imjasonh/gcloud-help
1
0
Fork 0
mirror of https://github.com/imjasonh/gcloud-help synced 2026-07-22 15:52:30 +00:00
Code Activity

gcloud: Thu Feb 20 10:40:27 UTC 2025

Browse source
This commit is contained in:
Automated 2025-02-20 10:40:27 +00:00
parent 44f319c56c
commit 8d1a988ab5
295 changed files with 11246 additions and 956 deletions
Download patch file Download diff file Expand all files Collapse all files

19
gcloud/iam/workforce-pools/providers/create-oidc
View file

@ -273,23 +273,32 @@ OPTIONAL FLAGS
*--extra-attributes-client-id*=_EXTRA_ATTRIBUTES_CLIENT_ID_::
The OAuth 2.0 client ID for retrieving extra attributes from the identity provider. Required to get the Access Token using client credentials grant flow.
The OAuth 2.0 client ID for retrieving extra attributes from the identity provider. Required
to get the Access Token using client credentials grant flow.
*--extra-attributes-client-secret-value*=_EXTRA_ATTRIBUTES_CLIENT_SECRET_VALUE_::
The OAuth 2.0 client secret for retrieving extra attributes from the identity provider. Required to get the Access Token using client credentials grant flow.
The OAuth 2.0 client secret for retrieving extra attributes from the identity provider.
Required to get the Access Token using client credentials grant flow.
*--extra-attributes-issuer-uri*=_EXTRA_ATTRIBUTES_ISSUER_URI_::
OIDC identity provider's issuer URI. Must be a valid URI using the 'https' scheme. Required to get the OIDC discovery document.
OIDC identity provider's issuer URI. Must be a valid URI using the 'https' scheme.
Required to get the OIDC discovery document.
*--extra-attributes-type*=_EXTRA_ATTRIBUTES_TYPE_::
Represents the identity provider and type of claims that should be fetched. _EXTRA_ATTRIBUTES_TYPE_ must be (only one value is supported): *azure-ad-groups-mail*.
Represents the identity provider and type of claims that should be fetched. _EXTRA_ATTRIBUTES_TYPE_ must be one of: *attributes-type-unspecified*, *azure-ad-groups-id*, *azure-ad-groups-mail*.
*--extra-attributes-filter*=_EXTRA_ATTRIBUTES_FILTER_::
The filter used to request specific records from IdP. In case of attributes type as AZURE_AD_GROUPS_MAIL, it represents the filter used to request specific groups for users from IdP. By default all the groups associated with the user are fetched. The groups that are used should be mail enabled and security enabled. See https://learn.microsoft.com/en-us/graph/search-query-parameter for more details.
The filter used to request specific records from IdP. When used with the attributes type
azure-ad-groups-mail or azure-ad-groups-id, the filter requests specific groups associated
with a user from the IdP. By default all of the groups associated with the user are fetched.
When used with the attributes type azure-ad-groups-mail, the groups that are used should be
security and mail enabled. When used with the attributes type azure-ad-groups-id, the groups
that are used should be security enabled. See
https://learn.microsoft.com/en-us/graph/search-query-parameter for more details.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.

33
gcloud/iam/workforce-pools/providers/create-saml
View file

@ -8,6 +8,8 @@ SYNOPSIS
--attribute-mapping=[KEY=VALUE,...] --idp-metadata-path=PATH_TO_FILE
[--async] [--attribute-condition=ATTRIBUTE_CONDITION]
[--description=DESCRIPTION] [--disabled] [--display-name=DISPLAY_NAME]
[--extra-attributes-client-id=EXTRA_ATTRIBUTES_CLIENT_ID
--extra-attributes-client-secret-value=EXTRA_ATTRIBUTES_CLIENT_SECRET_VALUE --extra-attributes-issuer-uri=EXTRA_ATTRIBUTES_ISSUER_URI --extra-attributes-type=EXTRA_ATTRIBUTES_TYPE : --extra-attributes-filter=EXTRA_ATTRIBUTES_FILTER]
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
@ -188,6 +190,37 @@ OPTIONAL FLAGS
A display name for the workforce pool provider. Cannot exceed 32
characters in length.
--extra-attributes-client-id=EXTRA_ATTRIBUTES_CLIENT_ID
The OAuth 2.0 client ID for retrieving extra attributes from the
identity provider. Required to get the Access Token using client
credentials grant flow.
--extra-attributes-client-secret-value=EXTRA_ATTRIBUTES_CLIENT_SECRET_VALUE
The OAuth 2.0 client secret for retrieving extra attributes from the
identity provider. Required to get the Access Token using client
credentials grant flow.
--extra-attributes-issuer-uri=EXTRA_ATTRIBUTES_ISSUER_URI
OIDC identity provider's issuer URI. Must be a valid URI using the
'https' scheme. Required to get the OIDC discovery document.
--extra-attributes-type=EXTRA_ATTRIBUTES_TYPE
Represents the identity provider and type of claims that should be
fetched. EXTRA_ATTRIBUTES_TYPE must be one of:
attributes-type-unspecified, azure-ad-groups-id, azure-ad-groups-mail.
--extra-attributes-filter=EXTRA_ATTRIBUTES_FILTER
The filter used to request specific records from IdP. When used with
the attributes type azure-ad-groups-mail or azure-ad-groups-id, the
filter requests specific groups associated with a user from the IdP. By
default all of the groups associated with the user are fetched. When
used with the attributes type azure-ad-groups-mail, the groups that are
used should be security and mail enabled. When used with the attributes
type azure-ad-groups-id, the groups that are used should be security
enabled. See
https://learn.microsoft.com/en-us/graph/search-query-parameter for more
details.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,

