastore federations get-iam-policy my-federation + +POSITIONAL ARGUMENTS + Federation resource - Federation for which to display the IAM policy. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument federation on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + FEDERATION + ID of the federation or fully qualified identifier for the + federation. To set the federation attribute: + ▸ provide the argument federation on the command line. + + This positional must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + The location of the Dataproc Metastore service. + + If not specified, will use default metastore/location. + + To set the location attribute: + ▸ provide the argument federation on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property metastore/location. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the metastore/v1alpha API. The full documentation for + this API can be found at: https://cloud.google.com/dataproc-metastore/docs + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud metastore federations get-iam-policy + + $ gcloud beta metastore federations get-iam-policy + diff --git a/gcloud/alpha/metastore/federations/help b/gcloud/alpha/metastore/federations/help new file mode 100644 index 000000000..4ab0ca21a --- /dev/null +++ b/gcloud/alpha/metastore/federations/help @@ -0,0 +1,54 @@ +NAME + gcloud alpha metastore federations - manage Dataproc Metastore federations + +SYNOPSIS + gcloud alpha metastore federations COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Manage Dataproc Metastore federations. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + add-iam-policy-binding + (ALPHA) Add an IAM policy binding to a federation. + + create + (ALPHA) Create a Dataproc Metastore federation. + + delete + (ALPHA) Delete one or more Dataproc Metastore federations. + + describe + (ALPHA) Describe a Dataproc Metastore federation. + + get-iam-policy + (ALPHA) Get the IAM policy for the federation. + + list + (ALPHA) List Dataproc Metastore federations. + + remove-iam-policy-binding + (ALPHA) Remove an IAM policy binding from a federation. + + set-iam-policy + (ALPHA) Set the IAM policy for the federation. + + update + (ALPHA) Update a Dataproc Metastore federation. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud metastore federations + + $ gcloud beta metastore federations + diff --git a/gcloud/alpha/metastore/federations/list b/gcloud/alpha/metastore/federations/list new file mode 100644 index 000000000..0e2b96793 --- /dev/null +++ b/gcloud/alpha/metastore/federations/list @@ -0,0 +1,92 @@ +NAME + gcloud alpha metastore federations list - list Dataproc Metastore + federations + +SYNOPSIS + gcloud alpha metastore federations list [--location=LOCATION] + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Lists all federations under the specified project and location. + +EXAMPLES + To list all Dataproc Metastore federations in location us-central1, run: + + $ gcloud alpha metastore federations list --location=us-central1 + + To list all Dataproc Metastore federations in all locations, run: + + $ gcloud alpha metastore federations list --location=- + +FLAGS + Location resource - The location of the federations to list. This + represents a Cloud resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. To set the project + attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ set the property metastore/location with a fully specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. To + set the location attribute: + ▸ provide the argument --location on the command line; + ▸ set the property metastore/location. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the metastore/v1alpha API. The full documentation for + this API can be found at: https://cloud.google.com/dataproc-metastore/docs + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud metastore federations list + + $ gcloud beta metastore federations list + diff --git a/gcloud/alpha/metastore/federations/remove-iam-policy-binding b/gcloud/alpha/metastore/federations/remove-iam-policy-binding new file mode 100644 index 000000000..aede0a88e --- /dev/null +++ b/gcloud/alpha/metastore/federations/remove-iam-policy-binding @@ -0,0 +1,98 @@ +NAME + gcloud alpha metastore federations remove-iam-policy-binding - remove an + IAM policy binding from a federation + +SYNOPSIS + gcloud alpha metastore federations remove-iam-policy-binding + (FEDERATION : --location=LOCATION) --member=PRINCIPAL --role=ROLE + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Remove an IAM policy binding from a federation. + +EXAMPLES + To remove an IAM policy binding for the role of roles/metastore.admin for + the user test-user@gmail.com, run: + + $ gcloud alpha metastore federations remove-iam-policy-binding \ + my-federation --member='user:test-user@gmail.com' \ + --role='roles/metastore.admin' + + See https://cloud.google.com/iam/docs/managing-policies for details of + policy role and member types. + +POSITIONAL ARGUMENTS + Federation resource - Federation for which to remove the IAM policy from. + The arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument federation on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + FEDERATION + ID of the federation or fully qualified identifier for the + federation. To set the federation attribute: + ▸ provide the argument federation on the command line. + + This positional must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + The location of the Dataproc Metastore service. + + If not specified, will use default metastore/location. + + To set the location attribute: + ▸ provide the argument federation on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property metastore/location. + +REQUIRED FLAGS + --member=PRINCIPAL + The principal to remove the binding for. Should be of the form + user|group|serviceAccount:email or domain:domain. + + Examples: user:test-user@gmail.com, group:admins@example.com, + serviceAccount:test123@example.domain.com, or + domain:example.domain.com. + + Deleted principals have an additional deleted: prefix and a ?uid=UID + suffix, where UID is a unique identifier for the principal. Example: + deleted:user:test-user@gmail.com?uid=123456789012345678901. + + Some resources also accept the following special values: + ◆ allUsers - Special identifier that represents anyone who is on the + internet, with or without a Google account. + ◆ allAuthenticatedUsers - Special identifier that represents anyone + who is authenticated with a Google account or a service account. + + --role=ROLE + The role to remove the principal from. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the metastore/v1alpha API. The full documentation for + this API can be found at: https://cloud.google.com/dataproc-metastore/docs + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud metastore federations remove-iam-policy-binding + + $ gcloud beta metastore federations remove-iam-policy-binding + diff --git a/gcloud/alpha/metastore/federations/set-iam-policy b/gcloud/alpha/metastore/federations/set-iam-policy new file mode 100644 index 000000000..d81709115 --- /dev/null +++ b/gcloud/alpha/metastore/federations/set-iam-policy @@ -0,0 +1,82 @@ +NAME + gcloud alpha metastore federations set-iam-policy - set the IAM policy for + the federation + +SYNOPSIS + gcloud alpha metastore federations set-iam-policy + (FEDERATION : --location=LOCATION) POLICY_FILE [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Sets the IAM policy for the given federation as defined in a JSON + or YAML file. + + See https://cloud.google.com/iam/docs/managing-policies for details of the + policy file format and contents. + +EXAMPLES + The following command will read an IAM policy defined in a JSON file + policy.json and set it for the federation my-federation: + + $ gcloud alpha metastore federations set-iam-policy my-federation \ + policy.json + +POSITIONAL ARGUMENTS + Federation resource - Federation for which to display the IAM policy. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument federation on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + FEDERATION + ID of the federation or fully qualified identifier for the + federation. To set the federation attribute: + ▸ provide the argument federation on the command line. + + This positional must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + The location of the Dataproc Metastore service. + + If not specified, will use default metastore/location. + + To set the location attribute: + ▸ provide the argument federation on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property metastore/location. + + POLICY_FILE + Path to a local JSON or YAML formatted file containing a valid policy. + + The output of the get-iam-policy command is a valid file, as is any + JSON or YAML file conforming to the structure of a Policy + (https://cloud.google.com/iam/reference/rest/v1/Policy). + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the metastore/v1alpha API. The full documentation for + this API can be found at: https://cloud.google.com/dataproc-metastore/docs + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud metastore federations set-iam-policy + + $ gcloud beta metastore federations set-iam-policy + diff --git a/gcloud/alpha/metastore/federations/update b/gcloud/alpha/metastore/federations/update new file mode 100644 index 000000000..640412f1d --- /dev/null +++ b/gcloud/alpha/metastore/federations/update @@ -0,0 +1,150 @@ +NAME + gcloud alpha metastore federations update - update a Dataproc Metastore + federation + +SYNOPSIS + gcloud alpha metastore federations update + (FEDERATION : --location=LOCATION) + (--update-backends=RANK=BACKEND --clear-backends + | --remove-backends=RANK) [--async] [--update-labels=[KEY=VALUE,...]] + [--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Update the metadata and/or configuration parameters of a Dataproc + Metastore federation. + + If run asynchronously with --async, exits after printing one operation name + that can be used to poll the status of the update via: + + gcloud metastore operations describe + +EXAMPLES + To update a Dataproc Metastore federation with the name + my-metastore-federation in location us-central with two backends dpms1 and + dpms2, run: + + $ gcloud alpha metastore federations update \ + my-metastore-federation --location=us-central1 \ + --update-backends=1=dpms:dpms1,2=dpms:projects/my-project/\ + locations/us-central1/services/dpms2 + +POSITIONAL ARGUMENTS + Federation resource - Arguments and flags that specify the Dataproc + Metastore federation you want to update. The arguments in this group can + be used to specify the attributes of this resource. (NOTE) Some attributes + are not given arguments in this group but can be set in other ways. To set + the project attribute: + ◆ provide the argument federation on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + FEDERATION + ID of the federation or fully qualified identifier for the + federation. To set the federation attribute: + ▸ provide the argument federation on the command line. + + This positional must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + The location of the Dataproc Metastore service. + + If not specified, will use default metastore/location. + + To set the location attribute: + ▸ provide the argument federation on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property metastore/location. + +REQUIRED FLAGS + Update the backend metastores by passing key-value pairs in through the + flags. + + At least one of these must be specified: + + --update-backends=RANK=BACKEND + Comma-separated list of metastore backends specified as a list of + RANK=BACKEND pairs. For example: + 1=dpms:dpms1,2=dpms:projects/my-project/locations/us-central1/services/dpms2. + RANK represents the rank of the backend metastore and is used to + resolve database name collisions. BACKEND is specified as + METASTORE_TYPE:METASTORE_NAME where METASTORE_TYPE is the type of + backend metastore and METASTORE_NAME is the relative resource name of + the metastore. If only the name of the metastore is specified (e.g. + dpms1), project and location will be inferred from the project and + location used to create the federation. + + At most one of these can be specified: + + --clear-backends + Clear existing metastore backends. --clear-backends must be used + with --update-backends. + + --remove-backends=RANK + Comma-separated list of metastore backend keys to remove with the + form RANK1,RANK2. The Key represents the rank of the backend + metastore and is used to resolve database name collisions. If a + RANK does not exist then it is sliently ignored. If + --update-backends is also specified, then --remove-backends is + applied first. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --update-labels=[KEY=VALUE,...] + List of label KEY=VALUE pairs to update. If a label exists, its value + is modified. Otherwise, a new label is created. + + Keys must start with a lowercase character and contain only hyphens + (-), underscores (_), lowercase characters, and numbers. Values must + contain only hyphens (-), underscores (_), lowercase characters, and + numbers. + + At most one of these can be specified: + + --clear-labels + Remove all labels. If --update-labels is also specified then + --clear-labels is applied first. + + For example, to remove all labels: + + $ gcloud alpha metastore federations update --clear-labels + + To remove all existing labels and create two new labels, foo and baz: + + $ gcloud alpha metastore federations update --clear-labels \ + --update-labels foo=bar,baz=qux + + --remove-labels=[KEY,...] + List of label keys to remove. If a label does not exist it is + silently ignored. If --update-labels is also specified then + --update-labels is applied first. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the metastore/v1alpha API. The full documentation for + this API can be found at: https://cloud.google.com/dataproc-metastore/docs + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud metastore federations update + + $ gcloud beta metastore federations update + diff --git a/gcloud/alpha/metastore/help b/gcloud/alpha/metastore/help index 078cfe2ee..e89e5f51a 100644 --- a/gcloud/alpha/metastore/help +++ b/gcloud/alpha/metastore/help @@ -15,6 +15,9 @@ GCLOUD WIDE FLAGS GROUPS GROUP is one of the following: + federations + (ALPHA) Manage Dataproc Metastore federations. + locations (ALPHA) Get information about Dataproc Metastore locations. diff --git a/gcloud/alpha/run/deploy b/gcloud/alpha/run/deploy index 1e29ebbee..ed100869e 100644 --- a/gcloud/alpha/run/deploy +++ b/gcloud/alpha/run/deploy @@ -22,7 +22,8 @@ SYNOPSIS --update-config-maps=[KEY=VALUE,...]] [--image=IMAGE | --source=SOURCE] [--[no-]allow-unauthenticated --breakglass=JUSTIFICATION - --clear-vpc-connector --[no-]cpu-throttling --description=DESCRIPTION + --clear-vpc-connector --[no-]cpu-boost --[no-]cpu-throttling + --description=DESCRIPTION --execution-environment=EXECUTION_ENVIRONMENT --revision-suffix=REVISION_SUFFIX --[no-]session-affinity --vpc-connector=VPC_CONNECTOR --vpc-egress=VPC_EGRESS @@ -373,6 +374,11 @@ FLAGS --clear-vpc-connector Remove the VPC connector for this resource. + --[no-]cpu-boost + Whether to allocate extra CPU to containers on startup. This can + reduce the percieved latency of a cold start request. Use --cpu-boost + to enable and --no-cpu-boost to disable. + --[no-]cpu-throttling Whether to throttle the CPU when the container is not actively serving requests. Use --cpu-throttling to enable and diff --git a/gcloud/alpha/run/services/update b/gcloud/alpha/run/services/update index be56612d3..c21014f53 100644 --- a/gcloud/alpha/run/services/update +++ b/gcloud/alpha/run/services/update @@ -11,8 +11,8 @@ SYNOPSIS [--platform=PLATFORM; default="managed"] [--port=PORT] [--service-account=SERVICE_ACCOUNT] [--tag=TAG] [--timeout=TIMEOUT] [--no-traffic] [--[no-]use-http2] - [--breakglass=JUSTIFICATION --clear-vpc-connector --[no-]cpu-throttling - --execution-environment=EXECUTION_ENVIRONMENT + [--breakglass=JUSTIFICATION --clear-vpc-connector --[no-]cpu-boost + --[no-]cpu-throttling --execution-environment=EXECUTION_ENVIRONMENT --revision-suffix=REVISION_SUFFIX --[no-]session-affinity --vpc-connector=VPC_CONNECTOR --vpc-egress=VPC_EGRESS --add-cloudsql-instances=[CLOUDSQL-INSTANCES,...] @@ -209,6 +209,11 @@ FLAGS --clear-vpc-connector Remove the VPC connector for this resource. + --[no-]cpu-boost + Whether to allocate extra CPU to containers on startup. This can + reduce the percieved latency of a cold start request. Use --cpu-boost + to enable and --no-cpu-boost to disable. + --[no-]cpu-throttling Whether to throttle the CPU when the container is not actively serving requests. Use --cpu-throttling to enable and diff --git a/gcloud/alpha/sql/flags/list b/gcloud/alpha/sql/flags/list index 944a7ee8a..a24dae9ba 100644 --- a/gcloud/alpha/sql/flags/list +++ b/gcloud/alpha/sql/flags/list @@ -3,7 +3,8 @@ NAME instances SYNOPSIS - gcloud alpha sql flags list [--database-version=DATABASE_VERSION] + gcloud alpha sql flags list + [--database-version=DATABASE_VERSION; default="MYSQL_8_0"] [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] @@ -11,9 +12,9 @@ DESCRIPTION (ALPHA) List customizable flags for Google Cloud SQL instances. FLAGS - --database-version=DATABASE_VERSION - The database engine type and versions. If left unspecified, the API - defaults are used. See the list of database versions at + --database-version=DATABASE_VERSION; default="MYSQL_8_0" + The database engine type and versions. If left unspecified, MYSQL_8_0 + is used. See the list of database versions at https://cloud.google.com/sql/docs/mysql/admin-api/rest/v1beta4/SqlDatabaseVersion. LIST COMMAND FLAGS diff --git a/gcloud/alpha/sql/instances/create b/gcloud/alpha/sql/instances/create