From 9cd336cae4e5b77b131861d02d9e91b0759d9186 Mon Sep 17 00:00:00 2001 From: Automated Date: Thu, 27 Jun 2024 09:38:12 +0000 Subject: [PATCH] gcloud: Thu Jun 27 09:38:12 UTC 2024 --- gcloud/_version | 8 +- gcloud/ai/endpoints/direct-predict | 81 +++++++++++++++++ gcloud/ai/endpoints/direct-raw-predict | 81 +++++++++++++++++ gcloud/ai/endpoints/help | 12 +++ gcloud/ai/endpoints/stream-direct-predict | 83 ++++++++++++++++++ gcloud/ai/endpoints/stream-direct-raw-predict | 81 +++++++++++++++++ gcloud/alpha/ai/endpoints/direct-predict | 86 ++++++++++++++++++ gcloud/alpha/ai/endpoints/direct-raw-predict | 84 ++++++++++++++++++ gcloud/alpha/ai/endpoints/help | 12 +++ .../alpha/ai/endpoints/stream-direct-predict | 87 +++++++++++++++++++ .../ai/endpoints/stream-direct-raw-predict | 85 ++++++++++++++++++ gcloud/alpha/alloydb/clusters/create | 5 ++ gcloud/alpha/alloydb/clusters/update | 5 ++ .../alpha/compute/instance-templates/create | 11 +-- gcloud/alpha/compute/instances/bulk/create | 11 +-- gcloud/alpha/compute/instances/create | 11 +-- gcloud/alpha/compute/queued-resources/create | 11 +-- gcloud/alpha/container/fleet/packages/create | 13 +-- gcloud/alpha/container/fleet/packages/update | 4 +- gcloud/alpha/container/hub/packages/create | 13 +-- gcloud/alpha/container/hub/packages/update | 4 +- gcloud/alpha/functions/deploy | 33 ++++--- gcloud/alpha/kms/keys/create | 35 +++++++- gcloud/alpha/kms/keys/update | 63 +++++++++++++- gcloud/alpha/run/deploy | 7 +- gcloud/alpha/run/jobs/create | 7 +- gcloud/alpha/run/jobs/deploy | 7 +- gcloud/alpha/run/jobs/update | 7 +- gcloud/alpha/run/services/update | 7 +- gcloud/alpha/run/workers/deploy | 20 ++++- gcloud/alpha/run/workers/update | 21 ++++- gcloud/beta/ai/endpoints/direct-predict | 84 ++++++++++++++++++ gcloud/beta/ai/endpoints/direct-raw-predict | 82 +++++++++++++++++ gcloud/beta/ai/endpoints/help | 12 +++ .../beta/ai/endpoints/stream-direct-predict | 84 ++++++++++++++++++ .../ai/endpoints/stream-direct-raw-predict | 83 ++++++++++++++++++ gcloud/beta/alloydb/clusters/create | 5 ++ gcloud/beta/alloydb/clusters/update | 5 ++ gcloud/beta/compute/instance-templates/create | 13 +++ gcloud/beta/compute/instances/bulk/create | 13 +++ gcloud/beta/compute/instances/create | 13 +++ gcloud/beta/dataflow/yaml/run | 4 + gcloud/beta/datastream/streams/create | 28 +++++- gcloud/beta/datastream/streams/update | 28 +++++- gcloud/beta/functions/deploy | 32 ++++--- gcloud/beta/kms/keys/create | 35 +++++++- gcloud/beta/kms/keys/update | 63 +++++++++++++- gcloud/compute/instance-templates/create | 16 +++- gcloud/compute/instances/bulk/create | 13 +++ gcloud/compute/instances/create | 13 +++ gcloud/dataflow/yaml/run | 4 + gcloud/datastream/streams/create | 28 +++++- gcloud/datastream/streams/update | 28 +++++- gcloud/functions/deploy | 32 ++++--- gcloud/kms/keys/create | 35 +++++++- gcloud/kms/keys/update | 63 +++++++++++++- gcloud/network-connectivity/hubs/create | 4 +- .../linked-interconnect-attachments/create | 11 ++- .../spokes/linked-router-appliances/create | 11 ++- .../spokes/linked-vpn-tunnels/create | 11 ++- 60 files changed, 1726 insertions(+), 122 deletions(-) create mode 100644 gcloud/ai/endpoints/direct-predict create mode 100644 gcloud/ai/endpoints/direct-raw-predict create mode 100644 gcloud/ai/endpoints/stream-direct-predict create mode 100644 gcloud/ai/endpoints/stream-direct-raw-predict create mode 100644 gcloud/alpha/ai/endpoints/direct-predict create mode 100644 gcloud/alpha/ai/endpoints/direct-raw-predict create mode 100644 gcloud/alpha/ai/endpoints/stream-direct-predict create mode 100644 gcloud/alpha/ai/endpoints/stream-direct-raw-predict create mode 100644 gcloud/beta/ai/endpoints/direct-predict create mode 100644 gcloud/beta/ai/endpoints/direct-raw-predict create mode 100644 gcloud/beta/ai/endpoints/stream-direct-predict create mode 100644 gcloud/beta/ai/endpoints/stream-direct-raw-predict diff --git a/gcloud/_version b/gcloud/_version index d3cc10046..3e20a40ea 100644 --- a/gcloud/_version +++ b/gcloud/_version @@ -1,8 +1,8 @@ -Google Cloud SDK 481.0.0 -alpha 2024.06.14 -beta 2024.06.14 +Google Cloud SDK 482.0.0 +alpha 2024.06.24 +beta 2024.06.24 bq 2.1.6 bundled-python3-unix 3.11.8 -core 2024.06.14 +core 2024.06.24 gcloud-crc32c 1.0.0 gsutil 5.30 diff --git a/gcloud/ai/endpoints/direct-predict b/gcloud/ai/endpoints/direct-predict new file mode 100644 index 000000000..ae18e7574 --- /dev/null +++ b/gcloud/ai/endpoints/direct-predict @@ -0,0 +1,81 @@ +NAME + gcloud ai endpoints direct-predict - run Vertex AI online direct prediction + +SYNOPSIS + gcloud ai endpoints direct-predict (ENDPOINT : --region=REGION) + --json-request=JSON_REQUEST [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + gcloud ai endpoints direct-predict sends a direct prediction request to + Vertex AI endpoint for the given instances. The request limit is 10MB. + +EXAMPLES + To direct predict against an endpoint 123 under project example in region + us-central1, run: + + $ gcloud ai endpoints direct-predict 123 --project=example \ + --region=us-central1 --json-request=input.json + +POSITIONAL ARGUMENTS + Endpoint resource - The endpoint to do online direct prediction. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument endpoint on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + ENDPOINT + ID of the endpoint or fully qualified identifier for the endpoint. + + To set the name attribute: + ▸ provide the argument endpoint on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + Cloud region for the endpoint. + + To set the region attribute: + ▸ provide the argument endpoint on the command line with a fully + specified name; + ▸ provide the argument --region on the command line; + ▸ set the property ai/region; + ▸ choose one from the prompted list of available regions. + +REQUIRED FLAGS + --json-request=JSON_REQUEST + Path to a local file containing the body of a JSON request. + + An example of a JSON request: + + { + "inputs": [ + {"dtype": "STRING", shape: [1], "string_val": ["hello world"]}, + {"dtype": "INT32", shape: [1], "int_val": [42]} + ] + } + + This flag accepts "-" for stdin. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha ai endpoints direct-predict + + $ gcloud beta ai endpoints direct-predict + diff --git a/gcloud/ai/endpoints/direct-raw-predict b/gcloud/ai/endpoints/direct-raw-predict new file mode 100644 index 000000000..7e8c313f8 --- /dev/null +++ b/gcloud/ai/endpoints/direct-raw-predict @@ -0,0 +1,81 @@ +NAME + gcloud ai endpoints direct-raw-predict - run Vertex AI online direct raw + prediction + +SYNOPSIS + gcloud ai endpoints direct-raw-predict (ENDPOINT : --region=REGION) + --json-request=JSON_REQUEST [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + gcloud ai endpoints direct-raw-predict sends a direct raw prediction + request to Vertex AI endpoint for the given input. The request limit is + 10MB. + +EXAMPLES + To direct predict against an endpoint 123 under project example in region + us-central1, run: + + $ gcloud ai endpoints direct-raw-predict 123 --project=example \ + --region=us-central1 --json-request=input.json + +POSITIONAL ARGUMENTS + Endpoint resource - The endpoint to do online direct raw prediction. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument endpoint on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + ENDPOINT + ID of the endpoint or fully qualified identifier for the endpoint. + + To set the name attribute: + ▸ provide the argument endpoint on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + Cloud region for the endpoint. + + To set the region attribute: + ▸ provide the argument endpoint on the command line with a fully + specified name; + ▸ provide the argument --region on the command line; + ▸ set the property ai/region; + ▸ choose one from the prompted list of available regions. + +REQUIRED FLAGS + --json-request=JSON_REQUEST + Path to a local file containing the body of a JSON request. + + An example of a JSON request: + + { + "method_name": "my.method.Predict", + "input": "my request bytes" + } + + This flag accepts "-" for stdin. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha ai endpoints direct-raw-predict + + $ gcloud beta ai endpoints direct-raw-predict + diff --git a/gcloud/ai/endpoints/help b/gcloud/ai/endpoints/help index 467ab0cf0..35861de8e 100644 --- a/gcloud/ai/endpoints/help +++ b/gcloud/ai/endpoints/help @@ -33,6 +33,12 @@ COMMANDS describe Describe an existing Vertex AI endpoint. + direct-predict + Run Vertex AI online direct prediction. + + direct-raw-predict + Run Vertex AI online direct raw prediction. + explain Request an online explanation from an Vertex AI endpoint. @@ -45,6 +51,12 @@ COMMANDS raw-predict Run Vertex AI online raw prediction. + stream-direct-predict + Run Vertex AI online stream direct prediction. + + stream-direct-raw-predict + Run Vertex AI online stream direct raw prediction. + stream-raw-predict Run Vertex AI online stream raw prediction. diff --git a/gcloud/ai/endpoints/stream-direct-predict b/gcloud/ai/endpoints/stream-direct-predict new file mode 100644 index 000000000..eaf144bb4 --- /dev/null +++ b/gcloud/ai/endpoints/stream-direct-predict @@ -0,0 +1,83 @@ +NAME + gcloud ai endpoints stream-direct-predict - run Vertex AI online stream + direct prediction + +SYNOPSIS + gcloud ai endpoints stream-direct-predict (ENDPOINT : --region=REGION) + --json-request=JSON_REQUEST [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + gcloud ai endpoints stream-direct-predict sends a stream direct prediction + request to Vertex AI endpoint for the given inputs. The request limit is + 10MB. + +EXAMPLES + To stream direct predict against an endpoint 123 under project example in + region us-central1, run: + + $ gcloud ai endpoints stream-direct-predict 123 --project=example \ + --region=us-central1 --json-request=input.json + +POSITIONAL ARGUMENTS + Endpoint resource - The endpoint to do online stream direct prediction. + The arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument endpoint on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + ENDPOINT + ID of the endpoint or fully qualified identifier for the endpoint. + + To set the name attribute: + ▸ provide the argument endpoint on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + Cloud region for the endpoint. + + To set the region attribute: + ▸ provide the argument endpoint on the command line with a fully + specified name; + ▸ provide the argument --region on the command line; + ▸ set the property ai/region; + ▸ choose one from the prompted list of available regions. + +REQUIRED FLAGS + --json-request=JSON_REQUEST + Path to a local file containing the body of a JSON request. + + An example of a JSON request: + + { + "inputs": [ + {"dtype": "STRING", shape: [1], "string_val": ["hello world"]}, + {"dtype": "INT32", shape: [1], "int_val": [42]} + ] + } + + This flag accepts "-" for stdin. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha ai endpoints stream-direct-predict + + $ gcloud beta ai endpoints stream-direct-predict + diff --git a/gcloud/ai/endpoints/stream-direct-raw-predict b/gcloud/ai/endpoints/stream-direct-raw-predict new file mode 100644 index 000000000..3e1843ae1 --- /dev/null +++ b/gcloud/ai/endpoints/stream-direct-raw-predict @@ -0,0 +1,81 @@ +NAME + gcloud ai endpoints stream-direct-raw-predict - run Vertex AI online stream + direct raw prediction + +SYNOPSIS + gcloud ai endpoints stream-direct-raw-predict (ENDPOINT : --region=REGION) + --json-request=JSON_REQUEST [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + gcloud ai endpoints stream-direct-raw-predict sends a stream direct raw + prediction request to Vertex AI endpoint for the given input. The request + limit is 10MB. + +EXAMPLES + To stream direct predict against an endpoint 123 under project example in + region us-central1, run: + + $ gcloud ai endpoints stream-direct-raw-predict 123 \ + --project=example --region=us-central1 --json-request=input.json + +POSITIONAL ARGUMENTS + Endpoint resource - The endpoint to do online stream direct raw + prediction. The arguments in this group can be used to specify the + attributes of this resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument endpoint on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + ENDPOINT + ID of the endpoint or fully qualified identifier for the endpoint. + + To set the name attribute: + ▸ provide the argument endpoint on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + Cloud region for the endpoint. + + To set the region attribute: + ▸ provide the argument endpoint on the command line with a fully + specified name; + ▸ provide the argument --region on the command line; + ▸ set the property ai/region; + ▸ choose one from the prompted list of available regions. + +REQUIRED FLAGS + --json-request=JSON_REQUEST + Path to a local file containing the body of a JSON request. + + An example of a JSON request: + + { + "method_name": "my.method.Predict", + "input": "my request bytes" + } + + This flag accepts "-" for stdin. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha ai endpoints stream-direct-raw-predict + + $ gcloud beta ai endpoints stream-direct-raw-predict + diff --git a/gcloud/alpha/ai/endpoints/direct-predict b/gcloud/alpha/ai/endpoints/direct-predict new file mode 100644 index 000000000..cad863e48 --- /dev/null +++ b/gcloud/alpha/ai/endpoints/direct-predict @@ -0,0 +1,86 @@ +NAME + gcloud alpha ai endpoints direct-predict - run Vertex AI online direct + prediction + +SYNOPSIS + gcloud alpha ai endpoints direct-predict (ENDPOINT : --region=REGION) + --json-request=JSON_REQUEST [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) gcloud alpha ai endpoints direct-predict sends a direct prediction + request to Vertex AI endpoint for the given instances. The request limit is + 10MB. + +EXAMPLES + To direct predict against an endpoint 123 under project example in region + us-central1, run: + + $ gcloud alpha ai endpoints direct-predict 123 --project=example \ + --region=us-central1 --json-request=input.json + +POSITIONAL ARGUMENTS + Endpoint resource - The endpoint to do online direct prediction. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument endpoint on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + ENDPOINT + ID of the endpoint or fully qualified identifier for the endpoint. + + To set the name attribute: + ▸ provide the argument endpoint on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + Cloud region for the endpoint. + + To set the region attribute: + ▸ provide the argument endpoint on the command line with a fully + specified name; + ▸ provide the argument --region on the command line; + ▸ set the property ai/region; + ▸ choose one from the prompted list of available regions. + +REQUIRED FLAGS + --json-request=JSON_REQUEST + Path to a local file containing the body of a JSON request. + + An example of a JSON request: + + { + "inputs": [ + {"dtype": "STRING", shape: [1], "string_val": ["hello world"]}, + {"dtype": "INT32", shape: [1], "int_val": [42]} + ] + } + + This flag accepts "-" for stdin. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud ai endpoints direct-predict + + $ gcloud beta ai endpoints direct-predict + diff --git a/gcloud/alpha/ai/endpoints/direct-raw-predict b/gcloud/alpha/ai/endpoints/direct-raw-predict new file mode 100644 index 000000000..b0203ad36 --- /dev/null +++ b/gcloud/alpha/ai/endpoints/direct-raw-predict @@ -0,0 +1,84 @@ +NAME + gcloud alpha ai endpoints direct-raw-predict - run Vertex AI online direct + raw prediction + +SYNOPSIS + gcloud alpha ai endpoints direct-raw-predict (ENDPOINT : --region=REGION) + --json-request=JSON_REQUEST [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) gcloud alpha ai endpoints direct-raw-predict sends a direct raw + prediction request to Vertex AI endpoint for the given input. The request + limit is 10MB. + +EXAMPLES + To direct raw predict against an endpoint 123 under project example in + region us-central1, run: + + $ gcloud alpha ai endpoints direct-raw-predict 123 \ + --project=example --region=us-central1 --json-request=input.json + +POSITIONAL ARGUMENTS + Endpoint resource - The endpoint to do online direct raw prediction. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument endpoint on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + ENDPOINT + ID of the endpoint or fully qualified identifier for the endpoint. + + To set the name attribute: + ▸ provide the argument endpoint on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + Cloud region for the endpoint. + + To set the region attribute: + ▸ provide the argument endpoint on the command line with a fully + specified name; + ▸ provide the argument --region on the command line; + ▸ set the property ai/region; + ▸ choose one from the prompted list of available regions. + +REQUIRED FLAGS + --json-request=JSON_REQUEST + Path to a local file containing the body of a JSON request. + + An example of a JSON request: + + { + "method_name": "my.method.Predict", + "input": "my request bytes" + } + + This flag accepts "-" for stdin. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud ai endpoints direct-raw-predict + + $ gcloud beta ai endpoints direct-raw-predict + diff --git a/gcloud/alpha/ai/endpoints/help b/gcloud/alpha/ai/endpoints/help index 04e19c549..43c66d2b1 100644 --- a/gcloud/alpha/ai/endpoints/help +++ b/gcloud/alpha/ai/endpoints/help @@ -34,6 +34,12 @@ COMMANDS describe (ALPHA) Describe an existing Vertex AI endpoint. + direct-predict + (ALPHA) Run Vertex AI online direct prediction. + + direct-raw-predict + (ALPHA) Run Vertex AI online direct raw prediction. + explain (ALPHA) Request an online explanation from an Vertex AI endpoint. @@ -46,6 +52,12 @@ COMMANDS raw-predict (ALPHA) Run Vertex AI online raw prediction. + stream-direct-predict + (ALPHA) Run Vertex AI online stream direct prediction. + + stream-direct-raw-predict + (ALPHA) Run Vertex AI online stream direct raw prediction. + stream-raw-predict (ALPHA) Run Vertex AI online stream raw prediction. diff --git a/gcloud/alpha/ai/endpoints/stream-direct-predict b/gcloud/alpha/ai/endpoints/stream-direct-predict new file mode 100644 index 000000000..425c96718 --- /dev/null +++ b/gcloud/alpha/ai/endpoints/stream-direct-predict @@ -0,0 +1,87 @@ +NAME + gcloud alpha ai endpoints stream-direct-predict - run Vertex AI online + stream direct prediction + +SYNOPSIS + gcloud alpha ai endpoints stream-direct-predict + (ENDPOINT : --region=REGION) --json-request=JSON_REQUEST + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) gcloud alpha ai endpoints stream-direct-predict sends a stream + direct prediction request to Vertex AI endpoint for the given inputs. The + request limit is 10MB. + +EXAMPLES + To stream direct predict against an endpoint 123 under project example in + region us-central1, run: + + $ gcloud alpha ai endpoints stream-direct-predict 123 \ + --project=example --region=us-central1 --json-request=input.json + +POSITIONAL ARGUMENTS + Endpoint resource - The endpoint to do online stream direct prediction. + The arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument endpoint on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + ENDPOINT + ID of the endpoint or fully qualified identifier for the endpoint. + + To set the name attribute: + ▸ provide the argument endpoint on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + Cloud region for the endpoint. + + To set the region attribute: + ▸ provide the argument endpoint on the command line with a fully + specified name; + ▸ provide the argument --region on the command line; + ▸ set the property ai/region; + ▸ choose one from the prompted list of available regions. + +REQUIRED FLAGS + --json-request=JSON_REQUEST + Path to a local file containing the body of a JSON request. + + An example of a JSON request: + + { + "inputs": [ + {"dtype": "STRING", shape: [1], "string_val": ["hello world"]}, + {"dtype": "INT32", shape: [1], "int_val": [42]} + ] + } + + This flag accepts "-" for stdin. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud ai endpoints stream-direct-predict + + $ gcloud beta ai endpoints stream-direct-predict + diff --git a/gcloud/alpha/ai/endpoints/stream-direct-raw-predict b/gcloud/alpha/ai/endpoints/stream-direct-raw-predict new file mode 100644 index 000000000..010e8bad9 --- /dev/null +++ b/gcloud/alpha/ai/endpoints/stream-direct-raw-predict @@ -0,0 +1,85 @@ +NAME + gcloud alpha ai endpoints stream-direct-raw-predict - run Vertex AI online + stream direct raw prediction + +SYNOPSIS + gcloud alpha ai endpoints stream-direct-raw-predict + (ENDPOINT : --region=REGION) --json-request=JSON_REQUEST + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) gcloud alpha ai endpoints stream-direct-raw-predict sends a stream + direct raw prediction request to Vertex AI endpoint for the given input. + The request limit is 10MB. + +EXAMPLES + To stream direct raw predict against an endpoint 123 under project example + in region us-central1, run: + + $ gcloud alpha ai endpoints stream-direct-raw-predict 123 \ + --project=example --region=us-central1 --json-request=input.json + +POSITIONAL ARGUMENTS + Endpoint resource - The endpoint to do online stream direct raw + prediction. The arguments in this group can be used to specify the + attributes of this resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument endpoint on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + ENDPOINT + ID of the endpoint or fully qualified identifier for the endpoint. + + To set the name attribute: + ▸ provide the argument endpoint on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + Cloud region for the endpoint. + + To set the region attribute: + ▸ provide the argument endpoint on the command line with a fully + specified name; + ▸ provide the argument --region on the command line; + ▸ set the property ai/region; + ▸ choose one from the prompted list of available regions. + +REQUIRED FLAGS + --json-request=JSON_REQUEST + Path to a local file containing the body of a JSON request. + + An example of a JSON request: + + { + "method_name": "my.method.Predict", + "input": "my request bytes" + } + + This flag accepts "-" for stdin. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. These variants are also available: + + $ gcloud ai endpoints stream-direct-raw-predict + + $ gcloud beta ai endpoints stream-direct-raw-predict + diff --git a/gcloud/alpha/alloydb/clusters/create b/gcloud/alpha/alloydb/clusters/create index 22cab09c1..5fa176e05 100644 --- a/gcloud/alpha/alloydb/clusters/create +++ b/gcloud/alpha/alloydb/clusters/create @@ -7,6 +7,7 @@ SYNOPSIS --region=REGION [--allocated-ip-range-name=ALLOCATED_IP_RANGE_NAME] [--async] [--database-version=DATABASE_VERSION] [--enable-private-service-connect] [--network=NETWORK] + [--subscription-type=SUBSCRIPTION_TYPE] [--continuous-backup-recovery-window-days=RECOVERY_PERIOD --enable-continuous-backup [--continuous-backup-encryption-key=CONTINUOUS_BACKUP_ENCRYPTION_KEY @@ -71,6 +72,10 @@ OPTIONAL FLAGS network, 'testsharednetwork', this would be of the form:--network=projects/testproject/global/networks/testsharednetwork + --subscription-type=SUBSCRIPTION_TYPE + Subscription type of the cluster. SUBSCRIPTION_TYPE must be one of: + STANDARD, TRIAL. + Continuous Backup configuration. If unspecified, continuous backups are enabled. diff --git a/gcloud/alpha/alloydb/clusters/update b/gcloud/alpha/alloydb/clusters/update index c6421ef21..3883b8387 100644 --- a/gcloud/alpha/alloydb/clusters/update +++ b/gcloud/alpha/alloydb/clusters/update @@ -4,6 +4,7 @@ NAME SYNOPSIS gcloud alpha alloydb clusters update CLUSTER --region=REGION [--async] + [--subscription-type=SUBSCRIPTION_TYPE] [--clear-automated-backup | --disable-automated-backup | --automated-backup-days-of-week=[DAYS_OF_WEEK,...] --automated-backup-start-times=[START_TIMES,...] @@ -43,6 +44,10 @@ OPTIONAL FLAGS Return immediately, without waiting for the operation in progress to complete. + --subscription-type=SUBSCRIPTION_TYPE + Subscription type of the cluster. SUBSCRIPTION_TYPE must be one of: + STANDARD, TRIAL. + Automated backup policy. At most one of these can be specified: diff --git a/gcloud/alpha/compute/instance-templates/create b/gcloud/alpha/compute/instance-templates/create index 31032b38c..eec9089a7 100644 --- a/gcloud/alpha/compute/instance-templates/create +++ b/gcloud/alpha/compute/instance-templates/create @@ -792,15 +792,16 @@ FLAGS Path to a local json file containing partner metadata. --performance-monitoring-unit=PERFORMANCE_MONITORING_UNIT - The set of performance measurement counters to enable for the instance. - PERFORMANCE_MONITORING_UNIT must be one of: + The type of performance monitoring counters (PMCs) to enable in the + instance. PERFORMANCE_MONITORING_UNIT must be one of: architectural - Enable architecturally defined non-LLC events. + This enables architecturally defined non-last level cache (LLC) + events. enhanced - Enable most documented core/L2 and LLC events. + This enables most documented core/L2 and LLC events. standard - Enable most documented core/L2 events. + This enables most documented core/L2 events. --post-key-revocation-action-type=POLICY Specifies the behavior of the instance when the KMS key of one of its diff --git a/gcloud/alpha/compute/instances/bulk/create b/gcloud/alpha/compute/instances/bulk/create index ea54315b3..060b13912 100644 --- a/gcloud/alpha/compute/instances/bulk/create +++ b/gcloud/alpha/compute/instances/bulk/create @@ -698,15 +698,16 @@ OPTIONAL FLAGS using zonal DNS. --performance-monitoring-unit=PERFORMANCE_MONITORING_UNIT - The set of performance measurement counters to enable for the instance. - PERFORMANCE_MONITORING_UNIT must be one of: + The type of performance monitoring counters (PMCs) to enable in the + instance. PERFORMANCE_MONITORING_UNIT must be one of: architectural - Enable architecturally defined non-LLC events. + This enables architecturally defined non-last level cache (LLC) + events. enhanced - Enable most documented core/L2 and LLC events. + This enables most documented core/L2 and LLC events. standard - Enable most documented core/L2 events. + This enables most documented core/L2 events. --post-key-revocation-action-type=POLICY Specifies the behavior of the instance when the KMS key of one of its diff --git a/gcloud/alpha/compute/instances/create b/gcloud/alpha/compute/instances/create index 489d0084b..8700037f0 100644 --- a/gcloud/alpha/compute/instances/create +++ b/gcloud/alpha/compute/instances/create @@ -813,15 +813,16 @@ FLAGS Path to a local json file containing partner metadata. --performance-monitoring-unit=PERFORMANCE_MONITORING_UNIT - The set of performance measurement counters to enable for the instance. - PERFORMANCE_MONITORING_UNIT must be one of: + The type of performance monitoring counters (PMCs) to enable in the + instance. PERFORMANCE_MONITORING_UNIT must be one of: architectural - Enable architecturally defined non-LLC events. + This enables architecturally defined non-last level cache (LLC) + events. enhanced - Enable most documented core/L2 and LLC events. + This enables most documented core/L2 and LLC events. standard - Enable most documented core/L2 events. + This enables most documented core/L2 events. --post-key-revocation-action-type=POLICY Specifies the behavior of the instance when the KMS key of one of its diff --git a/gcloud/alpha/compute/queued-resources/create b/gcloud/alpha/compute/queued-resources/create index 7c07fe72e..9b4e1a0e8 100644 --- a/gcloud/alpha/compute/queued-resources/create +++ b/gcloud/alpha/compute/queued-resources/create @@ -671,15 +671,16 @@ OPTIONAL FLAGS using zonal DNS. --performance-monitoring-unit=PERFORMANCE_MONITORING_UNIT - The set of performance measurement counters to enable for the instance. - PERFORMANCE_MONITORING_UNIT must be one of: + The type of performance monitoring counters (PMCs) to enable in the + instance. PERFORMANCE_MONITORING_UNIT must be one of: architectural - Enable architecturally defined non-LLC events. + This enables architecturally defined non-last level cache (LLC) + events. enhanced - Enable most documented core/L2 and LLC events. + This enables most documented core/L2 and LLC events. standard - Enable most documented core/L2 events. + This enables most documented core/L2 events. --post-key-revocation-action-type=POLICY Specifies the behavior of the instance when the KMS key of one of its diff --git a/gcloud/alpha/container/fleet/packages/create b/gcloud/alpha/container/fleet/packages/create index 7806a77ac..58c9ba553 100644 --- a/gcloud/alpha/container/fleet/packages/create +++ b/gcloud/alpha/container/fleet/packages/create @@ -3,8 +3,8 @@ NAME Fleet Package SYNOPSIS - gcloud alpha container fleet packages create NAME [--location=LOCATION] - [--source=SOURCE] [GCLOUD_WIDE_FLAG ...] + gcloud alpha container fleet packages create NAME --source=SOURCE + [--location=LOCATION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Create Package Rollouts Fleet Package. @@ -19,13 +19,14 @@ POSITIONAL ARGUMENTS NAME Resource name. -FLAGS - --location=LOCATION - Google Cloud zone or region. - +REQUIRED FLAGS --source=SOURCE Source file containing Fleet Package configuration. +OPTIONAL FLAGS + --location=LOCATION + Google Cloud zone or region. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/container/fleet/packages/update b/gcloud/alpha/container/fleet/packages/update index 5ef397a44..6256a62bf 100644 --- a/gcloud/alpha/container/fleet/packages/update +++ b/gcloud/alpha/container/fleet/packages/update @@ -4,7 +4,7 @@ NAME SYNOPSIS gcloud alpha container fleet packages update - (FLEET_PACKAGE : --location=LOCATION) [--source=SOURCE] + (FLEET_PACKAGE : --location=LOCATION) --source=SOURCE [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -48,7 +48,7 @@ POSITIONAL ARGUMENTS ▸ provide the argument --location on the command line; ▸ set the property config_delivery/location. -FLAGS +REQUIRED FLAGS --source=SOURCE Source file containing Fleet Package configuration. diff --git a/gcloud/alpha/container/hub/packages/create b/gcloud/alpha/container/hub/packages/create index 51122e1a7..fbb6e0306 100644 --- a/gcloud/alpha/container/hub/packages/create +++ b/gcloud/alpha/container/hub/packages/create @@ -3,8 +3,8 @@ NAME Package SYNOPSIS - gcloud alpha container hub packages create NAME [--location=LOCATION] - [--source=SOURCE] [GCLOUD_WIDE_FLAG ...] + gcloud alpha container hub packages create NAME --source=SOURCE + [--location=LOCATION] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Create Package Rollouts Fleet Package. @@ -19,13 +19,14 @@ POSITIONAL ARGUMENTS NAME Resource name. -FLAGS - --location=LOCATION - Google Cloud zone or region. - +REQUIRED FLAGS --source=SOURCE Source file containing Fleet Package configuration. +OPTIONAL FLAGS + --location=LOCATION + Google Cloud zone or region. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/container/hub/packages/update b/gcloud/alpha/container/hub/packages/update index d60ac575d..c302a8d33 100644 --- a/gcloud/alpha/container/hub/packages/update +++ b/gcloud/alpha/container/hub/packages/update @@ -4,7 +4,7 @@ NAME SYNOPSIS gcloud alpha container hub packages update - (FLEET_PACKAGE : --location=LOCATION) [--source=SOURCE] + (FLEET_PACKAGE : --location=LOCATION) --source=SOURCE [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -48,7 +48,7 @@ POSITIONAL ARGUMENTS ▸ provide the argument --location on the command line; ▸ set the property config_delivery/location. -FLAGS +REQUIRED FLAGS --source=SOURCE Source file containing Fleet Package configuration. diff --git a/gcloud/alpha/functions/deploy b/gcloud/alpha/functions/deploy index c295aa51b..76db7e3da 100644 --- a/gcloud/alpha/functions/deploy +++ b/gcloud/alpha/functions/deploy @@ -3,11 +3,10 @@ NAME SYNOPSIS gcloud alpha functions deploy (NAME : --region=REGION) - [--[no-]allow-unauthenticated] - [--build-service-account=BUILD_SERVICE_ACCOUNT] - [--buildpack-stack=BUILDPACK_STACK] [--concurrency=CONCURRENCY] - [--docker-registry=DOCKER_REGISTRY] [--egress-settings=EGRESS_SETTINGS] - [--entry-point=ENTRY_POINT] [--gen2] [--ignore-file=IGNORE_FILE] + [--[no-]allow-unauthenticated] [--buildpack-stack=BUILDPACK_STACK] + [--concurrency=CONCURRENCY] [--docker-registry=DOCKER_REGISTRY] + [--egress-settings=EGRESS_SETTINGS] [--entry-point=ENTRY_POINT] + [--gen2] [--ignore-file=IGNORE_FILE] [--ingress-settings=INGRESS_SETTINGS] [--retry] [--run-service-account=RUN_SERVICE_ACCOUNT] [--runtime=RUNTIME] [--runtime-update-policy=RUNTIME_UPDATE_POLICY] @@ -22,6 +21,8 @@ SYNOPSIS | --set-build-env-vars=[KEY=VALUE,...] | --remove-build-env-vars=[KEY,...] --update-build-env-vars=[KEY=VALUE,...]] + [--build-service-account=BUILD_SERVICE_ACCOUNT + | --clear-build-service-account] [--build-worker-pool=BUILD_WORKER_POOL | --clear-build-worker-pool] [--clear-docker-repository | --docker-repository=DOCKER_REPOSITORY] [--clear-env-vars | --env-vars-file=FILE_PATH @@ -104,15 +105,6 @@ FLAGS without checking authentication. Use --allow-unauthenticated to enable and --no-allow-unauthenticated to disable. - --build-service-account=BUILD_SERVICE_ACCOUNT - IAM service account whose credentials will be used for the build step. - Must be of the format - projects/${PROJECT_ID}/serviceAccounts/${ACCOUNT_EMAIL_ADDRESS} or - {ACCOUNT_EMAIL_ADDRESS}. - - If not provided, the function will use the project's default service - account for Cloud Build. - --buildpack-stack=BUILDPACK_STACK Specifies one of the Google provided buildpack stacks. @@ -343,6 +335,19 @@ FLAGS --update-build-env-vars=[KEY=VALUE,...] List of key-value pairs to set as build environment variables. + At most one of these can be specified: + + --build-service-account=BUILD_SERVICE_ACCOUNT + IAM service account whose credentials will be used for the build + step. Must be of the format + projects/${PROJECT_ID}/serviceAccounts/${ACCOUNT_EMAIL_ADDRESS}. + + If not provided, the function will use the project's default service + account for Cloud Build. + + --clear-build-service-account + Clears the build service account field. + At most one of these can be specified: --build-worker-pool=BUILD_WORKER_POOL diff --git a/gcloud/alpha/kms/keys/create b/gcloud/alpha/kms/keys/create index fe83113cd..d31f5eab3 100644 --- a/gcloud/alpha/kms/keys/create +++ b/gcloud/alpha/kms/keys/create @@ -3,7 +3,9 @@ NAME SYNOPSIS gcloud alpha kms keys create (KEY : --keyring=KEYRING --location=LOCATION) - --purpose=PURPOSE [--crypto-key-backend=CRYPTO_KEY_BACKEND] + --purpose=PURPOSE + [--allowed-access-reasons=[ALLOWED_ACCESS_REASONS,...]] + [--crypto-key-backend=CRYPTO_KEY_BACKEND] [--default-algorithm=DEFAULT_ALGORITHM] [--destroy-scheduled-duration=DESTROY_SCHEDULED_DURATION] [--import-only] [--labels=[KEY=VALUE,...]] @@ -53,6 +55,12 @@ DESCRIPTION The flag --crypto-key-backend defines the resource name for the backend where the key resides. Required for external-vpc keys. + The optional flag --allowed-access-reasons defines the Key Access + Justifications Policy for the key, and is specified as a comma separated + list of zero or more justification codes defined in + https://cloud.google.com/assured-workloads/key-access-justifications/docs/justification-codes. + The key must be enrolled in Key Access Justifications to use this flag. + EXAMPLES The following command creates a key named frodo with protection level software within the keyring fellowship and location us-east1: @@ -113,6 +121,16 @@ EXAMPLES --crypto-key-backend="projects/$(gcloud config get project)/ locations/us-central1/ekmConnections/eagles" + The following command creates a key named arwen with protection level + software within the keyring fellowship and location us-east1 with a Key + Access Justifications policy that allows access reasons + customer-initiated-access and google-initiated-system-operation: + + $ gcloud alpha kms keys create arwen --location=us-east1 \ + --keyring=fellowship --purpose=encryption \ + --allowed-access-reasons=customer-initiated-access,\ + google-initiated-system-operation + POSITIONAL ARGUMENTS Key resource - The KMS key resource. The arguments in this group can be used to specify the attributes of this resource. (NOTE) Some attributes @@ -157,6 +175,21 @@ REQUIRED FLAGS raw-encryption. OPTIONAL FLAGS + --allowed-access-reasons=[ALLOWED_ACCESS_REASONS,...] + The list of allowed Key Access Justifications access reasons on the + key. The key must be enrolled in Key Access Justifications to configure + this field. By default, this field is absent, and all justification + codes are allowed. For more information about justification codes, see + https://cloud.google.com/assured-workloads/key-access-justifications/docs/justification-codes. + ALLOWED_ACCESS_REASONS must be one of: + customer-authorized-workflow-servicing, customer-initiated-access, + customer-initiated-support, google-initiated-review, + google-initiated-service, google-initiated-system-operation, + google-response-to-production-alert, + modified-customer-initiated-access, + modified-google-initiated-system-operation, reason-not-expected, + reason-unspecified, third-party-data-request. + --crypto-key-backend=CRYPTO_KEY_BACKEND The resource name of the backend environment where the key material for all CryptoKeyVersions associated with this CryptoKey reside and where diff --git a/gcloud/alpha/kms/keys/update b/gcloud/alpha/kms/keys/update index a39ad3e4f..01c8c44d1 100644 --- a/gcloud/alpha/kms/keys/update +++ b/gcloud/alpha/kms/keys/update @@ -3,10 +3,13 @@ NAME SYNOPSIS gcloud alpha kms keys update (KEY : --keyring=KEYRING --location=LOCATION) + [--allowed-access-reasons=[ALLOWED_ACCESS_REASONS,...]] [--default-algorithm=DEFAULT_ALGORITHM] [--next-rotation-time=NEXT_ROTATION_TIME] - [--primary-version=PRIMARY_VERSION] [--remove-rotation-schedule] - [--rotation-period=ROTATION_PERIOD] [--update-labels=[KEY=VALUE,...]] + [--primary-version=PRIMARY_VERSION] + [--remove-key-access-justifications-policy] + [--remove-rotation-schedule] [--rotation-period=ROTATION_PERIOD] + [--update-labels=[KEY=VALUE,...]] [--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -31,6 +34,20 @@ DESCRIPTION 4. Update the primary version for the given key with primary-version flag. + 5. Update the Key Access Justifications policy for the given key with + allowed-access-reasons flag to allow specified reasons. The key must be + enrolled in Key Access Justifications to use this flag. + + 6. Remove the Key Access Justifications policy for the given key with + remove-key-access-justifications-policy flag. The key must be enrolled in + Key Access Justifications to use this flag. + + 7. Update the Key Access Justifications policy for the given key with + allowed_access_reasons flag to allow zero access reasons. This effectively + disables the key, because a policy is configured to reject all access + reasons. The key must be enrolled in Key Access Justifications to use this + flag. + EXAMPLES The following command sets a 30 day rotation period for the key named frodo within the keyring fellowship and location global starting at the specified @@ -74,6 +91,29 @@ EXAMPLES --keyring=fellowship \ --default-algorithm=rsa-decrypt-oaep-4096-sha256 + The following command updates the Key Access Justifications policy for the + key named frodo within the keyring fellowship and location global to allow + only customer-initiated-access and google-initiated-system-operation: + + $ gcloud alpha kms keys update frodo --location=global \ + --keyring=fellowship \ + --allowed-access-reasons=customer-initiated-access,\ + google-initiated-system-operation + + The following command removes the Key Access Justifications policy for the + key named frodo within the keyring fellowship and location global, which + results in all access reasons being allowed: + + $ gcloud alpha kms keys update frodo --location=global \ + --keyring=fellowship --remove-key-access-justifications-policy + + The following command updates the Key Access Justifications policy for the + key named frodo within the keyring fellowship and location global to allow + only zero access reasons, effectively disabling the key: + + $ gcloud alpha kms keys update frodo --location=global \ + --keyring=fellowship --allowed-access-reasons= + POSITIONAL ARGUMENTS Key resource - The KMS key resource. The arguments in this group can be used to specify the attributes of this resource. (NOTE) Some attributes @@ -112,6 +152,21 @@ POSITIONAL ARGUMENTS ▸ provide the argument --location on the command line. FLAGS + --allowed-access-reasons=[ALLOWED_ACCESS_REASONS,...] + The list of allowed Key Access Justifications access reasons on the + key. The key must be enrolled in Key Access Justifications to configure + this field. By default, this field is absent, and all justification + codes are allowed. For more information about justification codes, see + https://cloud.google.com/assured-workloads/key-access-justifications/docs/justification-codes. + ALLOWED_ACCESS_REASONS must be one of: + customer-authorized-workflow-servicing, customer-initiated-access, + customer-initiated-support, google-initiated-review, + google-initiated-service, google-initiated-system-operation, + google-response-to-production-alert, + modified-customer-initiated-access, + modified-google-initiated-system-operation, reason-not-expected, + reason-unspecified, third-party-data-request. + --default-algorithm=DEFAULT_ALGORITHM The default algorithm for the crypto key. For more information about choosing an algorithm, see @@ -138,6 +193,10 @@ FLAGS --primary-version=PRIMARY_VERSION Primary version to make primary. + --remove-key-access-justifications-policy + Removes the Key Access Justifications policy on the key, making all + justification codes allowed. + --remove-rotation-schedule Remove any existing rotation schedule on the key. diff --git a/gcloud/alpha/run/deploy b/gcloud/alpha/run/deploy index 78f26a167..ea80aaf07 100644 --- a/gcloud/alpha/run/deploy +++ b/gcloud/alpha/run/deploy @@ -566,13 +566,16 @@ FLAGS volume type is mounted using Cloud Storage FUSE. See https://cloud.google.com/storage/docs/gcs-fuse for the details and limitations of this filesystem. Additional keys: - ◆ bucket: (required) the name of the bucket to use as the source of - this volume ◆ readonly: (optional) A boolean. If true, this volume will be read-only from all mounts. ◆ mount-options: (optional) A list of flags to pass to GCSFuse. Flags should be specified without leading dashes and separated by semicolons. + ◆ bucket: (optional) the name of the bucket to use as the source of + this volume. + ◆ dynamic-mounting: (optional) A boolean. If true, the volume will be + mounted dynamically. Note: You will either need to specify a bucket or + set dynamic-mounting to true, but not both. in-memory: An ephemeral volume that stores data in the instance's memory. With this type of volume, data is not shared between instances and all diff --git a/gcloud/alpha/run/jobs/create b/gcloud/alpha/run/jobs/create index 3073ed4dd..82e7a6058 100644 --- a/gcloud/alpha/run/jobs/create +++ b/gcloud/alpha/run/jobs/create @@ -155,13 +155,16 @@ FLAGS volume type is mounted using Cloud Storage FUSE. See https://cloud.google.com/storage/docs/gcs-fuse for the details and limitations of this filesystem. Additional keys: - ◆ bucket: (required) the name of the bucket to use as the source of - this volume ◆ readonly: (optional) A boolean. If true, this volume will be read-only from all mounts. ◆ mount-options: (optional) A list of flags to pass to GCSFuse. Flags should be specified without leading dashes and separated by semicolons. + ◆ bucket: (optional) the name of the bucket to use as the source of + this volume. + ◆ dynamic-mounting: (optional) A boolean. If true, the volume will be + mounted dynamically. Note: You will either need to specify a bucket + or set dynamic-mounting to true, but not both. in-memory: An ephemeral volume that stores data in the instance's memory. With this type of volume, data is not shared between instances diff --git a/gcloud/alpha/run/jobs/deploy b/gcloud/alpha/run/jobs/deploy index fa05d07d6..b74cdfee4 100644 --- a/gcloud/alpha/run/jobs/deploy +++ b/gcloud/alpha/run/jobs/deploy @@ -160,13 +160,16 @@ FLAGS volume type is mounted using Cloud Storage FUSE. See https://cloud.google.com/storage/docs/gcs-fuse for the details and limitations of this filesystem. Additional keys: - ◆ bucket: (required) the name of the bucket to use as the source of - this volume ◆ readonly: (optional) A boolean. If true, this volume will be read-only from all mounts. ◆ mount-options: (optional) A list of flags to pass to GCSFuse. Flags should be specified without leading dashes and separated by semicolons. + ◆ bucket: (optional) the name of the bucket to use as the source of + this volume. + ◆ dynamic-mounting: (optional) A boolean. If true, the volume will be + mounted dynamically. Note: You will either need to specify a bucket + or set dynamic-mounting to true, but not both. in-memory: An ephemeral volume that stores data in the instance's memory. With this type of volume, data is not shared between instances diff --git a/gcloud/alpha/run/jobs/update b/gcloud/alpha/run/jobs/update index 8cdeaaedd..328a1477b 100644 --- a/gcloud/alpha/run/jobs/update +++ b/gcloud/alpha/run/jobs/update @@ -170,13 +170,16 @@ FLAGS volume type is mounted using Cloud Storage FUSE. See https://cloud.google.com/storage/docs/gcs-fuse for the details and limitations of this filesystem. Additional keys: - ◆ bucket: (required) the name of the bucket to use as the source of - this volume ◆ readonly: (optional) A boolean. If true, this volume will be read-only from all mounts. ◆ mount-options: (optional) A list of flags to pass to GCSFuse. Flags should be specified without leading dashes and separated by semicolons. + ◆ bucket: (optional) the name of the bucket to use as the source of + this volume. + ◆ dynamic-mounting: (optional) A boolean. If true, the volume will be + mounted dynamically. Note: You will either need to specify a bucket + or set dynamic-mounting to true, but not both. in-memory: An ephemeral volume that stores data in the instance's memory. With this type of volume, data is not shared between instances diff --git a/gcloud/alpha/run/services/update b/gcloud/alpha/run/services/update index f2ad41fa7..528157828 100644 --- a/gcloud/alpha/run/services/update +++ b/gcloud/alpha/run/services/update @@ -452,13 +452,16 @@ FLAGS volume type is mounted using Cloud Storage FUSE. See https://cloud.google.com/storage/docs/gcs-fuse for the details and limitations of this filesystem. Additional keys: - ◆ bucket: (required) the name of the bucket to use as the source of - this volume ◆ readonly: (optional) A boolean. If true, this volume will be read-only from all mounts. ◆ mount-options: (optional) A list of flags to pass to GCSFuse. Flags should be specified without leading dashes and separated by semicolons. + ◆ bucket: (optional) the name of the bucket to use as the source of + this volume. + ◆ dynamic-mounting: (optional) A boolean. If true, the volume will be + mounted dynamically. Note: You will either need to specify a bucket or + set dynamic-mounting to true, but not both. in-memory: An ephemeral volume that stores data in the instance's memory. With this type of volume, data is not shared between instances and all diff --git a/gcloud/alpha/run/workers/deploy b/gcloud/alpha/run/workers/deploy index 343f7bf98..7b8c64800 100644 --- a/gcloud/alpha/run/workers/deploy +++ b/gcloud/alpha/run/workers/deploy @@ -6,8 +6,8 @@ SYNOPSIS [--breakglass=JUSTIFICATION] [--description=DESCRIPTION] [--max-instances=MAX_INSTANCES] [--max-surge=MAX_SURGE] [--min-instances=MIN_INSTANCES] [--no-promote] [--region=REGION] - [--revision-suffix=REVISION_SUFFIX] [--service-account=SERVICE_ACCOUNT] - [--vpc-egress=VPC_EGRESS] + [--revision-suffix=REVISION_SUFFIX] [--scaling-mode=SCALING_MODE] + [--service-account=SERVICE_ACCOUNT] [--vpc-egress=VPC_EGRESS] [--add-cloudsql-instances=[CLOUDSQL-INSTANCES,...] | --clear-cloudsql-instances | --remove-cloudsql-instances=[CLOUDSQL-INSTANCES,...] @@ -122,6 +122,15 @@ FLAGS [--revision-suffix=v1] for a service named 'helloworld', would lead to a revision named 'helloworld-v1'. + --scaling-mode=SCALING_MODE + The scaling mode to use for this resource. SCALING_MODE must be one of: + + automatic + The number of instances is scaled automatically based on the usage + metrics. + manual + The number of instances is fixed to a provided config value. + --service-account=SERVICE_ACCOUNT Service account associated with the revision of the service. The service account represents the identity of the running revision, and @@ -186,13 +195,16 @@ FLAGS volume type is mounted using Cloud Storage FUSE. See https://cloud.google.com/storage/docs/gcs-fuse for the details and limitations of this filesystem. Additional keys: - ◆ bucket: (required) the name of the bucket to use as the source of - this volume ◆ readonly: (optional) A boolean. If true, this volume will be read-only from all mounts. ◆ mount-options: (optional) A list of flags to pass to GCSFuse. Flags should be specified without leading dashes and separated by semicolons. + ◆ bucket: (optional) the name of the bucket to use as the source of + this volume. + ◆ dynamic-mounting: (optional) A boolean. If true, the volume will be + mounted dynamically. Note: You will either need to specify a bucket + or set dynamic-mounting to true, but not both. in-memory: An ephemeral volume that stores data in the instance's memory. With this type of volume, data is not shared between instances diff --git a/gcloud/alpha/run/workers/update b/gcloud/alpha/run/workers/update index 47d90d250..7f74c783b 100644 --- a/gcloud/alpha/run/workers/update +++ b/gcloud/alpha/run/workers/update @@ -7,8 +7,9 @@ SYNOPSIS [--breakglass=JUSTIFICATION] [--description=DESCRIPTION] [--max-instances=MAX_INSTANCES] [--max-surge=MAX_SURGE] [--min-instances=MIN_INSTANCES] [--no-promote] [--region=REGION] - [--revision-suffix=REVISION_SUFFIX] [--service-account=SERVICE_ACCOUNT] - [--[no-]session-affinity] [--vpc-egress=VPC_EGRESS] + [--revision-suffix=REVISION_SUFFIX] [--scaling-mode=SCALING_MODE] + [--service-account=SERVICE_ACCOUNT] [--[no-]session-affinity] + [--vpc-egress=VPC_EGRESS] [--add-cloudsql-instances=[CLOUDSQL-INSTANCES,...] | --clear-cloudsql-instances | --remove-cloudsql-instances=[CLOUDSQL-INSTANCES,...] @@ -122,6 +123,15 @@ FLAGS [--revision-suffix=v1] for a service named 'helloworld', would lead to a revision named 'helloworld-v1'. + --scaling-mode=SCALING_MODE + The scaling mode to use for this resource. SCALING_MODE must be one of: + + automatic + The number of instances is scaled automatically based on the usage + metrics. + manual + The number of instances is fixed to a provided config value. + --service-account=SERVICE_ACCOUNT Service account associated with the revision of the service. The service account represents the identity of the running revision, and @@ -208,13 +218,16 @@ FLAGS volume type is mounted using Cloud Storage FUSE. See https://cloud.google.com/storage/docs/gcs-fuse for the details and limitations of this filesystem. Additional keys: - ◆ bucket: (required) the name of the bucket to use as the source of - this volume ◆ readonly: (optional) A boolean. If true, this volume will be read-only from all mounts. ◆ mount-options: (optional) A list of flags to pass to GCSFuse. Flags should be specified without leading dashes and separated by semicolons. + ◆ bucket: (optional) the name of the bucket to use as the source of + this volume. + ◆ dynamic-mounting: (optional) A boolean. If true, the volume will be + mounted dynamically. Note: You will either need to specify a bucket + or set dynamic-mounting to true, but not both. in-memory: An ephemeral volume that stores data in the instance's memory. With this type of volume, data is not shared between instances diff --git a/gcloud/beta/ai/endpoints/direct-predict b/gcloud/beta/ai/endpoints/direct-predict new file mode 100644 index 000000000..8c643ff90 --- /dev/null +++ b/gcloud/beta/ai/endpoints/direct-predict @@ -0,0 +1,84 @@ +NAME + gcloud beta ai endpoints direct-predict - run Vertex AI online direct + prediction + +SYNOPSIS + gcloud beta ai endpoints direct-predict (ENDPOINT : --region=REGION) + --json-request=JSON_REQUEST [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) gcloud beta ai endpoints direct-predict sends a direct prediction + request to Vertex AI endpoint for the given instances. The request limit is + 10MB. + +EXAMPLES + To direct predict against an endpoint 123 under project example in region + us-central1, run: + + $ gcloud beta ai endpoints direct-predict 123 --project=example \ + --region=us-central1 --json-request=input.json + +POSITIONAL ARGUMENTS + Endpoint resource - The endpoint to do online direct prediction. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument endpoint on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + ENDPOINT + ID of the endpoint or fully qualified identifier for the endpoint. + + To set the name attribute: + ▸ provide the argument endpoint on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + Cloud region for the endpoint. + + To set the region attribute: + ▸ provide the argument endpoint on the command line with a fully + specified name; + ▸ provide the argument --region on the command line; + ▸ set the property ai/region; + ▸ choose one from the prompted list of available regions. + +REQUIRED FLAGS + --json-request=JSON_REQUEST + Path to a local file containing the body of a JSON request. + + An example of a JSON request: + + { + "inputs": [ + {"dtype": "STRING", shape: [1], "string_val": ["hello world"]}, + {"dtype": "INT32", shape: [1], "int_val": [42]} + ] + } + + This flag accepts "-" for stdin. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud ai endpoints direct-predict + + $ gcloud alpha ai endpoints direct-predict + diff --git a/gcloud/beta/ai/endpoints/direct-raw-predict b/gcloud/beta/ai/endpoints/direct-raw-predict new file mode 100644 index 000000000..ae9cb85cb --- /dev/null +++ b/gcloud/beta/ai/endpoints/direct-raw-predict @@ -0,0 +1,82 @@ +NAME + gcloud beta ai endpoints direct-raw-predict - run Vertex AI online direct + raw prediction + +SYNOPSIS + gcloud beta ai endpoints direct-raw-predict (ENDPOINT : --region=REGION) + --json-request=JSON_REQUEST [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) gcloud beta ai endpoints direct-raw-predict sends a direct raw + prediction request to Vertex AI endpoint for the given input. The request + limit is 10MB. + +EXAMPLES + To direct raw predict against an endpoint 123 under project example in + region us-central1, run: + + $ gcloud beta ai endpoints direct-raw-predict 123 \ + --project=example --region=us-central1 --json-request=input.json + +POSITIONAL ARGUMENTS + Endpoint resource - The endpoint to do online direct raw prediction. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument endpoint on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + ENDPOINT + ID of the endpoint or fully qualified identifier for the endpoint. + + To set the name attribute: + ▸ provide the argument endpoint on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + Cloud region for the endpoint. + + To set the region attribute: + ▸ provide the argument endpoint on the command line with a fully + specified name; + ▸ provide the argument --region on the command line; + ▸ set the property ai/region; + ▸ choose one from the prompted list of available regions. + +REQUIRED FLAGS + --json-request=JSON_REQUEST + Path to a local file containing the body of a JSON request. + + An example of a JSON request: + + { + "method_name": "my.method.Predict", + "input": "my request bytes" + } + + This flag accepts "-" for stdin. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud ai endpoints direct-raw-predict + + $ gcloud alpha ai endpoints direct-raw-predict + diff --git a/gcloud/beta/ai/endpoints/help b/gcloud/beta/ai/endpoints/help index 6d84b3b61..1a317b09c 100644 --- a/gcloud/beta/ai/endpoints/help +++ b/gcloud/beta/ai/endpoints/help @@ -34,6 +34,12 @@ COMMANDS describe (BETA) Describe an existing Vertex AI endpoint. + direct-predict + (BETA) Run Vertex AI online direct prediction. + + direct-raw-predict + (BETA) Run Vertex AI online direct raw prediction. + explain (BETA) Request an online explanation from an Vertex AI endpoint. @@ -46,6 +52,12 @@ COMMANDS raw-predict (BETA) Run Vertex AI online raw prediction. + stream-direct-predict + (BETA) Run Vertex AI online stream direct prediction. + + stream-direct-raw-predict + (BETA) Run Vertex AI online stream direct raw prediction. + stream-raw-predict (BETA) Run Vertex AI online stream raw prediction. diff --git a/gcloud/beta/ai/endpoints/stream-direct-predict b/gcloud/beta/ai/endpoints/stream-direct-predict new file mode 100644 index 000000000..2fb17701e --- /dev/null +++ b/gcloud/beta/ai/endpoints/stream-direct-predict @@ -0,0 +1,84 @@ +NAME + gcloud beta ai endpoints stream-direct-predict - run Vertex AI online + stream direct prediction + +SYNOPSIS + gcloud beta ai endpoints stream-direct-predict (ENDPOINT : --region=REGION) + --json-request=JSON_REQUEST [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) gcloud beta ai endpoints stream-direct-predict sends a stream direct + prediction request to Vertex AI endpoint for the given inputs. The request + limit is 10MB. + +EXAMPLES + To stream direct predict against an endpoint 123 under project example in + region us-central1, run: + + $ gcloud beta ai endpoints stream-direct-predict 123 \ + --project=example --region=us-central1 --json-request=input.json + +POSITIONAL ARGUMENTS + Endpoint resource - The endpoint to do online stream direct prediction. + The arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument endpoint on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + ENDPOINT + ID of the endpoint or fully qualified identifier for the endpoint. + + To set the name attribute: + ▸ provide the argument endpoint on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + Cloud region for the endpoint. + + To set the region attribute: + ▸ provide the argument endpoint on the command line with a fully + specified name; + ▸ provide the argument --region on the command line; + ▸ set the property ai/region; + ▸ choose one from the prompted list of available regions. + +REQUIRED FLAGS + --json-request=JSON_REQUEST + Path to a local file containing the body of a JSON request. + + An example of a JSON request: + + { + "inputs": [ + {"dtype": "STRING", shape: [1], "string_val": ["hello world"]}, + {"dtype": "INT32", shape: [1], "int_val": [42]} + ] + } + + This flag accepts "-" for stdin. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud ai endpoints stream-direct-predict + + $ gcloud alpha ai endpoints stream-direct-predict + diff --git a/gcloud/beta/ai/endpoints/stream-direct-raw-predict b/gcloud/beta/ai/endpoints/stream-direct-raw-predict new file mode 100644 index 000000000..a661be976 --- /dev/null +++ b/gcloud/beta/ai/endpoints/stream-direct-raw-predict @@ -0,0 +1,83 @@ +NAME + gcloud beta ai endpoints stream-direct-raw-predict - run Vertex AI online + stream direct raw prediction + +SYNOPSIS + gcloud beta ai endpoints stream-direct-raw-predict + (ENDPOINT : --region=REGION) --json-request=JSON_REQUEST + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) gcloud beta ai endpoints stream-direct-raw-predict sends a stream + direct raw prediction request to Vertex AI endpoint for the given input. + The request limit is 10MB. + +EXAMPLES + To stream direct raw predict against an endpoint 123 under project example + in region us-central1, run: + + $ gcloud beta ai endpoints stream-direct-raw-predict 123 \ + --project=example --region=us-central1 --json-request=input.json + +POSITIONAL ARGUMENTS + Endpoint resource - The endpoint to do online stream direct raw + prediction. The arguments in this group can be used to specify the + attributes of this resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument endpoint on the command line with a fully + specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + ENDPOINT + ID of the endpoint or fully qualified identifier for the endpoint. + + To set the name attribute: + ▸ provide the argument endpoint on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --region=REGION + Cloud region for the endpoint. + + To set the region attribute: + ▸ provide the argument endpoint on the command line with a fully + specified name; + ▸ provide the argument --region on the command line; + ▸ set the property ai/region; + ▸ choose one from the prompted list of available regions. + +REQUIRED FLAGS + --json-request=JSON_REQUEST + Path to a local file containing the body of a JSON request. + + An example of a JSON request: + + { + "method_name": "my.method.Predict", + "input": "my request bytes" + } + + This flag accepts "-" for stdin. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud ai endpoints stream-direct-raw-predict + + $ gcloud alpha ai endpoints stream-direct-raw-predict + diff --git a/gcloud/beta/alloydb/clusters/create b/gcloud/beta/alloydb/clusters/create index 41967f40c..991a70478 100644 --- a/gcloud/beta/alloydb/clusters/create +++ b/gcloud/beta/alloydb/clusters/create @@ -7,6 +7,7 @@ SYNOPSIS --region=REGION [--allocated-ip-range-name=ALLOCATED_IP_RANGE_NAME] [--async] [--database-version=DATABASE_VERSION] [--enable-private-service-connect] [--network=NETWORK] + [--subscription-type=SUBSCRIPTION_TYPE] [--continuous-backup-recovery-window-days=RECOVERY_PERIOD --enable-continuous-backup [--continuous-backup-encryption-key=CONTINUOUS_BACKUP_ENCRYPTION_KEY @@ -71,6 +72,10 @@ OPTIONAL FLAGS network, 'testsharednetwork', this would be of the form:--network=projects/testproject/global/networks/testsharednetwork + --subscription-type=SUBSCRIPTION_TYPE + Subscription type of the cluster. SUBSCRIPTION_TYPE must be one of: + STANDARD, TRIAL. + Continuous Backup configuration. If unspecified, continuous backups are enabled. diff --git a/gcloud/beta/alloydb/clusters/update b/gcloud/beta/alloydb/clusters/update index 21c24ec9c..99de7aad6 100644 --- a/gcloud/beta/alloydb/clusters/update +++ b/gcloud/beta/alloydb/clusters/update @@ -4,6 +4,7 @@ NAME SYNOPSIS gcloud beta alloydb clusters update CLUSTER --region=REGION [--async] + [--subscription-type=SUBSCRIPTION_TYPE] [--clear-automated-backup | --disable-automated-backup | --automated-backup-days-of-week=[DAYS_OF_WEEK,...] --automated-backup-start-times=[START_TIMES,...] @@ -43,6 +44,10 @@ OPTIONAL FLAGS Return immediately, without waiting for the operation in progress to complete. + --subscription-type=SUBSCRIPTION_TYPE + Subscription type of the cluster. SUBSCRIPTION_TYPE must be one of: + STANDARD, TRIAL. + Automated backup policy. At most one of these can be specified: diff --git a/gcloud/beta/compute/instance-templates/create b/gcloud/beta/compute/instance-templates/create index 10f8ee13f..3029108cb 100644 --- a/gcloud/beta/compute/instance-templates/create +++ b/gcloud/beta/compute/instance-templates/create @@ -40,6 +40,7 @@ SYNOPSIS [--network-tier=NETWORK_TIER] [--partner-metadata=[NAMESPACE/KEY=VALUE,...]] [--partner-metadata-from-file=LOCAL_FILE_PATH] + [--performance-monitoring-unit=PERFORMANCE_MONITORING_UNIT] [--post-key-revocation-action-type=POLICY] [--preemptible] [--private-ipv6-google-access-type=PRIVATE_IPV6_GOOGLE_ACCESS_TYPE] [--private-network-ip=PRIVATE_NETWORK_IP] @@ -755,6 +756,18 @@ FLAGS --partner-metadata-from-file=LOCAL_FILE_PATH Path to a local json file containing partner metadata. + --performance-monitoring-unit=PERFORMANCE_MONITORING_UNIT + The type of performance monitoring counters (PMCs) to enable in the + instance. PERFORMANCE_MONITORING_UNIT must be one of: + + architectural + This enables architecturally defined non-last level cache (LLC) + events. + enhanced + This enables most documented core/L2 and LLC events. + standard + This enables most documented core/L2 events. + --post-key-revocation-action-type=POLICY Specifies the behavior of the instance when the KMS key of one of its attached disks is revoked. The default is noop. POLICY must be one of: diff --git a/gcloud/beta/compute/instances/bulk/create b/gcloud/beta/compute/instances/bulk/create index 68e78d85f..428363d96 100644 --- a/gcloud/beta/compute/instances/bulk/create +++ b/gcloud/beta/compute/instances/bulk/create @@ -36,6 +36,7 @@ SYNOPSIS [--network-performance-configs=[PROPERTY=VALUE,...]] [--network-tier=NETWORK_TIER] [--per-instance-hostnames=[INSTANCE_NAME=INSTANCE_HOSTNAME,...]] + [--performance-monitoring-unit=PERFORMANCE_MONITORING_UNIT] [--post-key-revocation-action-type=POLICY] [--preemptible] [--provisioning-model=PROVISIONING_MODEL] [--resource-manager-tags=[KEY=VALUE,...]] @@ -663,6 +664,18 @@ OPTIONAL FLAGS the global DNS, and [INSTANCE_NAME].[ZONE].c.[PROJECT_ID].internal when using zonal DNS. + --performance-monitoring-unit=PERFORMANCE_MONITORING_UNIT + The type of performance monitoring counters (PMCs) to enable in the + instance. PERFORMANCE_MONITORING_UNIT must be one of: + + architectural + This enables architecturally defined non-last level cache (LLC) + events. + enhanced + This enables most documented core/L2 and LLC events. + standard + This enables most documented core/L2 events. + --post-key-revocation-action-type=POLICY Specifies the behavior of the instance when the KMS key of one of its attached disks is revoked. The default is noop. POLICY must be one of: diff --git a/gcloud/beta/compute/instances/create b/gcloud/beta/compute/instances/create index cb88239e6..f5997739b 100644 --- a/gcloud/beta/compute/instances/create +++ b/gcloud/beta/compute/instances/create @@ -41,6 +41,7 @@ SYNOPSIS [--network-tier=NETWORK_TIER] [--node-project=NODE_PROJECT] [--partner-metadata=[NAMESPACE/KEY=VALUE,...]] [--partner-metadata-from-file=LOCAL_FILE_PATH] + [--performance-monitoring-unit=PERFORMANCE_MONITORING_UNIT] [--post-key-revocation-action-type=POLICY] [--preemptible] [--private-ipv6-google-access-type=PRIVATE_IPV6_GOOGLE_ACCESS_TYPE] [--private-network-ip=PRIVATE_NETWORK_IP] @@ -816,6 +817,18 @@ FLAGS --partner-metadata-from-file=LOCAL_FILE_PATH Path to a local json file containing partner metadata. + --performance-monitoring-unit=PERFORMANCE_MONITORING_UNIT + The type of performance monitoring counters (PMCs) to enable in the + instance. PERFORMANCE_MONITORING_UNIT must be one of: + + architectural + This enables architecturally defined non-last level cache (LLC) + events. + enhanced + This enables most documented core/L2 and LLC events. + standard + This enables most documented core/L2 events. + --post-key-revocation-action-type=POLICY Specifies the behavior of the instance when the KMS key of one of its attached disks is revoked. The default is noop. POLICY must be one of: diff --git a/gcloud/beta/dataflow/yaml/run b/gcloud/beta/dataflow/yaml/run index 004eef86d..54f524274 100644 --- a/gcloud/beta/dataflow/yaml/run +++ b/gcloud/beta/dataflow/yaml/run @@ -5,6 +5,7 @@ SYNOPSIS gcloud beta dataflow yaml run JOB_NAME (--yaml-pipeline=YAML_PIPELINE | --yaml-pipeline-file=YAML_PIPELINE_FILE) + [--jinja-variables=JSON_OBJECT] [--pipeline-options=[OPTIONS=VALUE;OPTION=VALUE,...]] [--region=REGION_ID] [GCLOUD_WIDE_FLAG ...] @@ -33,6 +34,9 @@ REQUIRED FLAGS file or a URL beginning with 'gs://'.) OPTIONAL FLAGS + --jinja-variables=JSON_OBJECT + Jinja2 variables to be used in reifying the yaml. + --pipeline-options=[OPTIONS=VALUE;OPTION=VALUE,...] Pipeline options to pass to the job. diff --git a/gcloud/beta/datastream/streams/create b/gcloud/beta/datastream/streams/create index 4a3af27c0..addb803d8 100644 --- a/gcloud/beta/datastream/streams/create +++ b/gcloud/beta/datastream/streams/create @@ -227,7 +227,10 @@ REQUIRED FLAGS Path to a YAML (or JSON) file containing the configuration for Google BigQuery Destination Config. - The JSON file is formatted as follows: + The YAML (or JSON) file should be formatted as follows: + + BigQuery configuration with source hierarchy datasets and merge + mode (merge mode is by default): { "sourceHierarchyDatasets": { @@ -237,6 +240,29 @@ REQUIRED FLAGS "kmsKeyName": "projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{cryptoKey}" } }, + "merge": {} + "dataFreshness": "3600s" + } + + BigQuery configuration with source hierarchy datasets and append + only mode: { + "sourceHierarchyDatasets": { + "datasetTemplate": { + "location": "us-central1", + "datasetIdPrefix": "my_prefix", + "kmsKeyName": "projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{cryptoKey}" + } + }, + "appendOnly": {} + } + + BigQuery configuration with single target dataset and merge mode: + + { + "singleTargetDataset": { + "datasetId": "projectId:my_dataset" + }, + "merge": {} "dataFreshness": "3600s" } diff --git a/gcloud/beta/datastream/streams/update b/gcloud/beta/datastream/streams/update index c1e938bfc..b80ce5fa1 100644 --- a/gcloud/beta/datastream/streams/update +++ b/gcloud/beta/datastream/streams/update @@ -264,7 +264,10 @@ FLAGS Path to a YAML (or JSON) file containing the configuration for Google BigQuery Destination Config. - The JSON file is formatted as follows: + The YAML (or JSON) file should be formatted as follows: + + BigQuery configuration with source hierarchy datasets and merge mode + (merge mode is by default): { "sourceHierarchyDatasets": { @@ -274,6 +277,29 @@ FLAGS "kmsKeyName": "projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{cryptoKey}" } }, + "merge": {} + "dataFreshness": "3600s" + } + + BigQuery configuration with source hierarchy datasets and append only + mode: { + "sourceHierarchyDatasets": { + "datasetTemplate": { + "location": "us-central1", + "datasetIdPrefix": "my_prefix", + "kmsKeyName": "projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{cryptoKey}" + } + }, + "appendOnly": {} + } + + BigQuery configuration with single target dataset and merge mode: + + { + "singleTargetDataset": { + "datasetId": "projectId:my_dataset" + }, + "merge": {} "dataFreshness": "3600s" } diff --git a/gcloud/beta/functions/deploy b/gcloud/beta/functions/deploy index ce8fbd40b..d0570bed0 100644 --- a/gcloud/beta/functions/deploy +++ b/gcloud/beta/functions/deploy @@ -3,11 +3,9 @@ NAME SYNOPSIS gcloud beta functions deploy (NAME : --region=REGION) - [--[no-]allow-unauthenticated] - [--build-service-account=BUILD_SERVICE_ACCOUNT] - [--concurrency=CONCURRENCY] [--docker-registry=DOCKER_REGISTRY] - [--egress-settings=EGRESS_SETTINGS] [--entry-point=ENTRY_POINT] - [--gen2] [--ignore-file=IGNORE_FILE] + [--[no-]allow-unauthenticated] [--concurrency=CONCURRENCY] + [--docker-registry=DOCKER_REGISTRY] [--egress-settings=EGRESS_SETTINGS] + [--entry-point=ENTRY_POINT] [--gen2] [--ignore-file=IGNORE_FILE] [--ingress-settings=INGRESS_SETTINGS] [--retry] [--run-service-account=RUN_SERVICE_ACCOUNT] [--runtime=RUNTIME] [--runtime-update-policy=RUNTIME_UPDATE_POLICY] @@ -22,6 +20,8 @@ SYNOPSIS | --set-build-env-vars=[KEY=VALUE,...] | --remove-build-env-vars=[KEY,...] --update-build-env-vars=[KEY=VALUE,...]] + [--build-service-account=BUILD_SERVICE_ACCOUNT + | --clear-build-service-account] [--build-worker-pool=BUILD_WORKER_POOL | --clear-build-worker-pool] [--clear-docker-repository | --docker-repository=DOCKER_REPOSITORY] [--clear-env-vars | --env-vars-file=FILE_PATH @@ -104,15 +104,6 @@ FLAGS without checking authentication. Use --allow-unauthenticated to enable and --no-allow-unauthenticated to disable. - --build-service-account=BUILD_SERVICE_ACCOUNT - IAM service account whose credentials will be used for the build step. - Must be of the format - projects/${PROJECT_ID}/serviceAccounts/${ACCOUNT_EMAIL_ADDRESS} or - {ACCOUNT_EMAIL_ADDRESS}. - - If not provided, the function will use the project's default service - account for Cloud Build. - --concurrency=CONCURRENCY Set the maximum number of concurrent requests allowed per container instance. Leave concurrency unspecified to receive the server default @@ -340,6 +331,19 @@ FLAGS --update-build-env-vars=[KEY=VALUE,...] List of key-value pairs to set as build environment variables. + At most one of these can be specified: + + --build-service-account=BUILD_SERVICE_ACCOUNT + IAM service account whose credentials will be used for the build + step. Must be of the format + projects/${PROJECT_ID}/serviceAccounts/${ACCOUNT_EMAIL_ADDRESS}. + + If not provided, the function will use the project's default service + account for Cloud Build. + + --clear-build-service-account + Clears the build service account field. + At most one of these can be specified: --build-worker-pool=BUILD_WORKER_POOL diff --git a/gcloud/beta/kms/keys/create b/gcloud/beta/kms/keys/create index a4b083e19..8077ad390 100644 --- a/gcloud/beta/kms/keys/create +++ b/gcloud/beta/kms/keys/create @@ -3,7 +3,9 @@ NAME SYNOPSIS gcloud beta kms keys create (KEY : --keyring=KEYRING --location=LOCATION) - --purpose=PURPOSE [--crypto-key-backend=CRYPTO_KEY_BACKEND] + --purpose=PURPOSE + [--allowed-access-reasons=[ALLOWED_ACCESS_REASONS,...]] + [--crypto-key-backend=CRYPTO_KEY_BACKEND] [--default-algorithm=DEFAULT_ALGORITHM] [--destroy-scheduled-duration=DESTROY_SCHEDULED_DURATION] [--import-only] [--labels=[KEY=VALUE,...]] @@ -53,6 +55,12 @@ DESCRIPTION The flag --crypto-key-backend defines the resource name for the backend where the key resides. Required for external-vpc keys. + The optional flag --allowed-access-reasons defines the Key Access + Justifications Policy for the key, and is specified as a comma separated + list of zero or more justification codes defined in + https://cloud.google.com/assured-workloads/key-access-justifications/docs/justification-codes. + The key must be enrolled in Key Access Justifications to use this flag. + EXAMPLES The following command creates a key named frodo with protection level software within the keyring fellowship and location us-east1: @@ -113,6 +121,16 @@ EXAMPLES --crypto-key-backend="projects/$(gcloud config get project)/ locations/us-central1/ekmConnections/eagles" + The following command creates a key named arwen with protection level + software within the keyring fellowship and location us-east1 with a Key + Access Justifications policy that allows access reasons + customer-initiated-access and google-initiated-system-operation: + + $ gcloud beta kms keys create arwen --location=us-east1 \ + --keyring=fellowship --purpose=encryption \ + --allowed-access-reasons=customer-initiated-access,\ + google-initiated-system-operation + POSITIONAL ARGUMENTS Key resource - The KMS key resource. The arguments in this group can be used to specify the attributes of this resource. (NOTE) Some attributes @@ -157,6 +175,21 @@ REQUIRED FLAGS raw-encryption. OPTIONAL FLAGS + --allowed-access-reasons=[ALLOWED_ACCESS_REASONS,...] + The list of allowed Key Access Justifications access reasons on the + key. The key must be enrolled in Key Access Justifications to configure + this field. By default, this field is absent, and all justification + codes are allowed. For more information about justification codes, see + https://cloud.google.com/assured-workloads/key-access-justifications/docs/justification-codes. + ALLOWED_ACCESS_REASONS must be one of: + customer-authorized-workflow-servicing, customer-initiated-access, + customer-initiated-support, google-initiated-review, + google-initiated-service, google-initiated-system-operation, + google-response-to-production-alert, + modified-customer-initiated-access, + modified-google-initiated-system-operation, reason-not-expected, + reason-unspecified, third-party-data-request. + --crypto-key-backend=CRYPTO_KEY_BACKEND The resource name of the backend environment where the key material for all CryptoKeyVersions associated with this CryptoKey reside and where diff --git a/gcloud/beta/kms/keys/update b/gcloud/beta/kms/keys/update index e35be2d3e..c598ff430 100644 --- a/gcloud/beta/kms/keys/update +++ b/gcloud/beta/kms/keys/update @@ -3,10 +3,13 @@ NAME SYNOPSIS gcloud beta kms keys update (KEY : --keyring=KEYRING --location=LOCATION) + [--allowed-access-reasons=[ALLOWED_ACCESS_REASONS,...]] [--default-algorithm=DEFAULT_ALGORITHM] [--next-rotation-time=NEXT_ROTATION_TIME] - [--primary-version=PRIMARY_VERSION] [--remove-rotation-schedule] - [--rotation-period=ROTATION_PERIOD] [--update-labels=[KEY=VALUE,...]] + [--primary-version=PRIMARY_VERSION] + [--remove-key-access-justifications-policy] + [--remove-rotation-schedule] [--rotation-period=ROTATION_PERIOD] + [--update-labels=[KEY=VALUE,...]] [--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -31,6 +34,20 @@ DESCRIPTION 4. Update the primary version for the given key with primary-version flag. + 5. Update the Key Access Justifications policy for the given key with + allowed-access-reasons flag to allow specified reasons. The key must be + enrolled in Key Access Justifications to use this flag. + + 6. Remove the Key Access Justifications policy for the given key with + remove-key-access-justifications-policy flag. The key must be enrolled in + Key Access Justifications to use this flag. + + 7. Update the Key Access Justifications policy for the given key with + allowed_access_reasons flag to allow zero access reasons. This effectively + disables the key, because a policy is configured to reject all access + reasons. The key must be enrolled in Key Access Justifications to use this + flag. + EXAMPLES The following command sets a 30 day rotation period for the key named frodo within the keyring fellowship and location global starting at the specified @@ -74,6 +91,29 @@ EXAMPLES --keyring=fellowship \ --default-algorithm=rsa-decrypt-oaep-4096-sha256 + The following command updates the Key Access Justifications policy for the + key named frodo within the keyring fellowship and location global to allow + only customer-initiated-access and google-initiated-system-operation: + + $ gcloud beta kms keys update frodo --location=global \ + --keyring=fellowship \ + --allowed-access-reasons=customer-initiated-access,\ + google-initiated-system-operation + + The following command removes the Key Access Justifications policy for the + key named frodo within the keyring fellowship and location global, which + results in all access reasons being allowed: + + $ gcloud beta kms keys update frodo --location=global \ + --keyring=fellowship --remove-key-access-justifications-policy + + The following command updates the Key Access Justifications policy for the + key named frodo within the keyring fellowship and location global to allow + only zero access reasons, effectively disabling the key: + + $ gcloud beta kms keys update frodo --location=global \ + --keyring=fellowship --allowed-access-reasons= + POSITIONAL ARGUMENTS Key resource - The KMS key resource. The arguments in this group can be used to specify the attributes of this resource. (NOTE) Some attributes @@ -112,6 +152,21 @@ POSITIONAL ARGUMENTS ▸ provide the argument --location on the command line. FLAGS + --allowed-access-reasons=[ALLOWED_ACCESS_REASONS,...] + The list of allowed Key Access Justifications access reasons on the + key. The key must be enrolled in Key Access Justifications to configure + this field. By default, this field is absent, and all justification + codes are allowed. For more information about justification codes, see + https://cloud.google.com/assured-workloads/key-access-justifications/docs/justification-codes. + ALLOWED_ACCESS_REASONS must be one of: + customer-authorized-workflow-servicing, customer-initiated-access, + customer-initiated-support, google-initiated-review, + google-initiated-service, google-initiated-system-operation, + google-response-to-production-alert, + modified-customer-initiated-access, + modified-google-initiated-system-operation, reason-not-expected, + reason-unspecified, third-party-data-request. + --default-algorithm=DEFAULT_ALGORITHM The default algorithm for the crypto key. For more information about choosing an algorithm, see @@ -138,6 +193,10 @@ FLAGS --primary-version=PRIMARY_VERSION Primary version to make primary. + --remove-key-access-justifications-policy + Removes the Key Access Justifications policy on the key, making all + justification codes allowed. + --remove-rotation-schedule Remove any existing rotation schedule on the key. diff --git a/gcloud/compute/instance-templates/create b/gcloud/compute/instance-templates/create index d64c8a353..b6ca98b9d 100644 --- a/gcloud/compute/instance-templates/create +++ b/gcloud/compute/instance-templates/create @@ -31,7 +31,9 @@ SYNOPSIS [--min-cpu-platform=PLATFORM] [--min-node-cpu=MIN_NODE_CPU] [--network=NETWORK] [--network-interface=[PROPERTY=VALUE,...]] [--network-performance-configs=[PROPERTY=VALUE,...]] - [--network-tier=NETWORK_TIER] [--preemptible] + [--network-tier=NETWORK_TIER] + [--performance-monitoring-unit=PERFORMANCE_MONITORING_UNIT] + [--preemptible] [--private-ipv6-google-access-type=PRIVATE_IPV6_GOOGLE_ACCESS_TYPE] [--private-network-ip=PRIVATE_NETWORK_IP] [--provisioning-model=PROVISIONING_MODEL] [--region=REGION] @@ -652,6 +654,18 @@ FLAGS NETWORK_TIER must be one of: PREMIUM, STANDARD, FIXED_STANDARD. The default value is PREMIUM. + --performance-monitoring-unit=PERFORMANCE_MONITORING_UNIT + The type of performance monitoring counters (PMCs) to enable in the + instance. PERFORMANCE_MONITORING_UNIT must be one of: + + architectural + This enables architecturally defined non-last level cache (LLC) + events. + enhanced + This enables most documented core/L2 and LLC events. + standard + This enables most documented core/L2 events. + --preemptible If provided, instances will be preemptible and time-limited. Instances might be preempted to free up resources for standard VM instances, and diff --git a/gcloud/compute/instances/bulk/create b/gcloud/compute/instances/bulk/create index 15942b845..b18fed011 100644 --- a/gcloud/compute/instances/bulk/create +++ b/gcloud/compute/instances/bulk/create @@ -32,6 +32,7 @@ SYNOPSIS [--network-interface=[PROPERTY=VALUE,...]] [--network-performance-configs=[PROPERTY=VALUE,...]] [--network-tier=NETWORK_TIER] + [--performance-monitoring-unit=PERFORMANCE_MONITORING_UNIT] [--post-key-revocation-action-type=POLICY] [--preemptible] [--provisioning-model=PROVISIONING_MODEL] [--resource-manager-tags=[KEY=VALUE,...]] @@ -606,6 +607,18 @@ OPTIONAL FLAGS NETWORK_TIER must be one of: PREMIUM, STANDARD, FIXED_STANDARD. The default value is PREMIUM. + --performance-monitoring-unit=PERFORMANCE_MONITORING_UNIT + The type of performance monitoring counters (PMCs) to enable in the + instance. PERFORMANCE_MONITORING_UNIT must be one of: + + architectural + This enables architecturally defined non-last level cache (LLC) + events. + enhanced + This enables most documented core/L2 and LLC events. + standard + This enables most documented core/L2 events. + --post-key-revocation-action-type=POLICY Specifies the behavior of the instance when the KMS key of one of its attached disks is revoked. The default is noop. POLICY must be one of: diff --git a/gcloud/compute/instances/create b/gcloud/compute/instances/create index 906297c02..4f2f5d321 100644 --- a/gcloud/compute/instances/create +++ b/gcloud/compute/instances/create @@ -36,6 +36,7 @@ SYNOPSIS [--network=NETWORK] [--network-interface=[PROPERTY=VALUE,...]] [--network-performance-configs=[PROPERTY=VALUE,...]] [--network-tier=NETWORK_TIER] [--node-project=NODE_PROJECT] + [--performance-monitoring-unit=PERFORMANCE_MONITORING_UNIT] [--preemptible] [--private-ipv6-google-access-type=PRIVATE_IPV6_GOOGLE_ACCESS_TYPE] [--private-network-ip=PRIVATE_NETWORK_IP] @@ -744,6 +745,18 @@ FLAGS The name of the project with shared sole tenant node groups to create an instance in. + --performance-monitoring-unit=PERFORMANCE_MONITORING_UNIT + The type of performance monitoring counters (PMCs) to enable in the + instance. PERFORMANCE_MONITORING_UNIT must be one of: + + architectural + This enables architecturally defined non-last level cache (LLC) + events. + enhanced + This enables most documented core/L2 and LLC events. + standard + This enables most documented core/L2 events. + --preemptible If provided, instances will be preemptible and time-limited. Instances might be preempted to free up resources for standard VM instances, and diff --git a/gcloud/dataflow/yaml/run b/gcloud/dataflow/yaml/run index cbae12158..30d23a9ee 100644 --- a/gcloud/dataflow/yaml/run +++ b/gcloud/dataflow/yaml/run @@ -5,6 +5,7 @@ SYNOPSIS gcloud dataflow yaml run JOB_NAME (--yaml-pipeline=YAML_PIPELINE | --yaml-pipeline-file=YAML_PIPELINE_FILE) + [--jinja-variables=JSON_OBJECT] [--pipeline-options=[OPTIONS=VALUE;OPTION=VALUE,...]] [--region=REGION_ID] [GCLOUD_WIDE_FLAG ...] @@ -32,6 +33,9 @@ REQUIRED FLAGS file or a URL beginning with 'gs://'.) OPTIONAL FLAGS + --jinja-variables=JSON_OBJECT + Jinja2 variables to be used in reifying the yaml. + --pipeline-options=[OPTIONS=VALUE;OPTION=VALUE,...] Pipeline options to pass to the job. diff --git a/gcloud/datastream/streams/create b/gcloud/datastream/streams/create index f153b5a54..8a2994b4b 100644 --- a/gcloud/datastream/streams/create +++ b/gcloud/datastream/streams/create @@ -242,7 +242,10 @@ REQUIRED FLAGS Path to a YAML (or JSON) file containing the configuration for Google BigQuery Destination Config. - The JSON file is formatted as follows: + The YAML (or JSON) file should be formatted as follows: + + BigQuery configuration with source hierarchy datasets and merge + mode (merge mode is by default): { "sourceHierarchyDatasets": { @@ -252,6 +255,29 @@ REQUIRED FLAGS "kmsKeyName": "projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{cryptoKey}" } }, + "merge": {} + "dataFreshness": "3600s" + } + + BigQuery configuration with source hierarchy datasets and append + only mode: { + "sourceHierarchyDatasets": { + "datasetTemplate": { + "location": "us-central1", + "datasetIdPrefix": "my_prefix", + "kmsKeyName": "projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{cryptoKey}" + } + }, + "appendOnly": {} + } + + BigQuery configuration with single target dataset and merge mode: + + { + "singleTargetDataset": { + "datasetId": "projectId:my_dataset" + }, + "merge": {} "dataFreshness": "3600s" } diff --git a/gcloud/datastream/streams/update b/gcloud/datastream/streams/update index 90da72831..91075380e 100644 --- a/gcloud/datastream/streams/update +++ b/gcloud/datastream/streams/update @@ -260,7 +260,10 @@ FLAGS Path to a YAML (or JSON) file containing the configuration for Google BigQuery Destination Config. - The JSON file is formatted as follows: + The YAML (or JSON) file should be formatted as follows: + + BigQuery configuration with source hierarchy datasets and merge mode + (merge mode is by default): { "sourceHierarchyDatasets": { @@ -270,6 +273,29 @@ FLAGS "kmsKeyName": "projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{cryptoKey}" } }, + "merge": {} + "dataFreshness": "3600s" + } + + BigQuery configuration with source hierarchy datasets and append only + mode: { + "sourceHierarchyDatasets": { + "datasetTemplate": { + "location": "us-central1", + "datasetIdPrefix": "my_prefix", + "kmsKeyName": "projects/{project}/locations/{location}/keyRings/{key_ring}/cryptoKeys/{cryptoKey}" + } + }, + "appendOnly": {} + } + + BigQuery configuration with single target dataset and merge mode: + + { + "singleTargetDataset": { + "datasetId": "projectId:my_dataset" + }, + "merge": {} "dataFreshness": "3600s" } diff --git a/gcloud/functions/deploy b/gcloud/functions/deploy index 705cc8093..ce4a7b2c3 100644 --- a/gcloud/functions/deploy +++ b/gcloud/functions/deploy @@ -3,11 +3,9 @@ NAME SYNOPSIS gcloud functions deploy (NAME : --region=REGION) - [--[no-]allow-unauthenticated] - [--build-service-account=BUILD_SERVICE_ACCOUNT] - [--concurrency=CONCURRENCY] [--docker-registry=DOCKER_REGISTRY] - [--egress-settings=EGRESS_SETTINGS] [--entry-point=ENTRY_POINT] - [--gen2] [--ignore-file=IGNORE_FILE] + [--[no-]allow-unauthenticated] [--concurrency=CONCURRENCY] + [--docker-registry=DOCKER_REGISTRY] [--egress-settings=EGRESS_SETTINGS] + [--entry-point=ENTRY_POINT] [--gen2] [--ignore-file=IGNORE_FILE] [--ingress-settings=INGRESS_SETTINGS] [--retry] [--run-service-account=RUN_SERVICE_ACCOUNT] [--runtime=RUNTIME] [--runtime-update-policy=RUNTIME_UPDATE_POLICY] @@ -22,6 +20,8 @@ SYNOPSIS | --set-build-env-vars=[KEY=VALUE,...] | --remove-build-env-vars=[KEY,...] --update-build-env-vars=[KEY=VALUE,...]] + [--build-service-account=BUILD_SERVICE_ACCOUNT + | --clear-build-service-account] [--build-worker-pool=BUILD_WORKER_POOL | --clear-build-worker-pool] [--clear-docker-repository | --docker-repository=DOCKER_REPOSITORY] [--clear-env-vars | --env-vars-file=FILE_PATH @@ -104,15 +104,6 @@ FLAGS without checking authentication. Use --allow-unauthenticated to enable and --no-allow-unauthenticated to disable. - --build-service-account=BUILD_SERVICE_ACCOUNT - IAM service account whose credentials will be used for the build step. - Must be of the format - projects/${PROJECT_ID}/serviceAccounts/${ACCOUNT_EMAIL_ADDRESS} or - {ACCOUNT_EMAIL_ADDRESS}. - - If not provided, the function will use the project's default service - account for Cloud Build. - --concurrency=CONCURRENCY Set the maximum number of concurrent requests allowed per container instance. Leave concurrency unspecified to receive the server default @@ -340,6 +331,19 @@ FLAGS --update-build-env-vars=[KEY=VALUE,...] List of key-value pairs to set as build environment variables. + At most one of these can be specified: + + --build-service-account=BUILD_SERVICE_ACCOUNT + IAM service account whose credentials will be used for the build + step. Must be of the format + projects/${PROJECT_ID}/serviceAccounts/${ACCOUNT_EMAIL_ADDRESS}. + + If not provided, the function will use the project's default service + account for Cloud Build. + + --clear-build-service-account + Clears the build service account field. + At most one of these can be specified: --build-worker-pool=BUILD_WORKER_POOL diff --git a/gcloud/kms/keys/create b/gcloud/kms/keys/create index 9323d3509..f18bf2e98 100644 --- a/gcloud/kms/keys/create +++ b/gcloud/kms/keys/create @@ -3,7 +3,9 @@ NAME SYNOPSIS gcloud kms keys create (KEY : --keyring=KEYRING --location=LOCATION) - --purpose=PURPOSE [--crypto-key-backend=CRYPTO_KEY_BACKEND] + --purpose=PURPOSE + [--allowed-access-reasons=[ALLOWED_ACCESS_REASONS,...]] + [--crypto-key-backend=CRYPTO_KEY_BACKEND] [--default-algorithm=DEFAULT_ALGORITHM] [--destroy-scheduled-duration=DESTROY_SCHEDULED_DURATION] [--import-only] [--labels=[KEY=VALUE,...]] @@ -53,6 +55,12 @@ DESCRIPTION The flag --crypto-key-backend defines the resource name for the backend where the key resides. Required for external-vpc keys. + The optional flag --allowed-access-reasons defines the Key Access + Justifications Policy for the key, and is specified as a comma separated + list of zero or more justification codes defined in + https://cloud.google.com/assured-workloads/key-access-justifications/docs/justification-codes. + The key must be enrolled in Key Access Justifications to use this flag. + EXAMPLES The following command creates a key named frodo with protection level software within the keyring fellowship and location us-east1: @@ -113,6 +121,16 @@ EXAMPLES --crypto-key-backend="projects/$(gcloud config get project)/ locations/us-central1/ekmConnections/eagles" + The following command creates a key named arwen with protection level + software within the keyring fellowship and location us-east1 with a Key + Access Justifications policy that allows access reasons + customer-initiated-access and google-initiated-system-operation: + + $ gcloud kms keys create arwen --location=us-east1 \ + --keyring=fellowship --purpose=encryption \ + --allowed-access-reasons=customer-initiated-access,\ + google-initiated-system-operation + POSITIONAL ARGUMENTS Key resource - The KMS key resource. The arguments in this group can be used to specify the attributes of this resource. (NOTE) Some attributes @@ -157,6 +175,21 @@ REQUIRED FLAGS raw-encryption. OPTIONAL FLAGS + --allowed-access-reasons=[ALLOWED_ACCESS_REASONS,...] + The list of allowed Key Access Justifications access reasons on the + key. The key must be enrolled in Key Access Justifications to configure + this field. By default, this field is absent, and all justification + codes are allowed. For more information about justification codes, see + https://cloud.google.com/assured-workloads/key-access-justifications/docs/justification-codes. + ALLOWED_ACCESS_REASONS must be one of: + customer-authorized-workflow-servicing, customer-initiated-access, + customer-initiated-support, google-initiated-review, + google-initiated-service, google-initiated-system-operation, + google-response-to-production-alert, + modified-customer-initiated-access, + modified-google-initiated-system-operation, reason-not-expected, + reason-unspecified, third-party-data-request. + --crypto-key-backend=CRYPTO_KEY_BACKEND The resource name of the backend environment where the key material for all CryptoKeyVersions associated with this CryptoKey reside and where diff --git a/gcloud/kms/keys/update b/gcloud/kms/keys/update index b6cfcd1d5..a1478f0e6 100644 --- a/gcloud/kms/keys/update +++ b/gcloud/kms/keys/update @@ -3,10 +3,13 @@ NAME SYNOPSIS gcloud kms keys update (KEY : --keyring=KEYRING --location=LOCATION) + [--allowed-access-reasons=[ALLOWED_ACCESS_REASONS,...]] [--default-algorithm=DEFAULT_ALGORITHM] [--next-rotation-time=NEXT_ROTATION_TIME] - [--primary-version=PRIMARY_VERSION] [--remove-rotation-schedule] - [--rotation-period=ROTATION_PERIOD] [--update-labels=[KEY=VALUE,...]] + [--primary-version=PRIMARY_VERSION] + [--remove-key-access-justifications-policy] + [--remove-rotation-schedule] [--rotation-period=ROTATION_PERIOD] + [--update-labels=[KEY=VALUE,...]] [--clear-labels | --remove-labels=[KEY,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -31,6 +34,20 @@ DESCRIPTION 4. Update the primary version for the given key with primary-version flag. + 5. Update the Key Access Justifications policy for the given key with + allowed-access-reasons flag to allow specified reasons. The key must be + enrolled in Key Access Justifications to use this flag. + + 6. Remove the Key Access Justifications policy for the given key with + remove-key-access-justifications-policy flag. The key must be enrolled in + Key Access Justifications to use this flag. + + 7. Update the Key Access Justifications policy for the given key with + allowed_access_reasons flag to allow zero access reasons. This effectively + disables the key, because a policy is configured to reject all access + reasons. The key must be enrolled in Key Access Justifications to use this + flag. + EXAMPLES The following command sets a 30 day rotation period for the key named frodo within the keyring fellowship and location global starting at the specified @@ -74,6 +91,29 @@ EXAMPLES --keyring=fellowship \ --default-algorithm=rsa-decrypt-oaep-4096-sha256 + The following command updates the Key Access Justifications policy for the + key named frodo within the keyring fellowship and location global to allow + only customer-initiated-access and google-initiated-system-operation: + + $ gcloud kms keys update frodo --location=global \ + --keyring=fellowship \ + --allowed-access-reasons=customer-initiated-access,\ + google-initiated-system-operation + + The following command removes the Key Access Justifications policy for the + key named frodo within the keyring fellowship and location global, which + results in all access reasons being allowed: + + $ gcloud kms keys update frodo --location=global \ + --keyring=fellowship --remove-key-access-justifications-policy + + The following command updates the Key Access Justifications policy for the + key named frodo within the keyring fellowship and location global to allow + only zero access reasons, effectively disabling the key: + + $ gcloud kms keys update frodo --location=global \ + --keyring=fellowship --allowed-access-reasons= + POSITIONAL ARGUMENTS Key resource - The KMS key resource. The arguments in this group can be used to specify the attributes of this resource. (NOTE) Some attributes @@ -112,6 +152,21 @@ POSITIONAL ARGUMENTS ▸ provide the argument --location on the command line. FLAGS + --allowed-access-reasons=[ALLOWED_ACCESS_REASONS,...] + The list of allowed Key Access Justifications access reasons on the + key. The key must be enrolled in Key Access Justifications to configure + this field. By default, this field is absent, and all justification + codes are allowed. For more information about justification codes, see + https://cloud.google.com/assured-workloads/key-access-justifications/docs/justification-codes. + ALLOWED_ACCESS_REASONS must be one of: + customer-authorized-workflow-servicing, customer-initiated-access, + customer-initiated-support, google-initiated-review, + google-initiated-service, google-initiated-system-operation, + google-response-to-production-alert, + modified-customer-initiated-access, + modified-google-initiated-system-operation, reason-not-expected, + reason-unspecified, third-party-data-request. + --default-algorithm=DEFAULT_ALGORITHM The default algorithm for the crypto key. For more information about choosing an algorithm, see @@ -138,6 +193,10 @@ FLAGS --primary-version=PRIMARY_VERSION Primary version to make primary. + --remove-key-access-justifications-policy + Removes the Key Access Justifications policy on the key, making all + justification codes allowed. + --remove-rotation-schedule Remove any existing rotation schedule on the key. diff --git a/gcloud/network-connectivity/hubs/create b/gcloud/network-connectivity/hubs/create index 917f2e40c..c4a7f3db7 100644 --- a/gcloud/network-connectivity/hubs/create +++ b/gcloud/network-connectivity/hubs/create @@ -62,8 +62,8 @@ FLAGS --preset-topology=PRESET_TOPOLOGY Topology of the hub. Only applicable when --policy-mode=PRESET. - PRESET_TOPOLOGY must be one of: mesh, preset-topology-unspecified, - star. + PRESET_TOPOLOGY must be one of: hybrid-inspection, mesh, + preset-topology-unspecified, star. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/network-connectivity/spokes/linked-interconnect-attachments/create b/gcloud/network-connectivity/spokes/linked-interconnect-attachments/create index e0e1f2822..72fa72d98 100644 --- a/gcloud/network-connectivity/spokes/linked-interconnect-attachments/create +++ b/gcloud/network-connectivity/spokes/linked-interconnect-attachments/create @@ -6,8 +6,10 @@ SYNOPSIS gcloud network-connectivity spokes linked-interconnect-attachments create (SPOKE : --region=REGION) --hub=HUB --interconnect-attachments=[INTERCONNECT_ATTACHMENTS,...] [--async] - [--description=DESCRIPTION] [--labels=[KEY=VALUE,...]] - [--site-to-site-data-transfer] [GCLOUD_WIDE_FLAG ...] + [--description=DESCRIPTION] + [--include-import-ranges=[INCLUDE_IMPORT_RANGES,...]] + [--labels=[KEY=VALUE,...]] [--site-to-site-data-transfer] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION Create a new VLAN attachment spoke @@ -74,6 +76,11 @@ OPTIONAL FLAGS --description=DESCRIPTION Description of the spoke to create. + --include-import-ranges=[INCLUDE_IMPORT_RANGES,...] + IP address range(s) allowed to be imported from hub subnets. Only + ``ALL_IPV4_RANGES`` can be added to the list. If it's empty, the spoke + does not import any subnets from the hub. + --labels=[KEY=VALUE,...] List of label KEY=VALUE pairs to add. diff --git a/gcloud/network-connectivity/spokes/linked-router-appliances/create b/gcloud/network-connectivity/spokes/linked-router-appliances/create index 0d7c48ee3..4f44ccdde 100644 --- a/gcloud/network-connectivity/spokes/linked-router-appliances/create +++ b/gcloud/network-connectivity/spokes/linked-router-appliances/create @@ -6,8 +6,10 @@ SYNOPSIS gcloud network-connectivity spokes linked-router-appliances create (SPOKE : --region=REGION) --hub=HUB --router-appliance=[instance=INSTANCE],[ip=IP] [--async] - [--description=DESCRIPTION] [--labels=[KEY=VALUE,...]] - [--site-to-site-data-transfer] [GCLOUD_WIDE_FLAG ...] + [--description=DESCRIPTION] + [--include-import-ranges=[INCLUDE_IMPORT_RANGES,...]] + [--labels=[KEY=VALUE,...]] [--site-to-site-data-transfer] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION Create a new Router appliance spoke @@ -81,6 +83,11 @@ OPTIONAL FLAGS --description=DESCRIPTION Description of the spoke to create. + --include-import-ranges=[INCLUDE_IMPORT_RANGES,...] + IP address range(s) allowed to be imported from hub subnets. Only + ``ALL_IPV4_RANGES`` can be added to the list. If it's empty, the spoke + does not import any subnets from the hub. + --labels=[KEY=VALUE,...] List of label KEY=VALUE pairs to add. diff --git a/gcloud/network-connectivity/spokes/linked-vpn-tunnels/create b/gcloud/network-connectivity/spokes/linked-vpn-tunnels/create index 132aa5692..81175f99a 100644 --- a/gcloud/network-connectivity/spokes/linked-vpn-tunnels/create +++ b/gcloud/network-connectivity/spokes/linked-vpn-tunnels/create @@ -5,8 +5,10 @@ NAME SYNOPSIS gcloud network-connectivity spokes linked-vpn-tunnels create (SPOKE : --region=REGION) --hub=HUB --vpn-tunnels=[VPN_TUNNELS,...] - [--async] [--description=DESCRIPTION] [--labels=[KEY=VALUE,...]] - [--site-to-site-data-transfer] [GCLOUD_WIDE_FLAG ...] + [--async] [--description=DESCRIPTION] + [--include-import-ranges=[INCLUDE_IMPORT_RANGES,...]] + [--labels=[KEY=VALUE,...]] [--site-to-site-data-transfer] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION Create a new VPN spoke @@ -72,6 +74,11 @@ OPTIONAL FLAGS --description=DESCRIPTION Description of the spoke to create. + --include-import-ranges=[INCLUDE_IMPORT_RANGES,...] + IP address range(s) allowed to be imported from hub subnets. Only + ``ALL_IPV4_RANGES`` can be added to the list. If it's empty, the spoke + does not import any subnets from the hub. + --labels=[KEY=VALUE,...] List of label KEY=VALUE pairs to add.