imjasonh/gcloud-help
1
0
Fork 0
mirror of https://github.com/imjasonh/gcloud-help synced 2026-07-22 07:40:10 +00:00
Code Activity

gcloud: Thu Feb 20 10:40:27 UTC 2025

Browse source
This commit is contained in:
Automated 2025-02-20 10:40:27 +00:00
parent 44f319c56c
commit 8d1a988ab5
295 changed files with 11246 additions and 956 deletions
Download patch file Download diff file Expand all files Collapse all files

19
gcloud/beta/iam/workforce-pools/providers/create-oidc
View file

@ -273,23 +273,32 @@ OPTIONAL FLAGS
*--extra-attributes-client-id*=_EXTRA_ATTRIBUTES_CLIENT_ID_::
The OAuth 2.0 client ID for retrieving extra attributes from the identity provider. Required to get the Access Token using client credentials grant flow.
The OAuth 2.0 client ID for retrieving extra attributes from the identity provider. Required
to get the Access Token using client credentials grant flow.
*--extra-attributes-client-secret-value*=_EXTRA_ATTRIBUTES_CLIENT_SECRET_VALUE_::
The OAuth 2.0 client secret for retrieving extra attributes from the identity provider. Required to get the Access Token using client credentials grant flow.
The OAuth 2.0 client secret for retrieving extra attributes from the identity provider.
Required to get the Access Token using client credentials grant flow.
*--extra-attributes-issuer-uri*=_EXTRA_ATTRIBUTES_ISSUER_URI_::
OIDC identity provider's issuer URI. Must be a valid URI using the 'https' scheme. Required to get the OIDC discovery document.
OIDC identity provider's issuer URI. Must be a valid URI using the 'https' scheme.
Required to get the OIDC discovery document.
*--extra-attributes-type*=_EXTRA_ATTRIBUTES_TYPE_::
Represents the identity provider and type of claims that should be fetched. _EXTRA_ATTRIBUTES_TYPE_ must be (only one value is supported): *azure-ad-groups-mail*.
Represents the identity provider and type of claims that should be fetched. _EXTRA_ATTRIBUTES_TYPE_ must be one of: *attributes-type-unspecified*, *azure-ad-groups-id*, *azure-ad-groups-mail*.
*--extra-attributes-filter*=_EXTRA_ATTRIBUTES_FILTER_::
The filter used to request specific records from IdP. In case of attributes type as AZURE_AD_GROUPS_MAIL, it represents the filter used to request specific groups for users from IdP. By default all the groups associated with the user are fetched. The groups that are used should be mail enabled and security enabled. See https://learn.microsoft.com/en-us/graph/search-query-parameter for more details.
The filter used to request specific records from IdP. When used with the attributes type
azure-ad-groups-mail or azure-ad-groups-id, the filter requests specific groups associated
with a user from the IdP. By default all of the groups associated with the user are fetched.
When used with the attributes type azure-ad-groups-mail, the groups that are used should be
security and mail enabled. When used with the attributes type azure-ad-groups-id, the groups
that are used should be security enabled. See
https://learn.microsoft.com/en-us/graph/search-query-parameter for more details.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.

21
gcloud/beta/iam/workforce-pools/providers/update-oidc
View file

@ -259,27 +259,36 @@ FLAGS
*--clear-extra-attributes-config*:::
Clear the extra attributes configuration.
Clear the extra attributes configuration
*--extra-attributes-client-id*=_EXTRA_ATTRIBUTES_CLIENT_ID_:::
The OAuth 2.0 client ID for retrieving extra attributes from the identity provider. Required to get the Access Token using client credentials grant flow.
The OAuth 2.0 client ID for retrieving extra attributes from the identity provider. Required
to get the Access Token using client credentials grant flow.
*--extra-attributes-client-secret-value*=_EXTRA_ATTRIBUTES_CLIENT_SECRET_VALUE_:::
The OAuth 2.0 client secret for retrieving extra attributes from the identity provider. Required to get the Access Token using client credentials grant flow.
The OAuth 2.0 client secret for retrieving extra attributes from the identity provider.
Required to get the Access Token using client credentials grant flow.
*--extra-attributes-filter*=_EXTRA_ATTRIBUTES_FILTER_:::
The filter used to request specific records from IdP. In case of attributes type as AZURE_AD_GROUPS_MAIL, it represents the filter used to request specific groups for users from IdP. By default all the groups associated with the user are fetched. The groups that are used should be mail enabled and security enabled. See https://learn.microsoft.com/en-us/graph/search-query-parameter for more details.
The filter used to request specific records from IdP. When used with the attributes type
azure-ad-groups-mail or azure-ad-groups-id, the filter requests specific groups associated
with a user from the IdP. By default all of the groups associated with the user are fetched.
When used with the attributes type azure-ad-groups-mail, the groups that are used should be
security and mail enabled. When used with the attributes type azure-ad-groups-id, the groups
that are used should be security enabled. See
https://learn.microsoft.com/en-us/graph/search-query-parameter for more details.
*--extra-attributes-issuer-uri*=_EXTRA_ATTRIBUTES_ISSUER_URI_:::
OIDC identity provider's issuer URI. Must be a valid URI using the 'https' scheme. Required to get the OIDC discovery document.
OIDC identity provider's issuer URI. Must be a valid URI using the 'https' scheme.
Required to get the OIDC discovery document.
*--extra-attributes-type*=_EXTRA_ATTRIBUTES_TYPE_:::
Represents the identity provider and type of claims that should be fetched. _EXTRA_ATTRIBUTES_TYPE_ must be (only one value is supported): *azure-ad-groups-mail*.
Represents the identity provider and type of claims that should be fetched. _EXTRA_ATTRIBUTES_TYPE_ must be one of: *attributes-type-unspecified*, *azure-ad-groups-id*, *azure-ad-groups-mail*.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.