index 60efaf155..c0ba47b10 100644 --- a/gcloud/alpha/sql/instances/create +++ b/gcloud/alpha/sql/instances/create @@ -6,12 +6,15 @@ SYNOPSIS [--activation-policy=ACTIVATION_POLICY] [--active-directory-domain=ACTIVE_DIRECTORY_DOMAIN] [--allocated-ip-range-name=ALLOCATED_IP_RANGE_NAME] [--[no-]assign-ip] - [--async] [--authorized-networks=NETWORK,[NETWORK,...]] + [--async] [--audit-bucket-path=AUDIT_BUCKET_PATH] + [--audit-retention-interval=AUDIT_RETENTION_INTERVAL] + [--audit-upload-interval=AUDIT_UPLOAD_INTERVAL] + [--authorized-networks=NETWORK,[NETWORK,...]] [--availability-type=AVAILABILITY_TYPE] [--no-backup] [--backup-location=BACKUP_LOCATION] [--backup-start-time=BACKUP_START_TIME] [--collation=COLLATION] [--cpu=CPU] [--database-flags=FLAG=VALUE,[FLAG=VALUE,...]] - [--database-version=DATABASE_VERSION] + [--database-version=DATABASE_VERSION; default="MYSQL_8_0"] [--deny-maintenance-period-end-date=DENY_MAINTENANCE_PERIOD_END_DATE] [--deny-maintenance-period-start-date=DENY_MAINTENANCE_PERIOD_START_DATE] [--deny-maintenance-period-time=DENY_MAINTENANCE_PERIOD_TIME] @@ -119,6 +122,19 @@ FLAGS Return immediately, without waiting for the operation in progress to complete. + --audit-bucket-path=AUDIT_BUCKET_PATH + The location, as a Cloud Storage bucket, to which audit files are + uploaded. The URI is in the form gs://bucketName/folderName. Only + available for SQL Server instances. + + --audit-retention-interval=AUDIT_RETENTION_INTERVAL + The number of days for audit log retention on disk, for example, 3dfor + 3 days. Only available for SQL Server instances. + + --audit-upload-interval=AUDIT_UPLOAD_INTERVAL + How often to upload audit logs (audit files), for example, 30mfor 30 + minutes. Only available for SQL Server instances. + --authorized-networks=NETWORK,[NETWORK,...] The list of external networks that are allowed to connect to the instance. Specified in CIDR notation, also known as 'slash' notation @@ -162,9 +178,9 @@ FLAGS API for allowed flags. (e.g., --database-flags max_allowed_packet=55555,skip_grant_tables=,log_output=1) - --database-version=DATABASE_VERSION - The database engine type and versions. If left unspecified, the API - defaults are used. See the list of database versions at + --database-version=DATABASE_VERSION; default="MYSQL_8_0" + The database engine type and versions. If left unspecified, MYSQL_8_0 + is used. See the list of database versions at https://cloud.google.com/sql/docs/mysql/admin-api/rest/v1beta4/SqlDatabaseVersion. --deny-maintenance-period-end-date=DENY_MAINTENANCE_PERIOD_END_DATE diff --git a/gcloud/alpha/sql/instances/patch b/gcloud/alpha/sql/instances/patch index 13a21d666..8c73a3962 100644 --- a/gcloud/alpha/sql/instances/patch +++ b/gcloud/alpha/sql/instances/patch @@ -7,9 +7,11 @@ SYNOPSIS [--activation-policy=ACTIVATION_POLICY] [--active-directory-domain=ACTIVE_DIRECTORY_DOMAIN] [--allocated-ip-range-name=ALLOCATED_IP_RANGE_NAME] [--[no-]assign-ip] - [--async] [--availability-type=AVAILABILITY_TYPE] - [--clear-password-policy] [--cpu=CPU] - [--database-version=DATABASE_VERSION] + [--async] [--audit-bucket-path=AUDIT_BUCKET_PATH] + [--audit-retention-interval=AUDIT_RETENTION_INTERVAL] + [--audit-upload-interval=AUDIT_UPLOAD_INTERVAL] + [--availability-type=AVAILABILITY_TYPE] [--clear-password-policy] + [--cpu=CPU] [--database-version=DATABASE_VERSION] [--deny-maintenance-period-end-date=DENY_MAINTENANCE_PERIOD_END_DATE] [--deny-maintenance-period-start-date=DENY_MAINTENANCE_PERIOD_START_DATE] [--deny-maintenance-period-time=DENY_MAINTENANCE_PERIOD_TIME] [--diff] @@ -86,6 +88,19 @@ FLAGS Return immediately, without waiting for the operation in progress to complete. + --audit-bucket-path=AUDIT_BUCKET_PATH + The location, as a Cloud Storage bucket, to which audit files are + uploaded. The URI is in the form gs://bucketName/folderName. Only + available for SQL Server instances. + + --audit-retention-interval=AUDIT_RETENTION_INTERVAL + The number of days for audit log retention on disk, for example, 3dfor + 3 days. Only available for SQL Server instances. + + --audit-upload-interval=AUDIT_UPLOAD_INTERVAL + How often to upload audit logs (audit files), for example, 30mfor 30 + minutes. Only available for SQL Server instances. + --availability-type=AVAILABILITY_TYPE Specifies level of availability. AVAILABILITY_TYPE must be one of: diff --git a/gcloud/artifacts/repositories/create b/gcloud/artifacts/repositories/create index 82903fa72..b0e169f7d 100644 --- a/gcloud/artifacts/repositories/create +++ b/gcloud/artifacts/repositories/create @@ -66,20 +66,20 @@ REQUIRED FLAGS --repository-format=REPOSITORY_FORMAT Format of the repository. REPOSITORY_FORMAT must be one of: - apt - APT package format. - docker - Docker image format. - kfp - KFP package format. - maven - Maven package format. - npm - NPM package format. - python - Python package format. - yum - YUM package format. + apt + APT package format. + docker + Docker image format. + kfp + KFP package format. + maven + Maven package format. + npm + NPM package format. + python + Python package format. + yum + YUM package format. OPTIONAL FLAGS --allow-snapshot-overwrites diff --git a/gcloud/assured/workloads/create b/gcloud/assured/workloads/create index 3cf1c0cb3..cc2d49142 100644 --- a/gcloud/assured/workloads/create +++ b/gcloud/assured/workloads/create @@ -51,7 +51,7 @@ REQUIRED FLAGS The compliance regime of the new Assured Workloads environment. COMPLIANCE_REGIME must be one of: CJIS, FEDRAMP_HIGH, FEDRAMP_MODERATE, IL4, US_REGIONAL_ACCESS, HIPAA, HITRUST, EU_REGIONS_AND_SUPPORT, - CA_REGIONS_AND_SUPPORT. + CA_REGIONS_AND_SUPPORT, ITAR. --display-name=DISPLAY_NAME The display name of the new Assured Workloads environment diff --git a/gcloud/auth/application-default/help b/gcloud/auth/application-default/help index 899a0dfaa..401b60d8f 100644 --- a/gcloud/auth/application-default/help +++ b/gcloud/auth/application-default/help @@ -56,7 +56,9 @@ COMMANDS Update or add a quota project in application default credentials (ADC). NOTES - This variant is also available: + These variants are also available: + + $ gcloud alpha auth application-default $ gcloud beta auth application-default diff --git a/gcloud/auth/application-default/login b/gcloud/auth/application-default/login index 072208385..f85564d0a 100644 --- a/gcloud/auth/application-default/login +++ b/gcloud/auth/application-default/login @@ -5,7 +5,7 @@ NAME SYNOPSIS gcloud auth application-default login [--no-browser] [--client-id-file=CLIENT_ID_FILE] [--disable-quota-project] - [--no-launch-browser] [--scopes=SCOPES,[SCOPES,...]] + [--no-launch-browser] [--scopes=SCOPE,[SCOPE,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -21,8 +21,8 @@ DESCRIPTION command in your local development. This command tries to find a quota project from gcloud's context and write it to ADC so that Google client libraries can use it for billing and quota. Alternatively, you can use the - --client-id-file flag. In this case, the project owning the client id will - be used for billing and quota. You can create the client-id-file at + --client-id-file flag. In this case, the project owning the client ID will + be used for billing and quota. You can create the client ID file at https://console.cloud.google.com/apis/credentials. This command has no effect on the user account(s) set up by the gcloud auth @@ -96,7 +96,7 @@ FLAGS possible to launch a browser, prints a URL to standard output to be copied. Enabled by default, use --no-launch-browser to disable. - --scopes=SCOPES,[SCOPES,...] + --scopes=SCOPE,[SCOPE,...] The names of the scopes to authorize for. By default openid, https://www.googleapis.com/auth/userinfo.email, https://www.googleapis.com/auth/cloud-platform, @@ -113,7 +113,9 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This variant is also available: + These variants are also available: + + $ gcloud alpha auth application-default login $ gcloud beta auth application-default login diff --git a/gcloud/auth/application-default/print-access-token b/gcloud/auth/application-default/print-access-token index 1f50c7ebf..e6e5f9bf4 100644 --- a/gcloud/auth/application-default/print-access-token +++ b/gcloud/auth/application-default/print-access-token @@ -63,7 +63,9 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This variant is also available: + These variants are also available: + + $ gcloud alpha auth application-default print-access-token $ gcloud beta auth application-default print-access-token diff --git a/gcloud/auth/application-default/revoke b/gcloud/auth/application-default/revoke index a9b477a58..e29667514 100644 --- a/gcloud/auth/application-default/revoke +++ b/gcloud/auth/application-default/revoke @@ -24,7 +24,9 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This variant is also available: + These variants are also available: + + $ gcloud alpha auth application-default revoke $ gcloud beta auth application-default revoke diff --git a/gcloud/auth/application-default/set-quota-project b/gcloud/auth/application-default/set-quota-project index 7e8c13c51..32c64a9fb 100644 --- a/gcloud/auth/application-default/set-quota-project +++ b/gcloud/auth/application-default/set-quota-project @@ -33,7 +33,9 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This variant is also available: + These variants are also available: + + $ gcloud alpha auth application-default set-quota-project $ gcloud beta auth application-default set-quota-project diff --git a/gcloud/beta/active-directory/domains/extend-schema b/gcloud/beta/active-directory/domains/extend-schema new file mode 100644 index 000000000..fc7f729b1 --- /dev/null +++ b/gcloud/beta/active-directory/domains/extend-schema @@ -0,0 +1,77 @@ +NAME + gcloud beta active-directory domains extend-schema - initiate schema + extension for a Managed Microsoft AD domain + +SYNOPSIS + gcloud beta active-directory domains extend-schema DOMAIN + --description=DESCRIPTION --ldif-file=LDIF_FILE [--async] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Initiate schema extension for a Managed Microsoft AD domain. + + This command can fail for the following reasons: + ▪ The specified domain doesn't exist. + ▪ The specified domain is either being created or updated. + ▪ The specified domain is under maintenance. + ▪ The active account doesn't have permission to initiate schema + extension on the specified domain. + +EXAMPLES + The following command initiates a schema extension for the domain + my-domain.com in project my-project, with description "Test Description", + using the LDIF file "demo.ldif" + + $ gcloud beta active-directory domains extend-schema my-domain.com \ + --description="Test Description" --ldif-file=demo.ldf \ + --project=my-project --async + +POSITIONAL ARGUMENTS + Domain resource - Name of the Managed Microsoft AD domain for which you + want to extend schema. This represents a Cloud resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. To set the project attribute: + ◆ provide the argument domain on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + DOMAIN + ID of the domain or fully qualified identifier for the domain. To set + the domain attribute: + ▸ provide the argument domain on the command line. + +REQUIRED FLAGS + --description=DESCRIPTION + Description of schema change. + + --ldif-file=LDIF_FILE + Local LDIF file path that contains commands for schema extension. The + file size can't be larger than 1 MB. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the managedidentities/v1beta1 API. The full documentation + for this API can be found at: + https://cloud.google.com/managed-microsoft-ad/ + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha active-directory domains extend-schema + diff --git a/gcloud/beta/active-directory/domains/help b/gcloud/beta/active-directory/domains/help index 42af6fc44..723815bf6 100644 --- a/gcloud/beta/active-directory/domains/help +++ b/gcloud/beta/active-directory/domains/help @@ -40,6 +40,9 @@ COMMANDS describe-ldaps-settings (BETA) Describe the LDAPS settings of a Managed Microsoft AD domain. + extend-schema + (BETA) Initiate schema extension for a Managed Microsoft AD domain. + get-iam-policy (BETA) Describe the IAM policy for a Managed Microsoft AD domain. diff --git a/gcloud/beta/artifacts/repositories/create b/gcloud/beta/artifacts/repositories/create index 847627426..f87e7108b 100644 --- a/gcloud/beta/artifacts/repositories/create +++ b/gcloud/beta/artifacts/repositories/create @@ -67,20 +67,22 @@ REQUIRED FLAGS --repository-format=REPOSITORY_FORMAT Format of the repository. REPOSITORY_FORMAT must be one of: - apt - APT package format. - docker - Docker image format. - googet - GooGet package format. - maven - Maven package format. - npm - NPM package format. - python - Python package format. - yum - YUM package format. + apt + APT package format. + docker + Docker image format. + googet + GooGet package format. + kfp + KFP package format. + maven + Maven package format. + npm + NPM package format. + python + Python package format. + yum + YUM package format. OPTIONAL FLAGS --allow-snapshot-overwrites diff --git a/gcloud/beta/assured/workloads/create b/gcloud/beta/assured/workloads/create index 6d7e09d28..da0a15d3e 100644 --- a/gcloud/beta/assured/workloads/create +++ b/gcloud/beta/assured/workloads/create @@ -51,7 +51,7 @@ REQUIRED FLAGS The compliance regime of the new Assured Workloads environment. COMPLIANCE_REGIME must be one of: CJIS, FEDRAMP_HIGH, FEDRAMP_MODERATE, IL4, US_REGIONAL_ACCESS, HIPAA, HITRUST, EU_REGIONS_AND_SUPPORT, - CA_REGIONS_AND_SUPPORT. + CA_REGIONS_AND_SUPPORT, ITAR. --display-name=DISPLAY_NAME The display name of the new Assured Workloads environment diff --git a/gcloud/beta/auth/application-default/help b/gcloud/beta/auth/application-default/help index 8d48b4851..855a81e0c 100644 --- a/gcloud/beta/auth/application-default/help +++ b/gcloud/beta/auth/application-default/help @@ -58,8 +58,10 @@ COMMANDS (ADC). NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: $ gcloud auth application-default + $ gcloud alpha auth application-default + diff --git a/gcloud/beta/auth/application-default/login b/gcloud/beta/auth/application-default/login index 171b7a990..33c1c5bd9 100644 --- a/gcloud/beta/auth/application-default/login +++ b/gcloud/beta/auth/application-default/login @@ -5,7 +5,7 @@ NAME SYNOPSIS gcloud beta auth application-default login [--no-browser] [--client-id-file=CLIENT_ID_FILE] [--disable-quota-project] - [--no-launch-browser] [--scopes=SCOPES,[SCOPES,...]] + [--no-launch-browser] [--scopes=SCOPE,[SCOPE,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -21,8 +21,8 @@ DESCRIPTION command in your local development. This command tries to find a quota project from gcloud's context and write it to ADC so that Google client libraries can use it for billing and quota. Alternatively, you can use the - --client-id-file flag. In this case, the project owning the client id will - be used for billing and quota. You can create the client-id-file at + --client-id-file flag. In this case, the project owning the client ID will + be used for billing and quota. You can create the client ID file at https://console.cloud.google.com/apis/credentials. This command has no effect on the user account(s) set up by the gcloud auth @@ -96,7 +96,7 @@ FLAGS possible to launch a browser, prints a URL to standard output to be copied. Enabled by default, use --no-launch-browser to disable. - --scopes=SCOPES,[SCOPES,...] + --scopes=SCOPE,[SCOPE,...] The names of the scopes to authorize for. By default openid, https://www.googleapis.com/auth/userinfo.email, https://www.googleapis.com/auth/cloud-platform, @@ -113,8 +113,10 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: $ gcloud auth application-default login + $ gcloud alpha auth application-default login + diff --git a/gcloud/beta/auth/application-default/print-access-token b/gcloud/beta/auth/application-default/print-access-token index ff7d88353..2d48b2053 100644 --- a/gcloud/beta/auth/application-default/print-access-token +++ b/gcloud/beta/auth/application-default/print-access-token @@ -63,8 +63,10 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: $ gcloud auth application-default print-access-token + $ gcloud alpha auth application-default print-access-token + diff --git a/gcloud/beta/auth/application-default/revoke b/gcloud/beta/auth/application-default/revoke index 4102d857a..1ea903555 100644 --- a/gcloud/beta/auth/application-default/revoke +++ b/gcloud/beta/auth/application-default/revoke @@ -24,8 +24,10 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: $ gcloud auth application-default revoke + $ gcloud alpha auth application-default revoke + diff --git a/gcloud/beta/auth/application-default/set-quota-project b/gcloud/beta/auth/application-default/set-quota-project index 10a2aa897..2ec996cd2 100644 --- a/gcloud/beta/auth/application-default/set-quota-project +++ b/gcloud/beta/auth/application-default/set-quota-project @@ -34,8 +34,10 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: $ gcloud auth application-default set-quota-project + $ gcloud alpha auth application-default set-quota-project + diff --git a/gcloud/beta/compute/start-iap-tunnel b/gcloud/beta/compute/start-iap-tunnel index 5ad96de4b..ea9677fd7 100644 --- a/gcloud/beta/compute/start-iap-tunnel +++ b/gcloud/beta/compute/start-iap-tunnel @@ -5,7 +5,9 @@ SYNOPSIS gcloud beta compute start-iap-tunnel INSTANCE_NAME INSTANCE_PORT [--iap-tunnel-disable-connection-check] [--local-host-port=LOCAL_HOST_PORT; default="localhost:0"] - [--zone=ZONE] [GCLOUD_WIDE_FLAG ...] + [--zone=ZONE] + [--network=NETWORK --region=REGION : --dest-group=DEST_GROUP] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) Starts a tunnel to Cloud Identity-Aware Proxy for TCP forwarding @@ -73,6 +75,17 @@ FLAGS Alternatively, the zone can be stored in the environment variable CLOUDSDK_COMPUTE_ZONE. + --network=NETWORK + Configures the VPC network to use when connecting via IP address or + FQDN. + + --region=REGION + Configures the region to use when connecting via IP address or FQDN. + + --dest-group=DEST_GROUP + Configures the destination group to use when connecting via IP address + or FQDN. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/beta/compute/target-grpc-proxies/create b/gcloud/beta/compute/target-grpc-proxies/create index 9ad397005..c6ef30c32 100644 --- a/gcloud/beta/compute/target-grpc-proxies/create +++ b/gcloud/beta/compute/target-grpc-proxies/create @@ -4,6 +4,7 @@ NAME SYNOPSIS gcloud beta compute target-grpc-proxies create NAME --url-map=URL_MAP [--description=DESCRIPTION] [--validate-for-proxyless] + [--global-url-map | --url-map-region=URL_MAP_REGION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -49,6 +50,15 @@ OPTIONAL FLAGS cause unexpected behavior in gRPC applications if unsupported features are configured. + At most one of these can be specified: + + --global-url-map + If set, the URL map is global. + + --url-map-region=URL_MAP_REGION + Region of the URL map to operate on. Overrides the default + compute/region property value for this command invocation. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/beta/config/get b/gcloud/beta/config/get index 37d2797dc..a9488f3a7 100644 --- a/gcloud/beta/config/get +++ b/gcloud/beta/config/get @@ -615,6 +615,10 @@ AVAILABLE PROPERTIES location Default Google Cloud location to use for Anthos clusters on Azure. + container_vmware + location + Default Google Cloud location to use for Anthos clusters on VMware. + context_aware use_client_certificate If True, use client certificate to authorize user device using @@ -1005,6 +1009,11 @@ AVAILABLE PROPERTIES instead (inexpensively) compare the cloud source and destination hashes. + convert_incompatible_windows_path_characters + Allows automatic conversion of invalid path characters on Windows. + If not enabled, Windows will raise an OSError if an invalid + character is encountered. + copy_chunk_size Chunk size used for copying to in clouds or on disk. diff --git a/gcloud/beta/config/help b/gcloud/beta/config/help index c5505d068..311fe1344 100644 --- a/gcloud/beta/config/help +++ b/gcloud/beta/config/help @@ -647,6 +647,10 @@ AVAILABLE PROPERTIES location Default Google Cloud location to use for Anthos clusters on Azure. + container_vmware + location + Default Google Cloud location to use for Anthos clusters on VMware. + context_aware use_client_certificate If True, use client certificate to authorize user device using @@ -1037,6 +1041,11 @@ AVAILABLE PROPERTIES instead (inexpensively) compare the cloud source and destination hashes. + convert_incompatible_windows_path_characters + Allows automatic conversion of invalid path characters on Windows. + If not enabled, Windows will raise an OSError if an invalid + character is encountered. + copy_chunk_size Chunk size used for copying to in clouds or on disk. diff --git a/gcloud/beta/config/list b/gcloud/beta/config/list index 854c83d84..2735fcb9d 100644 --- a/gcloud/beta/config/list +++ b/gcloud/beta/config/list @@ -649,6 +649,10 @@ AVAILABLE PROPERTIES location Default Google Cloud location to use for Anthos clusters on Azure. + container_vmware + location + Default Google Cloud location to use for Anthos clusters on VMware. + context_aware use_client_certificate If True, use client certificate to authorize user device using @@ -1039,6 +1043,11 @@ AVAILABLE PROPERTIES instead (inexpensively) compare the cloud source and destination hashes. + convert_incompatible_windows_path_characters + Allows automatic conversion of invalid path characters on Windows. + If not enabled, Windows will raise an OSError if an invalid + character is encountered. + copy_chunk_size Chunk size used for copying to in clouds or on disk. diff --git a/gcloud/beta/config/set b/gcloud/beta/config/set index a658d1524..43512a91c 100644 --- a/gcloud/beta/config/set +++ b/gcloud/beta/config/set @@ -662,6 +662,10 @@ AVAILABLE PROPERTIES location Default Google Cloud location to use for Anthos clusters on Azure. + container_vmware + location + Default Google Cloud location to use for Anthos clusters on VMware. + context_aware use_client_certificate If True, use client certificate to authorize user device using @@ -1052,6 +1056,11 @@ AVAILABLE PROPERTIES instead (inexpensively) compare the cloud source and destination hashes. + convert_incompatible_windows_path_characters + Allows automatic conversion of invalid path characters on Windows. + If not enabled, Windows will raise an OSError if an invalid + character is encountered. + copy_chunk_size Chunk size used for copying to in clouds or on disk. diff --git a/gcloud/beta/config/unset b/gcloud/beta/config/unset index 50c2c7dad..598b09b94 100644 --- a/gcloud/beta/config/unset +++ b/gcloud/beta/config/unset @@ -623,6 +623,10 @@ AVAILABLE PROPERTIES location Default Google Cloud location to use for Anthos clusters on Azure. + container_vmware + location + Default Google Cloud location to use for Anthos clusters on VMware. + context_aware use_client_certificate If True, use client certificate to authorize user device using @@ -1013,6 +1017,11 @@ AVAILABLE PROPERTIES instead (inexpensively) compare the cloud source and destination hashes. + convert_incompatible_windows_path_characters + Allows automatic conversion of invalid path characters on Windows. + If not enabled, Windows will raise an OSError if an invalid + character is encountered. + copy_chunk_size Chunk size used for copying to in clouds or on disk. diff --git a/gcloud/beta/container/node-pools/create b/gcloud/beta/container/node-pools/create index d21980923..8b9dba437 100644 --- a/gcloud/beta/container/node-pools/create +++ b/gcloud/beta/container/node-pools/create @@ -276,7 +276,7 @@ FLAGS Total egress bandwidth is the available outbound bandwidth from a VM, regardless of whether the traffic is going to internal IP or external IP destinations. The following tier values are allowed: - [DEFAULT,TIER_1] + [TIER_UNSPECIFIED,TIER_1] --node-group=NODE_GROUP Assign instances of this pool to run on the specified Google Compute diff --git a/gcloud/beta/container/node-pools/update b/gcloud/beta/container/node-pools/update index d6598ea6e..8b12a779f 100644 --- a/gcloud/beta/container/node-pools/update +++ b/gcloud/beta/container/node-pools/update @@ -57,7 +57,7 @@ REQUIRED FLAGS Total egress bandwidth is the available outbound bandwidth from a VM, regardless of whether the traffic is going to internal IP or external IP destinations. The following tier values are allowed: - [DEFAULT,TIER_1] + [TIER_UNSPECIFIED,TIER_1] --node-labels=[NODE_LABEL,...] Replaces all the user specified Kubernetes labels on all nodes in an diff --git a/gcloud/beta/dataflow/jobs/cancel b/gcloud/beta/dataflow/jobs/cancel index 8e40dfaa8..9f9088487 100644 --- a/gcloud/beta/dataflow/jobs/cancel +++ b/gcloud/beta/dataflow/jobs/cancel @@ -3,8 +3,8 @@ NAME line arguments SYNOPSIS - gcloud beta dataflow jobs cancel JOB_ID [JOB_ID ...] [--region=REGION_ID] - [GCLOUD_WIDE_FLAG ...] + gcloud beta dataflow jobs cancel JOB_ID [JOB_ID ...] [--force] + [--region=REGION_ID] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) Cancels all jobs that match the command line arguments. @@ -14,6 +14,11 @@ POSITIONAL ARGUMENTS The job IDs to operate on. FLAGS + --force + Forcibly cancels a Dataflow job, leaking any VMs the Dataflow job + created. Regular cancel must have been attempted at least 30 minutes + ago for a job to be force cancelled. + --region=REGION_ID The region ID of the jobs' regional endpoint. Defaults to 'us-central1'. diff --git a/gcloud/beta/filestore/instances/create b/gcloud/beta/filestore/instances/create index c5f04d819..6ae9ee423 100644 --- a/gcloud/beta/filestore/instances/create +++ b/gcloud/beta/filestore/instances/create @@ -212,8 +212,8 @@ OPTIONAL FLAGS ENTERPRISE instances offer the features and availability needed for mission-critical workloads. high-scale-ssd - NFS storage system with expanded capacity and performance scaling - capabilities. + High Scale instances offer NFS storage system with expanded + capacity and performance scaling capabilities. premium Premium Filestore instance, An alias for BASIC_SSD. Use BASIC_SSD instead whenever possible. diff --git a/gcloud/beta/functions/deploy b/gcloud/beta/functions/deploy index 2e7954267..b97365c93 100644 --- a/gcloud/beta/functions/deploy +++ b/gcloud/beta/functions/deploy @@ -184,7 +184,7 @@ FLAGS ◆ go113: Go 1.13 ◆ go116: Go 1.16 ◆ java11: Java 11 - ◆ java17: Java 17 (preview) + ◆ java17: Java 17 ◆ dotnet3: .NET Framework 3 ◆ ruby26: Ruby 2.6 ◆ ruby27: Ruby 2.7 diff --git a/gcloud/beta/iam/workload-identity-pools/create-cred-config b/gcloud/beta/iam/workload-identity-pools/create-cred-config index f32decef1..86779b4d0 100644 --- a/gcloud/beta/iam/workload-identity-pools/create-cred-config +++ b/gcloud/beta/iam/workload-identity-pools/create-cred-config @@ -6,13 +6,16 @@ SYNOPSIS gcloud beta iam workload-identity-pools create-cred-config AUDIENCE --output-file=OUTPUT_FILE (--aws | --azure | --credential-source-file=CREDENTIAL_SOURCE_FILE - | --credential-source-url=CREDENTIAL_SOURCE_URL) - [--app-id-uri=APP_ID_URI] + | --credential-source-url=CREDENTIAL_SOURCE_URL + | --executable-command=EXECUTABLE_COMMAND) [--app-id-uri=APP_ID_URI] [--credential-source-field-name=CREDENTIAL_SOURCE_FIELD_NAME] [--credential-source-headers=[key=value,...]] [--credential-source-type=CREDENTIAL_SOURCE_TYPE] [--enable-imdsv2] [--service-account=SERVICE_ACCOUNT] - [--subject-token-type=SUBJECT_TOKEN_TYPE] [GCLOUD_WIDE_FLAG ...] + [--subject-token-type=SUBJECT_TOKEN_TYPE] + [--executable-output-file=EXECUTABLE_OUTPUT_FILE + --executable-timeout-millis=EXECUTABLE_TIMEOUT_MILLIS] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) This command creates a configuration file to allow access to @@ -38,6 +41,16 @@ EXAMPLES --credential-source-headers=Key=Value \ --output-file=credentials.json + To create an executable-source credential configuration for your project, + run the following command: + + $ gcloud beta iam workload-identity-pools create-cred-config \ + locations/$REGION/workforcePools/$WORKFORCE_POOL_ID/providers/\ + $PROVIDER_ID --executable-command=$EXECUTABLE_COMMAND \ + --executable-timeout-millis=30000 \ + --executable-output-file=$CACHE_FILE \ + --output-file=credentials.json + To create an AWS-based credential configuration for your project, run: $ gcloud beta iam workload-identity-pools create-cred-config \ @@ -83,6 +96,10 @@ REQUIRED FLAGS --credential-source-url=CREDENTIAL_SOURCE_URL URL to obtain the credential from. + --executable-command=EXECUTABLE_COMMAND + The full command to run to retrieve the credential. Must be an + absolute path for the program including arguments. + OPTIONAL FLAGS --app-id-uri=APP_ID_URI The custom Application ID URI for the Azure access token. @@ -106,6 +123,15 @@ OPTIONAL FLAGS --subject-token-type=SUBJECT_TOKEN_TYPE The type of token being used for authorization. + Arguments for an executable type credential source. + + --executable-output-file=EXECUTABLE_OUTPUT_FILE + The absolute path to the file storing the executable response. + + --executable-timeout-millis=EXECUTABLE_TIMEOUT_MILLIS + The timeout duration in milliseconds for waiting for the executable + to finish. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/beta/iap/oauth-brands/create b/gcloud/beta/iap/oauth-brands/create index 340bc739c..e0587043f 100644 --- a/gcloud/beta/iap/oauth-brands/create +++ b/gcloud/beta/iap/oauth-brands/create @@ -51,8 +51,10 @@ API REFERENCE be found at: https://cloud.google.com/iap NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud iap oauth-brands create $ gcloud alpha iap oauth-brands create diff --git a/gcloud/beta/iap/oauth-brands/describe b/gcloud/beta/iap/oauth-brands/describe index 6dccc4cc3..febd321a3 100644 --- a/gcloud/beta/iap/oauth-brands/describe +++ b/gcloud/beta/iap/oauth-brands/describe @@ -47,8 +47,10 @@ API REFERENCE be found at: https://cloud.google.com/iap NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud iap oauth-brands describe $ gcloud alpha iap oauth-brands describe diff --git a/gcloud/beta/iap/oauth-brands/help b/gcloud/beta/iap/oauth-brands/help index df05db1d7..7b64bc29e 100644 --- a/gcloud/beta/iap/oauth-brands/help +++ b/gcloud/beta/iap/oauth-brands/help @@ -25,8 +25,10 @@ COMMANDS (BETA) List Cloud OAuth brands in the project. NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud iap oauth-brands $ gcloud alpha iap oauth-brands diff --git a/gcloud/beta/iap/oauth-brands/list b/gcloud/beta/iap/oauth-brands/list index a6f5829f6..c977a2a37 100644 --- a/gcloud/beta/iap/oauth-brands/list +++ b/gcloud/beta/iap/oauth-brands/list @@ -57,8 +57,10 @@ API REFERENCE be found at: https://cloud.google.com/iap NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud iap oauth-brands list $ gcloud alpha iap oauth-brands list diff --git a/gcloud/beta/iap/oauth-clients/create b/gcloud/beta/iap/oauth-clients/create index 24628543e..956bdcdab 100644 --- a/gcloud/beta/iap/oauth-clients/create +++ b/gcloud/beta/iap/oauth-clients/create @@ -57,8 +57,10 @@ API REFERENCE be found at: https://cloud.google.com/iap NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud iap oauth-clients create $ gcloud alpha iap oauth-clients create diff --git a/gcloud/beta/iap/oauth-clients/delete b/gcloud/beta/iap/oauth-clients/delete index 27d8b8c4b..3d4cf375b 100644 --- a/gcloud/beta/iap/oauth-clients/delete +++ b/gcloud/beta/iap/oauth-clients/delete @@ -60,8 +60,10 @@ API REFERENCE be found at: https://cloud.google.com/iap NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud iap oauth-clients delete $ gcloud alpha iap oauth-clients delete diff --git a/gcloud/beta/iap/oauth-clients/describe b/gcloud/beta/iap/oauth-clients/describe index 5c26b8a87..2aca80fc4 100644 --- a/gcloud/beta/iap/oauth-clients/describe +++ b/gcloud/beta/iap/oauth-clients/describe @@ -57,8 +57,10 @@ API REFERENCE be found at: https://cloud.google.com/iap NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud iap oauth-clients describe $ gcloud alpha iap oauth-clients describe diff --git a/gcloud/beta/iap/oauth-clients/help b/gcloud/beta/iap/oauth-clients/help index 2dd01b3fd..e3935cdf4 100644 --- a/gcloud/beta/iap/oauth-clients/help +++ b/gcloud/beta/iap/oauth-clients/help @@ -31,8 +31,10 @@ COMMANDS (BETA) Reset a Cloud IAP OAuth client secret. NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud iap oauth-clients $ gcloud alpha iap oauth-clients diff --git a/gcloud/beta/iap/oauth-clients/list b/gcloud/beta/iap/oauth-clients/list index 11e662873..1f64c8539 100644 --- a/gcloud/beta/iap/oauth-clients/list +++ b/gcloud/beta/iap/oauth-clients/list @@ -72,8 +72,10 @@ API REFERENCE be found at: https://cloud.google.com/iap NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud iap oauth-clients list $ gcloud alpha iap oauth-clients list diff --git a/gcloud/beta/iap/oauth-clients/reset-secret b/gcloud/beta/iap/oauth-clients/reset-secret index b64dcc9dc..9d3ebf3d9 100644 --- a/gcloud/beta/iap/oauth-clients/reset-secret +++ b/gcloud/beta/iap/oauth-clients/reset-secret @@ -58,8 +58,10 @@ API REFERENCE be found at: https://cloud.google.com/iap NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud iap oauth-clients reset-secret $ gcloud alpha iap oauth-clients reset-secret diff --git a/gcloud/beta/metastore/federations/add-iam-policy-binding b/gcloud/beta/metastore/federations/add-iam-policy-binding new file mode 100644 index 000000000..c259636ac --- /dev/null +++ b/gcloud/beta/metastore/federations/add-iam-policy-binding @@ -0,0 +1,95 @@ +NAME + gcloud beta metastore federations add-iam-policy-binding - add an IAM + policy binding to a federation + +SYNOPSIS + gcloud beta metastore federations add-iam-policy-binding + (FEDERATION : --location=LOCATION) --member=PRINCIPAL --role=ROLE + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Add an IAM policy binding to a federation. + +EXAMPLES + To add an IAM policy binding for the role of roles/metastore.admin for the + user test-user@gmail.com, run: + + $ gcloud beta metastore federations add-iam-policy-binding \ + my-federation --member='user:test-user@gmail.com' \ + --role='roles/metastore.admin' + + See https://cloud.google.com/dataproc-metastore/docs/iam-and-access-control + for details of policy role and member types. + +POSITIONAL ARGUMENTS + Federation resource - Federation for which to add the IAM policy to. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument federation on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + FEDERATION + ID of the federation or fully qualified identifier for the + federation. To set the federation attribute: + ▸ provide the argument federation on the command line. + + This positional must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + The location of the Dataproc Metastore service. + + If not specified, will use default metastore/location. + + To set the location attribute: + ▸ provide the argument federation on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property metastore/location. + +REQUIRED FLAGS + --member=PRINCIPAL + The principal to add the binding for. Should be of the form + user|group|serviceAccount:email or domain:domain. + + Examples: user:test-user@gmail.com, group:admins@example.com, + serviceAccount:test123@example.domain.com, or + domain:example.domain.com. + + Some resources also accept the following special values: + ◆ allUsers - Special identifier that represents anyone who is on the + internet, with or without a Google account. + ◆ allAuthenticatedUsers - Special identifier that represents anyone + who is authenticated with a Google account or a service account. + + --role=ROLE + Role name to assign to the principal. The role name is the complete + path of a predefined role, such as roles/logging.viewer, or the role ID + for a custom role, such as + organizations/{ORGANIZATION_ID}/roles/logging.viewer. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the metastore/v1beta API. The full documentation for this + API can be found at: https://cloud.google.com/dataproc-metastore/docs + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud metastore federations add-iam-policy-binding + + $ gcloud alpha metastore federations add-iam-policy-binding + diff --git a/gcloud/beta/metastore/federations/create b/gcloud/beta/metastore/federations/create new file mode 100644 index 000000000..818514074 --- /dev/null +++ b/gcloud/beta/metastore/federations/create @@ -0,0 +1,112 @@ +NAME + gcloud beta metastore federations create - create a Dataproc Metastore + federation + +SYNOPSIS + gcloud beta metastore federations create (FEDERATION : --location=LOCATION) + --backends=RANK=BACKEND [--async] + [--hive-metastore-version=HIVE_METASTORE_VERSION] + [--labels=[KEY=VALUE,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Create a new Dataproc Metastore federation with the given name and + configurations. + + If run asynchronously with --async, exits after printing one operation name + that can be used to poll the status of the creation via: + + gcloud metastore operations describe + +EXAMPLES + To create a Dataproc Metastore federation with the name + my-metastore-federation in location us-central with two backends dpms1 and + dpms2, run: + + $ gcloud beta metastore federations create my-metastore-federation \ + --location=us-central1 \ + --backends=1=dpms:dpms1,2=dpms:projects/my-project/locations/\ + us-central1/services/dpms2 + +POSITIONAL ARGUMENTS + Federation resource - Arguments and flags that specify the Dataproc + Metastore federation you want to create. The arguments in this group can + be used to specify the attributes of this resource. (NOTE) Some attributes + are not given arguments in this group but can be set in other ways. To set + the project attribute: + ◆ provide the argument federation on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + FEDERATION + ID of the federation or fully qualified identifier for the + federation. To set the federation attribute: + ▸ provide the argument federation on the command line. + + This positional must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + The location of the Dataproc Metastore service. + + If not specified, will use default metastore/location. + + To set the location attribute: + ▸ provide the argument federation on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property metastore/location. + +REQUIRED FLAGS + --backends=RANK=BACKEND + Backends from which the federation service serves metadata at query + time. The backends are specified as a comma-separated list of + RANK=BACKEND pairs. For example: + 1=dpms:dpms1,2=dpms:projects/my-project/locations/us-central1/services/dpms2. + RANK represents the rank of the backend metastore and is used to + resolve database name collisions. BACKEND is specified as + METASTORE_TYPE:METASTORE_NAME where METASTORE_TYPE is the type of + backend metastore and METASTORE_NAME is the relative resource name of + the metastore. If only the name of the metastore is specified (e.g. + dpms1), project and location will be inferred from the project and + location used to create the federation. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --hive-metastore-version=HIVE_METASTORE_VERSION + Hive metastore schema version of the Metastore federation. + HIVE_METASTORE_VERSION must be one of: 2.3.6, 3.1.2. + + --labels=[KEY=VALUE,...] + List of label KEY=VALUE pairs to add. + + Keys must start with a lowercase character and contain only hyphens + (-), underscores (_), lowercase characters, and numbers. Values must + contain only hyphens (-), underscores (_), lowercase characters, and + numbers. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the metastore/v1beta API. The full documentation for this + API can be found at: https://cloud.google.com/dataproc-metastore/docs + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud metastore federations create + + $ gcloud alpha metastore federations create + diff --git a/gcloud/beta/metastore/federations/delete b/gcloud/beta/metastore/federations/delete new file mode 100644 index 000000000..67d9fc45f --- /dev/null +++ b/gcloud/beta/metastore/federations/delete @@ -0,0 +1,77 @@ +NAME + gcloud beta metastore federations delete - delete one or more Dataproc + Metastore federations + +SYNOPSIS + gcloud beta metastore federations delete + (FEDERATIONS [FEDERATIONS ...] : --location=LOCATION) [--async] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) If run asynchronously with --async, exits after printing one or more + operation names that can be used to poll the status of the deletion(s) via: + + gcloud metastore operations describe + +EXAMPLES + To delete a Dataproc Metastore federation with the name + my-metastore-federation in location us-central1, run: + + $ gcloud beta metastore federations delete my-metastore-federation \ + --location=us-central1 + + To delete multiple Dataproc Metastore federations with the name + federation-1 and federation-2 in the same location us-central1, run: + + $ gcloud beta metastore federations delete federation-1 \ + federation-2 --location=us-central1 + +POSITIONAL ARGUMENTS + Federation resource - The federations to delete. The arguments in this + group can be used to specify the attributes of this resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. To set the project attribute: + ◆ provide the argument federations on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + FEDERATIONS [FEDERATIONS ...] + IDs of the federations or fully qualified identifiers for the + federations. To set the federation attribute: + ▸ provide the argument federations on the command line. + + This positional must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + Location to which the federations belongs. To set the location + attribute: + ▸ provide the argument federations on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property metastore/location. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud metastore federations delete + + $ gcloud alpha metastore federations delete + diff --git a/gcloud/beta/metastore/federations/describe b/gcloud/beta/metastore/federations/describe new file mode 100644 index 000000000..ab0504180 --- /dev/null +++ b/gcloud/beta/metastore/federations/describe @@ -0,0 +1,73 @@ +NAME + gcloud beta metastore federations describe - describe a Dataproc Metastore + federation + +SYNOPSIS + gcloud beta metastore federations describe + (FEDERATION : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Describe a Dataproc Metastore federation. + + Displays all details of a Dataproc Metastore federation given a valid + federation ID. + +EXAMPLES + To describe a Dataproc Metastore federation with the ID + my-metastore-federation in us-central1, run: + + $ gcloud beta metastore federations describe \ + my-metastore-federation --location=us-central1 + +POSITIONAL ARGUMENTS + Federation resource - Arguments and flags that specify the Metastore + federation you want to describe. The arguments in this group can be used + to specify the attributes of this resource. (NOTE) Some attributes are not + given arguments in this group but can be set in other ways. To set the + project attribute: + ◆ provide the argument federation on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + FEDERATION + ID of the federation or fully qualified identifier for the + federation. To set the federation attribute: + ▸ provide the argument federation on the command line. + + This positional must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + The location of the Dataproc Metastore service. + + If not specified, will use default metastore/location. + + To set the location attribute: + ▸ provide the argument federation on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property metastore/location. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the metastore/v1beta API. The full documentation for this + API can be found at: https://cloud.google.com/dataproc-metastore/docs + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud metastore federations describe + + $ gcloud alpha metastore federations describe + diff --git a/gcloud/beta/metastore/federations/get-iam-policy b/gcloud/beta/metastore/federations/get-iam-policy new file mode 100644 index 000000000..ce6a945a5 --- /dev/null +++ b/gcloud/beta/metastore/federations/get-iam-policy @@ -0,0 +1,101 @@ +NAME + gcloud beta metastore federations get-iam-policy - get the IAM policy for + the federation + +SYNOPSIS + gcloud beta metastore federations get-iam-policy + (FEDERATION : --location=LOCATION) [--filter=EXPRESSION] + [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) gcloud beta metastore federations get-iam-policy displays the IAM + policy associated with the federation. If formatted as JSON, the output can + be edited and used as a policy file for set-iam-policy. The output includes + an "etag" field identifying the version emitted and allowing detection of + concurrent policy updates. The "etag" field should be removed to be used as + set-iam-policy input; see gcloud beta metastore federations set-iam-policy + for additional details. + +EXAMPLES + To print the IAM policy for a given federation, run: + + $ gcloud beta metastore federations get-iam-policy my-federation + +POSITIONAL ARGUMENTS + Federation resource - Federation for which to display the IAM policy. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument federation on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + FEDERATION + ID of the federation or fully qualified identifier for the + federation. To set the federation attribute: + ▸ provide the argument federation on the command line. + + This positional must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + The location of the Dataproc Metastore service. + + If not specified, will use default metastore/location. + + To set the location attribute: + ▸ provide the argument federation on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property metastore/location. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the metastore/v1beta API. The full documentation for this + API can be found at: https://cloud.google.com/dataproc-metastore/docs + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud metastore federations get-iam-policy + + $ gcloud alpha metastore federations get-iam-policy + diff --git a/gcloud/beta/metastore/federations/help b/gcloud/beta/metastore/federations/help new file mode 100644 index 000000000..f584fa57f --- /dev/null +++ b/gcloud/beta/metastore/federations/help @@ -0,0 +1,52 @@ +NAME + gcloud beta metastore federations - manage Dataproc Metastore federations + +SYNOPSIS + gcloud beta metastore federations COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Manage Dataproc Metastore federations. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + add-iam-policy-binding + (BETA) Add an IAM policy binding to a federation. + + create + (BETA) Create a Dataproc Metastore federation. + + delete + (BETA) Delete one or more Dataproc Metastore federations. + + describe + (BETA) Describe a Dataproc Metastore federation. + + get-iam-policy + (BETA) Get the IAM policy for the federation. + + list + (BETA) List Dataproc Metastore federations. + + remove-iam-policy-binding + (BETA) Remove an IAM policy binding from a federation. + + set-iam-policy + (BETA) Set the IAM policy for the federation. + + update + (BETA) Update a Dataproc Metastore federation. + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud metastore federations + + $ gcloud alpha metastore federations + diff --git a/gcloud/beta/metastore/federations/list b/gcloud/beta/metastore/federations/list new file mode 100644 index 000000000..f11cd87b6 --- /dev/null +++ b/gcloud/beta/metastore/federations/list @@ -0,0 +1,90 @@ +NAME + gcloud beta metastore federations list - list Dataproc Metastore + federations + +SYNOPSIS + gcloud beta metastore federations list [--location=LOCATION] + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Lists all federations under the specified project and location. + +EXAMPLES + To list all Dataproc Metastore federations in location us-central1, run: + + $ gcloud beta metastore federations list --location=us-central1 + + To list all Dataproc Metastore federations in all locations, run: + + $ gcloud beta metastore federations list --location=- + +FLAGS + Location resource - The location of the federations to list. This + represents a Cloud resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. To set the project + attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ set the property metastore/location with a fully specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. To + set the location attribute: + ▸ provide the argument --location on the command line; + ▸ set the property metastore/location. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the metastore/v1beta API. The full documentation for this + API can be found at: https://cloud.google.com/dataproc-metastore/docs + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud metastore federations list + + $ gcloud alpha metastore federations list + diff --git a/gcloud/beta/metastore/federations/remove-iam-policy-binding b/gcloud/beta/metastore/federations/remove-iam-policy-binding new file mode 100644 index 000000000..87c16267b --- /dev/null +++ b/gcloud/beta/metastore/federations/remove-iam-policy-binding @@ -0,0 +1,96 @@ +NAME + gcloud beta metastore federations remove-iam-policy-binding - remove an IAM + policy binding from a federation + +SYNOPSIS + gcloud beta metastore federations remove-iam-policy-binding + (FEDERATION : --location=LOCATION) --member=PRINCIPAL --role=ROLE + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Remove an IAM policy binding from a federation. + +EXAMPLES + To remove an IAM policy binding for the role of roles/metastore.admin for + the user test-user@gmail.com, run: + + $ gcloud beta metastore federations remove-iam-policy-binding \ + my-federation --member='user:test-user@gmail.com' \ + --role='roles/metastore.admin' + + See https://cloud.google.com/iam/docs/managing-policies for details of + policy role and member types. + +POSITIONAL ARGUMENTS + Federation resource - Federation for which to remove the IAM policy from. + The arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument federation on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + FEDERATION + ID of the federation or fully qualified identifier for the + federation. To set the federation attribute: + ▸ provide the argument federation on the command line. + + This positional must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + The location of the Dataproc Metastore service. + + If not specified, will use default metastore/location. + + To set the location attribute: + ▸ provide the argument federation on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property metastore/location. + +REQUIRED FLAGS + --member=PRINCIPAL + The principal to remove the binding for. Should be of the form + user|group|serviceAccount:email or domain:domain. + + Examples: user:test-user@gmail.com, group:admins@example.com, + serviceAccount:test123@example.domain.com, or + domain:example.domain.com. + + Deleted principals have an additional deleted: prefix and a ?uid=UID + suffix, where UID is a unique identifier for the principal. Example: + deleted:user:test-user@gmail.com?uid=123456789012345678901. + + Some resources also accept the following special values: + ◆ allUsers - Special identifier that represents anyone who is on the + internet, with or without a Google account. + ◆ allAuthenticatedUsers - Special identifier that represents anyone + who is authenticated with a Google account or a service account. + + --role=ROLE + The role to remove the principal from. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the metastore/v1beta API. The full documentation for this + API can be found at: https://cloud.google.com/dataproc-metastore/docs + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud metastore federations remove-iam-policy-binding + + $ gcloud alpha metastore federations remove-iam-policy-binding + diff --git a/gcloud/beta/metastore/federations/set-iam-policy b/gcloud/beta/metastore/federations/set-iam-policy new file mode 100644 index 000000000..c2ba1cb5a --- /dev/null +++ b/gcloud/beta/metastore/federations/set-iam-policy @@ -0,0 +1,80 @@ +NAME + gcloud beta metastore federations set-iam-policy - set the IAM policy for + the federation + +SYNOPSIS + gcloud beta metastore federations set-iam-policy + (FEDERATION : --location=LOCATION) POLICY_FILE [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Sets the IAM policy for the given federation as defined in a JSON or + YAML file. + + See https://cloud.google.com/iam/docs/managing-policies for details of the + policy file format and contents. + +EXAMPLES + The following command will read an IAM policy defined in a JSON file + policy.json and set it for the federation my-federation: + + $ gcloud beta metastore federations set-iam-policy my-federation \ + policy.json + +POSITIONAL ARGUMENTS + Federation resource - Federation for which to display the IAM policy. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument federation on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + FEDERATION + ID of the federation or fully qualified identifier for the + federation. To set the federation attribute: + ▸ provide the argument federation on the command line. + + This positional must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + The location of the Dataproc Metastore service. + + If not specified, will use default metastore/location. + + To set the location attribute: + ▸ provide the argument federation on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property metastore/location. + + POLICY_FILE + Path to a local JSON or YAML formatted file containing a valid policy. + + The output of the get-iam-policy command is a valid file, as is any + JSON or YAML file conforming to the structure of a Policy + (https://cloud.google.com/iam/reference/rest/v1/Policy). + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the metastore/v1beta API. The full documentation for this + API can be found at: https://cloud.google.com/dataproc-metastore/docs + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud metastore federations set-iam-policy + + $ gcloud alpha metastore federations set-iam-policy + diff --git a/gcloud/beta/metastore/federations/update b/gcloud/beta/metastore/federations/update new file mode 100644 index 000000000..8c639b470 --- /dev/null +++ b/gcloud/beta/metastore/federations/update @@ -0,0 +1,147 @@ +NAME + gcloud beta metastore federations update - update a Dataproc Metastore + federation + +SYNOPSIS + gcloud beta metastore federations update (FEDERATION : --location=LOCATION) + (--update-backends=RANK=BACKEND --clear-backends + | --remove-backends=RANK) [--async] [--update-labels=[KEY=VALUE,...]] + [--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Update the metadata and/or configuration parameters of a Dataproc + Metastore federation. + + If run asynchronously with --async, exits after printing one operation name + that can be used to poll the status of the update via: + + gcloud metastore operations describe + +EXAMPLES + To update a Dataproc Metastore federation with the name + my-metastore-federation in location us-central with two backends dpms1 and + dpms2, run: + + $ gcloud beta metastore federations update my-metastore-federation \ + --location=us-central1 \ + --update-backends=1=dpms:dpms1,2=dpms:projects/my-project/\ + locations/us-central1/services/dpms2 + +POSITIONAL ARGUMENTS + Federation resource - Arguments and flags that specify the Dataproc + Metastore federation you want to update. The arguments in this group can + be used to specify the attributes of this resource. (NOTE) Some attributes + are not given arguments in this group but can be set in other ways. To set + the project attribute: + ◆ provide the argument federation on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + FEDERATION + ID of the federation or fully qualified identifier for the + federation. To set the federation attribute: + ▸ provide the argument federation on the command line. + + This positional must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + The location of the Dataproc Metastore service. + + If not specified, will use default metastore/location. + + To set the location attribute: + ▸ provide the argument federation on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property metastore/location. + +REQUIRED FLAGS + Update the backend metastores by passing key-value pairs in through the + flags. + + At least one of these must be specified: + + --update-backends=RANK=BACKEND + Comma-separated list of metastore backends specified as a list of + RANK=BACKEND pairs. For example: + 1=dpms:dpms1,2=dpms:projects/my-project/locations/us-central1/services/dpms2. + RANK represents the rank of the backend metastore and is used to + resolve database name collisions. BACKEND is specified as + METASTORE_TYPE:METASTORE_NAME where METASTORE_TYPE is the type of + backend metastore and METASTORE_NAME is the relative resource name of + the metastore. If only the name of the metastore is specified (e.g. + dpms1), project and location will be inferred from the project and + location used to create the federation. + + At most one of these can be specified: + + --clear-backends + Clear existing metastore backends. --clear-backends must be used + with --update-backends. + + --remove-backends=RANK + Comma-separated list of metastore backend keys to remove with the + form RANK1,RANK2. The Key represents the rank of the backend + metastore and is used to resolve database name collisions. If a + RANK does not exist then it is sliently ignored. If + --update-backends is also specified, then --remove-backends is + applied first. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --update-labels=[KEY=VALUE,...] + List of label KEY=VALUE pairs to update. If a label exists, its value + is modified. Otherwise, a new label is created. + + Keys must start with a lowercase character and contain only hyphens + (-), underscores (_), lowercase characters, and numbers. Values must + contain only hyphens (-), underscores (_), lowercase characters, and + numbers. + + At most one of these can be specified: + + --clear-labels + Remove all labels. If --update-labels is also specified then + --clear-labels is applied first. + + For example, to remove all labels: + + $ gcloud beta metastore federations update --clear-labels + + To remove all existing labels and create two new labels, foo and baz: + + $ gcloud beta metastore federations update --clear-labels \ + --update-labels foo=bar,baz=qux + + --remove-labels=[KEY,...] + List of label keys to remove. If a label does not exist it is + silently ignored. If --update-labels is also specified then + --update-labels is applied first. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the metastore/v1beta API. The full documentation for this + API can be found at: https://cloud.google.com/dataproc-metastore/docs + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud metastore federations update + + $ gcloud alpha metastore federations update + diff --git a/gcloud/beta/metastore/help b/gcloud/beta/metastore/help index 407c8490d..d482e02cf 100644 --- a/gcloud/beta/metastore/help +++ b/gcloud/beta/metastore/help @@ -15,6 +15,9 @@ GCLOUD WIDE FLAGS GROUPS GROUP is one of the following: + federations + (BETA) Manage Dataproc Metastore federations. + locations (BETA) Get information about Dataproc Metastore locations. diff --git a/gcloud/beta/sql/flags/list b/gcloud/beta/sql/flags/list index b69c20dbf..f9503d162 100644 --- a/gcloud/beta/sql/flags/list +++ b/gcloud/beta/sql/flags/list @@ -3,7 +3,8 @@ NAME instances SYNOPSIS - gcloud beta sql flags list [--database-version=DATABASE_VERSION] + gcloud beta sql flags list + [--database-version=DATABASE_VERSION; default="MYSQL_8_0"] [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] @@ -11,9 +12,9 @@ DESCRIPTION (BETA) List customizable flags for Google Cloud SQL instances. FLAGS - --database-version=DATABASE_VERSION - The database engine type and versions. If left unspecified, the API - defaults are used. See the list of database versions at + --database-version=DATABASE_VERSION; default="MYSQL_8_0" + The database engine type and versions. If left unspecified, MYSQL_8_0 + is used. See the list of database versions at https://cloud.google.com/sql/docs/mysql/admin-api/rest/v1beta4/SqlDatabaseVersion. LIST COMMAND FLAGS diff --git a/gcloud/beta/sql/instances/create b/gcloud/beta/sql/instances/create index 663e81e56..a1f021bd8 100644 --- a/gcloud/beta/sql/instances/create +++ b/gcloud/beta/sql/instances/create @@ -6,12 +6,15 @@ SYNOPSIS [--activation-policy=ACTIVATION_POLICY] [--active-directory-domain=ACTIVE_DIRECTORY_DOMAIN] [--allocated-ip-range-name=ALLOCATED_IP_RANGE_NAME] [--[no-]assign-ip] - [--async] [--authorized-networks=NETWORK,[NETWORK,...]] + [--async] [--audit-bucket-path=AUDIT_BUCKET_PATH] + [--audit-retention-interval=AUDIT_RETENTION_INTERVAL] + [--audit-upload-interval=AUDIT_UPLOAD_INTERVAL] + [--authorized-networks=NETWORK,[NETWORK,...]] [--availability-type=AVAILABILITY_TYPE] [--no-backup] [--backup-location=BACKUP_LOCATION] [--backup-start-time=BACKUP_START_TIME] [--collation=COLLATION] [--cpu=CPU] [--database-flags=FLAG=VALUE,[FLAG=VALUE,...]] - [--database-version=DATABASE_VERSION] + [--database-version=DATABASE_VERSION; default="MYSQL_8_0"] [--deny-maintenance-period-end-date=DENY_MAINTENANCE_PERIOD_END_DATE] [--deny-maintenance-period-start-date=DENY_MAINTENANCE_PERIOD_START_DATE] [--deny-maintenance-period-time=DENY_MAINTENANCE_PERIOD_TIME] @@ -119,6 +122,19 @@ FLAGS Return immediately, without waiting for the operation in progress to complete. + --audit-bucket-path=AUDIT_BUCKET_PATH + The location, as a Cloud Storage bucket, to which audit files are + uploaded. The URI is in the form gs://bucketName/folderName. Only + available for SQL Server instances. + + --audit-retention-interval=AUDIT_RETENTION_INTERVAL + The number of days for audit log retention on disk, for example, 3dfor + 3 days. Only available for SQL Server instances. + + --audit-upload-interval=AUDIT_UPLOAD_INTERVAL + How often to upload audit logs (audit files), for example, 30mfor 30 + minutes. Only available for SQL Server instances. + --authorized-networks=NETWORK,[NETWORK,...] The list of external networks that are allowed to connect to the instance. Specified in CIDR notation, also known as 'slash' notation @@ -162,9 +178,9 @@ FLAGS API for allowed flags. (e.g., --database-flags max_allowed_packet=55555,skip_grant_tables=,log_output=1) - --database-version=DATABASE_VERSION - The database engine type and versions. If left unspecified, the API - defaults are used. See the list of database versions at + --database-version=DATABASE_VERSION; default="MYSQL_8_0" + The database engine type and versions. If left unspecified, MYSQL_8_0 + is used. See the list of database versions at https://cloud.google.com/sql/docs/mysql/admin-api/rest/v1beta4/SqlDatabaseVersion. --deny-maintenance-period-end-date=DENY_MAINTENANCE_PERIOD_END_DATE diff --git a/gcloud/beta/sql/instances/patch b/gcloud/beta/sql/instances/patch index e7d2533d4..33d635228 100644 --- a/gcloud/beta/sql/instances/patch +++ b/gcloud/beta/sql/instances/patch @@ -7,9 +7,11 @@ SYNOPSIS [--activation-policy=ACTIVATION_POLICY] [--active-directory-domain=ACTIVE_DIRECTORY_DOMAIN] [--allocated-ip-range-name=ALLOCATED_IP_RANGE_NAME] [--[no-]assign-ip] - [--async] [--availability-type=AVAILABILITY_TYPE] - [--clear-password-policy] [--cpu=CPU] - [--database-version=DATABASE_VERSION] + [--async] [--audit-bucket-path=AUDIT_BUCKET_PATH] + [--audit-retention-interval=AUDIT_RETENTION_INTERVAL] + [--audit-upload-interval=AUDIT_UPLOAD_INTERVAL] + [--availability-type=AVAILABILITY_TYPE] [--clear-password-policy] + [--cpu=CPU] [--database-version=DATABASE_VERSION] [--deny-maintenance-period-end-date=DENY_MAINTENANCE_PERIOD_END_DATE] [--deny-maintenance-period-start-date=DENY_MAINTENANCE_PERIOD_START_DATE] [--deny-maintenance-period-time=DENY_MAINTENANCE_PERIOD_TIME] [--diff] @@ -86,6 +88,19 @@ FLAGS Return immediately, without waiting for the operation in progress to complete. + --audit-bucket-path=AUDIT_BUCKET_PATH + The location, as a Cloud Storage bucket, to which audit files are + uploaded. The URI is in the form gs://bucketName/folderName. Only + available for SQL Server instances. + + --audit-retention-interval=AUDIT_RETENTION_INTERVAL + The number of days for audit log retention on disk, for example, 3dfor + 3 days. Only available for SQL Server instances. + + --audit-upload-interval=AUDIT_UPLOAD_INTERVAL + How often to upload audit logs (audit files), for example, 30mfor 30 + minutes. Only available for SQL Server instances. + --availability-type=AVAILABILITY_TYPE Specifies level of availability. AVAILABILITY_TYPE must be one of: diff --git a/gcloud/compute/target-grpc-proxies/create b/gcloud/compute/target-grpc-proxies/create index 7413e9a53..a89059c2c 100644 --- a/gcloud/compute/target-grpc-proxies/create +++ b/gcloud/compute/target-grpc-proxies/create @@ -4,6 +4,7 @@ NAME SYNOPSIS gcloud compute target-grpc-proxies create NAME --url-map=URL_MAP [--description=DESCRIPTION] [--validate-for-proxyless] + [--global-url-map | --url-map-region=URL_MAP_REGION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -49,6 +50,15 @@ OPTIONAL FLAGS cause unexpected behavior in gRPC applications if unsupported features are configured. + At most one of these can be specified: + + --global-url-map + If set, the URL map is global. + + --url-map-region=URL_MAP_REGION + Region of the URL map to operate on. Overrides the default + compute/region property value for this command invocation. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/config/get b/gcloud/config/get index c354b1ad9..25ac2ca76 100644 --- a/gcloud/config/get +++ b/gcloud/config/get @@ -615,6 +615,10 @@ AVAILABLE PROPERTIES location Default Google Cloud location to use for Anthos clusters on Azure. + container_vmware + location + Default Google Cloud location to use for Anthos clusters on VMware. + context_aware use_client_certificate If True, use client certificate to authorize user device using @@ -1005,6 +1009,11 @@ AVAILABLE PROPERTIES instead (inexpensively) compare the cloud source and destination hashes. + convert_incompatible_windows_path_characters + Allows automatic conversion of invalid path characters on Windows. + If not enabled, Windows will raise an OSError if an invalid + character is encountered. + copy_chunk_size Chunk size used for copying to in clouds or on disk. diff --git a/gcloud/config/help b/gcloud/config/help index 90bf15b66..a826dad85 100644 --- a/gcloud/config/help +++ b/gcloud/config/help @@ -647,6 +647,10 @@ AVAILABLE PROPERTIES location Default Google Cloud location to use for Anthos clusters on Azure. + container_vmware + location + Default Google Cloud location to use for Anthos clusters on VMware. + context_aware use_client_certificate If True, use client certificate to authorize user device using @@ -1037,6 +1041,11 @@ AVAILABLE PROPERTIES instead (inexpensively) compare the cloud source and destination hashes. + convert_incompatible_windows_path_characters + Allows automatic conversion of invalid path characters on Windows. + If not enabled, Windows will raise an OSError if an invalid + character is encountered. + copy_chunk_size Chunk size used for copying to in clouds or on disk. diff --git a/gcloud/config/list b/gcloud/config/list index 24924a755..1c27da145 100644 --- a/gcloud/config/list +++ b/gcloud/config/list @@ -649,6 +649,10 @@ AVAILABLE PROPERTIES location Default Google Cloud location to use for Anthos clusters on Azure. + container_vmware + location + Default Google Cloud location to use for Anthos clusters on VMware. + context_aware use_client_certificate If True, use client certificate to authorize user device using @@ -1039,6 +1043,11 @@ AVAILABLE PROPERTIES instead (inexpensively) compare the cloud source and destination hashes. + convert_incompatible_windows_path_characters + Allows automatic conversion of invalid path characters on Windows. + If not enabled, Windows will raise an OSError if an invalid + character is encountered. + copy_chunk_size Chunk size used for copying to in clouds or on disk. diff --git a/gcloud/config/set b/gcloud/config/set index 1e3288561..e4eb8a1e9 100644 --- a/gcloud/config/set +++ b/gcloud/config/set @@ -662,6 +662,10 @@ AVAILABLE PROPERTIES location Default Google Cloud location to use for Anthos clusters on Azure. + container_vmware + location + Default Google Cloud location to use for Anthos clusters on VMware. + context_aware use_client_certificate If True, use client certificate to authorize user device using @@ -1052,6 +1056,11 @@ AVAILABLE PROPERTIES instead (inexpensively) compare the cloud source and destination hashes. + convert_incompatible_windows_path_characters + Allows automatic conversion of invalid path characters on Windows. + If not enabled, Windows will raise an OSError if an invalid + character is encountered. + copy_chunk_size Chunk size used for copying to in clouds or on disk. diff --git a/gcloud/config/unset b/gcloud/config/unset index bbae70a10..7699b0f8a 100644 --- a/gcloud/config/unset +++ b/gcloud/config/unset @@ -623,6 +623,10 @@ AVAILABLE PROPERTIES location Default Google Cloud location to use for Anthos clusters on Azure. + container_vmware + location + Default Google Cloud location to use for Anthos clusters on VMware. + context_aware use_client_certificate If True, use client certificate to authorize user device using @@ -1013,6 +1017,11 @@ AVAILABLE PROPERTIES instead (inexpensively) compare the cloud source and destination hashes. + convert_incompatible_windows_path_characters + Allows automatic conversion of invalid path characters on Windows. + If not enabled, Windows will raise an OSError if an invalid + character is encountered. + copy_chunk_size Chunk size used for copying to in clouds or on disk. diff --git a/gcloud/container/aws/node-pools/update b/gcloud/container/aws/node-pools/update index 1dc2c9cde..2e49f9c13 100644 --- a/gcloud/container/aws/node-pools/update +++ b/gcloud/container/aws/node-pools/update @@ -6,8 +6,7 @@ SYNOPSIS gcloud container aws node-pools update (NODE_POOL : --cluster=CLUSTER --location=LOCATION) [--async] [--config-encryption-kms-key-arn=CONFIG_ENCRYPTION_KMS_KEY_ARN] - [--instance-type=INSTANCE_TYPE] [--node-version=NODE_VERSION] - [--root-volume-iops=ROOT_VOLUME_IOPS] + [--node-version=NODE_VERSION] [--root-volume-iops=ROOT_VOLUME_IOPS] [--root-volume-kms-key-arn=ROOT_VOLUME_KMS_KEY_ARN] [--root-volume-size=ROOT_VOLUME_SIZE] [--root-volume-type=ROOT_VOLUME_TYPE] [--validate-only] @@ -72,9 +71,6 @@ FLAGS --config-encryption-kms-key-arn=CONFIG_ENCRYPTION_KMS_KEY_ARN Amazon Resource Name (ARN) of the AWS KMS key to encrypt the user data. - --instance-type=INSTANCE_TYPE - AWS EC2 instance type for the node pool's nodes. - --node-version=NODE_VERSION Kubernetes version to use for the node pool. diff --git a/gcloud/container/node-pools/create b/gcloud/container/node-pools/create index cc1a1d520..618231964 