21
gcloud/iam/workforce-pools/providers/update-oidc
View file

@ -259,27 +259,36 @@ FLAGS
*--clear-extra-attributes-config*:::
Clear the extra attributes configuration.
Clear the extra attributes configuration
*--extra-attributes-client-id*=_EXTRA_ATTRIBUTES_CLIENT_ID_:::
The OAuth 2.0 client ID for retrieving extra attributes from the identity provider. Required to get the Access Token using client credentials grant flow.
The OAuth 2.0 client ID for retrieving extra attributes from the identity provider. Required
to get the Access Token using client credentials grant flow.
*--extra-attributes-client-secret-value*=_EXTRA_ATTRIBUTES_CLIENT_SECRET_VALUE_:::
The OAuth 2.0 client secret for retrieving extra attributes from the identity provider. Required to get the Access Token using client credentials grant flow.
The OAuth 2.0 client secret for retrieving extra attributes from the identity provider.
Required to get the Access Token using client credentials grant flow.
*--extra-attributes-filter*=_EXTRA_ATTRIBUTES_FILTER_:::
The filter used to request specific records from IdP. In case of attributes type as AZURE_AD_GROUPS_MAIL, it represents the filter used to request specific groups for users from IdP. By default all the groups associated with the user are fetched. The groups that are used should be mail enabled and security enabled. See https://learn.microsoft.com/en-us/graph/search-query-parameter for more details.
The filter used to request specific records from IdP. When used with the attributes type
azure-ad-groups-mail or azure-ad-groups-id, the filter requests specific groups associated
with a user from the IdP. By default all of the groups associated with the user are fetched.
When used with the attributes type azure-ad-groups-mail, the groups that are used should be
security and mail enabled. When used with the attributes type azure-ad-groups-id, the groups
that are used should be security enabled. See
https://learn.microsoft.com/en-us/graph/search-query-parameter for more details.
*--extra-attributes-issuer-uri*=_EXTRA_ATTRIBUTES_ISSUER_URI_:::
OIDC identity provider's issuer URI. Must be a valid URI using the 'https' scheme. Required to get the OIDC discovery document.
OIDC identity provider's issuer URI. Must be a valid URI using the 'https' scheme.
Required to get the OIDC discovery document.
*--extra-attributes-type*=_EXTRA_ATTRIBUTES_TYPE_:::
Represents the identity provider and type of claims that should be fetched. _EXTRA_ATTRIBUTES_TYPE_ must be (only one value is supported): *azure-ad-groups-mail*.
Represents the identity provider and type of claims that should be fetched. _EXTRA_ATTRIBUTES_TYPE_ must be one of: *attributes-type-unspecified*, *azure-ad-groups-id*, *azure-ad-groups-mail*.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.

43
gcloud/iam/workforce-pools/providers/update-saml
View file

@ -8,7 +8,11 @@ SYNOPSIS
[--async] [--attribute-condition=ATTRIBUTE_CONDITION]
[--attribute-mapping=[KEY=VALUE,...]] [--description=DESCRIPTION]
[--disabled] [--display-name=DISPLAY_NAME]
[--idp-metadata-path=PATH_TO_FILE] [GCLOUD_WIDE_FLAG ...]
[--idp-metadata-path=PATH_TO_FILE]
[--clear-extra-attributes-config
| --extra-attributes-client-id=EXTRA_ATTRIBUTES_CLIENT_ID
--extra-attributes-client-secret-value=EXTRA_ATTRIBUTES_CLIENT_SECRET_VALUE --extra-attributes-filter=EXTRA_ATTRIBUTES_FILTER --extra-attributes-issuer-uri=EXTRA_ATTRIBUTES_ISSUER_URI --extra-attributes-type=EXTRA_ATTRIBUTES_TYPE]
[GCLOUD_WIDE_FLAG ...]
DESCRIPTION
Update a new SAML workforce pool provider.
@ -187,6 +191,43 @@ FLAGS
Use a full or relative path to a local file containing the value of
idp_metadata_path.
At most one of these can be specified:
--clear-extra-attributes-config
Clear the extra attributes configuration
--extra-attributes-client-id=EXTRA_ATTRIBUTES_CLIENT_ID
The OAuth 2.0 client ID for retrieving extra attributes from the
identity provider. Required to get the Access Token using client
credentials grant flow.
--extra-attributes-client-secret-value=EXTRA_ATTRIBUTES_CLIENT_SECRET_VALUE
The OAuth 2.0 client secret for retrieving extra attributes from the
identity provider. Required to get the Access Token using client
credentials grant flow.
--extra-attributes-filter=EXTRA_ATTRIBUTES_FILTER
The filter used to request specific records from IdP. When used with
the attributes type azure-ad-groups-mail or azure-ad-groups-id, the
filter requests specific groups associated with a user from the IdP.
By default all of the groups associated with the user are fetched.
When used with the attributes type azure-ad-groups-mail, the groups
that are used should be security and mail enabled. When used with the
attributes type azure-ad-groups-id, the groups that are used should
be security enabled. See
https://learn.microsoft.com/en-us/graph/search-query-parameter for
more details.
--extra-attributes-issuer-uri=EXTRA_ATTRIBUTES_ISSUER_URI
OIDC identity provider's issuer URI. Must be a valid URI using the
'https' scheme. Required to get the OIDC discovery document.
--extra-attributes-type=EXTRA_ATTRIBUTES_TYPE
Represents the identity provider and type of claims that should be
fetched. EXTRA_ATTRIBUTES_TYPE must be one of:
attributes-type-unspecified, azure-ad-groups-id,
azure-ad-groups-mail.
GCLOUD WIDE FLAGS
These flags are available to all commands: --access-token-file, --account,
--billing-project, --configuration, --flags-file, --flatten, --format,