gcloud: Wed May 18 08:41:01 UTC 2022

gcloud/alpha/compute/firewall-rules/migrate

@@ -4,7 +4,9 @@ NAME
 
 SYNOPSIS
     gcloud alpha compute firewall-rules migrate --source-network=SOURCE_NETWORK
-        --target-firewall-policy=TARGET_FIREWALL_POLICY [GCLOUD_WIDE_FLAG ...]
+        (--export-tag-mapping
+          | --target-firewall-policy=TARGET_FIREWALL_POLICY)
+        [--tag-mapping-file=TAG_MAPPING_FILE] [GCLOUD_WIDE_FLAG ...]
 
 DESCRIPTION
     (ALPHA) gcloud alpha compute firewall-rules migrate is used to create a new
@@ -23,9 +25,20 @@ REQUIRED FLAGS
      --source-network=SOURCE_NETWORK
         The VPC Network for which the migration should be performed.
 
-     --target-firewall-policy=TARGET_FIREWALL_POLICY
-        Name of the new Network Firewall Policy used to store the migration
-        result.
+     Exactly one of these must be specified:
+
+       --export-tag-mapping
+          If set, migration tool will inspect all VPC Firewalls attached to
+          SOURCE_NETWORK, collect all source and target tags, and store them in
+          TAG_MAPPING_FILE.
+
+       --target-firewall-policy=TARGET_FIREWALL_POLICY
+          Name of the new Network Firewall Policy used to store the migration
+          result.
+
+OPTIONAL FLAGS
+     --tag-mapping-file=TAG_MAPPING_FILE
+        Path to a JSON file with legacy to secure tag mapping.
 
 GCLOUD WIDE FLAGS
     These flags are available to all commands: --access-token-file, --account,