100644 --- a/gcloud/container/node-pools/create +++ b/gcloud/container/node-pools/create @@ -279,7 +279,7 @@ FLAGS Total egress bandwidth is the available outbound bandwidth from a VM, regardless of whether the traffic is going to internal IP or external IP destinations. The following tier values are allowed: - [DEFAULT,TIER_1] + [TIER_UNSPECIFIED,TIER_1] --node-group=NODE_GROUP Assign instances of this pool to run on the specified Google Compute diff --git a/gcloud/container/node-pools/update b/gcloud/container/node-pools/update index f3910e29a..01b86a59d 100644 --- a/gcloud/container/node-pools/update +++ b/gcloud/container/node-pools/update @@ -57,7 +57,7 @@ REQUIRED FLAGS Total egress bandwidth is the available outbound bandwidth from a VM, regardless of whether the traffic is going to internal IP or external IP destinations. The following tier values are allowed: - [DEFAULT,TIER_1] + [TIER_UNSPECIFIED,TIER_1] --node-labels=[NODE_LABEL,...] Replaces all the user specified Kubernetes labels on all nodes in an diff --git a/gcloud/dataflow/jobs/cancel b/gcloud/dataflow/jobs/cancel index dab344233..68e05d48d 100644 --- a/gcloud/dataflow/jobs/cancel +++ b/gcloud/dataflow/jobs/cancel @@ -3,8 +3,8 @@ NAME arguments SYNOPSIS - gcloud dataflow jobs cancel JOB_ID [JOB_ID ...] [--region=REGION_ID] - [GCLOUD_WIDE_FLAG ...] + gcloud dataflow jobs cancel JOB_ID [JOB_ID ...] [--force] + [--region=REGION_ID] [GCLOUD_WIDE_FLAG ...] DESCRIPTION Cancels all jobs that match the command line arguments. @@ -14,6 +14,11 @@ POSITIONAL ARGUMENTS The job IDs to operate on. FLAGS + --force + Forcibly cancels a Dataflow job, leaking any VMs the Dataflow job + created. Regular cancel must have been attempted at least 30 minutes + ago for a job to be force cancelled. + --region=REGION_ID The region ID of the jobs' regional endpoint. Defaults to 'us-central1'. diff --git a/gcloud/eventarc/channels/create b/gcloud/eventarc/channels/create index 498c828c8..346c8ed09 100644 --- a/gcloud/eventarc/channels/create +++ b/gcloud/eventarc/channels/create @@ -13,6 +13,14 @@ EXAMPLES $ gcloud eventarc channels create my-channel --location=us-central1 + To create a new channel my-channel in location us-central1 with a Cloud KMS + CryptoKey, run: + + $ gcloud eventarc channels create my-channel \ + --location=us-central1 \ + --crypto-key=projects/PROJECT_ID/locations/KMS_LOCATION/\ + keyRings/KEYRING/cryptoKeys/KEY + POSITIONAL ARGUMENTS Channel resource - Channel to create. The arguments in this group can be used to specify the attributes of this resource. (NOTE) Some attributes diff --git a/gcloud/filestore/instances/create b/gcloud/filestore/instances/create index 87f1e9864..55b99f723 100644 --- a/gcloud/filestore/instances/create +++ b/gcloud/filestore/instances/create @@ -196,7 +196,10 @@ OPTIONAL FLAGS Region of the Cloud Filestore instance. --tier=TIER; default="BASIC_HDD" - The service tier for the Cloud Filestore instance. TIER must be one of: + The service tier for the Cloud Filestore instance. For more details, + see: https://cloud.google.com/filestore/docs/instance-tiers + + TIER must be one of: basic-hdd Performant NFS storage system using HDD. @@ -205,11 +208,14 @@ OPTIONAL FLAGS enterprise ENTERPRISE instances offer the features and availability needed for mission-critical workloads. + high-scale-ssd + High Scale instances offer NFS storage system with expanded + capacity and performance scaling capabilities. premium - Premium Filestore instance, an alias for BASIC_SSD. Use BASIC_SSD + Premium Filestore instance, An alias for BASIC_SSD. Use BASIC_SSD instead whenever possible. standard - Standard Filestore instance, an alias for BASIC_HDD. Use BASIC_HDD + Standard Filestore instance, An alias for BASIC_HDD. Use BASIC_HDD instead whenever possible. Key resource - The Cloud KMS (Key Management Service) cryptokey that will diff --git a/gcloud/functions/deploy b/gcloud/functions/deploy index 218c5e097..f5f7cbd03 100644 --- a/gcloud/functions/deploy +++ b/gcloud/functions/deploy @@ -142,7 +142,7 @@ FLAGS ◆ go113: Go 1.13 ◆ go116: Go 1.16 ◆ java11: Java 11 - ◆ java17: Java 17 (preview) + ◆ java17: Java 17 ◆ dotnet3: .NET Framework 3 ◆ ruby26: Ruby 2.6 ◆ ruby27: Ruby 2.7 diff --git a/gcloud/iam/workload-identity-pools/create-cred-config b/gcloud/iam/workload-identity-pools/create-cred-config index a14ccf461..51bd0344c 100644 --- a/gcloud/iam/workload-identity-pools/create-cred-config +++ b/gcloud/iam/workload-identity-pools/create-cred-config @@ -6,13 +6,16 @@ SYNOPSIS gcloud iam workload-identity-pools create-cred-config AUDIENCE --output-file=OUTPUT_FILE (--aws | --azure | --credential-source-file=CREDENTIAL_SOURCE_FILE - | --credential-source-url=CREDENTIAL_SOURCE_URL) - [--app-id-uri=APP_ID_URI] + | --credential-source-url=CREDENTIAL_SOURCE_URL + | --executable-command=EXECUTABLE_COMMAND) [--app-id-uri=APP_ID_URI] [--credential-source-field-name=CREDENTIAL_SOURCE_FIELD_NAME] [--credential-source-headers=[key=value,...]] [--credential-source-type=CREDENTIAL_SOURCE_TYPE] [--enable-imdsv2] [--service-account=SERVICE_ACCOUNT] - [--subject-token-type=SUBJECT_TOKEN_TYPE] [GCLOUD_WIDE_FLAG ...] + [--subject-token-type=SUBJECT_TOKEN_TYPE] + [--executable-output-file=EXECUTABLE_OUTPUT_FILE + --executable-timeout-millis=EXECUTABLE_TIMEOUT_MILLIS] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION This command creates a configuration file to allow access to authenticated @@ -38,6 +41,16 @@ EXAMPLES --credential-source-headers=Key=Value \ --output-file=credentials.json + To create an executable-source credential configuration for your project, + run the following command: + + $ gcloud iam workload-identity-pools create-cred-config \ + locations/$REGION/workforcePools/$WORKFORCE_POOL_ID/providers/\ + $PROVIDER_ID --executable-command=$EXECUTABLE_COMMAND \ + --executable-timeout-millis=30000 \ + --executable-output-file=$CACHE_FILE \ + --output-file=credentials.json + To create an AWS-based credential configuration for your project, run: $ gcloud iam workload-identity-pools create-cred-config \ @@ -83,6 +96,10 @@ REQUIRED FLAGS --credential-source-url=CREDENTIAL_SOURCE_URL URL to obtain the credential from. + --executable-command=EXECUTABLE_COMMAND + The full command to run to retrieve the credential. Must be an + absolute path for the program including arguments. + OPTIONAL FLAGS --app-id-uri=APP_ID_URI The custom Application ID URI for the Azure access token. @@ -106,6 +123,15 @@ OPTIONAL FLAGS --subject-token-type=SUBJECT_TOKEN_TYPE The type of token being used for authorization. + Arguments for an executable type credential source. + + --executable-output-file=EXECUTABLE_OUTPUT_FILE + The absolute path to the file storing the executable response. + + --executable-timeout-millis=EXECUTABLE_TIMEOUT_MILLIS + The timeout duration in milliseconds for waiting for the executable + to finish. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/iap/help b/gcloud/iap/help index e49ad0cd5..8d8a42dc3 100644 --- a/gcloud/iap/help +++ b/gcloud/iap/help @@ -22,6 +22,12 @@ GCLOUD WIDE FLAGS GROUPS GROUP is one of the following: + oauth-brands + Manage IAP OAuth brands. + + oauth-clients + Manage IAP OAuth clients. + settings Manage IAP settings. diff --git a/gcloud/iap/oauth-brands/create b/gcloud/iap/oauth-brands/create new file mode 100644 index 000000000..07c5207ba --- /dev/null +++ b/gcloud/iap/oauth-brands/create @@ -0,0 +1,58 @@ +NAME + gcloud iap oauth-brands create - create a Cloud OAuth brand for the project + +SYNOPSIS + gcloud iap oauth-brands create --application_title=APPLICATION_TITLE + --support_email=SUPPORT_EMAIL [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + gcloud iap oauth-brands create is used to create a Cloud OAuth brand for + the project. The brand is 'internal only', meaning OAuth clients created + under it only accept requests from users who belong to the same G Suite + account as the project. The brand is created in unreviewed status. Your + domain will not appear on the OAuth consent screen until it is reviewed + after you manually start a review process in Google Cloud Platform Console. + Note that the 'internal only' setting can be manually changed in Google + Cloud Platform Console + (https://console.cloud.google.com/apis/credentials/consent). A project can + only have one brand. + +EXAMPLES + To create a Cloud OAuth brand for the current project, run: + + $ gcloud iap oauth-brands create \ + --application_title=APPLICATION_TITLE \ + --support_email=SUPPORT_EMAIL + + To create a Cloud OAuth brand for the project PROJECT_ID, run: + + $ gcloud iap oauth-brands create \ + --application_title=APPLICATION_TITLE \ + --support_email=SUPPORT_EMAIL --project=PROJECT_ID + +REQUIRED FLAGS + --application_title=APPLICATION_TITLE + Application name displayed on the OAuth consent screen. + + --support_email=SUPPORT_EMAIL + Support email displayed on the OAuth consent screen. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iap/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iap + +NOTES + These variants are also available: + + $ gcloud alpha iap oauth-brands create + + $ gcloud beta iap oauth-brands create + diff --git a/gcloud/iap/oauth-brands/describe b/gcloud/iap/oauth-brands/describe new file mode 100644 index 000000000..a5bd7a1d9 --- /dev/null +++ b/gcloud/iap/oauth-brands/describe @@ -0,0 +1,54 @@ +NAME + gcloud iap oauth-brands describe - describe a Cloud OAuth brand + +SYNOPSIS + gcloud iap oauth-brands describe NAME [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + gcloud iap oauth-brands describe is used to describe a Cloud OAuth brand. + +EXAMPLES + To describe a Cloud OAuth brand with name NAME, run: + + $ gcloud iap oauth-brands describe NAME + + To describe a Cloud OAuth brand with name NAME inside project PROJECT_ID, + run: + + $ gcloud iap oauth-brands describe NAME --project=PROJECT_ID + +POSITIONAL ARGUMENTS + Name resource - Name of the Cloud OAuth brand to describe. This represents + a Cloud resource. (NOTE) Some attributes are not given arguments in this + group but can be set in other ways. To set the project attribute: + ◆ provide the argument name on the command line with a fully specified + name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + NAME + ID of the name or fully qualified identifier for the name. To set the + brand attribute: + ▸ provide the argument name on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iap/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iap + +NOTES + These variants are also available: + + $ gcloud alpha iap oauth-brands describe + + $ gcloud beta iap oauth-brands describe + diff --git a/gcloud/iap/oauth-brands/help b/gcloud/iap/oauth-brands/help new file mode 100644 index 000000000..774b04241 --- /dev/null +++ b/gcloud/iap/oauth-brands/help @@ -0,0 +1,33 @@ +NAME + gcloud iap oauth-brands - manage IAP OAuth brands + +SYNOPSIS + gcloud iap oauth-brands COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Manage IAP OAuth brands. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + create + Create a Cloud OAuth brand for the project. + + describe + Describe a Cloud OAuth brand. + + list + List Cloud OAuth brands in the project. + +NOTES + These variants are also available: + + $ gcloud alpha iap oauth-brands + + $ gcloud beta iap oauth-brands + diff --git a/gcloud/iap/oauth-brands/list b/gcloud/iap/oauth-brands/list new file mode 100644 index 000000000..fe9b4ad2a --- /dev/null +++ b/gcloud/iap/oauth-brands/list @@ -0,0 +1,65 @@ +NAME + gcloud iap oauth-brands list - list Cloud OAuth brands in the project + +SYNOPSIS + gcloud iap oauth-brands list [--filter=EXPRESSION] [--limit=LIMIT] + [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + gcloud iap oauth-brands list is used to list the Cloud OAuth brand in the + project. + +EXAMPLES + To list all Cloud OAuth brands in the current project, run: + + $ gcloud iap oauth-brands list + + To list all Cloud OAuth brands in the project PROJECT_ID, run: + + $ gcloud iap oauth-brands list --project=PROJECT_ID + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iap/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iap + +NOTES + These variants are also available: + + $ gcloud alpha iap oauth-brands list + + $ gcloud beta iap oauth-brands list + diff --git a/gcloud/iap/oauth-clients/create b/gcloud/iap/oauth-clients/create new file mode 100644 index 000000000..6d7105cd5 --- /dev/null +++ b/gcloud/iap/oauth-clients/create @@ -0,0 +1,64 @@ +NAME + gcloud iap oauth-clients create - create a Cloud IAP OAuth client for the + project + +SYNOPSIS + gcloud iap oauth-clients create BRAND --display_name=DISPLAY_NAME + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + gcloud iap oauth-clients create is used to create a Cloud IAP OAuth client + for the project. To call this command, the Cloud OAuth brand for the + project must exist and be set for 'internal only'. The client is owned by + Cloud IAP. + +EXAMPLES + To create a Cloud OAuth client for the current project, run: + + $ gcloud iap oauth-clients create BRAND --display_name=DISPLAY_NAME + + To create a Cloud OAuth client for the project PROJECT_ID, run: + + $ gcloud iap oauth-clients create BRAND \ + --display_name=DISPLAY_NAME --project=PROJECT_ID + +POSITIONAL ARGUMENTS + Brand resource - Name of the Cloud OAuth brand to create a Cloud IAP OAuth + client under. This represents a Cloud resource. (NOTE) Some attributes are + not given arguments in this group but can be set in other ways. To set the + project attribute: + ◆ provide the argument brand on the command line with a fully specified + name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + BRAND + ID of the brand or fully qualified identifier for the brand. To set + the brand attribute: + ▸ provide the argument brand on the command line. + +REQUIRED FLAGS + --display_name=DISPLAY_NAME + User friendly name for the Cloud IAP OAuth client. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iap/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iap + +NOTES + These variants are also available: + + $ gcloud alpha iap oauth-clients create + + $ gcloud beta iap oauth-clients create + diff --git a/gcloud/iap/oauth-clients/delete b/gcloud/iap/oauth-clients/delete new file mode 100644 index 000000000..13cbd7efb --- /dev/null +++ b/gcloud/iap/oauth-clients/delete @@ -0,0 +1,67 @@ +NAME + gcloud iap oauth-clients delete - delete a Cloud IAP OAuth client + +SYNOPSIS + gcloud iap oauth-clients delete (NAME : --brand=BRAND) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + gcloud iap oauth-clients delete is used to delete a Cloud IAP OAuth client. + +EXAMPLES + To delete a Cloud OAuth client named CLIENT for the current project and + brand BRAND, run: + + $ gcloud iap oauth-clients delete CLIENT --brand=BRAND + + To delete a Cloud OAuth client named CLIENT for a specific project + PROJECT_ID and brand BRAND, run: + + $ gcloud iap oauth-clients delete CLIENT --brand=BRAND \ + --project=PROJECT_ID + +POSITIONAL ARGUMENTS + Name resource - Name of the Cloud IAP OAuth client to delete. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument name on the command line with a fully specified + name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + NAME + ID of the name or fully qualified identifier for the name. To set the + identity_aware_proxy_clients attribute: + ▸ provide the argument name on the command line. + + This positional must be specified if any of the other arguments in + this group are specified. + + --brand=BRAND + The name of the OAuth brand. To set the brand attribute: + ▸ provide the argument name on the command line with a fully + specified name; + ▸ provide the argument --brand on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iap/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iap + +NOTES + These variants are also available: + + $ gcloud alpha iap oauth-clients delete + + $ gcloud beta iap oauth-clients delete + diff --git a/gcloud/iap/oauth-clients/describe b/gcloud/iap/oauth-clients/describe new file mode 100644 index 000000000..3efb1eb61 --- /dev/null +++ b/gcloud/iap/oauth-clients/describe @@ -0,0 +1,65 @@ +NAME + gcloud iap oauth-clients describe - describe a Cloud IAP OAuth client + +SYNOPSIS + gcloud iap oauth-clients describe (NAME : --brand=BRAND) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + gcloud iap oauth-clients describe is used to describe a Cloud IAP OAuth + client. + +EXAMPLES + To describe a Cloud OAuth client for the current project, run: + + $ gcloud iap oauth-clients describe NAME + + To describe a Cloud OAuth client for a specific brand, run: + + $ gcloud iap oauth-clients describe NAME --brand=BRAND + +POSITIONAL ARGUMENTS + Name resource - Name of the Cloud IAP OAuth client to describe. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument name on the command line with a fully specified + name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + NAME + ID of the name or fully qualified identifier for the name. To set the + identity_aware_proxy_clients attribute: + ▸ provide the argument name on the command line. + + This positional must be specified if any of the other arguments in + this group are specified. + + --brand=BRAND + The name of the OAuth brand. To set the brand attribute: + ▸ provide the argument name on the command line with a fully + specified name; + ▸ provide the argument --brand on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iap/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iap + +NOTES + These variants are also available: + + $ gcloud alpha iap oauth-clients describe + + $ gcloud beta iap oauth-clients describe + diff --git a/gcloud/iap/oauth-clients/help b/gcloud/iap/oauth-clients/help new file mode 100644 index 000000000..15bb92e11 --- /dev/null +++ b/gcloud/iap/oauth-clients/help @@ -0,0 +1,39 @@ +NAME + gcloud iap oauth-clients - manage IAP OAuth clients + +SYNOPSIS + gcloud iap oauth-clients COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Manage IAP OAuth clients. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + create + Create a Cloud IAP OAuth client for the project. + + delete + Delete a Cloud IAP OAuth client. + + describe + Describe a Cloud IAP OAuth client. + + list + List Cloud IAP OAuth clients in the Cloud OAuth brand. + + reset-secret + Reset a Cloud IAP OAuth client secret. + +NOTES + These variants are also available: + + $ gcloud alpha iap oauth-clients + + $ gcloud beta iap oauth-clients + diff --git a/gcloud/iap/oauth-clients/list b/gcloud/iap/oauth-clients/list new file mode 100644 index 000000000..37c0aa6a9 --- /dev/null +++ b/gcloud/iap/oauth-clients/list @@ -0,0 +1,79 @@ +NAME + gcloud iap oauth-clients list - list Cloud IAP OAuth clients in the Cloud + OAuth brand + +SYNOPSIS + gcloud iap oauth-clients list NAME [--filter=EXPRESSION] [--limit=LIMIT] + [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + gcloud iap oauth-clients list is used to list Cloud IAP OAuth clients in a + Cloud OAuth brand. + +EXAMPLES + To list a Cloud OAuth client for the current project, run: + + $ gcloud iap oauth-clients list BRAND + +POSITIONAL ARGUMENTS + Name resource - Name of the Cloud OAuth brand to list Cloud IAP OAuth + clients under. This represents a Cloud resource. (NOTE) Some attributes + are not given arguments in this group but can be set in other ways. To set + the project attribute: + ◆ provide the argument name on the command line with a fully specified + name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + NAME + ID of the name or fully qualified identifier for the name. To set the + brand attribute: + ▸ provide the argument name on the command line. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iap/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iap + +NOTES + These variants are also available: + + $ gcloud alpha iap oauth-clients list + + $ gcloud beta iap oauth-clients list + diff --git a/gcloud/iap/oauth-clients/reset-secret b/gcloud/iap/oauth-clients/reset-secret new file mode 100644 index 000000000..a6929b8f6 --- /dev/null +++ b/gcloud/iap/oauth-clients/reset-secret @@ -0,0 +1,66 @@ +NAME + gcloud iap oauth-clients reset-secret - reset a Cloud IAP OAuth client + secret + +SYNOPSIS + gcloud iap oauth-clients reset-secret (NAME : --brand=BRAND) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + gcloud iap oauth-clients reset-secret is used to reset a Cloud IAP OAuth + client secret. + +EXAMPLES + To reset a Cloud OAuth client secret, run: + + $ gcloud iap oauth-clients reset-secret NAME + + To reset a Cloud OAuth client secret for a specific brand, run: + + $ gcloud iap oauth-clients reset-secret NAME --brand=BRAND + +POSITIONAL ARGUMENTS + Name resource - Name of the Cloud IAP OAuth client whose secret will be + reset. The arguments in this group can be used to specify the attributes + of this resource. (NOTE) Some attributes are not given arguments in this + group but can be set in other ways. To set the project attribute: + ◆ provide the argument name on the command line with a fully specified + name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + NAME + ID of the name or fully qualified identifier for the name. To set the + identity_aware_proxy_clients attribute: + ▸ provide the argument name on the command line. + + This positional must be specified if any of the other arguments in + this group are specified. + + --brand=BRAND + The name of the OAuth brand. To set the brand attribute: + ▸ provide the argument name on the command line with a fully + specified name; + ▸ provide the argument --brand on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the iap/v1 API. The full documentation for this API can + be found at: https://cloud.google.com/iap + +NOTES + These variants are also available: + + $ gcloud alpha iap oauth-clients reset-secret + + $ gcloud beta iap oauth-clients reset-secret + diff --git a/gcloud/metastore/federations/add-iam-policy-binding b/gcloud/metastore/federations/add-iam-policy-binding new file mode 100644 index 000000000..7bbd7e045 --- /dev/null +++ b/gcloud/metastore/federations/add-iam-policy-binding @@ -0,0 +1,94 @@ +NAME + gcloud metastore federations add-iam-policy-binding - add an IAM policy + binding to a federation + +SYNOPSIS + gcloud metastore federations add-iam-policy-binding + (FEDERATION : --location=LOCATION) --member=PRINCIPAL --role=ROLE + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Add an IAM policy binding to a federation. + +EXAMPLES + To add an IAM policy binding for the role of roles/metastore.admin for the + user test-user@gmail.com, run: + + $ gcloud metastore federations add-iam-policy-binding \ + my-federation --member='user:test-user@gmail.com' \ + --role='roles/metastore.admin' + + See https://cloud.google.com/dataproc-metastore/docs/iam-and-access-control + for details of policy role and member types. + +POSITIONAL ARGUMENTS + Federation resource - Federation for which to add the IAM policy to. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument federation on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + FEDERATION + ID of the federation or fully qualified identifier for the + federation. To set the federation attribute: + ▸ provide the argument federation on the command line. + + This positional must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + The location of the Dataproc Metastore service. + + If not specified, will use default metastore/location. + + To set the location attribute: + ▸ provide the argument federation on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property metastore/location. + +REQUIRED FLAGS + --member=PRINCIPAL + The principal to add the binding for. Should be of the form + user|group|serviceAccount:email or domain:domain. + + Examples: user:test-user@gmail.com, group:admins@example.com, + serviceAccount:test123@example.domain.com, or + domain:example.domain.com. + + Some resources also accept the following special values: + ◆ allUsers - Special identifier that represents anyone who is on the + internet, with or without a Google account. + ◆ allAuthenticatedUsers - Special identifier that represents anyone + who is authenticated with a Google account or a service account. + + --role=ROLE + Role name to assign to the principal. The role name is the complete + path of a predefined role, such as roles/logging.viewer, or the role ID + for a custom role, such as + organizations/{ORGANIZATION_ID}/roles/logging.viewer. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the metastore/v1 API. The full documentation for this API + can be found at: https://cloud.google.com/dataproc-metastore/docs + +NOTES + These variants are also available: + + $ gcloud alpha metastore federations add-iam-policy-binding + + $ gcloud beta metastore federations add-iam-policy-binding + diff --git a/gcloud/metastore/federations/create b/gcloud/metastore/federations/create new file mode 100644 index 000000000..e1183de9e --- /dev/null +++ b/gcloud/metastore/federations/create @@ -0,0 +1,111 @@ +NAME + gcloud metastore federations create - create a Dataproc Metastore + federation + +SYNOPSIS + gcloud metastore federations create (FEDERATION : --location=LOCATION) + --backends=RANK=BACKEND [--async] + [--hive-metastore-version=HIVE_METASTORE_VERSION] + [--labels=[KEY=VALUE,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Create a new Dataproc Metastore federation with the given name and + configurations. + + If run asynchronously with --async, exits after printing one operation name + that can be used to poll the status of the creation via: + + gcloud metastore operations describe + +EXAMPLES + To create a Dataproc Metastore federation with the name + my-metastore-federation in location us-central with two backends dpms1 and + dpms2, run: + + $ gcloud metastore federations create my-metastore-federation \ + --location=us-central1 \ + --backends=1=dpms:dpms1,2=dpms:projects/my-project/locations/\ + us-central1/services/dpms2 + +POSITIONAL ARGUMENTS + Federation resource - Arguments and flags that specify the Dataproc + Metastore federation you want to create. The arguments in this group can + be used to specify the attributes of this resource. (NOTE) Some attributes + are not given arguments in this group but can be set in other ways. To set + the project attribute: + ◆ provide the argument federation on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + FEDERATION + ID of the federation or fully qualified identifier for the + federation. To set the federation attribute: + ▸ provide the argument federation on the command line. + + This positional must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + The location of the Dataproc Metastore service. + + If not specified, will use default metastore/location. + + To set the location attribute: + ▸ provide the argument federation on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property metastore/location. + +REQUIRED FLAGS + --backends=RANK=BACKEND + Backends from which the federation service serves metadata at query + time. The backends are specified as a comma-separated list of + RANK=BACKEND pairs. For example: + 1=dpms:dpms1,2=dpms:projects/my-project/locations/us-central1/services/dpms2. + RANK represents the rank of the backend metastore and is used to + resolve database name collisions. BACKEND is specified as + METASTORE_TYPE:METASTORE_NAME where METASTORE_TYPE is the type of + backend metastore and METASTORE_NAME is the relative resource name of + the metastore. If only the name of the metastore is specified (e.g. + dpms1), project and location will be inferred from the project and + location used to create the federation. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --hive-metastore-version=HIVE_METASTORE_VERSION + Hive metastore schema version of the Metastore federation. + HIVE_METASTORE_VERSION must be one of: 2.3.6, 3.1.2. + + --labels=[KEY=VALUE,...] + List of label KEY=VALUE pairs to add. + + Keys must start with a lowercase character and contain only hyphens + (-), underscores (_), lowercase characters, and numbers. Values must + contain only hyphens (-), underscores (_), lowercase characters, and + numbers. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the metastore/v1 API. The full documentation for this API + can be found at: https://cloud.google.com/dataproc-metastore/docs + +NOTES + These variants are also available: + + $ gcloud alpha metastore federations create + + $ gcloud beta metastore federations create + diff --git a/gcloud/metastore/federations/delete b/gcloud/metastore/federations/delete new file mode 100644 index 000000000..9a35b162e --- /dev/null +++ b/gcloud/metastore/federations/delete @@ -0,0 +1,76 @@ +NAME + gcloud metastore federations delete - delete one or more Dataproc Metastore + federations + +SYNOPSIS + gcloud metastore federations delete + (FEDERATIONS [FEDERATIONS ...] : --location=LOCATION) [--async] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + If run asynchronously with --async, exits after printing one or more + operation names that can be used to poll the status of the deletion(s) via: + + gcloud metastore operations describe + +EXAMPLES + To delete a Dataproc Metastore federation with the name + my-metastore-federation in location us-central1, run: + + $ gcloud metastore federations delete my-metastore-federation \ + --location=us-central1 + + To delete multiple Dataproc Metastore federations with the name + federation-1 and federation-2 in the same location us-central1, run: + + $ gcloud metastore federations delete federation-1 federation-2 \ + --location=us-central1 + +POSITIONAL ARGUMENTS + Federation resource - The federations to delete. The arguments in this + group can be used to specify the attributes of this resource. (NOTE) Some + attributes are not given arguments in this group but can be set in other + ways. To set the project attribute: + ◆ provide the argument federations on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + FEDERATIONS [FEDERATIONS ...] + IDs of the federations or fully qualified identifiers for the + federations. To set the federation attribute: + ▸ provide the argument federations on the command line. + + This positional must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + Location to which the federations belongs. To set the location + attribute: + ▸ provide the argument federations on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property metastore/location. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha metastore federations delete + + $ gcloud beta metastore federations delete + diff --git a/gcloud/metastore/federations/describe b/gcloud/metastore/federations/describe new file mode 100644 index 000000000..1a771501b --- /dev/null +++ b/gcloud/metastore/federations/describe @@ -0,0 +1,72 @@ +NAME + gcloud metastore federations describe - describe a Dataproc Metastore + federation + +SYNOPSIS + gcloud metastore federations describe (FEDERATION : --location=LOCATION) + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Describe a Dataproc Metastore federation. + + Displays all details of a Dataproc Metastore federation given a valid + federation ID. + +EXAMPLES + To describe a Dataproc Metastore federation with the ID + my-metastore-federation in us-central1, run: + + $ gcloud metastore federations describe my-metastore-federation \ + --location=us-central1 + +POSITIONAL ARGUMENTS + Federation resource - Arguments and flags that specify the Metastore + federation you want to describe. The arguments in this group can be used + to specify the attributes of this resource. (NOTE) Some attributes are not + given arguments in this group but can be set in other ways. To set the + project attribute: + ◆ provide the argument federation on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + FEDERATION + ID of the federation or fully qualified identifier for the + federation. To set the federation attribute: + ▸ provide the argument federation on the command line. + + This positional must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + The location of the Dataproc Metastore service. + + If not specified, will use default metastore/location. + + To set the location attribute: + ▸ provide the argument federation on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property metastore/location. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the metastore/v1 API. The full documentation for this API + can be found at: https://cloud.google.com/dataproc-metastore/docs + +NOTES + These variants are also available: + + $ gcloud alpha metastore federations describe + + $ gcloud beta metastore federations describe + diff --git a/gcloud/metastore/federations/get-iam-policy b/gcloud/metastore/federations/get-iam-policy new file mode 100644 index 000000000..5ddb00560 --- /dev/null +++ b/gcloud/metastore/federations/get-iam-policy @@ -0,0 +1,100 @@ +NAME + gcloud metastore federations get-iam-policy - get the IAM policy for the + federation + +SYNOPSIS + gcloud metastore federations get-iam-policy + (FEDERATION : --location=LOCATION) [--filter=EXPRESSION] + [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + gcloud metastore federations get-iam-policy displays the IAM policy + associated with the federation. If formatted as JSON, the output can be + edited and used as a policy file for set-iam-policy. The output includes an + "etag" field identifying the version emitted and allowing detection of + concurrent policy updates. The "etag" field should be removed to be used as + set-iam-policy input; see gcloud metastore federations set-iam-policy for + additional details. + +EXAMPLES + To print the IAM policy for a given federation, run: + + $ gcloud metastore federations get-iam-policy my-federation + +POSITIONAL ARGUMENTS + Federation resource - Federation for which to display the IAM policy. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument federation on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + FEDERATION + ID of the federation or fully qualified identifier for the + federation. To set the federation attribute: + ▸ provide the argument federation on the command line. + + This positional must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + The location of the Dataproc Metastore service. + + If not specified, will use default metastore/location. + + To set the location attribute: + ▸ provide the argument federation on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property metastore/location. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the metastore/v1 API. The full documentation for this API + can be found at: https://cloud.google.com/dataproc-metastore/docs + +NOTES + These variants are also available: + + $ gcloud alpha metastore federations get-iam-policy + + $ gcloud beta metastore federations get-iam-policy + diff --git a/gcloud/metastore/federations/help b/gcloud/metastore/federations/help new file mode 100644 index 000000000..769e749a6 --- /dev/null +++ b/gcloud/metastore/federations/help @@ -0,0 +1,51 @@ +NAME + gcloud metastore federations - manage Dataproc Metastore federations + +SYNOPSIS + gcloud metastore federations COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Manage Dataproc Metastore federations. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + add-iam-policy-binding + Add an IAM policy binding to a federation. + + create + Create a Dataproc Metastore federation. + + delete + Delete one or more Dataproc Metastore federations. + + describe + Describe a Dataproc Metastore federation. + + get-iam-policy + Get the IAM policy for the federation. + + list + List Dataproc Metastore federations. + + remove-iam-policy-binding + Remove an IAM policy binding from a federation. + + set-iam-policy + Set the IAM policy for the federation. + + update + Update a Dataproc Metastore federation. + +NOTES + These variants are also available: + + $ gcloud alpha metastore federations + + $ gcloud beta metastore federations + diff --git a/gcloud/metastore/federations/list b/gcloud/metastore/federations/list new file mode 100644 index 000000000..8ee9d598b --- /dev/null +++ b/gcloud/metastore/federations/list @@ -0,0 +1,88 @@ +NAME + gcloud metastore federations list - list Dataproc Metastore federations + +SYNOPSIS + gcloud metastore federations list [--location=LOCATION] + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Lists all federations under the specified project and location. + +EXAMPLES + To list all Dataproc Metastore federations in location us-central1, run: + + $ gcloud metastore federations list --location=us-central1 + + To list all Dataproc Metastore federations in all locations, run: + + $ gcloud metastore federations list --location=- + +FLAGS + Location resource - The location of the federations to list. This + represents a Cloud resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. To set the project + attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ set the property metastore/location with a fully specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. To + set the location attribute: + ▸ provide the argument --location on the command line; + ▸ set the property metastore/location. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the metastore/v1 API. The full documentation for this API + can be found at: https://cloud.google.com/dataproc-metastore/docs + +NOTES + These variants are also available: + + $ gcloud alpha metastore federations list + + $ gcloud beta metastore federations list + diff --git a/gcloud/metastore/federations/remove-iam-policy-binding b/gcloud/metastore/federations/remove-iam-policy-binding new file mode 100644 index 000000000..85ecf09d6 --- /dev/null +++ b/gcloud/metastore/federations/remove-iam-policy-binding @@ -0,0 +1,95 @@ +NAME + gcloud metastore federations remove-iam-policy-binding - remove an IAM + policy binding from a federation + +SYNOPSIS + gcloud metastore federations remove-iam-policy-binding + (FEDERATION : --location=LOCATION) --member=PRINCIPAL --role=ROLE + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Remove an IAM policy binding from a federation. + +EXAMPLES + To remove an IAM policy binding for the role of roles/metastore.admin for + the user test-user@gmail.com, run: + + $ gcloud metastore federations remove-iam-policy-binding \ + my-federation --member='user:test-user@gmail.com' \ + --role='roles/metastore.admin' + + See https://cloud.google.com/iam/docs/managing-policies for details of + policy role and member types. + +POSITIONAL ARGUMENTS + Federation resource - Federation for which to remove the IAM policy from. + The arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument federation on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + FEDERATION + ID of the federation or fully qualified identifier for the + federation. To set the federation attribute: + ▸ provide the argument federation on the command line. + + This positional must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + The location of the Dataproc Metastore service. + + If not specified, will use default metastore/location. + + To set the location attribute: + ▸ provide the argument federation on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property metastore/location. + +REQUIRED FLAGS + --member=PRINCIPAL + The principal to remove the binding for. Should be of the form + user|group|serviceAccount:email or domain:domain. + + Examples: user:test-user@gmail.com, group:admins@example.com, + serviceAccount:test123@example.domain.com, or + domain:example.domain.com. + + Deleted principals have an additional deleted: prefix and a ?uid=UID + suffix, where UID is a unique identifier for the principal. Example: + deleted:user:test-user@gmail.com?uid=123456789012345678901. + + Some resources also accept the following special values: + ◆ allUsers - Special identifier that represents anyone who is on the + internet, with or without a Google account. + ◆ allAuthenticatedUsers - Special identifier that represents anyone + who is authenticated with a Google account or a service account. + + --role=ROLE + The role to remove the principal from. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the metastore/v1 API. The full documentation for this API + can be found at: https://cloud.google.com/dataproc-metastore/docs + +NOTES + These variants are also available: + + $ gcloud alpha metastore federations remove-iam-policy-binding + + $ gcloud beta metastore federations remove-iam-policy-binding + diff --git a/gcloud/metastore/federations/set-iam-policy b/gcloud/metastore/federations/set-iam-policy new file mode 100644 index 000000000..d88d56089 --- /dev/null +++ b/gcloud/metastore/federations/set-iam-policy @@ -0,0 +1,79 @@ +NAME + gcloud metastore federations set-iam-policy - set the IAM policy for the + federation + +SYNOPSIS + gcloud metastore federations set-iam-policy + (FEDERATION : --location=LOCATION) POLICY_FILE [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Sets the IAM policy for the given federation as defined in a JSON or YAML + file. + + See https://cloud.google.com/iam/docs/managing-policies for details of the + policy file format and contents. + +EXAMPLES + The following command will read an IAM policy defined in a JSON file + policy.json and set it for the federation my-federation: + + $ gcloud metastore federations set-iam-policy my-federation \ + policy.json + +POSITIONAL ARGUMENTS + Federation resource - Federation for which to display the IAM policy. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: + ◆ provide the argument federation on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + FEDERATION + ID of the federation or fully qualified identifier for the + federation. To set the federation attribute: + ▸ provide the argument federation on the command line. + + This positional must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + The location of the Dataproc Metastore service. + + If not specified, will use default metastore/location. + + To set the location attribute: + ▸ provide the argument federation on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property metastore/location. + + POLICY_FILE + Path to a local JSON or YAML formatted file containing a valid policy. + + The output of the get-iam-policy command is a valid file, as is any + JSON or YAML file conforming to the structure of a Policy + (https://cloud.google.com/iam/reference/rest/v1/Policy). + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the metastore/v1 API. The full documentation for this API + can be found at: https://cloud.google.com/dataproc-metastore/docs + +NOTES + These variants are also available: + + $ gcloud alpha metastore federations set-iam-policy + + $ gcloud beta metastore federations set-iam-policy + diff --git a/gcloud/metastore/federations/update b/gcloud/metastore/federations/update new file mode 100644 index 000000000..bf9b2a62f --- /dev/null +++ b/gcloud/metastore/federations/update @@ -0,0 +1,146 @@ +NAME + gcloud metastore federations update - update a Dataproc Metastore + federation + +SYNOPSIS + gcloud metastore federations update (FEDERATION : --location=LOCATION) + (--update-backends=RANK=BACKEND --clear-backends + | --remove-backends=RANK) [--async] [--update-labels=[KEY=VALUE,...]] + [--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + Update the metadata and/or configuration parameters of a Dataproc Metastore + federation. + + If run asynchronously with --async, exits after printing one operation name + that can be used to poll the status of the update via: + + gcloud metastore operations describe + +EXAMPLES + To update a Dataproc Metastore federation with the name + my-metastore-federation in location us-central with two backends dpms1 and + dpms2, run: + + $ gcloud metastore federations update my-metastore-federation \ + --location=us-central1 \ + --update-backends=1=dpms:dpms1,2=dpms:projects/my-project/\ + locations/us-central1/services/dpms2 + +POSITIONAL ARGUMENTS + Federation resource - Arguments and flags that specify the Dataproc + Metastore federation you want to update. The arguments in this group can + be used to specify the attributes of this resource. (NOTE) Some attributes + are not given arguments in this group but can be set in other ways. To set + the project attribute: + ◆ provide the argument federation on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + FEDERATION + ID of the federation or fully qualified identifier for the + federation. To set the federation attribute: + ▸ provide the argument federation on the command line. + + This positional must be specified if any of the other arguments in + this group are specified. + + --location=LOCATION + The location of the Dataproc Metastore service. + + If not specified, will use default metastore/location. + + To set the location attribute: + ▸ provide the argument federation on the command line with a fully + specified name; + ▸ provide the argument --location on the command line; + ▸ set the property metastore/location. + +REQUIRED FLAGS + Update the backend metastores by passing key-value pairs in through the + flags. + + At least one of these must be specified: + + --update-backends=RANK=BACKEND + Comma-separated list of metastore backends specified as a list of + RANK=BACKEND pairs. For example: + 1=dpms:dpms1,2=dpms:projects/my-project/locations/us-central1/services/dpms2. + RANK represents the rank of the backend metastore and is used to + resolve database name collisions. BACKEND is specified as + METASTORE_TYPE:METASTORE_NAME where METASTORE_TYPE is the type of + backend metastore and METASTORE_NAME is the relative resource name of + the metastore. If only the name of the metastore is specified (e.g. + dpms1), project and location will be inferred from the project and + location used to create the federation. + + At most one of these can be specified: + + --clear-backends + Clear existing metastore backends. --clear-backends must be used + with --update-backends. + + --remove-backends=RANK + Comma-separated list of metastore backend keys to remove with the + form RANK1,RANK2. The Key represents the rank of the backend + metastore and is used to resolve database name collisions. If a + RANK does not exist then it is sliently ignored. If + --update-backends is also specified, then --remove-backends is + applied first. + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --update-labels=[KEY=VALUE,...] + List of label KEY=VALUE pairs to update. If a label exists, its value + is modified. Otherwise, a new label is created. + + Keys must start with a lowercase character and contain only hyphens + (-), underscores (_), lowercase characters, and numbers. Values must + contain only hyphens (-), underscores (_), lowercase characters, and + numbers. + + At most one of these can be specified: + + --clear-labels + Remove all labels. If --update-labels is also specified then + --clear-labels is applied first. + + For example, to remove all labels: + + $ gcloud metastore federations update --clear-labels + + To remove all existing labels and create two new labels, foo and baz: + + $ gcloud metastore federations update --clear-labels \ + --update-labels foo=bar,baz=qux + + --remove-labels=[KEY,...] + List of label keys to remove. If a label does not exist it is + silently ignored. If --update-labels is also specified then + --update-labels is applied first. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the metastore/v1 API. The full documentation for this API + can be found at: https://cloud.google.com/dataproc-metastore/docs + +NOTES + These variants are also available: + + $ gcloud alpha metastore federations update + + $ gcloud beta metastore federations update + diff --git a/gcloud/metastore/help b/gcloud/metastore/help index cb644f8a6..e78c6f04f 100644 --- a/gcloud/metastore/help +++ b/gcloud/metastore/help @@ -15,6 +15,9 @@ GCLOUD WIDE FLAGS GROUPS GROUP is one of the following: + federations + Manage Dataproc Metastore federations. + locations Get information about Dataproc Metastore locations. diff --git a/gcloud/sql/flags/list b/gcloud/sql/flags/list index 38be1e820..e0ef71b03 100644 --- a/gcloud/sql/flags/list +++ b/gcloud/sql/flags/list @@ -3,7 +3,8 @@ NAME instances SYNOPSIS - gcloud sql flags list [--database-version=DATABASE_VERSION] + gcloud sql flags list + [--database-version=DATABASE_VERSION; default="MYSQL_8_0"] [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] @@ -11,9 +12,9 @@ DESCRIPTION List customizable flags for Google Cloud SQL instances. FLAGS - --database-version=DATABASE_VERSION - The database engine type and versions. If left unspecified, the API - defaults are used. See the list of database versions at + --database-version=DATABASE_VERSION; default="MYSQL_8_0" + The database engine type and versions. If left unspecified, MYSQL_8_0 + is used. See the list of database versions at https://cloud.google.com/sql/docs/mysql/admin-api/rest/v1beta4/SqlDatabaseVersion. Apart from listed major versions, DATABASE_VERSION also accepts supported minor versions. DATABASE_VERSION must be one of: MYSQL_5_6, diff --git a/gcloud/sql/instances/create b/gcloud/sql/instances/create index 8cf1f90ef..0e4e15f3b 100644 --- a/gcloud/sql/instances/create +++ b/gcloud/sql/instances/create @@ -5,12 +5,15 @@ SYNOPSIS gcloud sql instances create INSTANCE [--activation-policy=ACTIVATION_POLICY] [--active-directory-domain=ACTIVE_DIRECTORY_DOMAIN] [--[no-]assign-ip] - [--async] [--authorized-networks=NETWORK,[NETWORK,...]] + [--async] [--audit-bucket-path=AUDIT_BUCKET_PATH] + [--audit-retention-interval=AUDIT_RETENTION_INTERVAL] + [--audit-upload-interval=AUDIT_UPLOAD_INTERVAL] + [--authorized-networks=NETWORK,[NETWORK,...]] [--availability-type=AVAILABILITY_TYPE] [--no-backup] [--backup-location=BACKUP_LOCATION] [--backup-start-time=BACKUP_START_TIME] [--collation=COLLATION] [--cpu=CPU] [--database-flags=FLAG=VALUE,[FLAG=VALUE,...]] - [--database-version=DATABASE_VERSION] + [--database-version=DATABASE_VERSION; default="MYSQL_8_0"] [--deny-maintenance-period-end-date=DENY_MAINTENANCE_PERIOD_END_DATE] [--deny-maintenance-period-start-date=DENY_MAINTENANCE_PERIOD_START_DATE] [--deny-maintenance-period-time=DENY_MAINTENANCE_PERIOD_TIME] @@ -102,6 +105,19 @@ FLAGS Return immediately, without waiting for the operation in progress to complete. + --audit-bucket-path=AUDIT_BUCKET_PATH + The location, as a Cloud Storage bucket, to which audit files are + uploaded. The URI is in the form gs://bucketName/folderName. Only + available for SQL Server instances. + + --audit-retention-interval=AUDIT_RETENTION_INTERVAL + The number of days for audit log retention on disk, for example, 3dfor + 3 days. Only available for SQL Server instances. + + --audit-upload-interval=AUDIT_UPLOAD_INTERVAL + How often to upload audit logs (audit files), for example, 30mfor 30 + minutes. Only available for SQL Server instances. + --authorized-networks=NETWORK,[NETWORK,...] The list of external networks that are allowed to connect to the instance. Specified in CIDR notation, also known as 'slash' notation @@ -145,9 +161,9 @@ FLAGS API for allowed flags. (e.g., --database-flags max_allowed_packet=55555,skip_grant_tables=,log_output=1) - --database-version=DATABASE_VERSION - The database engine type and versions. If left unspecified, the API - defaults are used. See the list of database versions at + --database-version=DATABASE_VERSION; default="MYSQL_8_0" + The database engine type and versions. If left unspecified, MYSQL_8_0 + is used. See the list of database versions at https://cloud.google.com/sql/docs/mysql/admin-api/rest/v1beta4/SqlDatabaseVersion. Apart from listed major versions, DATABASE_VERSION also accepts supported minor versions. DATABASE_VERSION must be one of: MYSQL_5_6, diff --git a/gcloud/sql/instances/patch b/gcloud/sql/instances/patch index 0fb58a0cb..4d213aa46 100644 --- a/gcloud/sql/instances/patch +++ b/gcloud/sql/instances/patch @@ -4,9 +4,11 @@ NAME SYNOPSIS gcloud sql instances patch INSTANCE [--activation-policy=ACTIVATION_POLICY] [--active-directory-domain=ACTIVE_DIRECTORY_DOMAIN] [--[no-]assign-ip] - [--async] [--availability-type=AVAILABILITY_TYPE] - [--clear-password-policy] [--cpu=CPU] - [--database-version=DATABASE_VERSION] + [--async] [--audit-bucket-path=AUDIT_BUCKET_PATH] + [--audit-retention-interval=AUDIT_RETENTION_INTERVAL] + [--audit-upload-interval=AUDIT_UPLOAD_INTERVAL] + [--availability-type=AVAILABILITY_TYPE] [--clear-password-policy] + [--cpu=CPU] [--database-version=DATABASE_VERSION] [--deny-maintenance-period-end-date=DENY_MAINTENANCE_PERIOD_END_DATE] [--deny-maintenance-period-start-date=DENY_MAINTENANCE_PERIOD_START_DATE] [--deny-maintenance-period-time=DENY_MAINTENANCE_PERIOD_TIME] [--diff] @@ -74,6 +76,19 @@ FLAGS Return immediately, without waiting for the operation in progress to complete. + --audit-bucket-path=AUDIT_BUCKET_PATH + The location, as a Cloud Storage bucket, to which audit files are + uploaded. The URI is in the form gs://bucketName/folderName. Only + available for SQL Server instances. + + --audit-retention-interval=AUDIT_RETENTION_INTERVAL + The number of days for audit log retention on disk, for example, 3dfor + 3 days. Only available for SQL Server instances. + + --audit-upload-interval=AUDIT_UPLOAD_INTERVAL + How often to upload audit logs (audit files), for example, 30mfor 30 + minutes. Only available for SQL Server instances. + --availability-type=AVAILABILITY_TYPE Specifies level of availability. AVAILABILITY_TYPE must be one of: