diff --git a/gcloud/_version b/gcloud/_version index d011b7149..39f74e644 100644 --- a/gcloud/_version +++ b/gcloud/_version @@ -1,8 +1,8 @@ -Google Cloud SDK 450.0.0 -alpha 2023.10.06 -beta 2023.10.06 +Google Cloud SDK 451.0.1 +alpha 2023.10.18 +beta 2023.10.18 bq 2.0.98 bundled-python3-unix 3.9.16 -core 2023.10.06 +core 2023.10.18 gcloud-crc32c 1.0.0 gsutil 5.26 diff --git a/gcloud/ai/endpoints/deploy-model b/gcloud/ai/endpoints/deploy-model index 96ffc8f9b..037529fcb 100644 --- a/gcloud/ai/endpoints/deploy-model +++ b/gcloud/ai/endpoints/deploy-model @@ -69,9 +69,10 @@ OPTIONAL FLAGS selected. type - The type of the accelerator. Choices are 'nvidia-l4', - 'nvidia-tesla-a100', 'nvidia-tesla-k80', 'nvidia-tesla-p100', - 'nvidia-tesla-p4', 'nvidia-tesla-t4', 'nvidia-tesla-v100'. + The type of the accelerator. Choices are 'nvidia-a100-80gb', + 'nvidia-l4', 'nvidia-tesla-a100', 'nvidia-tesla-k80', + 'nvidia-tesla-p100', 'nvidia-tesla-p4', 'nvidia-tesla-t4', + 'nvidia-tesla-v100'. count The number of accelerators to attach to each machine running the diff --git a/gcloud/alpha/assured/workloads/violations/acknowledge b/gcloud/alpha/assured/workloads/violations/acknowledge index e0d4c5eee..17d98479f 100644 --- a/gcloud/alpha/assured/workloads/violations/acknowledge +++ b/gcloud/alpha/assured/workloads/violations/acknowledge @@ -6,7 +6,7 @@ SYNOPSIS gcloud alpha assured workloads violations acknowledge (VIOLATION : --location=LOCATION --organization=ORGANIZATION --workload=WORKLOAD) --comment=COMMENT - [GCLOUD_WIDE_FLAG ...] + [--acknowledge-type=ACKNOWLEDGE_TYPE] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Acknowledge an existing Assured Workloads compliance violation. @@ -64,6 +64,13 @@ REQUIRED FLAGS --comment=COMMENT Business justification used added to acknowledge a violation. +OPTIONAL FLAGS + --acknowledge-type=ACKNOWLEDGE_TYPE + the acknowledge type for specified violation, which is one of: + SINGLE_VIOLATION - to acknowledge specified violation, + EXISTING_CHILD_RESOURCE_VIOLATIONS - to acknowledge specified org + policy violation and all associated child resource violations. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/backup-dr/help b/gcloud/alpha/backup-dr/help new file mode 100644 index 000000000..e7c6f854b --- /dev/null +++ b/gcloud/alpha/backup-dr/help @@ -0,0 +1,32 @@ +NAME + gcloud alpha backup-dr - backup and DR command group + +SYNOPSIS + gcloud alpha backup-dr GROUP [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Backup and DR command group. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +GROUPS + GROUP is one of the following: + + locations + (ALPHA) Manage Backup and DR locations. + + management-servers + (ALPHA) Manage Backup and DR management server. + + operations + (ALPHA) Manage Backup and DR operations. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/backup-dr/locations/help b/gcloud/alpha/backup-dr/locations/help new file mode 100644 index 000000000..d67aeb425 --- /dev/null +++ b/gcloud/alpha/backup-dr/locations/help @@ -0,0 +1,26 @@ +NAME + gcloud alpha backup-dr locations - manage Backup and DR locations + +SYNOPSIS + gcloud alpha backup-dr locations COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Manage Backup and DR locations. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + list + (ALPHA) List available Backup and DR locations. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/backup-dr/locations/list b/gcloud/alpha/backup-dr/locations/list new file mode 100644 index 000000000..822d6d2d0 --- /dev/null +++ b/gcloud/alpha/backup-dr/locations/list @@ -0,0 +1,67 @@ +NAME + gcloud alpha backup-dr locations list - list available Backup and DR + locations + +SYNOPSIS + gcloud alpha backup-dr locations list [--filter=EXPRESSION] [--limit=LIMIT] + [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) List available Backup and DR locations. + +EXAMPLES + To list all locations, run: + + $ gcloud alpha backup-dr locations list + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the backupdr/v1 API. The full documentation for this API + can be found at: https://cloud.google.com/backup-disaster-recovery + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/backup-dr/management-servers/create b/gcloud/alpha/backup-dr/management-servers/create new file mode 100644 index 000000000..c8948bdb0 --- /dev/null +++ b/gcloud/alpha/backup-dr/management-servers/create @@ -0,0 +1,76 @@ +NAME + gcloud alpha backup-dr management-servers create - create a new Management + Server + +SYNOPSIS + gcloud alpha backup-dr management-servers create + (MANAGEMENT_SERVER : --location=LOCATION) --network=NETWORK [--async] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Create a new Management Server. + +EXAMPLES + To create a new management server sample-ms in project sample-project and + location us-central1 with network sample-network, run: + + $ gcloud alpha backup-dr management-servers create sample-ms \ + --project=sample-project --location=us-central1 \ + --network=projects/sample-project/global/networks/sample-network + +POSITIONAL ARGUMENTS + Management Server resource - Management Server to create. The arguments in + this group can be used to specify the attributes of this resource. (NOTE) + Some attributes are not given arguments in this group but can be set in + other ways. + + To set the project attribute: + ◆ provide the argument management_server on the command line with a + fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + MANAGEMENT_SERVER + ID of the Management Server or fully qualified identifier for the + Management Server. + + To set the name attribute: + ▸ provide the argument management_server on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location of the Management Server. + + To set the location attribute: + ▸ provide the argument management_server on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + +REQUIRED FLAGS + --network=NETWORK + Name of an existing VPC network with private service access configured + +OPTIONAL FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. The default is True. Enabled by default, use --no-async to + disable. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/backup-dr/management-servers/delete b/gcloud/alpha/backup-dr/management-servers/delete new file mode 100644 index 000000000..747d8dbc8 --- /dev/null +++ b/gcloud/alpha/backup-dr/management-servers/delete @@ -0,0 +1,71 @@ +NAME + gcloud alpha backup-dr management-servers delete - delete a given + Management Server + +SYNOPSIS + gcloud alpha backup-dr management-servers delete + (MANAGEMENT_SERVER : --location=LOCATION) [--async] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Delete a given Management Server. + +EXAMPLES + To delete a management server sample-ms in project sample-project and + location us-central1 , run: + + $ gcloud alpha backup-dr management-servers delete sample-ms \ + --project=sample-project --location=us-central1 + +POSITIONAL ARGUMENTS + Management Server resource - Management Server to delete. The arguments in + this group can be used to specify the attributes of this resource. (NOTE) + Some attributes are not given arguments in this group but can be set in + other ways. + + To set the project attribute: + ◆ provide the argument management_server on the command line with a + fully specified name; + ◆ provide the argument --project on the command line; + ◆ set the property core/project. + + This must be specified. + + MANAGEMENT_SERVER + ID of the Management Server or fully qualified identifier for the + Management Server. + + To set the name attribute: + ▸ provide the argument management_server on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + The location of the Management Server. + + To set the location attribute: + ▸ provide the argument management_server on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. The default is True. Enabled by default, use --no-async to + disable. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/backup-dr/management-servers/describe b/gcloud/alpha/backup-dr/management-servers/describe new file mode 100644 index 000000000..f6459092c --- /dev/null +++ b/gcloud/alpha/backup-dr/management-servers/describe @@ -0,0 +1,67 @@ +NAME + gcloud alpha backup-dr management-servers describe - describe a management + server + +SYNOPSIS + gcloud alpha backup-dr management-servers describe + (MANAGEMENT_SERVER : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Describe a management server. + +EXAMPLES + To view details for management server 'MANAGEMENT_SERVER', run: + + $ gcloud alpha backup-dr management-servers describe \ + MANAGEMENT_SERVER + +POSITIONAL ARGUMENTS + ManagementServer resource - Management Server to describe. The arguments + in this group can be used to specify the attributes of this resource. + (NOTE) Some attributes are not given arguments in this group but can be + set in other ways. + + To set the project attribute: + ◆ provide the argument management_server on the command line with a + fully specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + MANAGEMENT_SERVER + ID of the managementServer or fully qualified identifier for the + managementServer. + + To set the management_server attribute: + ▸ provide the argument management_server on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Location ID of the resource. + + To set the location attribute: + ▸ provide the argument management_server on the command line with a + fully specified name; + ▸ provide the argument --location on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the backupdr/v1 API. The full documentation for this API + can be found at: https://cloud.google.com/backup-disaster-recovery + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/backup-dr/management-servers/help b/gcloud/alpha/backup-dr/management-servers/help new file mode 100644 index 000000000..db04b252d --- /dev/null +++ b/gcloud/alpha/backup-dr/management-servers/help @@ -0,0 +1,36 @@ +NAME + gcloud alpha backup-dr management-servers - manage Backup and DR management + server + +SYNOPSIS + gcloud alpha backup-dr management-servers COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Manage Backup and DR management server. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + create + (ALPHA) Create a new Management Server. + + delete + (ALPHA) Delete a given Management Server. + + describe + (ALPHA) Describe a management server. + + list + (ALPHA) List Management Servers. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/backup-dr/management-servers/list b/gcloud/alpha/backup-dr/management-servers/list new file mode 100644 index 000000000..e0e6acba4 --- /dev/null +++ b/gcloud/alpha/backup-dr/management-servers/list @@ -0,0 +1,90 @@ +NAME + gcloud alpha backup-dr management-servers list - list Management Servers + +SYNOPSIS + gcloud alpha backup-dr management-servers list [--location=LOCATION] + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Displays all managment servers in a project. + +EXAMPLES + To list management servers for all locations, run: + + $ gcloud alpha backup-dr management-servers list + + To list all management servers in a location my-location, run: + + $ gcloud alpha backup-dr management-servers list \ + --location=my-location + +FLAGS + Location resource - Location to list management servers from. This + represents a Cloud resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ use default global location with a fully specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. + + To set the location attribute: + ▸ provide the argument --location on the command line; + ▸ use default global location . + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the backupdr/v1 API. The full documentation for this API + can be found at: https://cloud.google.com/backup-disaster-recovery + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/backup-dr/operations/describe b/gcloud/alpha/backup-dr/operations/describe new file mode 100644 index 000000000..27661adc5 --- /dev/null +++ b/gcloud/alpha/backup-dr/operations/describe @@ -0,0 +1,65 @@ +NAME + gcloud alpha backup-dr operations describe - describe a Backup and DR + operation + +SYNOPSIS + gcloud alpha backup-dr operations describe + (OPERATION : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Describe a Backup and DR operation. + +EXAMPLES + To view details for operation 'OPERATION', run: + + $ gcloud alpha backup-dr operations describe OPERATION + +POSITIONAL ARGUMENTS + Operation resource - Backup and DR operation to describe. The arguments in + this group can be used to specify the attributes of this resource. (NOTE) + Some attributes are not given arguments in this group but can be set in + other ways. + + To set the project attribute: + ◆ provide the argument operation on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + OPERATION + ID of the operation or fully qualified identifier for the operation. + + To set the operation attribute: + ▸ provide the argument operation on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Location ID of the resource. + + To set the location attribute: + ▸ provide the argument operation on the command line with a fully + specified name; + ▸ provide the argument --location on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the backupdr/v1 API. The full documentation for this API + can be found at: https://cloud.google.com/backup-disaster-recovery + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/backup-dr/operations/help b/gcloud/alpha/backup-dr/operations/help new file mode 100644 index 000000000..53bda03f4 --- /dev/null +++ b/gcloud/alpha/backup-dr/operations/help @@ -0,0 +1,29 @@ +NAME + gcloud alpha backup-dr operations - manage Backup and DR operations + +SYNOPSIS + gcloud alpha backup-dr operations COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Manage Backup and DR operations. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + describe + (ALPHA) Describe a Backup and DR operation. + + list + (ALPHA) List Backup and DR operations. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/backup-dr/operations/list b/gcloud/alpha/backup-dr/operations/list new file mode 100644 index 000000000..82713b932 --- /dev/null +++ b/gcloud/alpha/backup-dr/operations/list @@ -0,0 +1,89 @@ +NAME + gcloud alpha backup-dr operations list - list Backup and DR operations + +SYNOPSIS + gcloud alpha backup-dr operations list --location=LOCATION + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) List Backup and DR operations. + +EXAMPLES + To list all operations in a location my-location, run: + + $ gcloud alpha backup-dr operations list --location=my-location + + To list all operations in all locations, run: + + $ gcloud alpha backup-dr operations list --location=- + +REQUIRED FLAGS + Location resource - Location to list operations from. This represents a + Cloud resource. (NOTE) Some attributes are not given arguments in this + group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. + + To set the location attribute: + ▸ provide the argument --location on the command line. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the backupdr/v1 API. The full documentation for this API + can be found at: https://cloud.google.com/backup-disaster-recovery + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/compute/backend-services/create b/gcloud/alpha/compute/backend-services/create index 8e55fa92b..060de5870 100644 --- a/gcloud/alpha/compute/backend-services/create +++ b/gcloud/alpha/compute/backend-services/create @@ -339,8 +339,8 @@ FLAGS as part of a connection tracking policy. --ip-address-selection-policy=IP_ADDRESS_SELECTION_POLICY - Specifies preference of traffic to the backend (from the proxy and from - the client for proxyless gRPC). + Specifies a preference for traffic sent from the proxy to the backend + (or from the client to the backend for proxyless gRPC). Can only be set if load balancing scheme is INTERNAL_SELF_MANAGED, INTERNAL_MANAGED or EXTERNAL_MANAGED. @@ -348,18 +348,18 @@ FLAGS The possible values are: IPV4_ONLY - Only send IPv4 traffic to the backends of the Backend Service + Only send IPv4 traffic to the backends of the backend service, regardless of traffic from the client to the proxy. Only IPv4 - health-checks are used to check the health of the backends. + health checks are used to check the health of the backends. PREFER_IPV6 - Prioritize the connection to the endpoints IPv6 address over its IPv4 + Prioritize the connection to the endpoint's IPv6 address over its IPv4 address (provided there is a healthy IPv6 address). IPV6_ONLY - Only send IPv6 traffic to the backends of the Backend Service + Only send IPv6 traffic to the backends of the backend service, regardless of traffic from the client to the proxy. Only IPv6 - health-checks are used to check the health of the backends. + health checks are used to check the health of the backends. IP_ADDRESS_SELECTION_POLICY must be one of: IPV4_ONLY, PREFER_IPV6, IPV6_ONLY. diff --git a/gcloud/alpha/compute/backend-services/list-usable b/gcloud/alpha/compute/backend-services/list-usable index 445d228af..c5e0bf9db 100644 --- a/gcloud/alpha/compute/backend-services/list-usable +++ b/gcloud/alpha/compute/backend-services/list-usable @@ -9,7 +9,7 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) $ gcloud alpha compute backend-services list-usable retrieves the + (ALPHA) gcloud alpha compute backend-services list-usable retrieves the list of backend service resources in the specified project for which you have compute.backendService.get and compute.backendService.use permissions. This command is useful when you're creating load balancers in a Shared VPC @@ -85,7 +85,9 @@ NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early - access allowlist. This variant is also available: + access allowlist. These variants are also available: + + $ gcloud compute backend-services list-usable $ gcloud beta compute backend-services list-usable diff --git a/gcloud/alpha/compute/backend-services/update b/gcloud/alpha/compute/backend-services/update index 022e95195..a43933c0b 100644 --- a/gcloud/alpha/compute/backend-services/update +++ b/gcloud/alpha/compute/backend-services/update @@ -258,8 +258,8 @@ FLAGS as part of a connection tracking policy. --ip-address-selection-policy=IP_ADDRESS_SELECTION_POLICY - Specifies preference of traffic to the backend (from the proxy and from - the client for proxyless gRPC). + Specifies a preference for traffic sent from the proxy to the backend + (or from the client to the backend for proxyless gRPC). Can only be set if load balancing scheme is INTERNAL_SELF_MANAGED, INTERNAL_MANAGED or EXTERNAL_MANAGED. @@ -267,18 +267,18 @@ FLAGS The possible values are: IPV4_ONLY - Only send IPv4 traffic to the backends of the Backend Service + Only send IPv4 traffic to the backends of the backend service, regardless of traffic from the client to the proxy. Only IPv4 - health-checks are used to check the health of the backends. + health checks are used to check the health of the backends. PREFER_IPV6 - Prioritize the connection to the endpoints IPv6 address over its IPv4 + Prioritize the connection to the endpoint's IPv6 address over its IPv4 address (provided there is a healthy IPv6 address). IPV6_ONLY - Only send IPv6 traffic to the backends of the Backend Service + Only send IPv6 traffic to the backends of the backend service, regardless of traffic from the client to the proxy. Only IPv6 - health-checks are used to check the health of the backends. + health checks are used to check the health of the backends. IP_ADDRESS_SELECTION_POLICY must be one of: IPV4_ONLY, PREFER_IPV6, IPV6_ONLY. diff --git a/gcloud/alpha/compute/network-attachments/help b/gcloud/alpha/compute/network-attachments/help index 42d2b7359..1233c1bd4 100644 --- a/gcloud/alpha/compute/network-attachments/help +++ b/gcloud/alpha/compute/network-attachments/help @@ -28,6 +28,9 @@ COMMANDS list (ALPHA) List Google Compute Engine network attachments. + update + (ALPHA) Update a Google Compute Engine network attachment. + NOTES This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct diff --git a/gcloud/alpha/compute/network-attachments/update b/gcloud/alpha/compute/network-attachments/update new file mode 100644 index 000000000..24e54bca5 --- /dev/null +++ b/gcloud/alpha/compute/network-attachments/update @@ -0,0 +1,72 @@ +NAME + gcloud alpha compute network-attachments update - update a Google Compute + Engine network attachment + +SYNOPSIS + gcloud alpha compute network-attachments update NAME + [--description=DESCRIPTION] [--producer-accept-list=[ACCEPT_LIST,...]] + [--producer-reject-list=[REJECT_LIST,...]] [--region=REGION] + [--subnets=SUBNETS,[SUBNETS,...]] [--subnets-region=SUBNETS_REGION] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) gcloud alpha compute network-attachments update is used to update + network attachments. A service consumer creates a network attachment to + make a network available to producers. Service producers use Private + Service Connect Interfaces to privately connect to the network attachment. + +POSITIONAL ARGUMENTS + NAME + Name of the network attachment to update. + +FLAGS + --description=DESCRIPTION + An optional, textual description for the network attachment. + + --producer-accept-list=[ACCEPT_LIST,...] + Projects that are allowed to connect to this network attachment. + + --producer-reject-list=[REJECT_LIST,...] + Projects that are not allowed to connect to this network attachment. + + --region=REGION + Region of the network attachment to update. If not specified, you might + be prompted to select a region (interactive mode only). + + To avoid prompting when this flag is omitted, you can set the + compute/region property: + + $ gcloud config set compute/region REGION + + A list of regions can be fetched by running: + + $ gcloud compute regions list + + To unset the property, run: + + $ gcloud config unset compute/region + + Alternatively, the region can be stored in the environment variable + CLOUDSDK_COMPUTE_REGION. + + --subnets=SUBNETS,[SUBNETS,...] + The subnetworks provided by the consumer for the producers + + --subnets-region=SUBNETS_REGION + Region of the subnetworks to operate on. Overrides the default + compute/region property value for this command invocation. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/compute/sole-tenancy/node-groups/create b/gcloud/alpha/compute/sole-tenancy/node-groups/create index 89402b0e1..ebca8d479 100644 --- a/gcloud/alpha/compute/sole-tenancy/node-groups/create +++ b/gcloud/alpha/compute/sole-tenancy/node-groups/create @@ -43,12 +43,14 @@ OPTIONAL FLAGS MAINTENANCE_INTERVAL must be one of: as-needed - VMs are eligible to receive infrastructure and hypervisor updates + hosts are eligible to receive infrastructure and hypervisor updates as they become available. recurrent - VMs receive infrastructure and hypervisor updates on a periodic - basis, minimizing the number of maintenance operations (live - migrations or terminations) on an individual VM. + hosts receive planned infrastructure and hypervisor updates on a + periodic basis, but not more frequently than every 28 days. This + minimizes the number of planned maintenance operations on + individual hosts and reduces the frequency of disruptions, both + live migrations and terminations, on individual VMs. --maintenance-policy=MAINTENANCE_POLICY Determines the maintenance behavior during host maintenance events. For diff --git a/gcloud/alpha/container/clusters/create b/gcloud/alpha/container/clusters/create index dd4a3c5f8..0a595024e 100644 --- a/gcloud/alpha/container/clusters/create +++ b/gcloud/alpha/container/clusters/create @@ -26,9 +26,10 @@ SYNOPSIS [--disk-size=DISK_SIZE] [--disk-type=DISK_TYPE] [--enable-autorepair] [--no-enable-autoupgrade] [--enable-cloud-logging] [--enable-cloud-monitoring] [--enable-cloud-run-alpha] - [--enable-confidential-nodes] [--enable-cost-allocation] - [--enable-dataplane-v2] [--enable-fleet] [--enable-fqdn-network-policy] - [--enable-gke-oidc] [--enable-google-cloud-access] [--enable-gvnic] + [--enable-confidential-nodes] [--enable-confidential-storage] + [--enable-cost-allocation] [--enable-dataplane-v2] [--enable-fleet] + [--enable-fqdn-network-policy] [--enable-gke-oidc] + [--enable-google-cloud-access] [--enable-gvnic] [--enable-identity-service] [--enable-image-streaming] [--enable-intra-node-visibility] [--enable-ip-alias] [--enable-kubernetes-alpha] @@ -41,6 +42,7 @@ SYNOPSIS [--enable-stackdriver-kubernetes] [--enable-vertical-pod-autoscaling] [--fleet-project=PROJECT_ID_OR_NUMBER] [--gateway-api=GATEWAY_API] [--identity-provider=IDENTITY_PROVIDER] [--image-type=IMAGE_TYPE] + [--in-transit-encryption=IN_TRANSIT_ENCRYPTION] [--ipv6-access-type=IPV6_ACCESS_TYPE] [--issue-client-certificate] [--istio-config=[auth=MTLS_PERMISSIVE,...]] [--labels=[KEY=VALUE,...]] [--linux-sysctls=KEY=VALUE,[KEY=VALUE,...]] [--logging=[COMPONENT,...]] @@ -484,6 +486,10 @@ FLAGS will create nodes using Confidential VM https://cloud.google.com/compute/confidential-vm/docs/about-cvm. + --enable-confidential-storage + Enable confidential storage for the cluster. Enabling Confidential + Storage will create boot disk with confidential mode + --enable-cost-allocation Enable the cost management feature. @@ -678,6 +684,11 @@ FLAGS $ gcloud container get-server-config + --in-transit-encryption=IN_TRANSIT_ENCRYPTION + Enable Dataplane V2 in-transit encryption. Dataplane v2 in-transit + encryption is disabled by default. IN_TRANSIT_ENCRYPTION must be one + of: inter-node-transparent, none. + --ipv6-access-type=IPV6_ACCESS_TYPE IPv6 access type of the subnetwork. Defaults to 'external'. IPV6_ACCESS_TYPE must be one of: external, internal. diff --git a/gcloud/alpha/container/clusters/update b/gcloud/alpha/container/clusters/update index 1310bb5de..01939202d 100644 --- a/gcloud/alpha/container/clusters/update +++ b/gcloud/alpha/container/clusters/update @@ -25,6 +25,7 @@ SYNOPSIS | --enable-vertical-pod-autoscaling | --fleet-project=PROJECT_ID_OR_NUMBER | --gateway-api=GATEWAY_API | --generate-password | --identity-provider=IDENTITY_PROVIDER + | --in-transit-encryption=IN_TRANSIT_ENCRYPTION | --logging-variant=LOGGING_VARIANT | --maintenance-window=START_TIME | --network-performance-configs=[PROPERTY1=VALUE1,...] | --notification-config=[pubsub=ENABLED|DISABLED, @@ -419,6 +420,11 @@ REQUIRED FLAGS --identity-provider=IDENTITY_PROVIDER Enable 3P identity provider on the cluster. + --in-transit-encryption=IN_TRANSIT_ENCRYPTION + Enable Dataplane V2 in-transit encryption. Dataplane v2 in-transit + encryption is disabled by default. IN_TRANSIT_ENCRYPTION must be one + of: inter-node-transparent, none. + --logging-variant=LOGGING_VARIANT Specifies the logging variant that will be deployed on all the nodes in the cluster. Valid logging variants are MAX_THROUGHPUT, DEFAULT. diff --git a/gcloud/alpha/container/node-pools/create b/gcloud/alpha/container/node-pools/create index d0a596891..c00be9de2 100644 --- a/gcloud/alpha/container/node-pools/create +++ b/gcloud/alpha/container/node-pools/create @@ -19,7 +19,8 @@ SYNOPSIS [--disk-type=DISK_TYPE] [--enable-autoprovisioning] [--enable-autorepair] [--no-enable-autoupgrade] [--enable-blue-green-upgrade] [--enable-confidential-nodes] - [--enable-gvnic] [--enable-image-streaming] [--enable-private-nodes] + [--enable-confidential-storage] [--enable-gvnic] + [--enable-image-streaming] [--enable-private-nodes] [--enable-surge-upgrade] [--image-type=IMAGE_TYPE] [--labels=[KEY=VALUE,...]] [--linux-sysctls=KEY=VALUE,[KEY=VALUE,...]] [--logging-variant=LOGGING_VARIANT] @@ -236,6 +237,10 @@ FLAGS Nodes will create nodes using Confidential VM https://cloud.google.com/compute/confidential-vm/docs/about-cvm. + --enable-confidential-storage + Enable confidential storage for the node pool. Enabling Confidential + Storage will create boot disk with confidential mode + --enable-gvnic Enable the use of GVNIC for this cluster. Requires re-creation of nodes using either a node-pool upgrade or node-pool creation. diff --git a/gcloud/alpha/filestore/instances/create b/gcloud/alpha/filestore/instances/create index b724149a5..bee6b81df 100644 --- a/gcloud/alpha/filestore/instances/create +++ b/gcloud/alpha/filestore/instances/create @@ -241,8 +241,7 @@ OPTIONAL FLAGS ENTERPRISE instances offer the features and availability needed for mission-critical workloads. high-scale-ssd - High Scale instances offer NFS storage system with expanded - capacity and performance scaling capabilities. Use ZONAL instead + High Scale SSD instance, an alias for ZONAL. Use ZONAL instead whenever possible. premium Premium Filestore instance, An alias for BASIC_SSD. Use BASIC_SSD diff --git a/gcloud/alpha/iam/service-accounts/delete b/gcloud/alpha/iam/service-accounts/delete index d147d5a9e..a0ba63f1f 100644 --- a/gcloud/alpha/iam/service-accounts/delete +++ b/gcloud/alpha/iam/service-accounts/delete @@ -26,7 +26,8 @@ FLAGS --recommend=BOOLEAN_VALUE If true, checks Active Assist recommendation for the risk level of service account deletion, and issues a warning in the prompt. Optional - flag is set to false/no by default. + flag is set to false/no by default. For details see + https://cloud.google.com/recommender/docs/change-risk-recommendations GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/iam/workload-identity-pools/providers/create-oidc b/gcloud/alpha/iam/workload-identity-pools/providers/create-oidc index b953a4501..2774574f2 100644 --- a/gcloud/alpha/iam/workload-identity-pools/providers/create-oidc +++ b/gcloud/alpha/iam/workload-identity-pools/providers/create-oidc @@ -217,9 +217,9 @@ OPTIONAL FLAGS "use": "sig", "kid": "", "n": "", - "e": "" - "x": "" - "y": "" + "e": "", + "x": "", + "y": "", "crv": "" } ] diff --git a/gcloud/alpha/iam/workload-identity-pools/providers/update-oidc b/gcloud/alpha/iam/workload-identity-pools/providers/update-oidc index 295142c10..41ac03aee 100644 --- a/gcloud/alpha/iam/workload-identity-pools/providers/update-oidc +++ b/gcloud/alpha/iam/workload-identity-pools/providers/update-oidc @@ -216,9 +216,9 @@ FLAGS "use": "sig", "kid": "", "n": "", - "e": "" - "x": "" - "y": "" + "e": "", + "x": "", + "y": "", "crv": "" } ] diff --git a/gcloud/alpha/kms/raw-decrypt b/gcloud/alpha/kms/raw-decrypt index bd170e41b..d821d7d20 100644 --- a/gcloud/alpha/kms/raw-decrypt +++ b/gcloud/alpha/kms/raw-decrypt @@ -3,12 +3,11 @@ NAME SYNOPSIS gcloud alpha kms raw-decrypt --ciphertext-file=CIPHERTEXT_FILE - --plaintext-file=PLAINTEXT_FILE + --plaintext-file=PLAINTEXT_FILE --version=VERSION [--additional-authenticated-data-file=ADDITIONAL_AUTHENTICATED_DATA_FILE] [--initialization-vector-file=INITIALIZATION_VECTOR_FILE] [--key=KEY] [--keyring=KEYRING] [--location=LOCATION] - [--skip-integrity-verification] [--version=VERSION] - [GCLOUD_WIDE_FLAG ...] + [--skip-integrity-verification] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) gcloud alpha kms raw-decrypt decrypts the given ciphertext file @@ -54,6 +53,9 @@ REQUIRED FLAGS --plaintext-file=PLAINTEXT_FILE File path of the plaintext file to store the decrypted data. + --version=VERSION + Version to use for decryption. + OPTIONAL FLAGS --additional-authenticated-data-file=ADDITIONAL_AUTHENTICATED_DATA_FILE File path to the optional file containing the additional authenticated @@ -75,9 +77,6 @@ OPTIONAL FLAGS --skip-integrity-verification Skip integrity verification on request and response API fields. - --version=VERSION - Version to use for decryption. - GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/kms/raw-encrypt b/gcloud/alpha/kms/raw-encrypt index a10517ddc..bbdee2496 100644 --- a/gcloud/alpha/kms/raw-encrypt +++ b/gcloud/alpha/kms/raw-encrypt @@ -3,12 +3,11 @@ NAME SYNOPSIS gcloud alpha kms raw-encrypt --ciphertext-file=CIPHERTEXT_FILE - --plaintext-file=PLAINTEXT_FILE + --plaintext-file=PLAINTEXT_FILE --version=VERSION [--additional-authenticated-data-file=ADDITIONAL_AUTHENTICATED_DATA_FILE] [--initialization-vector-file=INITIALIZATION_VECTOR_FILE] [--key=KEY] [--keyring=KEYRING] [--location=LOCATION] - [--skip-integrity-verification] [--version=VERSION] - [GCLOUD_WIDE_FLAG ...] + [--skip-integrity-verification] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (ALPHA) Encrypts the given plaintext file using the given CryptoKey @@ -73,6 +72,9 @@ REQUIRED FLAGS --plaintext-file=PLAINTEXT_FILE File path of the plaintext file to encrypt. + --version=VERSION + Version to use for encryption. + OPTIONAL FLAGS --additional-authenticated-data-file=ADDITIONAL_AUTHENTICATED_DATA_FILE File path to the optional file containing the additional authenticated @@ -94,9 +96,6 @@ OPTIONAL FLAGS --skip-integrity-verification Skip integrity verification on request and response API fields. - --version=VERSION - Version to use for encryption. - GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/alpha/projects/delete b/gcloud/alpha/projects/delete index e67ab79d0..2c60cff57 100644 --- a/gcloud/alpha/projects/delete +++ b/gcloud/alpha/projects/delete @@ -31,7 +31,8 @@ FLAGS --recommend=BOOLEAN_VALUE If true, checks Active Assist recommendation for the risk level of project deletion, and issues a warning in the prompt. Optional flag is - set to false/no by default. + set to false/no by default. For details see + https://cloud.google.com/recommender/docs/change-risk-recommendations GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/projects/remove-iam-policy-binding b/gcloud/alpha/projects/remove-iam-policy-binding index 3ec31bfad..2b3491937 100644 --- a/gcloud/alpha/projects/remove-iam-policy-binding +++ b/gcloud/alpha/projects/remove-iam-policy-binding @@ -92,7 +92,8 @@ OPTIONAL FLAGS --recommend=BOOLEAN_VALUE If true, checks Active Assist recommendation for the risk level of IAM policy binding removal, and issues a warning in the prompt. Optional - flag is set to false/no by default. + flag is set to false/no by default. For details see + https://cloud.google.com/recommender/docs/change-risk-recommendations At most one of these can be specified: diff --git a/gcloud/alpha/run/deploy b/gcloud/alpha/run/deploy index a582854eb..3add95f8c 100644 --- a/gcloud/alpha/run/deploy +++ b/gcloud/alpha/run/deploy @@ -26,9 +26,12 @@ SYNOPSIS --add-custom-audiences=[CUSTOM-AUDIENCES,...] | --clear-custom-audiences | --remove-custom-audiences=[CUSTOM-AUDIENCES,...] - | --set-custom-audiences=[CUSTOM-AUDIENCES,...] --args=[ARG,...] + | --set-custom-audiences=[CUSTOM-AUDIENCES,...] + --add-volume=[KEY=VALUE,...] --remove-volume=[VOLUME,...] + --add-volume-mount=[KEY=VALUE,...] --args=[ARG,...] --command=[COMMAND,...] --cpu=CPU --depends-on=[CONTAINER,...] - --memory=MEMORY --port=PORT --[no-]use-http2 --clear-env-vars + --memory=MEMORY --port=PORT + --remove-volume-mount=[MOUNT,...] --[no-]use-http2 --clear-env-vars | --env-vars-file=FILE_PATH | --set-env-vars=[KEY=VALUE,...] | --remove-env-vars=[KEY,...] --update-env-vars=[KEY=VALUE,...] --clear-secrets @@ -382,6 +385,48 @@ FLAGS Completely replace the current custom audiences with the given values. + --add-volume=[KEY=VALUE,...] + Adds a volume to the Cloud Run resource. To add more than one volume, + specify this flag mulitple times. Volumes must have a name and type + key. Only certain values are supported for type. Depending on the + provided type, other keys will be required. The following types are + supported with the specified additional keys: + + cloud-storage: A volume represnting a Cloud Storage bucket. This + volume type is mounted using Cloud Storage FUSE. See + https://cloud.google.com/storage/docs/gcs-fuse for the details and + limitations of this filesystem. Additional keys: + ▸ bucket: (required) the name of the bucket to use as the source of + this volume + ▸ readonly: (optional) A boolean. If true, this volume will be + read-only from all mounts. + + in-memory: An ephemeral volume that stores data in the instance's + memory. With this type of volume, data is not shared between + instances and all data will be lost when the instance it is on is + terminated. Additional keys: + ▸ size-limit: (required) A quantity representing the maximum amount + of memory allocated to this volume, such as "512Mi" or "3G". + + nfs: Represents a volume backed by an NFS server. Additional keys: + ▸ location: (required) The location of the NFS Server, in the form + SERVER:/PATH + ▸ readonly: (optional) A boolean. If true, this volume will be + read-only from all mounts. + + secret: Represents a secret stored in Secret Manager as a volume. + Additional keys: + ▸ secret: (required) The name of the secret in Secret Manager. Must + be a secret in the same project being deployed or be an alias + mapped in the run.googleapis.com/secrets annotation. + ▸ version: (required) The version of the secret to make available + in the volume. + ▸ path: (required) The relative path within the volume to mount + that version. + + --remove-volume=[VOLUME,...] + Removes volumes from the Cloud Run resource. + Container Flags If the --container flag is not specified, container flags apply to the @@ -397,6 +442,12 @@ FLAGS If the --container or --remove-containers flag is specified the following arguments may only be specified after a --container flag. + --add-volume-mount=[KEY=VALUE,...] + Adds a mount to the current container. Must contain the keys + volume=NAME and mount-path=/PATH where NAME is the name of a + volume on this resource and PATH is the path within the + container's filesystem to mount this volume. + --args=[ARG,...] Comma-separated arguments passed to the command run by the container image. If not specified and no '--command' is @@ -433,6 +484,9 @@ FLAGS probe pointing to the previous container port, this will also update the probe port. + --remove-volume-mount=[MOUNT,...] + Removes a mount from the current container. + --[no-]use-http2 Whether to use HTTP/2 for connections to the service. Use --use-http2 to enable and --no-use-http2 to disable. diff --git a/gcloud/alpha/run/jobs/deploy b/gcloud/alpha/run/jobs/deploy index 71842dd34..211a9994f 100644 --- a/gcloud/alpha/run/jobs/deploy +++ b/gcloud/alpha/run/jobs/deploy @@ -12,6 +12,8 @@ SYNOPSIS [--set-secrets=[KEY=SECRET_NAME:SECRET_VERSION,...]] [--task-timeout=TASK_TIMEOUT] [--tasks=TASKS; default=1] [--vpc-connector=VPC_CONNECTOR] [--vpc-egress=VPC_EGRESS] + [--add-volume=[KEY=VALUE,...] --remove-volume=[VOLUME,...]] + [--add-volume-mount=[KEY=VALUE,...] --remove-volume-mount=[MOUNT,...]] [--async | --execute-now --wait] [--clear-env-vars | --env-vars-file=FILE_PATH | --set-env-vars=[KEY=VALUE,...] @@ -164,6 +166,57 @@ FLAGS https://cloud.google.com/run/docs/securing/private-networking#send_requests_to_other_services_and_services for more information. + --add-volume=[KEY=VALUE,...] + Adds a volume to the Cloud Run resource. To add more than one volume, + specify this flag mulitple times. Volumes must have a name and type + key. Only certain values are supported for type. Depending on the + provided type, other keys will be required. The following types are + supported with the specified additional keys: + + cloud-storage: A volume represnting a Cloud Storage bucket. This volume + type is mounted using Cloud Storage FUSE. See + https://cloud.google.com/storage/docs/gcs-fuse for the details and + limitations of this filesystem. Additional keys: + ◆ bucket: (required) the name of the bucket to use as the source of + this volume + ◆ readonly: (optional) A boolean. If true, this volume will be + read-only from all mounts. + + in-memory: An ephemeral volume that stores data in the instance's + memory. With this type of volume, data is not shared between instances + and all data will be lost when the instance it is on is terminated. + Additional keys: + ◆ size-limit: (required) A quantity representing the maximum amount + of memory allocated to this volume, such as "512Mi" or "3G". + + nfs: Represents a volume backed by an NFS server. Additional keys: + ◆ location: (required) The location of the NFS Server, in the form + SERVER:/PATH + ◆ readonly: (optional) A boolean. If true, this volume will be + read-only from all mounts. + + secret: Represents a secret stored in Secret Manager as a volume. + Additional keys: + ◆ secret: (required) The name of the secret in Secret Manager. Must + be a secret in the same project being deployed or be an alias mapped + in the run.googleapis.com/secrets annotation. + ◆ version: (required) The version of the secret to make available in + the volume. + ◆ path: (required) The relative path within the volume to mount that + version. + + --remove-volume=[VOLUME,...] + Removes volumes from the Cloud Run resource. + + --add-volume-mount=[KEY=VALUE,...] + Adds a mount to the current container. Must contain the keys + volume=NAME and mount-path=/PATH where NAME is the name of a volume on + this resource and PATH is the path within the container's filesystem to + mount this volume. + + --remove-volume-mount=[MOUNT,...] + Removes a mount from the current container. + At most one of these can be specified: --async diff --git a/gcloud/alpha/run/jobs/update b/gcloud/alpha/run/jobs/update index da858832e..868e1e49d 100644 --- a/gcloud/alpha/run/jobs/update +++ b/gcloud/alpha/run/jobs/update @@ -14,6 +14,8 @@ SYNOPSIS | --clear-cloudsql-instances | --remove-cloudsql-instances=[CLOUDSQL-INSTANCES,...] | --set-cloudsql-instances=[CLOUDSQL-INSTANCES,...]] + [--add-volume=[KEY=VALUE,...] --remove-volume=[VOLUME,...]] + [--add-volume-mount=[KEY=VALUE,...] --remove-volume-mount=[MOUNT,...]] [--async | --execute-now --wait] [--binary-authorization=POLICY | --clear-binary-authorization] [--clear-env-vars | --env-vars-file=FILE_PATH @@ -173,6 +175,57 @@ FLAGS Completely replace the current Cloud SQL instances with the given values. + --add-volume=[KEY=VALUE,...] + Adds a volume to the Cloud Run resource. To add more than one volume, + specify this flag mulitple times. Volumes must have a name and type + key. Only certain values are supported for type. Depending on the + provided type, other keys will be required. The following types are + supported with the specified additional keys: + + cloud-storage: A volume represnting a Cloud Storage bucket. This volume + type is mounted using Cloud Storage FUSE. See + https://cloud.google.com/storage/docs/gcs-fuse for the details and + limitations of this filesystem. Additional keys: + ◆ bucket: (required) the name of the bucket to use as the source of + this volume + ◆ readonly: (optional) A boolean. If true, this volume will be + read-only from all mounts. + + in-memory: An ephemeral volume that stores data in the instance's + memory. With this type of volume, data is not shared between instances + and all data will be lost when the instance it is on is terminated. + Additional keys: + ◆ size-limit: (required) A quantity representing the maximum amount + of memory allocated to this volume, such as "512Mi" or "3G". + + nfs: Represents a volume backed by an NFS server. Additional keys: + ◆ location: (required) The location of the NFS Server, in the form + SERVER:/PATH + ◆ readonly: (optional) A boolean. If true, this volume will be + read-only from all mounts. + + secret: Represents a secret stored in Secret Manager as a volume. + Additional keys: + ◆ secret: (required) The name of the secret in Secret Manager. Must + be a secret in the same project being deployed or be an alias mapped + in the run.googleapis.com/secrets annotation. + ◆ version: (required) The version of the secret to make available in + the volume. + ◆ path: (required) The relative path within the volume to mount that + version. + + --remove-volume=[VOLUME,...] + Removes volumes from the Cloud Run resource. + + --add-volume-mount=[KEY=VALUE,...] + Adds a mount to the current container. Must contain the keys + volume=NAME and mount-path=/PATH where NAME is the name of a volume on + this resource and PATH is the path within the container's filesystem to + mount this volume. + + --remove-volume-mount=[MOUNT,...] + Removes a mount from the current container. + At most one of these can be specified: --async diff --git a/gcloud/alpha/run/services/update b/gcloud/alpha/run/services/update index 7b5626513..d45f6e6ab 100644 --- a/gcloud/alpha/run/services/update +++ b/gcloud/alpha/run/services/update @@ -22,10 +22,12 @@ SYNOPSIS --add-custom-audiences=[CUSTOM-AUDIENCES,...] | --clear-custom-audiences | --remove-custom-audiences=[CUSTOM-AUDIENCES,...] - | --set-custom-audiences=[CUSTOM-AUDIENCES,...] --args=[ARG,...] + | --set-custom-audiences=[CUSTOM-AUDIENCES,...] + --add-volume=[KEY=VALUE,...] --remove-volume=[VOLUME,...] + --add-volume-mount=[KEY=VALUE,...] --args=[ARG,...] --command=[COMMAND,...] --cpu=CPU --depends-on=[CONTAINER,...] - --image=IMAGE - --memory=MEMORY --port=PORT --[no-]use-http2 --clear-env-vars + --image=IMAGE --memory=MEMORY --port=PORT + --remove-volume-mount=[MOUNT,...] --[no-]use-http2 --clear-env-vars | --env-vars-file=FILE_PATH | --set-env-vars=[KEY=VALUE,...] | --remove-env-vars=[KEY,...] --update-env-vars=[KEY=VALUE,...] --clear-secrets @@ -288,6 +290,48 @@ FLAGS Completely replace the current custom audiences with the given values. + --add-volume=[KEY=VALUE,...] + Adds a volume to the Cloud Run resource. To add more than one volume, + specify this flag mulitple times. Volumes must have a name and type + key. Only certain values are supported for type. Depending on the + provided type, other keys will be required. The following types are + supported with the specified additional keys: + + cloud-storage: A volume represnting a Cloud Storage bucket. This + volume type is mounted using Cloud Storage FUSE. See + https://cloud.google.com/storage/docs/gcs-fuse for the details and + limitations of this filesystem. Additional keys: + ▸ bucket: (required) the name of the bucket to use as the source of + this volume + ▸ readonly: (optional) A boolean. If true, this volume will be + read-only from all mounts. + + in-memory: An ephemeral volume that stores data in the instance's + memory. With this type of volume, data is not shared between + instances and all data will be lost when the instance it is on is + terminated. Additional keys: + ▸ size-limit: (required) A quantity representing the maximum amount + of memory allocated to this volume, such as "512Mi" or "3G". + + nfs: Represents a volume backed by an NFS server. Additional keys: + ▸ location: (required) The location of the NFS Server, in the form + SERVER:/PATH + ▸ readonly: (optional) A boolean. If true, this volume will be + read-only from all mounts. + + secret: Represents a secret stored in Secret Manager as a volume. + Additional keys: + ▸ secret: (required) The name of the secret in Secret Manager. Must + be a secret in the same project being deployed or be an alias + mapped in the run.googleapis.com/secrets annotation. + ▸ version: (required) The version of the secret to make available + in the volume. + ▸ path: (required) The relative path within the volume to mount + that version. + + --remove-volume=[VOLUME,...] + Removes volumes from the Cloud Run resource. + Container Flags If the --container flag is not specified, container flags apply to the @@ -303,6 +347,12 @@ FLAGS If the --container or --remove-containers flag is specified the following arguments may only be specified after a --container flag. + --add-volume-mount=[KEY=VALUE,...] + Adds a mount to the current container. Must contain the keys + volume=NAME and mount-path=/PATH where NAME is the name of a + volume on this resource and PATH is the path within the + container's filesystem to mount this volume. + --args=[ARG,...] Comma-separated arguments passed to the command run by the container image. If not specified and no '--command' is @@ -343,6 +393,9 @@ FLAGS probe pointing to the previous container port, this will also update the probe port. + --remove-volume-mount=[MOUNT,...] + Removes a mount from the current container. + --[no-]use-http2 Whether to use HTTP/2 for connections to the service. Use --use-http2 to enable and --no-use-http2 to disable. diff --git a/gcloud/alpha/service-extensions/help b/gcloud/alpha/service-extensions/help index 4859e58f5..057b83e95 100644 --- a/gcloud/alpha/service-extensions/help +++ b/gcloud/alpha/service-extensions/help @@ -15,6 +15,12 @@ GCLOUD WIDE FLAGS GROUPS GROUP is one of the following: + lb-route-extensions + (ALPHA) Manage Service Extensions LbRouteExtension resources. + + lb-traffic-extensions + (ALPHA) Manage Service Extensions LbTrafficExtension resources. + wasm-actions (ALPHA) Interact with and manage Service Extensions WasmActions. diff --git a/gcloud/alpha/service-extensions/lb-route-extensions/delete b/gcloud/alpha/service-extensions/lb-route-extensions/delete new file mode 100644 index 000000000..f85749bd3 --- /dev/null +++ b/gcloud/alpha/service-extensions/lb-route-extensions/delete @@ -0,0 +1,76 @@ +NAME + gcloud alpha service-extensions lb-route-extensions delete - delete an + LbRouteExtension resource + +SYNOPSIS + gcloud alpha service-extensions lb-route-extensions delete + (LB_ROUTE_EXTENSION : --location=LOCATION) [--async] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Delete the specified LbRouteExtension resource. + +EXAMPLES + To delete an LbRouteExtension resource named my-route-extension in + us-central1, run: + + $ gcloud alpha service-extensions lb-route-extensions delete \ + my-route-extension --location=us-central1 + +POSITIONAL ARGUMENTS + LbRouteExtension resource - The ID of the deleted LbRouteExtension + resource. The arguments in this group can be used to specify the + attributes of this resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument lb_route_extension on the command line with a + fully specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + LB_ROUTE_EXTENSION + ID of the LbRouteExtension or fully qualified identifier for the + LbRouteExtension. + + To set the lb_route_extension attribute: + ▸ provide the argument lb_route_extension on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Cloud region in which the resource is located. + + To set the location attribute: + ▸ provide the argument lb_route_extension on the command line with + a fully specified name; + ▸ provide the argument --location on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networkservices/v1alpha1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta service-extensions lb-route-extensions delete + diff --git a/gcloud/alpha/service-extensions/lb-route-extensions/describe b/gcloud/alpha/service-extensions/lb-route-extensions/describe new file mode 100644 index 000000000..0f61aa3ba --- /dev/null +++ b/gcloud/alpha/service-extensions/lb-route-extensions/describe @@ -0,0 +1,70 @@ +NAME + gcloud alpha service-extensions lb-route-extensions describe - describe an + LbRouteExtension resource + +SYNOPSIS + gcloud alpha service-extensions lb-route-extensions describe + (LB_ROUTE_EXTENSION : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Show details about an LbRouteExtension resource. + +EXAMPLES + To show details about the LbRouteExtension resource named + my-route-extension located in us-central1. + + $ gcloud alpha service-extensions lb-route-extensions describe \ + my-route-extension --location=us-central1 + +POSITIONAL ARGUMENTS + LbRouteExtension resource - The ID of the LbRouteExtension resource. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument lb_route_extension on the command line with a + fully specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + LB_ROUTE_EXTENSION + ID of the LbRouteExtension or fully qualified identifier for the + LbRouteExtension. + + To set the lb_route_extension attribute: + ▸ provide the argument lb_route_extension on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Cloud region in which the resource is located. + + To set the location attribute: + ▸ provide the argument lb_route_extension on the command line with + a fully specified name; + ▸ provide the argument --location on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networkservices/v1alpha1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta service-extensions lb-route-extensions describe + diff --git a/gcloud/alpha/service-extensions/lb-route-extensions/help b/gcloud/alpha/service-extensions/lb-route-extensions/help new file mode 100644 index 000000000..cd172d92f --- /dev/null +++ b/gcloud/alpha/service-extensions/lb-route-extensions/help @@ -0,0 +1,39 @@ +NAME + gcloud alpha service-extensions lb-route-extensions - manage Service + Extensions LbRouteExtension resources + +SYNOPSIS + gcloud alpha service-extensions lb-route-extensions COMMAND + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Manage Service Extensions LbRouteExtension resources. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + delete + (ALPHA) Delete an LbRouteExtension resource. + + describe + (ALPHA) Describe an LbRouteExtension resource. + + import + (ALPHA) Import an LbRouteExtension resource. + + list + (ALPHA) List LbRouteExtension resources. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta service-extensions lb-route-extensions + diff --git a/gcloud/alpha/service-extensions/lb-route-extensions/import b/gcloud/alpha/service-extensions/lb-route-extensions/import new file mode 100644 index 000000000..f004446b1 --- /dev/null +++ b/gcloud/alpha/service-extensions/lb-route-extensions/import @@ -0,0 +1,87 @@ +NAME + gcloud alpha service-extensions lb-route-extensions import - import an + LbRouteExtension resource + +SYNOPSIS + gcloud alpha service-extensions lb-route-extensions import + (LB_ROUTE_EXTENSION : --location=LOCATION) [--async] [--source=SOURCE] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Import an LbRouteExtension resource defined in a YAML file. + +EXAMPLES + To import an LbRouteExtension resource named my-route-extension from a YAML + file in us-central1, run: + + $ gcloud alpha service-extensions lb-route-extensions import \ + my-route-extension --source=my-route-extension.yaml \ + --location=us-central1 + +POSITIONAL ARGUMENTS + LbRouteExtension resource - The ID of the new or updated LbRouteExtension + resource. The arguments in this group can be used to specify the + attributes of this resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument lb_route_extension on the command line with a + fully specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + LB_ROUTE_EXTENSION + ID of the LbRouteExtension or fully qualified identifier for the + LbRouteExtension. + + To set the lb_route_extension attribute: + ▸ provide the argument lb_route_extension on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Cloud region in which the resource is located. + + To set the location attribute: + ▸ provide the argument lb_route_extension on the command line with + a fully specified name; + ▸ provide the argument --location on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --source=SOURCE + Path to a YAML file containing the configuration export data. The YAML + file must not contain any output-only fields. Alternatively, you may + omit this flag to read from standard input. For a schema describing the + export/import format, see: $CLOUDSDKROOT/lib/googlecloudsdk/schemas/... + + $CLOUDSDKROOT is can be obtained with the following command: + + $ gcloud info --format='value(installation.sdk_root)' + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networkservices/v1alpha1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta service-extensions lb-route-extensions import + diff --git a/gcloud/alpha/service-extensions/lb-route-extensions/list b/gcloud/alpha/service-extensions/lb-route-extensions/list new file mode 100644 index 000000000..4a5334023 --- /dev/null +++ b/gcloud/alpha/service-extensions/lb-route-extensions/list @@ -0,0 +1,92 @@ +NAME + gcloud alpha service-extensions lb-route-extensions list - list + LbRouteExtension resources + +SYNOPSIS + gcloud alpha service-extensions lb-route-extensions list + --location=LOCATION [--filter=EXPRESSION] [--limit=LIMIT] + [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) List all LbRouteExtension resources in the specified location of + the current project. + +EXAMPLES + To list all LbRouteExtension resources in the current project located in + us-central1 region run: + + $ gcloud alpha service-extensions lb-route-extensions list \ + --location=us-central1 + +REQUIRED FLAGS + Location resource - The parent location. This represents a Cloud resource. + (NOTE) Some attributes are not given arguments in this group but can be + set in other ways. + + To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. + + To set the location attribute: + ▸ provide the argument --location on the command line. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networkservices/v1alpha1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta service-extensions lb-route-extensions list + diff --git a/gcloud/alpha/service-extensions/lb-traffic-extensions/delete b/gcloud/alpha/service-extensions/lb-traffic-extensions/delete new file mode 100644 index 000000000..2fe383211 --- /dev/null +++ b/gcloud/alpha/service-extensions/lb-traffic-extensions/delete @@ -0,0 +1,76 @@ +NAME + gcloud alpha service-extensions lb-traffic-extensions delete - delete an + LbTrafficExtension resource + +SYNOPSIS + gcloud alpha service-extensions lb-traffic-extensions delete + (LB_TRAFFIC_EXTENSION : --location=LOCATION) [--async] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Delete the specified LbTrafficExtension resource. + +EXAMPLES + To delete an LbTrafficExtension resource named my-traffic-extension in + us-central1, run: + + $ gcloud alpha service-extensions lb-traffic-extensions delete \ + my-traffic-extension --location=us-central1 + +POSITIONAL ARGUMENTS + LbTrafficExtension resource - The ID of the deleted LbTrafficExtension + resource. The arguments in this group can be used to specify the + attributes of this resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument lb_traffic_extension on the command line with a + fully specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + LB_TRAFFIC_EXTENSION + ID of the LbTrafficExtension or fully qualified identifier for the + LbTrafficExtension. + + To set the lb_traffic_extension attribute: + ▸ provide the argument lb_traffic_extension on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Cloud region in which the resource is located. + + To set the location attribute: + ▸ provide the argument lb_traffic_extension on the command line + with a fully specified name; + ▸ provide the argument --location on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networkservices/v1alpha1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta service-extensions lb-traffic-extensions delete + diff --git a/gcloud/alpha/service-extensions/lb-traffic-extensions/describe b/gcloud/alpha/service-extensions/lb-traffic-extensions/describe new file mode 100644 index 000000000..e05c317d0 --- /dev/null +++ b/gcloud/alpha/service-extensions/lb-traffic-extensions/describe @@ -0,0 +1,70 @@ +NAME + gcloud alpha service-extensions lb-traffic-extensions describe - describe + an LbTrafficExtension resource + +SYNOPSIS + gcloud alpha service-extensions lb-traffic-extensions describe + (LB_TRAFFIC_EXTENSION : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Show details of an LbTrafficExtension resource. + +EXAMPLES + To show details about the LbTrafficExtension resource named + my-traffic-extension located in us-central1. + + $ gcloud alpha service-extensions lb-traffic-extensions describe \ + my-traffic-extension --location=us-central1 + +POSITIONAL ARGUMENTS + LbTrafficExtension resource - The ID of the LbTrafficExtension resource. + The arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument lb_traffic_extension on the command line with a + fully specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + LB_TRAFFIC_EXTENSION + ID of the LbTrafficExtension or fully qualified identifier for the + LbTrafficExtension. + + To set the lb_traffic_extension attribute: + ▸ provide the argument lb_traffic_extension on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Cloud region in which the resource is located. + + To set the location attribute: + ▸ provide the argument lb_traffic_extension on the command line + with a fully specified name; + ▸ provide the argument --location on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networkservices/v1alpha1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta service-extensions lb-traffic-extensions describe + diff --git a/gcloud/alpha/service-extensions/lb-traffic-extensions/help b/gcloud/alpha/service-extensions/lb-traffic-extensions/help new file mode 100644 index 000000000..6ffdc55a0 --- /dev/null +++ b/gcloud/alpha/service-extensions/lb-traffic-extensions/help @@ -0,0 +1,39 @@ +NAME + gcloud alpha service-extensions lb-traffic-extensions - manage Service + Extensions LbTrafficExtension resources + +SYNOPSIS + gcloud alpha service-extensions lb-traffic-extensions COMMAND + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Manage Service Extensions LbTrafficExtension resources. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + delete + (ALPHA) Delete an LbTrafficExtension resource. + + describe + (ALPHA) Describe an LbTrafficExtension resource. + + import + (ALPHA) Import an LbTrafficExtension resource. + + list + (ALPHA) List LbTrafficExtension resources. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta service-extensions lb-traffic-extensions + diff --git a/gcloud/alpha/service-extensions/lb-traffic-extensions/import b/gcloud/alpha/service-extensions/lb-traffic-extensions/import new file mode 100644 index 000000000..c3ae5b5e2 --- /dev/null +++ b/gcloud/alpha/service-extensions/lb-traffic-extensions/import @@ -0,0 +1,87 @@ +NAME + gcloud alpha service-extensions lb-traffic-extensions import - import an + LbTrafficExtension resource + +SYNOPSIS + gcloud alpha service-extensions lb-traffic-extensions import + (LB_TRAFFIC_EXTENSION : --location=LOCATION) [--async] + [--source=SOURCE] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Import an LbTrafficExtension resource defined in a YAML file. + +EXAMPLES + To import an LbTrafficExtension resource named my-traffic-extension from a + YAML file in us-central1, run: + + $ gcloud alpha service-extensions lb-traffic-extensions import \ + my-traffic-extension --source=my-traffic-extension.yaml \ + --location=us-central1 + +POSITIONAL ARGUMENTS + LbTrafficExtension resource - The ID of the new or updated + LbTrafficExtension resource. The arguments in this group can be used to + specify the attributes of this resource. (NOTE) Some attributes are not + given arguments in this group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument lb_traffic_extension on the command line with a + fully specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + LB_TRAFFIC_EXTENSION + ID of the LbTrafficExtension or fully qualified identifier for the + LbTrafficExtension. + + To set the lb_traffic_extension attribute: + ▸ provide the argument lb_traffic_extension on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Cloud region in which the resource is located. + + To set the location attribute: + ▸ provide the argument lb_traffic_extension on the command line + with a fully specified name; + ▸ provide the argument --location on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --source=SOURCE + Path to a YAML file containing the configuration export data. The YAML + file must not contain any output-only fields. Alternatively, you may + omit this flag to read from standard input. For a schema describing the + export/import format, see: $CLOUDSDKROOT/lib/googlecloudsdk/schemas/... + + $CLOUDSDKROOT is can be obtained with the following command: + + $ gcloud info --format='value(installation.sdk_root)' + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networkservices/v1alpha1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta service-extensions lb-traffic-extensions import + diff --git a/gcloud/alpha/service-extensions/lb-traffic-extensions/list b/gcloud/alpha/service-extensions/lb-traffic-extensions/list new file mode 100644 index 000000000..6ee3321cd --- /dev/null +++ b/gcloud/alpha/service-extensions/lb-traffic-extensions/list @@ -0,0 +1,92 @@ +NAME + gcloud alpha service-extensions lb-traffic-extensions list - list + LbTrafficExtension resources + +SYNOPSIS + gcloud alpha service-extensions lb-traffic-extensions list + --location=LOCATION [--filter=EXPRESSION] [--limit=LIMIT] + [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) List all LbTrafficExtension resources in the specified location of + the current project. + +EXAMPLES + To list all LbTrafficExtension resources in the current project located in + us-central1 region, run: + + $ gcloud alpha service-extensions lb-traffic-extensions list \ + --location=us-central1 + +REQUIRED FLAGS + Location resource - The parent location. This represents a Cloud resource. + (NOTE) Some attributes are not given arguments in this group but can be + set in other ways. + + To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. + + To set the location attribute: + ▸ provide the argument --location on the command line. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networkservices/v1alpha1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. This variant is also available: + + $ gcloud beta service-extensions lb-traffic-extensions list + diff --git a/gcloud/alpha/service-extensions/wasm-actions/create b/gcloud/alpha/service-extensions/wasm-actions/create index c1b5bcc57..b53f124f8 100644 --- a/gcloud/alpha/service-extensions/wasm-actions/create +++ b/gcloud/alpha/service-extensions/wasm-actions/create @@ -1,5 +1,6 @@ NAME gcloud alpha service-extensions wasm-actions create - create a WasmAction + resource SYNOPSIS gcloud alpha service-extensions wasm-actions create @@ -8,16 +9,15 @@ SYNOPSIS [--supported-events=[EVENT,...]] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) This command creates a WasmAction that uses the specfied - WasmPlugin. + (ALPHA) Create a WasmAction resource that uses the specified plugin. EXAMPLES - To create a WasmAction called my-action using WasmPlugin my-plugin, run: + To create a WasmAction called my-action using the my-plugin plugin, run: $ gcloud alpha service-extensions wasm-actions create my-action \ --wasm-plugin=my-plugin - You may also specify the full resource path to a plugin, e.g. + You may also specify the full resource path to a plugin, for example, projects/my-project/locations/global/wasmPlugins/my-plugin POSITIONAL ARGUMENTS @@ -45,7 +45,7 @@ POSITIONAL ARGUMENTS arguments in this group are specified. --location=LOCATION - The location Id. + The location ID. To set the location attribute: ▸ provide the argument wasm_action on the command line with a fully @@ -85,7 +85,7 @@ OPTIONAL FLAGS complete. --description=DESCRIPTION - Provides an optional, human-readable description of the service. + A human-readable description of the resource. --labels=[KEY=VALUE,...] List of label KEY=VALUE pairs to add. @@ -97,7 +97,7 @@ OPTIONAL FLAGS --supported-events=[EVENT,...] Specify the portion of the request/response payload to be processed by - the Plugin. EVENT must be one of: request-headers, response-headers. + the plugin. EVENT must be one of: request-headers, response-headers. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/service-extensions/wasm-actions/delete b/gcloud/alpha/service-extensions/wasm-actions/delete index 52eaa0a11..f1e01dfb8 100644 --- a/gcloud/alpha/service-extensions/wasm-actions/delete +++ b/gcloud/alpha/service-extensions/wasm-actions/delete @@ -1,12 +1,13 @@ NAME gcloud alpha service-extensions wasm-actions delete - delete a WasmAction + resource SYNOPSIS gcloud alpha service-extensions wasm-actions delete (WASM_ACTION : --location=LOCATION) [--async] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Delete a WasmAction. + (ALPHA) Delete a WasmAction resource. EXAMPLES To delete a WasmAction called 'my-wasm-action', run: @@ -38,7 +39,7 @@ POSITIONAL ARGUMENTS arguments in this group are specified. --location=LOCATION - The location Id. + The location ID. To set the location attribute: ▸ provide the argument wasm_action on the command line with a fully diff --git a/gcloud/alpha/service-extensions/wasm-actions/describe b/gcloud/alpha/service-extensions/wasm-actions/describe index 59c53a8b0..6fc554145 100644 --- a/gcloud/alpha/service-extensions/wasm-actions/describe +++ b/gcloud/alpha/service-extensions/wasm-actions/describe @@ -1,13 +1,13 @@ NAME gcloud alpha service-extensions wasm-actions describe - show details about - a WasmAction + a WasmAction resource SYNOPSIS gcloud alpha service-extensions wasm-actions describe (WASM_ACTION : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Show details about a WasmAction. + (ALPHA) Show details about a WasmAction resource. EXAMPLES To show details about a WasmAction, run: @@ -16,10 +16,10 @@ EXAMPLES my-wasm-action POSITIONAL ARGUMENTS - WasmAction resource - The WasmAction you want to describe. The arguments - in this group can be used to specify the attributes of this resource. - (NOTE) Some attributes are not given arguments in this group but can be - set in other ways. + WasmAction resource - The WasmAction resource that you want to describe. + The arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: ◆ provide the argument wasm_action on the command line with a fully @@ -40,7 +40,7 @@ POSITIONAL ARGUMENTS arguments in this group are specified. --location=LOCATION - The location Id. + The location ID. To set the location attribute: ▸ provide the argument wasm_action on the command line with a fully diff --git a/gcloud/alpha/service-extensions/wasm-actions/help b/gcloud/alpha/service-extensions/wasm-actions/help index e61177052..8e2a55aa4 100644 --- a/gcloud/alpha/service-extensions/wasm-actions/help +++ b/gcloud/alpha/service-extensions/wasm-actions/help @@ -17,16 +17,16 @@ COMMANDS COMMAND is one of the following: create - (ALPHA) Create a WasmAction. + (ALPHA) Create a WasmAction resource. delete - (ALPHA) Delete a WasmAction. + (ALPHA) Delete a WasmAction resource. describe - (ALPHA) Show details about a WasmAction. + (ALPHA) Show details about a WasmAction resource. list - (ALPHA) List all WasmActions. + (ALPHA) List all WasmAction resources. NOTES This command is currently in alpha and might change without notice. If this diff --git a/gcloud/alpha/service-extensions/wasm-actions/list b/gcloud/alpha/service-extensions/wasm-actions/list index 8a468b305..e1c20bed5 100644 --- a/gcloud/alpha/service-extensions/wasm-actions/list +++ b/gcloud/alpha/service-extensions/wasm-actions/list @@ -1,5 +1,6 @@ NAME - gcloud alpha service-extensions wasm-actions list - list all WasmActions + gcloud alpha service-extensions wasm-actions list - list all WasmAction + resources SYNOPSIS gcloud alpha service-extensions wasm-actions list [--location=LOCATION] @@ -7,10 +8,10 @@ SYNOPSIS [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) List WasmActions. + (ALPHA) List WasmAction resources. EXAMPLES - To list existing WasmActions, run: + To list existing WasmAction resources, run: $ gcloud alpha service-extensions wasm-actions list diff --git a/gcloud/alpha/service-extensions/wasm-plugin-versions/create b/gcloud/alpha/service-extensions/wasm-plugin-versions/create index 55f0dc2fe..76f8178d5 100644 --- a/gcloud/alpha/service-extensions/wasm-plugin-versions/create +++ b/gcloud/alpha/service-extensions/wasm-plugin-versions/create @@ -1,6 +1,6 @@ NAME gcloud alpha service-extensions wasm-plugin-versions create - create a - WasmPluginVersion + WasmPluginVersion resource SYNOPSIS gcloud alpha service-extensions wasm-plugin-versions create @@ -12,20 +12,20 @@ SYNOPSIS | --plugin-config-uri=PLUGIN_CONFIG_URI] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Create a new WasmPluginVersion. + (ALPHA) Create a new WasmPluginVersion resource. EXAMPLES - To create a WasmPluginVersion called 'my-plugin-version', run: + To create a WasmPluginVersion called my-plugin-version, run: $ gcloud alpha service-extensions wasm-plugin-versions create \ my-plugin-version --wasm-plugin=my-plugin \ --image=...-docker.pkg.dev/my-project/repository/container:tag POSITIONAL ARGUMENTS - WasmPluginVersion resource - The ID of the WasmPluginVersion to create. - The arguments in this group can be used to specify the attributes of this - resource. (NOTE) Some attributes are not given arguments in this group but - can be set in other ways. + WasmPluginVersion resource - The ID of the WasmPluginVersion resource to + create. The arguments in this group can be used to specify the attributes + of this resource. (NOTE) Some attributes are not given arguments in this + group but can be set in other ways. To set the project attribute: ◆ provide the argument wasm_plugin_version on the command line with a @@ -46,7 +46,7 @@ POSITIONAL ARGUMENTS arguments in this group are specified. --location=LOCATION - The location Id. + The location ID. To set the location attribute: ▸ provide the argument wasm_plugin_version on the command line with @@ -64,8 +64,8 @@ POSITIONAL ARGUMENTS REQUIRED FLAGS --image=IMAGE - URI of the container image containing the WasmPlugin, stored in the - Artifact Registry. + URI of the container image containing the plugin's Wasm module, stored + in the Artifact Registry. OPTIONAL FLAGS --async @@ -78,19 +78,20 @@ OPTIONAL FLAGS --labels=[KEY=VALUE,...] List of KEY=VALUE labels to attach to this resource. - Configuration for the WasmPlugin, provided to the Proxy-Wasm plugin at - runtime via the proxy_on_configure Proxy-Wasm ABI. + Configuration for the plugin, provided at runtime by the on_configure + function (Rust Proxy-Wasm SDK) or the onConfigure method (C++ Proxy-Wasm + SDK). At most one of these can be specified: --plugin-config=PLUGIN_CONFIG - WasmPlugin configuration in the textual format. + Plugin configuration in the textual format. --plugin-config-file=PLUGIN_CONFIG_FILE - Path to a file containg WasmPlugin configuration. + Path to a file containing the plugin configuration. --plugin-config-uri=PLUGIN_CONFIG_URI - URI of the container image containing the plugin configuration, + URI of the container image containing the plugin's configuration, stored in the Artifact Registry. GCLOUD WIDE FLAGS diff --git a/gcloud/alpha/service-extensions/wasm-plugin-versions/delete b/gcloud/alpha/service-extensions/wasm-plugin-versions/delete index 59e5725a9..a3ce158fe 100644 --- a/gcloud/alpha/service-extensions/wasm-plugin-versions/delete +++ b/gcloud/alpha/service-extensions/wasm-plugin-versions/delete @@ -1,6 +1,6 @@ NAME gcloud alpha service-extensions wasm-plugin-versions delete - delete a - WasmPluginVersion + WasmPluginVersion resource SYNOPSIS gcloud alpha service-extensions wasm-plugin-versions delete @@ -8,7 +8,7 @@ SYNOPSIS [--async] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Delete a WasmPluginVersion. + (ALPHA) Delete a WasmPluginVersion resource. EXAMPLES To delete a WasmPluginVersion called 'my-plugin-version', run: @@ -17,7 +17,7 @@ EXAMPLES my-plugin-version POSITIONAL ARGUMENTS - WasmPluginVersion resource - The WasmPluginVersion to delete. The + WasmPluginVersion resource - The WasmPluginVersion resource to delete. The arguments in this group can be used to specify the attributes of this resource. (NOTE) Some attributes are not given arguments in this group but can be set in other ways. @@ -41,7 +41,7 @@ POSITIONAL ARGUMENTS arguments in this group are specified. --location=LOCATION - The location Id. + The location ID. To set the location attribute: ▸ provide the argument wasm_plugin_version on the command line with diff --git a/gcloud/alpha/service-extensions/wasm-plugin-versions/describe b/gcloud/alpha/service-extensions/wasm-plugin-versions/describe index 0f19c7d92..712e8936d 100644 --- a/gcloud/alpha/service-extensions/wasm-plugin-versions/describe +++ b/gcloud/alpha/service-extensions/wasm-plugin-versions/describe @@ -1,6 +1,6 @@ NAME gcloud alpha service-extensions wasm-plugin-versions describe - show - details about a WasmPluginVersion + details about a WasmPluginVersion resource SYNOPSIS gcloud alpha service-extensions wasm-plugin-versions describe @@ -8,7 +8,7 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Show details about a WasmPluginVersion. + (ALPHA) Show details about a WasmPluginVersion resource. EXAMPLES To show details about a WasmPluginVersion, run: @@ -17,10 +17,10 @@ EXAMPLES my-plugin-version POSITIONAL ARGUMENTS - WasmPluginVersion resource - The WasmPluginVersion you want to describe. - The arguments in this group can be used to specify the attributes of this - resource. (NOTE) Some attributes are not given arguments in this group but - can be set in other ways. + WasmPluginVersion resource - The WasmPluginVersion resource that you want + to describe. The arguments in this group can be used to specify the + attributes of this resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. To set the project attribute: ◆ provide the argument wasm_plugin_version on the command line with a @@ -41,7 +41,7 @@ POSITIONAL ARGUMENTS arguments in this group are specified. --location=LOCATION - The location Id. + The location ID. To set the location attribute: ▸ provide the argument wasm_plugin_version on the command line with diff --git a/gcloud/alpha/service-extensions/wasm-plugin-versions/help b/gcloud/alpha/service-extensions/wasm-plugin-versions/help index 873cad748..893714ef6 100644 --- a/gcloud/alpha/service-extensions/wasm-plugin-versions/help +++ b/gcloud/alpha/service-extensions/wasm-plugin-versions/help @@ -18,16 +18,16 @@ COMMANDS COMMAND is one of the following: create - (ALPHA) Create a WasmPluginVersion. + (ALPHA) Create a WasmPluginVersion resource. delete - (ALPHA) Delete a WasmPluginVersion. + (ALPHA) Delete a WasmPluginVersion resource. describe - (ALPHA) Show details about a WasmPluginVersion. + (ALPHA) Show details about a WasmPluginVersion resource. list - (ALPHA) List all WasmPluginVersions for a WasmPlugin. + (ALPHA) List all WasmPluginVersion resources for a WasmPlugin. NOTES This command is currently in alpha and might change without notice. If this diff --git a/gcloud/alpha/service-extensions/wasm-plugin-versions/list b/gcloud/alpha/service-extensions/wasm-plugin-versions/list index 87d1f366c..a317e3777 100644 --- a/gcloud/alpha/service-extensions/wasm-plugin-versions/list +++ b/gcloud/alpha/service-extensions/wasm-plugin-versions/list @@ -1,6 +1,6 @@ NAME gcloud alpha service-extensions wasm-plugin-versions list - list all - WasmPluginVersions for a WasmPlugin + WasmPluginVersion resources for a WasmPlugin SYNOPSIS gcloud alpha service-extensions wasm-plugin-versions list @@ -9,10 +9,10 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) List WasmPluginVersions. + (ALPHA) List WasmPluginVersion resources. EXAMPLES - To list existing WasmPluginVersions, run: + To list existing WasmPluginVersion resources, run: $ gcloud alpha service-extensions wasm-plugin-versions list \ --wasm-plugin=WASM_PLUGIN @@ -42,7 +42,7 @@ REQUIRED FLAGS this group are specified. --location=LOCATION - The location Id. + The location ID. To set the location attribute: ▸ provide the argument --wasm-plugin on the command line with a diff --git a/gcloud/alpha/service-extensions/wasm-plugins/create b/gcloud/alpha/service-extensions/wasm-plugins/create index d6d8975e9..087d50118 100644 --- a/gcloud/alpha/service-extensions/wasm-plugins/create +++ b/gcloud/alpha/service-extensions/wasm-plugins/create @@ -1,5 +1,6 @@ NAME gcloud alpha service-extensions wasm-plugins create - create a WasmPlugin + resource SYNOPSIS gcloud alpha service-extensions wasm-plugins create @@ -12,8 +13,7 @@ SYNOPSIS | --plugin-config-uri=PLUGIN_CONFIG_URI] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Create a new WasmPlugin and optionally create a WasmPluginVersion - and set it as main (serving) one. + (ALPHA) Create a new WasmPlugin resource. EXAMPLES To create a WasmPlugin called my-plugin, run: @@ -28,10 +28,10 @@ EXAMPLES --image=...-docker.pkg.dev/my-project/repository/container:tag POSITIONAL ARGUMENTS - WasmPlugin resource - The ID of the WasmPlugin to create. The arguments in - this group can be used to specify the attributes of this resource. (NOTE) - Some attributes are not given arguments in this group but can be set in - other ways. + WasmPlugin resource - The ID of the WasmPlugin resource to create. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: ◆ provide the argument wasm_plugin on the command line with a fully @@ -52,7 +52,7 @@ POSITIONAL ARGUMENTS arguments in this group are specified. --location=LOCATION - The location Id. + The location ID. To set the location attribute: ▸ provide the argument wasm_plugin on the command line with a fully @@ -66,7 +66,7 @@ FLAGS complete. --description=DESCRIPTION - Provides an optional, human-readable description of the service. + A human-readable description of the resource. --labels=[KEY=VALUE,...] List of label KEY=VALUE pairs to add. @@ -77,46 +77,46 @@ FLAGS numbers. --log-config=[LOG_CONFIG,...] - Logging options for the activity performed by this WasmPlugin. - Following options can be set: - ◆ enable - whether to enable logging. If log-config flag is set, + Logging options for the activity performed by this plugin. The + following options can be set: + ◆ enable: whether to enable logging. If log-config flag is set, enable option is required. - ◆ sample-rate - configures the sampling rate of activity logs, where + ◆ sample-rate: configures the sampling rate of activity logs, where 1.0 means all logged activity is reported and 0.0 means no activity is reported. The default value is 1.0, and the value of the field - must be in [0, 1]. + must be in range 0 to 1 (inclusive). - ◆ min-log-level - specificies the lowest level of the logs which - should be exported to Cloud Logging. The default value is INFO. + ◆ min-log-level: specifies the lowest level of the logs that should + be exported to Cloud Logging. The default value is INFO. Example usage: --log-config=enable=True,sample-rate=0.5,min-log-level=INFO --log_config=enable=False --image=IMAGE - URI of the container image containing the Wasm module, stored in the - Artifact Registry. + URI of the container image containing the plugin's Wasm module, stored + in the Artifact Registry. --main-version=MAIN_VERSION - ID of the WasmPluginVersion that will be created for that WasmPlugin - and that will be set as the current main version. + ID of the WasmPluginVersion resource that will be created for that + WasmPlugin and that will be set as the current main version. - Configuration for the WasmPlugin, provided to the plugin at runtime via - the proxy_on_configure call (the exact name of the invoked function - depends on the Proxy-Wasm SDK used). + Configuration for the plugin, provided at runtime by the on_configure + function (Rust Proxy-Wasm SDK) or the onConfigure method (C++ Proxy-Wasm + SDK). At most one of these can be specified: --plugin-config=PLUGIN_CONFIG - WasmPlugin configuration in the textual format. + Plugin runtime configuration in the textual format. --plugin-config-file=PLUGIN_CONFIG_FILE - Path to a local file containing the plugin configuration. + Path to a local file containing the plugin runtime configuration. --plugin-config-uri=PLUGIN_CONFIG_URI - URI of the container image containing the plugin configuration, - stored in the Artifact Registry. + URI of the container image containing the plugin's runtime + configuration, stored in the Artifact Registry. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/service-extensions/wasm-plugins/delete b/gcloud/alpha/service-extensions/wasm-plugins/delete index d098b457e..6d91f9ad5 100644 --- a/gcloud/alpha/service-extensions/wasm-plugins/delete +++ b/gcloud/alpha/service-extensions/wasm-plugins/delete @@ -1,23 +1,24 @@ NAME gcloud alpha service-extensions wasm-plugins delete - delete a WasmPlugin + resource SYNOPSIS gcloud alpha service-extensions wasm-plugins delete (WASM_PLUGIN : --location=LOCATION) [--async] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Delete a WasmPlugin. + (ALPHA) Delete a WasmPlugin resource. EXAMPLES - To delete a WasmPlugin called 'my-plugin', run: + To delete a WasmPlugin called my-plugin, run: $ gcloud alpha service-extensions wasm-plugins delete my-plugin POSITIONAL ARGUMENTS - WasmPlugin resource - The WasmPlugin to delete. The arguments in this - group can be used to specify the attributes of this resource. (NOTE) Some - attributes are not given arguments in this group but can be set in other - ways. + WasmPlugin resource - The WasmPlugin resource to delete. The arguments in + this group can be used to specify the attributes of this resource. (NOTE) + Some attributes are not given arguments in this group but can be set in + other ways. To set the project attribute: ◆ provide the argument wasm_plugin on the command line with a fully @@ -38,7 +39,7 @@ POSITIONAL ARGUMENTS arguments in this group are specified. --location=LOCATION - The location Id. + The location ID. To set the location attribute: ▸ provide the argument wasm_plugin on the command line with a fully diff --git a/gcloud/alpha/service-extensions/wasm-plugins/describe b/gcloud/alpha/service-extensions/wasm-plugins/describe index 485d5e960..4bb11d37f 100644 --- a/gcloud/alpha/service-extensions/wasm-plugins/describe +++ b/gcloud/alpha/service-extensions/wasm-plugins/describe @@ -1,13 +1,13 @@ NAME gcloud alpha service-extensions wasm-plugins describe - show details about - a WasmPlugin + a WasmPlugin resource SYNOPSIS gcloud alpha service-extensions wasm-plugins describe (WASM_PLUGIN : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Show details about a WasmPlugin. + (ALPHA) Show details about a WasmPlugin resource. EXAMPLES To show details about a WasmPlugin, run: @@ -15,10 +15,10 @@ EXAMPLES $ gcloud alpha service-extensions wasm-plugins describe my-plugin POSITIONAL ARGUMENTS - WasmPlugin resource - The WasmPlugin you want to describe. The arguments - in this group can be used to specify the attributes of this resource. - (NOTE) Some attributes are not given arguments in this group but can be - set in other ways. + WasmPlugin resource - The WasmPlugin resource that you want to describe. + The arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. To set the project attribute: ◆ provide the argument wasm_plugin on the command line with a fully @@ -39,7 +39,7 @@ POSITIONAL ARGUMENTS arguments in this group are specified. --location=LOCATION - The location Id. + The location ID. To set the location attribute: ▸ provide the argument wasm_plugin on the command line with a fully diff --git a/gcloud/alpha/service-extensions/wasm-plugins/help b/gcloud/alpha/service-extensions/wasm-plugins/help index 0cf46dfab..bffc62d53 100644 --- a/gcloud/alpha/service-extensions/wasm-plugins/help +++ b/gcloud/alpha/service-extensions/wasm-plugins/help @@ -17,19 +17,19 @@ COMMANDS COMMAND is one of the following: create - (ALPHA) Create a WasmPlugin. + (ALPHA) Create a WasmPlugin resource. delete - (ALPHA) Delete a WasmPlugin. + (ALPHA) Delete a WasmPlugin resource. describe - (ALPHA) Show details about a WasmPlugin. + (ALPHA) Show details about a WasmPlugin resource. list - (ALPHA) List all WasmPlugins. + (ALPHA) List all WasmPlugin resources. update - (ALPHA) Update a WasmPlugin. + (ALPHA) Update a WasmPlugin resource. NOTES This command is currently in alpha and might change without notice. If this diff --git a/gcloud/alpha/service-extensions/wasm-plugins/list b/gcloud/alpha/service-extensions/wasm-plugins/list index 0768c0f91..f395dd3a4 100644 --- a/gcloud/alpha/service-extensions/wasm-plugins/list +++ b/gcloud/alpha/service-extensions/wasm-plugins/list @@ -1,5 +1,6 @@ NAME - gcloud alpha service-extensions wasm-plugins list - list all WasmPlugins + gcloud alpha service-extensions wasm-plugins list - list all WasmPlugin + resources SYNOPSIS gcloud alpha service-extensions wasm-plugins list [--location=LOCATION] @@ -7,10 +8,10 @@ SYNOPSIS [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) List WasmPlugins. + (ALPHA) List WasmPlugin resources. EXAMPLES - To list existing WasmPlugins, run: + To list existing WasmPlugin resources, run: $ gcloud alpha service-extensions wasm-plugins list diff --git a/gcloud/alpha/service-extensions/wasm-plugins/update b/gcloud/alpha/service-extensions/wasm-plugins/update index 78f478090..d7163fae6 100644 --- a/gcloud/alpha/service-extensions/wasm-plugins/update +++ b/gcloud/alpha/service-extensions/wasm-plugins/update @@ -1,5 +1,6 @@ NAME gcloud alpha service-extensions wasm-plugins update - update a WasmPlugin + resource SYNOPSIS gcloud alpha service-extensions wasm-plugins update @@ -12,22 +13,22 @@ SYNOPSIS | --plugin-config-uri=PLUGIN_CONFIG_URI] [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (ALPHA) Update an existing WasmPlugin and optionally create a - WasmPluginVersion and set it as main (serving) one. + (ALPHA) Update an existing WasmPlugin resource and optionally create a + WasmPluginVersion resource and set it as the main (serving) one. If --image is not specified: ▪ the method only updates the WasmPlugin resource without creating a WasmPluginVersion. - ▪ the --plugin-config** flags are disallowed. + ▪ the --plugin-config*** flags are disallowed. ▪ if --main-version is set, then the referenced WasmPluginVersion must - already exists and it will be set as main (serving) one. + already exist and it is set as the main (serving) one. If --image is specified: - ▪ the --main-version flag should also be specified. + ▪ the --main-version flag must also be specified. ▪ the method updates the WasmPlugin resource and creates a new - WasmPluginVersion with --main-version name and sets it as main + WasmPluginVersion with --main-version name and sets it as the main (serving) one. - ▪ the --plugin-config** flags are allowed. + ▪ the --plugin-config*** flags are allowed. ▪ the --async flag is disallowed. EXAMPLES @@ -70,7 +71,7 @@ POSITIONAL ARGUMENTS arguments in this group are specified. --location=LOCATION - The location Id. + The location ID. To set the location attribute: ▸ provide the argument wasm_plugin on the command line with a fully @@ -84,7 +85,7 @@ FLAGS complete. --description=DESCRIPTION - Provides an optional, human-readable description of the service. + A human-readable description of the resource. --labels=[KEY=VALUE,...] List of label KEY=VALUE pairs to add. @@ -95,26 +96,26 @@ FLAGS numbers. --log-config=[LOG_CONFIG,...] - Logging options for the activity performed by this WasmPlugin. - Following options can be set: - ◆ enable - whether to enable logging. If log-config flag is set, + Logging options for the activity performed by this plugin. The + following options can be set: + ◆ enable: whether to enable logging. If log-config flag is set, enable option is required. - ◆ sample-rate - configures the sampling rate of activity logs, where + ◆ sample-rate: configures the sampling rate of activity logs, where 1.0 means all logged activity is reported and 0.0 means no activity is reported. The default value is 1.0, and the value of the field - must be in [0, 1]. + must be in range 0 to 1 (inclusive). - ◆ min-log-level - specificies the lowest level of the logs which - should be exported to Cloud Logging. The default value is INFO. + ◆ min-log-level: specifies the lowest level of the logs that should + be exported to Cloud Logging. The default value is INFO. Example usage: --log-config=enable=True,sample-rate=0.5,min-log-level=INFO --log_config=enable=False --image=IMAGE - URI of the container image containing the Wasm module, stored in the - Artifact Registry. + URI of the container image containing the plugin's Wasm module, stored + in the Artifact Registry. --main-version=MAIN_VERSION The ID of the WasmPluginVersion that should be the currently serving @@ -124,21 +125,21 @@ FLAGS created for that WasmPlugin and will be set as the current main version. - Configuration for the WasmPlugin, provided to the plugin at runtime via - the proxy_on_configure call (the exact name of the invoked function - depends on the Proxy-Wasm SDK used). + Configuration for the plugin, provided at runtime by the on_configure + function (Rust Proxy-Wasm SDK) or the onConfigure method (C++ Proxy-Wasm + SDK). At most one of these can be specified: --plugin-config=PLUGIN_CONFIG - WasmPlugin configuration in the textual format. + Plugin runtime configuration in the textual format. --plugin-config-file=PLUGIN_CONFIG_FILE - Path to a local file containing the plugin configuration. + Path to a local file containing the plugin runtime configuration. --plugin-config-uri=PLUGIN_CONFIG_URI - URI of the container image containing the plugin configuration, - stored in the Artifact Registry. + URI of the container image containing the plugin's runtime + configuration, stored in the Artifact Registry. GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, diff --git a/gcloud/alpha/sql/import/bak b/gcloud/alpha/sql/import/bak index f6dc35c9c..aaa5e4d23 100644 --- a/gcloud/alpha/sql/import/bak +++ b/gcloud/alpha/sql/import/bak @@ -5,7 +5,8 @@ NAME SYNOPSIS gcloud alpha sql import bak INSTANCE [URI] --database=DATABASE, -d DATABASE [--async] [--bak-type=BAK_TYPE; default="FULL"] [--no-recovery] - [--recovery-only] [--[no-]striped] + [--recovery-only] [--stop-at=STOP_AT] [--stop-at-mark=STOP_AT_MARK] + [--[no-]striped] [--cert-path=CERT_PATH --pvk-path=PVK_PATH (--prompt-for-pvk-password | --pvk-password=PVK_PASSWORD)] [GCLOUD_WIDE_FLAG ...] @@ -52,8 +53,8 @@ OPTIONAL FLAGS complete. --bak-type=BAK_TYPE; default="FULL" - Type of bak file that will be imported, FULL or DIFF. SQL Server only. - BAK_TYPE must be one of: FULL, DIFF. + Type of bak file that will be imported. Applicable to SQL Server only. + BAK_TYPE must be one of: FULL, DIFF, TLOG. --no-recovery Whether or not the SQL Server import is execueted with NORECOVERY @@ -63,6 +64,16 @@ OPTIONAL FLAGS Whether or not the SQL Server import skip download and bring database online. + --stop-at=STOP_AT + Equivalent to SQL Server STOPAT keyword. Used in transaction log import + only. Transaction log import stop at this timestamp. Format: + YYYY-MM-DDTHH:MM:SS. + + --stop-at-mark=STOP_AT_MARK + Equivalent to SQL Server STOPATMARK keyword. Used in transaction log + import only. Transaction log import stop at the given mark. To stop at + given LSN, use --stop-at-mark=lsn:xxx. + --[no-]striped Whether SQL Server import should be striped. Use --striped to enable and --no-striped to disable. diff --git a/gcloud/alpha/storage/cp b/gcloud/alpha/storage/cp index 7a6f258a0..8f360b0aa 100644 --- a/gcloud/alpha/storage/cp +++ b/gcloud/alpha/storage/cp @@ -5,7 +5,8 @@ SYNOPSIS gcloud alpha storage cp [SOURCE ...] DESTINATION [--additional-headers=HEADER=VALUE] [--all-versions, -A] [--no-clobber, -n] [--continue-on-error, -c] [--daisy-chain, -D] - [--do-not-decompress] [--manifest-path=MANIFEST_PATH, -L MANIFEST_PATH] + [--do-not-decompress] [--include-managed-folders] + [--manifest-path=MANIFEST_PATH, -L MANIFEST_PATH] [--preserve-posix, -P] [--print-created-message, -v] [--read-paths-from-stdin, -I] [--recursive, -R, -r] [--skip-unsupported, -U] @@ -114,6 +115,12 @@ FLAGS --do-not-decompress Do not automatically decompress downloaded gzip files. + --include-managed-folders + Includes managed folders in command operations. For transfers, gcloud + storage will set up managed folders in the destination with the same + IAM policy bindings as the source. Managed folders are only included + with recursive cloud-to-cloud transfers. + --manifest-path=MANIFEST_PATH, -L MANIFEST_PATH Outputs a manifest log file with detailed information about each item that was copied. This manifest contains the following information for diff --git a/gcloud/alpha/storage/help b/gcloud/alpha/storage/help index 93faa9346..d67e8a711 100644 --- a/gcloud/alpha/storage/help +++ b/gcloud/alpha/storage/help @@ -29,6 +29,9 @@ GROUPS insights (ALPHA) Manage Cloud Storage inventory reports. + managed-folders + (ALPHA) Manage Cloud Storage managed folders. + objects (ALPHA) Manage Cloud Storage objects. diff --git a/gcloud/alpha/storage/managed-folders/add-iam-policy-binding b/gcloud/alpha/storage/managed-folders/add-iam-policy-binding new file mode 100644 index 000000000..e5de6ccb7 --- /dev/null +++ b/gcloud/alpha/storage/managed-folders/add-iam-policy-binding @@ -0,0 +1,112 @@ +NAME + gcloud alpha storage managed-folders add-iam-policy-binding - add an IAM + policy binding to a managed folder + +SYNOPSIS + gcloud alpha storage managed-folders add-iam-policy-binding URL + --member=PRINCIPAL --role=ROLE + [--condition=[KEY=VALUE,...] + | --condition-from-file=CONDITION_FROM_FILE] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Add an IAM policy binding to a managed folder. For more + information, see Cloud Identity and Access Management + (https://cloud.google.com/storage/docs/access-control/iam). + +EXAMPLES + To grant a single role to a single principal for a managed folder + managed-folder in a bucket bucket: + + $ gcloud alpha storage managed-folders add-iam-policy-binding \ + gs://bucket/managed-folder --member=user:john.doe@example.com \ + --role=roles/storage.objectCreator + + To make objects in gs://bucket/managed-folder publicly readable: + + $ gcloud alpha storage managed-folders add-iam-policy-binding \ + gs://bucket/managed-folder --member=allUsers \ + --role=roles/storage.objectViewer + + To specify a custom role for a principal on gs://bucket/managed-folder: + + $ gcloud alpha storage managed-folders add-iam-policy-binding \ + gs://bucket/managed-folder --member=user:john.doe@example.com \ + --role=roles/customRoleName + +POSITIONAL ARGUMENTS + URL + URL of the managed folder to add IAM policy binding to. + +REQUIRED FLAGS + --member=PRINCIPAL + The principal to add the binding for. Should be of the form + user|group|serviceAccount:email or domain:domain. + + Examples: user:test-user@gmail.com, group:admins@example.com, + serviceAccount:test123@example.domain.com, or + domain:example.domain.com. + + Some resources also accept the following special values: + ◆ allUsers - Special identifier that represents anyone who is on the + internet, with or without a Google account. + ◆ allAuthenticatedUsers - Special identifier that represents anyone + who is authenticated with a Google account or a service account. + + --role=ROLE + Role name to assign to the principal. The role name is the complete + path of a predefined role, such as roles/logging.viewer, or the role ID + for a custom role, such as + organizations/{ORGANIZATION_ID}/roles/logging.viewer. + +OPTIONAL FLAGS + At most one of these can be specified: + + --condition=[KEY=VALUE,...] + A condition to include in the binding. When the condition is + explicitly specified as None (--condition=None), a binding without a + condition is added. When the condition is specified and is not None, + --role cannot be a basic role. Basic roles are roles/editor, + roles/owner, and roles/viewer. For more on conditions, refer to the + conditions overview guide: + https://cloud.google.com/iam/docs/conditions-overview + + When using the --condition flag, include the following key-value + pairs: + + expression + (Required) Condition expression that evaluates to True or False. + This uses a subset of Common Expression Language syntax. + + If the condition expression includes a comma, use a different + delimiter to separate the key-value pairs. Specify the delimiter + before listing the key-value pairs. For example, to specify a + colon (:) as the delimiter, do the following: + --condition=^:^title=TITLE:expression=EXPRESSION. For more + information, see + https://cloud.google.com/sdk/gcloud/reference/topic/escaping. + + title + (Required) A short string describing the purpose of the + expression. + + description + (Optional) Additional description for the expression. + + --condition-from-file=CONDITION_FROM_FILE + Path to a local JSON or YAML file that defines the condition. To see + available fields, see the help for --condition. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/storage/managed-folders/create b/gcloud/alpha/storage/managed-folders/create new file mode 100644 index 000000000..4f4eb6bcc --- /dev/null +++ b/gcloud/alpha/storage/managed-folders/create @@ -0,0 +1,41 @@ +NAME + gcloud alpha storage managed-folders create - create managed folders + +SYNOPSIS + gcloud alpha storage managed-folders create URL [URL ...] + [--additional-headers=HEADER=VALUE] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Create managed folders. + +EXAMPLES + The following command creates a managed folder called folder/ in a bucket + named my-bucket: + + $ gcloud alpha storage managed-folders create gs://my-bucket/folder/ + +POSITIONAL ARGUMENTS + URL [URL ...] + The URLs of the folders to create. + +FLAGS + --additional-headers=HEADER=VALUE + Includes arbitrary headers in storage API calls. Accepts a comma + separated list of key=value pairs, e.g. header1=value1,header2=value2. + Overrides the default storage/additional_headers property value for + this command invocation. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/storage/managed-folders/delete b/gcloud/alpha/storage/managed-folders/delete new file mode 100644 index 000000000..9bb186d7c --- /dev/null +++ b/gcloud/alpha/storage/managed-folders/delete @@ -0,0 +1,48 @@ +NAME + gcloud alpha storage managed-folders delete - delete managed folders + +SYNOPSIS + gcloud alpha storage managed-folders delete URL [URL ...] + [--additional-headers=HEADER=VALUE] [--continue-on-error, -c] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Delete managed folders. + +EXAMPLES + The following command deletes a managed folder named folder in a bucket + called my-bucket: + + $ gcloud alpha storage managed-folders delete gs://my-bucket/folder/ + +POSITIONAL ARGUMENTS + URL [URL ...] + The URLs of the managed folders to delete. + +FLAGS + --additional-headers=HEADER=VALUE + Includes arbitrary headers in storage API calls. Accepts a comma + separated list of key=value pairs, e.g. header1=value1,header2=value2. + Overrides the default storage/additional_headers property value for + this command invocation. + + --continue-on-error, -c + If any operations are unsuccessful, the command will exit with a + non-zero exit status after completing the remaining operations. This + flag takes effect only in sequential execution mode (i.e. processor and + thread count are set to 1). Parallelism is default. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/storage/managed-folders/describe b/gcloud/alpha/storage/managed-folders/describe new file mode 100644 index 000000000..576b76664 --- /dev/null +++ b/gcloud/alpha/storage/managed-folders/describe @@ -0,0 +1,46 @@ +NAME + gcloud alpha storage managed-folders describe - describe managed folders + +SYNOPSIS + gcloud alpha storage managed-folders describe URL + [--additional-headers=HEADER=VALUE] [--raw] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Describe managed folders. + +EXAMPLES + The following command shows information about a managed folder named folder + in a bucket called my-bucket: + + $ gcloud alpha storage managed-folders describe \ + gs://my-bucket/folder/ + +POSITIONAL ARGUMENTS + URL + The URL of the managed folder to describe. + +FLAGS + --additional-headers=HEADER=VALUE + Includes arbitrary headers in storage API calls. Accepts a comma + separated list of key=value pairs, e.g. header1=value1,header2=value2. + Overrides the default storage/additional_headers property value for + this command invocation. + + --raw + Shows metadata in the format returned by the API instead of + standardizing it. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/storage/managed-folders/get-iam-policy b/gcloud/alpha/storage/managed-folders/get-iam-policy new file mode 100644 index 000000000..b41c230b3 --- /dev/null +++ b/gcloud/alpha/storage/managed-folders/get-iam-policy @@ -0,0 +1,43 @@ +NAME + gcloud alpha storage managed-folders get-iam-policy - get the IAM policy + for a managed folder + +SYNOPSIS + gcloud alpha storage managed-folders get-iam-policy URL + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Get the IAM policy for a managed folder. For more information, see + Cloud Identity and Access Management + (https://cloud.google.com/storage/docs/access-control/iam). + +EXAMPLES + To get the IAM policy for a managed folder managed-folder in a bucket + bucket: + + $ gcloud alpha storage managed-folders get-iam-policy \ + gs://bucket/managed-folder/ + + To output the IAM policy for gs://bucket/managed-folder to a file: + + $ gcloud alpha storage managed-folders get-iam-policy \ + gs://bucket/managed-folder/ > policy.txt + +POSITIONAL ARGUMENTS + URL + URL of the managed folder to get the IAM policy of. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/storage/managed-folders/help b/gcloud/alpha/storage/managed-folders/help new file mode 100644 index 000000000..9ca7c5f50 --- /dev/null +++ b/gcloud/alpha/storage/managed-folders/help @@ -0,0 +1,47 @@ +NAME + gcloud alpha storage managed-folders - manage Cloud Storage managed folders + +SYNOPSIS + gcloud alpha storage managed-folders COMMAND [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Manage Cloud Storage managed folders. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + add-iam-policy-binding + (ALPHA) Add an IAM policy binding to a managed folder. + + create + (ALPHA) Create managed folders. + + delete + (ALPHA) Delete managed folders. + + describe + (ALPHA) Describe managed folders. + + get-iam-policy + (ALPHA) Get the IAM policy for a managed folder. + + list + (ALPHA) List managed folders. + + remove-iam-policy-binding + (ALPHA) Remove an IAM policy binding from a managed folder. + + set-iam-policy + (ALPHA) Set the IAM policy for a managed folder. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/storage/managed-folders/list b/gcloud/alpha/storage/managed-folders/list new file mode 100644 index 000000000..c5dc5fdb5 --- /dev/null +++ b/gcloud/alpha/storage/managed-folders/list @@ -0,0 +1,78 @@ +NAME + gcloud alpha storage managed-folders list - list managed folders + +SYNOPSIS + gcloud alpha storage managed-folders list URL [URL ...] + [--additional-headers=HEADER=VALUE] [--raw] [--filter=EXPRESSION] + [--limit=LIMIT] [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) List managed folders. + +EXAMPLES + The following command lists all managed folders in a bucket: + + $ gcloud alpha storage managed-folders list gs://my-bucket/ + +POSITIONAL ARGUMENTS + URL [URL ...] + The URLs of the resources to list. + +FLAGS + --additional-headers=HEADER=VALUE + Includes arbitrary headers in storage API calls. Accepts a comma + separated list of key=value pairs, e.g. header1=value1,header2=value2. + Overrides the default storage/additional_headers property value for + this command invocation. + + --raw + Shows metadata in the format returned by the API instead of + standardizing it. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/storage/managed-folders/remove-iam-policy-binding b/gcloud/alpha/storage/managed-folders/remove-iam-policy-binding new file mode 100644 index 000000000..14ea663c3 --- /dev/null +++ b/gcloud/alpha/storage/managed-folders/remove-iam-policy-binding @@ -0,0 +1,107 @@ +NAME + gcloud alpha storage managed-folders remove-iam-policy-binding - remove an + IAM policy binding from a managed folder + +SYNOPSIS + gcloud alpha storage managed-folders remove-iam-policy-binding URL + --member=PRINCIPAL --role=ROLE + [--all | --condition=[KEY=VALUE,...] + | --condition-from-file=CONDITION_FROM_FILE] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Remove a policy binding from the IAM policy of a managed folder, + given a managed folder URL and the binding. For more information, see Cloud + Identity and Access Management + (https://cloud.google.com/storage/docs/access-control/iam). + +EXAMPLES + To remove an IAM policy binding from the role of + roles/storage.objectCreator for the user john.doe@example.com on a managed + folder managed-folder in a bucket bucket: + + $ gcloud alpha storage managed-folders remove-iam-policy-binding \ + gs://bucket/managed-folder --member=user:john.doe@example.com \ + --role=roles/storage.objectCreator + +POSITIONAL ARGUMENTS + URL + URL of managed folder to remove IAM policy binding from. + +REQUIRED FLAGS + --member=PRINCIPAL + The principal to remove the binding for. Should be of the form + user|group|serviceAccount:email or domain:domain. + + Examples: user:test-user@gmail.com, group:admins@example.com, + serviceAccount:test123@example.domain.com, or + domain:example.domain.com. + + Deleted principals have an additional deleted: prefix and a ?uid=UID + suffix, where UID is a unique identifier for the principal. Example: + deleted:user:test-user@gmail.com?uid=123456789012345678901. + + Some resources also accept the following special values: + ◆ allUsers - Special identifier that represents anyone who is on the + internet, with or without a Google account. + ◆ allAuthenticatedUsers - Special identifier that represents anyone + who is authenticated with a Google account or a service account. + + --role=ROLE + The role to remove the principal from. + +OPTIONAL FLAGS + At most one of these can be specified: + + --all + Remove all bindings with this role and principal, irrespective of any + conditions. + + --condition=[KEY=VALUE,...] + The condition of the binding that you want to remove. When the + condition is explicitly specified as None (--condition=None), a + binding without a condition is removed. Otherwise, only a binding + with a condition that exactly matches the specified condition + (including the optional description) is removed. For more on + conditions, refer to the conditions overview guide: + https://cloud.google.com/iam/docs/conditions-overview + + When using the --condition flag, include the following key-value + pairs: + + expression + (Required) Condition expression that evaluates to True or False. + This uses a subset of Common Expression Language syntax. + + If the condition expression includes a comma, use a different + delimiter to separate the key-value pairs. Specify the delimiter + before listing the key-value pairs. For example, to specify a + colon (:) as the delimiter, do the following: + --condition=^:^title=TITLE:expression=EXPRESSION. For more + information, see + https://cloud.google.com/sdk/gcloud/reference/topic/escaping. + + title + (Required) A short string describing the purpose of the + expression. + + description + (Optional) Additional description for the expression. + + --condition-from-file=CONDITION_FROM_FILE + Path to a local JSON or YAML file that defines the condition. To see + available fields, see the help for --condition. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/storage/managed-folders/set-iam-policy b/gcloud/alpha/storage/managed-folders/set-iam-policy new file mode 100644 index 000000000..2402c81d4 --- /dev/null +++ b/gcloud/alpha/storage/managed-folders/set-iam-policy @@ -0,0 +1,58 @@ +NAME + gcloud alpha storage managed-folders set-iam-policy - set the IAM policy + for a managed folder + +SYNOPSIS + gcloud alpha storage managed-folders set-iam-policy URLS [URLS ...] + POLICY_FILE [--continue-on-error, -c] [--etag=ETAG, -e ETAG] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (ALPHA) Set the IAM policy for a managed folder. For more information, see + Cloud Identity and Access Management + (https://cloud.google.com/storage/docs/access-control/iam). + +EXAMPLES + To set the IAM policy in POLICY-FILE on a managed folder managed-folder in + a bucket bucket: + + $ gcloud alpha storage managed-folders set-iam-policy \ + gs://bucket/managed-folder POLICY-FILE + +POSITIONAL ARGUMENTS + URLS [URLS ...] + URLs for managed folders to apply the IAM policy to. + + POLICY_FILE + Path to a local JSON or YAML formatted file containing a valid policy. + + The output of the get-iam-policy command is a valid file, as is any + JSON or YAML file conforming to the structure of a Policy + (https://cloud.google.com/iam/reference/rest/v1/Policy). + +FLAGS + --continue-on-error, -c + If any operations are unsuccessful, the command will exit with a + non-zero exit status after completing the remaining operations. This + flag takes effect only in sequential execution mode (i.e. processor and + thread count are set to 1). Parallelism is default. + + --etag=ETAG, -e ETAG + Custom etag to set on IAM policy. API will reject etags that do not + match this value, making it useful as a precondition during concurrent + operations. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + This command is currently in alpha and might change without notice. If this + command fails with API permission errors despite specifying the correct + project, you might be trying to access an API with an invitation-only early + access allowlist. + diff --git a/gcloud/alpha/storage/mv b/gcloud/alpha/storage/mv index 9496dc527..e7a148900 100644 --- a/gcloud/alpha/storage/mv +++ b/gcloud/alpha/storage/mv @@ -5,7 +5,8 @@ SYNOPSIS gcloud alpha storage mv [SOURCE ...] DESTINATION [--additional-headers=HEADER=VALUE] [--all-versions, -A] [--no-clobber, -n] [--continue-on-error, -c] [--daisy-chain, -D] - [--do-not-decompress] [--manifest-path=MANIFEST_PATH, -L MANIFEST_PATH] + [--do-not-decompress] [--include-managed-folders] + [--manifest-path=MANIFEST_PATH, -L MANIFEST_PATH] [--preserve-posix, -P] [--print-created-message, -v] [--read-paths-from-stdin, -I] [--skip-unsupported, -U] [--storage-class=STORAGE_CLASS, -s STORAGE_CLASS] @@ -125,6 +126,12 @@ FLAGS --do-not-decompress Do not automatically decompress downloaded gzip files. + --include-managed-folders + Includes managed folders in command operations. For transfers, gcloud + storage will set up managed folders in the destination with the same + IAM policy bindings as the source. Managed folders are only included + with recursive cloud-to-cloud transfers. + --manifest-path=MANIFEST_PATH, -L MANIFEST_PATH Outputs a manifest log file with detailed information about each item that was copied. This manifest contains the following information for diff --git a/gcloud/alpha/storage/rm b/gcloud/alpha/storage/rm index dade1a172..1a27f9d7a 100644 --- a/gcloud/alpha/storage/rm +++ b/gcloud/alpha/storage/rm @@ -4,7 +4,8 @@ NAME SYNOPSIS gcloud alpha storage rm [URLS ...] [--additional-headers=HEADER=VALUE] [--all-versions, -a] [--continue-on-error, -c] - [--read-paths-from-stdin, -I] [--recursive, -R, -r] + [--exclude-managed-folders] [--read-paths-from-stdin, -I] + [--recursive, -R, -r] [--if-generation-match=GENERATION --if-metageneration-match=METAGENERATION] [GCLOUD_WIDE_FLAG ...] @@ -68,6 +69,10 @@ FLAGS flag takes effect only in sequential execution mode (i.e. processor and thread count are set to 1). Parallelism is default. + --exclude-managed-folders + Excludes managed folders from command operations. By default gcloud + storage includes managed folders in recursive removals. + --read-paths-from-stdin, -I Read the list of URLs from stdin. diff --git a/gcloud/alpha/storage/rsync b/gcloud/alpha/storage/rsync index 6597c7bb1..253302a82 100644 --- a/gcloud/alpha/storage/rsync +++ b/gcloud/alpha/storage/rsync @@ -11,8 +11,9 @@ SYNOPSIS [--exclude=[REGEX,...], -x [REGEX,...]] [--gzip-in-flight=[FILE_EXTENSIONS,...], -j [FILE_EXTENSIONS,...]] [--gzip-in-flight-all, -J] [--no-ignore-symlinks] - [--preserve-posix, -P] [--recursive, -R, -r] - [--skip-if-dest-has-newer-mtime, -u] [--skip-unsupported, -U] + [--include-managed-folders] [--preserve-posix, -P] + [--recursive, -R, -r] [--skip-if-dest-has-newer-mtime, -u] + [--skip-unsupported, -U] [--decryption-keys=[DECRYPTION_KEY,...] --encryption-key=ENCRYPTION_KEY] [--cache-control=CACHE_CONTROL @@ -74,7 +75,7 @@ EXAMPLES $ gcloud alpha storage rsync dir1 dir2 --recursive - \ --delete-unmatched-destination-objects - To mirror your content across cloud providers: + To mirror your objects across cloud providers: $ gcloud alpha storage rsync gs://my-gs-bucket s3://my-s3-bucket \ --recursive --delete-unmatched-destination-objects @@ -132,7 +133,8 @@ FLAGS --delete-unmatched-destination-objects Delete extra files under DESTINATION not found under SOURCE. By default - extra files are not deleted. + extra files are not deleted. Managed folders are not affected by this + flag. Note: this option can delete data quickly if you specify the wrong source and destination combination. @@ -177,6 +179,12 @@ FLAGS Ignore file symlinks instead of copying what they point to. Enabled by default, use --no-ignore-symlinks to disable. + --include-managed-folders + Includes managed folders in command operations. For transfers, gcloud + storage will set up managed folders in the destination with the same + IAM policy bindings as the source. Managed folders are only included + with recursive cloud-to-cloud transfers. + --preserve-posix, -P Causes POSIX attributes to be preserved when objects are copied. With this feature enabled, gcloud storage will copy several fields provided diff --git a/gcloud/alpha/storage/sign-url b/gcloud/alpha/storage/sign-url index 7efa8af7c..092412eff 100644 --- a/gcloud/alpha/storage/sign-url +++ b/gcloud/alpha/storage/sign-url @@ -4,10 +4,10 @@ NAME SYNOPSIS gcloud alpha storage sign-url URL [URL ...] - --private-key-file=PRIVATE_KEY_FILE [--duration=DURATION, -d DURATION; default=3600] [--headers=[KEY=VALUE,...]] [--http-verb=HTTP_VERB, -m HTTP_VERB; default="GET"] + [--private-key-file=PRIVATE_KEY_FILE] [--private-key-password=PRIVATE_KEY_PASSWORD, -p PRIVATE_KEY_PASSWORD] [--query-params=[KEY=VALUE,...]] [--region=REGION, -r REGION] [GCLOUD_WIDE_FLAG ...] @@ -15,7 +15,10 @@ SYNOPSIS DESCRIPTION (ALPHA) gcloud alpha storage sign-url will generate a signed URL that embeds authentication data so the URL can be used by someone who does not - have a Google account. Please see the Signed URLs documentation + have a Google account. Use the global --impersonate-service-account flag to + specify the service account that will be used to sign the specified URL or + authenticate with a service account directly. Otherwise, a service account + key is required. Please see the Signed URLs documentation (https://cloud.google.com/storage/docs/access-control/signed-urls) for background about signed URLs. @@ -26,26 +29,31 @@ DESCRIPTION gs://some-bucket/some-directory/. EXAMPLES - To create a signed url for downloading an object valid for 10 minutes: + To create a signed url for downloading an object valid for 10 minutes with + the credentials of an impersonated service account: $ gcloud alpha storage sign-url gs://my-bucket/file.txt \ - --duration=10m --private-key-file=key.json + --duration=10m \ + --impersonate-service-account=sa@my-project.iam.gserviceaccount.\ + com - To create a signed url that will bill to my-billing-project: + To create a signed url that will bill to my-billing-project when already + authenticated as a service account: $ gcloud alpha storage sign-url gs://my-bucket/file.txt \ - --query-params=userProject=my-billing-project \ - --private-key-file=key.json + --query-params=userProject=my-billing-project To create a signed url, valid for one hour, for uploading a plain text file via HTTP PUT: $ gcloud alpha storage sign-url gs://my-bucket/file.txt \ --http-verb=PUT --duration=1h \ - --headers=content-type=text/plain --private-key-file=key.json + --headers=content-type=text/plain \ + --impersonate-service-account=sa@my-project.iam.gserviceaccount.\ + com To create a signed URL that initiates a resumable upload for a plain text - file: + file using a private key file: $ gcloud alpha storage sign-url gs://my-bucket/file.txt \ --http-verb=POST \ @@ -56,20 +64,19 @@ POSITIONAL ARGUMENTS URL [URL ...] The URLs to be signed. May contain wildcards. -REQUIRED FLAGS - --private-key-file=PRIVATE_KEY_FILE - The service account private key used to generate the cryptographic - signature for the generated URL. Must be in PKCS12 or JSON format. If - encrypted, will prompt for the passphrase used to protect the private - key file (default notasecret). - -OPTIONAL FLAGS +FLAGS --duration=DURATION, -d DURATION; default=3600 Specifies the duration that the signed url should be valid for, default duration is 1 hour. For example 10s for 10 seconds. See $ gcloud topic datetimes for information on duration formats. - The max duration allowed is 7 days when PRIVATE_KEY_FILE is used. + The max duration allowed is 12 hours. This limitation exists because + the system-managed key used to sign the URL may not remain valid after + 12 hours. + + Alternatively, the max duration allowed is 7 days when signing with + either the --private-key-file flag or an account that authorized with + gcloud auth activate-service-account. --headers=[KEY=VALUE,...] Specifies the headers to be used in the signed request. Possible @@ -82,8 +89,19 @@ OPTIONAL FLAGS session, you will need to specify the x-goog-resumable:start header in the request or else signature validation will fail. + --private-key-file=PRIVATE_KEY_FILE + The service account private key used to generate the cryptographic + signature for the generated URL. Must be in PKCS12 or JSON format. If + encrypted, will prompt for the passphrase used to protect the private + key file (default notasecret). + + Note: Service account keys are a security risk if not managed + correctly. Review best practices for managing service account keys + (https://cloud.google.com/iam/docs/best-practices-for-managing-service-account-keys) + before using this option. + --private-key-password=PRIVATE_KEY_PASSWORD, -p PRIVATE_KEY_PASSWORD - Specifies the private key password instead of prompting. + Specifies the PRIVATE_KEY_FILE password instead of prompting. --query-params=[KEY=VALUE,...] Specifies the query parameters to be used in the signed request. diff --git a/gcloud/asset/search-all-resources b/gcloud/asset/search-all-resources index ece512499..ad96f15fd 100644 --- a/gcloud/asset/search-all-resources +++ b/gcloud/asset/search-all-resources @@ -92,6 +92,30 @@ FLAGS ◆ labels.env:prod to find Cloud resources that have a label env and its value is prod. ◆ labels.env:* to find Cloud resources that have a label env. + ◆ tagKeys:env to find Cloud resources that are directly attached to + tags where the `TagKey.namespacedName` + (https://cloud.google.com/resource-manager/reference/rest/v3/tagKeys#resource:-tagkey) + contains env. + ◆ tagValues:prod* to find Cloud resources that are directly attached + to tags where the `TagValue.namespacedName` + (https://cloud.google.com/resource-manager/reference/rest/v3/tagValues#resource:-tagvalue) + contains a word prefixed by prod. + ◆ tagValueIds=tagValues/123 to find Cloud resources that are directly + attached to tags where the `TagValue.name` + (https://cloud.google.com/resource-manager/reference/rest/v3/tagValues#resource:-tagvalue) + is exactly tagValues/123. + ◆ effectiveTagKeys:env to find Cloud resources that are directly + attached to or inherited tags where the `TagKey.namespacedName` + (https://cloud.google.com/resource-manager/reference/rest/v3/tagKeys#resource:-tagkey) + contains env. + ◆ effectiveTagValues:prod* to find Cloud resources that are directly + attached to or inherited tags where the `TagValue.namespacedName` + (https://cloud.google.com/resource-manager/reference/rest/v3/tagValues#resource:-tagvalue) + contains a word prefixed by prod. + ◆ effectiveTagValueIds=tagValues/123 to find Cloud resources that are + directly attached to or inherited tags where the `TagValue.name` + (https://cloud.google.com/resource-manager/reference/rest/v3/tagValues#resource:-tagvalue) + is exactly tagValues/123. ◆ kmsKey:key to find Cloud resources encrypted with a customer-managed encryption key whose name contains key as a word. This field is deprecated. Please use the kmsKeys field to retrieve @@ -144,6 +168,8 @@ FLAGS ◆ description ◆ location ◆ labels + ◆ tags + ◆ effective_tags or effectiveTags ◆ network_tags or networkTags ◆ kms_keys or kmsKeys ◆ create_time or createTime diff --git a/gcloud/assured/workloads/violations/acknowledge b/gcloud/assured/workloads/violations/acknowledge index 063de75fe..332cdf24a 100644 --- a/gcloud/assured/workloads/violations/acknowledge +++ b/gcloud/assured/workloads/violations/acknowledge @@ -6,7 +6,7 @@ SYNOPSIS gcloud assured workloads violations acknowledge (VIOLATION : --location=LOCATION --organization=ORGANIZATION --workload=WORKLOAD) --comment=COMMENT - [GCLOUD_WIDE_FLAG ...] + [--acknowledge-type=ACKNOWLEDGE_TYPE] [GCLOUD_WIDE_FLAG ...] DESCRIPTION Acknowledge an existing Assured Workloads compliance violation. @@ -64,6 +64,13 @@ REQUIRED FLAGS --comment=COMMENT Business justification used added to acknowledge a violation. +OPTIONAL FLAGS + --acknowledge-type=ACKNOWLEDGE_TYPE + the acknowledge type for specified violation, which is one of: + SINGLE_VIOLATION - to acknowledge specified violation, + EXISTING_CHILD_RESOURCE_VIOLATIONS - to acknowledge specified org + policy violation and all associated child resource violations. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/beta/asset/search-all-resources b/gcloud/beta/asset/search-all-resources index 64c3851db..84ad8612d 100644 --- a/gcloud/beta/asset/search-all-resources +++ b/gcloud/beta/asset/search-all-resources @@ -93,6 +93,30 @@ FLAGS ◆ labels.env:prod to find Cloud resources that have a label env and its value is prod. ◆ labels.env:* to find Cloud resources that have a label env. + ◆ tagKeys:env to find Cloud resources that are directly attached to + tags where the `TagKey.namespacedName` + (https://cloud.google.com/resource-manager/reference/rest/v3/tagKeys#resource:-tagkey) + contains env. + ◆ tagValues:prod* to find Cloud resources that are directly attached + to tags where the `TagValue.namespacedName` + (https://cloud.google.com/resource-manager/reference/rest/v3/tagValues#resource:-tagvalue) + contains a word prefixed by prod. + ◆ tagValueIds=tagValues/123 to find Cloud resources that are directly + attached to tags where the `TagValue.name` + (https://cloud.google.com/resource-manager/reference/rest/v3/tagValues#resource:-tagvalue) + is exactly tagValues/123. + ◆ effectiveTagKeys:env to find Cloud resources that are directly + attached to or inherited tags where the `TagKey.namespacedName` + (https://cloud.google.com/resource-manager/reference/rest/v3/tagKeys#resource:-tagkey) + contains env. + ◆ effectiveTagValues:prod* to find Cloud resources that are directly + attached to or inherited tags where the `TagValue.namespacedName` + (https://cloud.google.com/resource-manager/reference/rest/v3/tagValues#resource:-tagvalue) + contains a word prefixed by prod. + ◆ effectiveTagValueIds=tagValues/123 to find Cloud resources that are + directly attached to or inherited tags where the `TagValue.name` + (https://cloud.google.com/resource-manager/reference/rest/v3/tagValues#resource:-tagvalue) + is exactly tagValues/123. ◆ kmsKey:key to find Cloud resources encrypted with a customer-managed encryption key whose name contains key as a word. This field is deprecated. Please use the kmsKeys field to retrieve diff --git a/gcloud/beta/assured/workloads/violations/acknowledge b/gcloud/beta/assured/workloads/violations/acknowledge index a085e92df..4ccd0552d 100644 --- a/gcloud/beta/assured/workloads/violations/acknowledge +++ b/gcloud/beta/assured/workloads/violations/acknowledge @@ -6,7 +6,7 @@ SYNOPSIS gcloud beta assured workloads violations acknowledge (VIOLATION : --location=LOCATION --organization=ORGANIZATION --workload=WORKLOAD) --comment=COMMENT - [GCLOUD_WIDE_FLAG ...] + [--acknowledge-type=ACKNOWLEDGE_TYPE] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) Acknowledge an existing Assured Workloads compliance violation. @@ -64,6 +64,13 @@ REQUIRED FLAGS --comment=COMMENT Business justification used added to acknowledge a violation. +OPTIONAL FLAGS + --acknowledge-type=ACKNOWLEDGE_TYPE + the acknowledge type for specified violation, which is one of: + SINGLE_VIOLATION - to acknowledge specified violation, + EXISTING_CHILD_RESOURCE_VIOLATIONS - to acknowledge specified org + policy violation and all associated child resource violations. + GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/beta/compute/backend-services/create b/gcloud/beta/compute/backend-services/create index 9883cc71b..3ea9b9ff8 100644 --- a/gcloud/beta/compute/backend-services/create +++ b/gcloud/beta/compute/backend-services/create @@ -24,6 +24,7 @@ SYNOPSIS [--iap=disabled|enabled,[oauth2-client-id=OAUTH2-CLIENT-ID, oauth2-client-secret=OAUTH2-CLIENT-SECRET]] [--idle-timeout-sec=IDLE_TIMEOUT_SEC] + [--ip-address-selection-policy=IP_ADDRESS_SELECTION_POLICY] [--load-balancing-scheme=LOAD_BALANCING_SCHEME; default="EXTERNAL"] [--locality-lb-policy=LOCALITY_LB_POLICY] [--logging-optional=LOGGING_OPTIONAL] @@ -337,6 +338,32 @@ FLAGS service-based external and internal passthrough Network Load Balancers as part of a connection tracking policy. + --ip-address-selection-policy=IP_ADDRESS_SELECTION_POLICY + Specifies a preference for traffic sent from the proxy to the backend + (or from the client to the backend for proxyless gRPC). + + Can only be set if load balancing scheme is INTERNAL_SELF_MANAGED, + INTERNAL_MANAGED or EXTERNAL_MANAGED. + + The possible values are: + + IPV4_ONLY + Only send IPv4 traffic to the backends of the backend service, + regardless of traffic from the client to the proxy. Only IPv4 + health checks are used to check the health of the backends. + + PREFER_IPV6 + Prioritize the connection to the endpoint's IPv6 address over its IPv4 + address (provided there is a healthy IPv6 address). + + IPV6_ONLY + Only send IPv6 traffic to the backends of the backend service, + regardless of traffic from the client to the proxy. Only IPv6 + health checks are used to check the health of the backends. + + IP_ADDRESS_SELECTION_POLICY must be one of: IPV4_ONLY, PREFER_IPV6, + IPV6_ONLY. + --load-balancing-scheme=LOAD_BALANCING_SCHEME; default="EXTERNAL" Specifies the load balancer type. Choose EXTERNAL for the classic Application Load Balancers, the external passthrough Network Load diff --git a/gcloud/beta/compute/backend-services/list-usable b/gcloud/beta/compute/backend-services/list-usable index 67dd88a79..cad180de2 100644 --- a/gcloud/beta/compute/backend-services/list-usable +++ b/gcloud/beta/compute/backend-services/list-usable @@ -9,10 +9,10 @@ SYNOPSIS [GCLOUD_WIDE_FLAG ...] DESCRIPTION - (BETA) $ gcloud beta compute backend-services list-usable retrieves the - list of backend service resources in the specified project for which you - have compute.backendService.get and compute.backendService.use permissions. - This command is useful when you're creating load balancers in a Shared VPC + (BETA) gcloud beta compute backend-services list-usable retrieves the list + of backend service resources in the specified project for which you have + compute.backendService.get and compute.backendService.use permissions. This + command is useful when you're creating load balancers in a Shared VPC environment and you want to use cross-project service referencing (https://cloud.google.com/load-balancing/docs/https#cross-project). You can use this command to find out which backend services in other projects are @@ -82,8 +82,10 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. NOTES - This command is currently in beta and might change without notice. This - variant is also available: + This command is currently in beta and might change without notice. These + variants are also available: + + $ gcloud compute backend-services list-usable $ gcloud alpha compute backend-services list-usable diff --git a/gcloud/beta/compute/backend-services/update b/gcloud/beta/compute/backend-services/update index dd7b72685..28f408d44 100644 --- a/gcloud/beta/compute/backend-services/update +++ b/gcloud/beta/compute/backend-services/update @@ -20,6 +20,7 @@ SYNOPSIS [--iap=disabled|enabled,[oauth2-client-id=OAUTH2-CLIENT-ID, oauth2-client-secret=OAUTH2-CLIENT-SECRET]] [--idle-timeout-sec=IDLE_TIMEOUT_SEC] + [--ip-address-selection-policy=IP_ADDRESS_SELECTION_POLICY] [--locality-lb-policy=LOCALITY_LB_POLICY] [--logging-optional=LOGGING_OPTIONAL] [--logging-optional-fields=[LOGGING_OPTIONAL_FIELDS,...]] @@ -256,6 +257,32 @@ FLAGS service-based external and internal passthrough Network Load Balancers as part of a connection tracking policy. + --ip-address-selection-policy=IP_ADDRESS_SELECTION_POLICY + Specifies a preference for traffic sent from the proxy to the backend + (or from the client to the backend for proxyless gRPC). + + Can only be set if load balancing scheme is INTERNAL_SELF_MANAGED, + INTERNAL_MANAGED or EXTERNAL_MANAGED. + + The possible values are: + + IPV4_ONLY + Only send IPv4 traffic to the backends of the backend service, + regardless of traffic from the client to the proxy. Only IPv4 + health checks are used to check the health of the backends. + + PREFER_IPV6 + Prioritize the connection to the endpoint's IPv6 address over its IPv4 + address (provided there is a healthy IPv6 address). + + IPV6_ONLY + Only send IPv6 traffic to the backends of the backend service, + regardless of traffic from the client to the proxy. Only IPv6 + health checks are used to check the health of the backends. + + IP_ADDRESS_SELECTION_POLICY must be one of: IPV4_ONLY, PREFER_IPV6, + IPV6_ONLY. + --locality-lb-policy=LOCALITY_LB_POLICY The load balancing algorithm used within the scope of the locality. LOCALITY_LB_POLICY must be one of: INVALID_LB_POLICY, ROUND_ROBIN, diff --git a/gcloud/beta/compute/sole-tenancy/node-groups/create b/gcloud/beta/compute/sole-tenancy/node-groups/create index 8fdace65d..c38b17c9d 100644 --- a/gcloud/beta/compute/sole-tenancy/node-groups/create +++ b/gcloud/beta/compute/sole-tenancy/node-groups/create @@ -43,12 +43,14 @@ OPTIONAL FLAGS MAINTENANCE_INTERVAL must be one of: as-needed - VMs are eligible to receive infrastructure and hypervisor updates + hosts are eligible to receive infrastructure and hypervisor updates as they become available. recurrent - VMs receive infrastructure and hypervisor updates on a periodic - basis, minimizing the number of maintenance operations (live - migrations or terminations) on an individual VM. + hosts receive planned infrastructure and hypervisor updates on a + periodic basis, but not more frequently than every 28 days. This + minimizes the number of planned maintenance operations on + individual hosts and reduces the frequency of disruptions, both + live migrations and terminations, on individual VMs. --maintenance-policy=MAINTENANCE_POLICY Determines the maintenance behavior during host maintenance events. For diff --git a/gcloud/beta/container/clusters/create b/gcloud/beta/container/clusters/create index 1eb73156b..cecc5ce73 100644 --- a/gcloud/beta/container/clusters/create +++ b/gcloud/beta/container/clusters/create @@ -26,9 +26,10 @@ SYNOPSIS [--disk-size=DISK_SIZE] [--disk-type=DISK_TYPE] [--enable-autorepair] [--no-enable-autoupgrade] [--enable-cloud-logging] [--enable-cloud-monitoring] [--enable-cloud-run-alpha] - [--enable-confidential-nodes] [--enable-cost-allocation] - [--enable-dataplane-v2] [--enable-fleet] [--enable-fqdn-network-policy] - [--enable-gke-oidc] [--enable-google-cloud-access] [--enable-gvnic] + [--enable-confidential-nodes] [--enable-confidential-storage] + [--enable-cost-allocation] [--enable-dataplane-v2] [--enable-fleet] + [--enable-fqdn-network-policy] [--enable-gke-oidc] + [--enable-google-cloud-access] [--enable-gvnic] [--enable-identity-service] [--enable-image-streaming] [--enable-intra-node-visibility] [--enable-ip-alias] [--enable-kubernetes-alpha] @@ -41,6 +42,7 @@ SYNOPSIS [--enable-stackdriver-kubernetes] [--enable-vertical-pod-autoscaling] [--fleet-project=PROJECT_ID_OR_NUMBER] [--gateway-api=GATEWAY_API] [--identity-provider=IDENTITY_PROVIDER] [--image-type=IMAGE_TYPE] + [--in-transit-encryption=IN_TRANSIT_ENCRYPTION] [--ipv6-access-type=IPV6_ACCESS_TYPE] [--issue-client-certificate] [--istio-config=[auth=MTLS_PERMISSIVE,...]] [--labels=[KEY=VALUE,...]] [--logging=[COMPONENT,...]] [--logging-variant=LOGGING_VARIANT] @@ -480,6 +482,10 @@ FLAGS will create nodes using Confidential VM https://cloud.google.com/compute/confidential-vm/docs/about-cvm. + --enable-confidential-storage + Enable confidential storage for the cluster. Enabling Confidential + Storage will create boot disk with confidential mode + --enable-cost-allocation Enable the cost management feature. @@ -674,6 +680,11 @@ FLAGS $ gcloud container get-server-config + --in-transit-encryption=IN_TRANSIT_ENCRYPTION + Enable Dataplane V2 in-transit encryption. Dataplane v2 in-transit + encryption is disabled by default. IN_TRANSIT_ENCRYPTION must be one + of: inter-node-transparent, none. + --ipv6-access-type=IPV6_ACCESS_TYPE IPv6 access type of the subnetwork. Defaults to 'external'. IPV6_ACCESS_TYPE must be one of: external, internal. diff --git a/gcloud/beta/container/clusters/update b/gcloud/beta/container/clusters/update index 7a425b181..497dac425 100644 --- a/gcloud/beta/container/clusters/update +++ b/gcloud/beta/container/clusters/update @@ -25,6 +25,7 @@ SYNOPSIS | --enable-vertical-pod-autoscaling | --fleet-project=PROJECT_ID_OR_NUMBER | --gateway-api=GATEWAY_API | --generate-password | --identity-provider=IDENTITY_PROVIDER + | --in-transit-encryption=IN_TRANSIT_ENCRYPTION | --logging-variant=LOGGING_VARIANT | --maintenance-window=START_TIME | --network-performance-configs=[PROPERTY1=VALUE1,...] | --notification-config=[pubsub=ENABLED|DISABLED, @@ -418,6 +419,11 @@ REQUIRED FLAGS --identity-provider=IDENTITY_PROVIDER Enable 3P identity provider on the cluster. + --in-transit-encryption=IN_TRANSIT_ENCRYPTION + Enable Dataplane V2 in-transit encryption. Dataplane v2 in-transit + encryption is disabled by default. IN_TRANSIT_ENCRYPTION must be one + of: inter-node-transparent, none. + --logging-variant=LOGGING_VARIANT Specifies the logging variant that will be deployed on all the nodes in the cluster. Valid logging variants are MAX_THROUGHPUT, DEFAULT. diff --git a/gcloud/beta/container/node-pools/create b/gcloud/beta/container/node-pools/create index 9d689ab9c..9a280399f 100644 --- a/gcloud/beta/container/node-pools/create +++ b/gcloud/beta/container/node-pools/create @@ -19,7 +19,8 @@ SYNOPSIS [--disk-type=DISK_TYPE] [--enable-autoprovisioning] [--enable-autorepair] [--no-enable-autoupgrade] [--enable-blue-green-upgrade] [--enable-confidential-nodes] - [--enable-gvnic] [--enable-image-streaming] [--enable-private-nodes] + [--enable-confidential-storage] [--enable-gvnic] + [--enable-image-streaming] [--enable-private-nodes] [--enable-surge-upgrade] [--image-type=IMAGE_TYPE] [--labels=[KEY=VALUE,...]] [--logging-variant=LOGGING_VARIANT] [--machine-type=MACHINE_TYPE, -m MACHINE_TYPE] @@ -233,6 +234,10 @@ FLAGS Nodes will create nodes using Confidential VM https://cloud.google.com/compute/confidential-vm/docs/about-cvm. + --enable-confidential-storage + Enable confidential storage for the node pool. Enabling Confidential + Storage will create boot disk with confidential mode + --enable-gvnic Enable the use of GVNIC for this cluster. Requires re-creation of nodes using either a node-pool upgrade or node-pool creation. diff --git a/gcloud/beta/filestore/instances/create b/gcloud/beta/filestore/instances/create index 6648c1de7..e65d5a010 100644 --- a/gcloud/beta/filestore/instances/create +++ b/gcloud/beta/filestore/instances/create @@ -264,8 +264,7 @@ OPTIONAL FLAGS ENTERPRISE instances offer the features and availability needed for mission-critical workloads. high-scale-ssd - High Scale instances offer NFS storage system with expanded - capacity and performance scaling capabilities. Use ZONAL instead + High Scale SSD instance, an alias for ZONAL. Use ZONAL instead whenever possible. premium Premium Filestore instance, An alias for BASIC_SSD. Use BASIC_SSD diff --git a/gcloud/beta/iam/workload-identity-pools/providers/create-oidc b/gcloud/beta/iam/workload-identity-pools/providers/create-oidc index e2d61d1c3..562ea2915 100644 --- a/gcloud/beta/iam/workload-identity-pools/providers/create-oidc +++ b/gcloud/beta/iam/workload-identity-pools/providers/create-oidc @@ -217,9 +217,9 @@ OPTIONAL FLAGS "use": "sig", "kid": "", "n": "", - "e": "" - "x": "" - "y": "" + "e": "", + "x": "", + "y": "", "crv": "" } ] diff --git a/gcloud/beta/iam/workload-identity-pools/providers/update-oidc b/gcloud/beta/iam/workload-identity-pools/providers/update-oidc index e02b0962a..1495c95bd 100644 --- a/gcloud/beta/iam/workload-identity-pools/providers/update-oidc +++ b/gcloud/beta/iam/workload-identity-pools/providers/update-oidc @@ -216,9 +216,9 @@ FLAGS "use": "sig", "kid": "", "n": "", - "e": "" - "x": "" - "y": "" + "e": "", + "x": "", + "y": "", "crv": "" } ] diff --git a/gcloud/beta/kms/raw-decrypt b/gcloud/beta/kms/raw-decrypt index 185c08101..54787f5e4 100644 --- a/gcloud/beta/kms/raw-decrypt +++ b/gcloud/beta/kms/raw-decrypt @@ -3,12 +3,11 @@ NAME SYNOPSIS gcloud beta kms raw-decrypt --ciphertext-file=CIPHERTEXT_FILE - --plaintext-file=PLAINTEXT_FILE + --plaintext-file=PLAINTEXT_FILE --version=VERSION [--additional-authenticated-data-file=ADDITIONAL_AUTHENTICATED_DATA_FILE] [--initialization-vector-file=INITIALIZATION_VECTOR_FILE] [--key=KEY] [--keyring=KEYRING] [--location=LOCATION] - [--skip-integrity-verification] [--version=VERSION] - [GCLOUD_WIDE_FLAG ...] + [--skip-integrity-verification] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) gcloud beta kms raw-decrypt decrypts the given ciphertext file using @@ -54,6 +53,9 @@ REQUIRED FLAGS --plaintext-file=PLAINTEXT_FILE File path of the plaintext file to store the decrypted data. + --version=VERSION + Version to use for decryption. + OPTIONAL FLAGS --additional-authenticated-data-file=ADDITIONAL_AUTHENTICATED_DATA_FILE File path to the optional file containing the additional authenticated @@ -75,9 +77,6 @@ OPTIONAL FLAGS --skip-integrity-verification Skip integrity verification on request and response API fields. - --version=VERSION - Version to use for decryption. - GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/beta/kms/raw-encrypt b/gcloud/beta/kms/raw-encrypt index fc803d2cc..d49f50d54 100644 --- a/gcloud/beta/kms/raw-encrypt +++ b/gcloud/beta/kms/raw-encrypt @@ -3,12 +3,11 @@ NAME SYNOPSIS gcloud beta kms raw-encrypt --ciphertext-file=CIPHERTEXT_FILE - --plaintext-file=PLAINTEXT_FILE + --plaintext-file=PLAINTEXT_FILE --version=VERSION [--additional-authenticated-data-file=ADDITIONAL_AUTHENTICATED_DATA_FILE] [--initialization-vector-file=INITIALIZATION_VECTOR_FILE] [--key=KEY] [--keyring=KEYRING] [--location=LOCATION] - [--skip-integrity-verification] [--version=VERSION] - [GCLOUD_WIDE_FLAG ...] + [--skip-integrity-verification] [GCLOUD_WIDE_FLAG ...] DESCRIPTION (BETA) Encrypts the given plaintext file using the given CryptoKey @@ -73,6 +72,9 @@ REQUIRED FLAGS --plaintext-file=PLAINTEXT_FILE File path of the plaintext file to encrypt. + --version=VERSION + Version to use for encryption. + OPTIONAL FLAGS --additional-authenticated-data-file=ADDITIONAL_AUTHENTICATED_DATA_FILE File path to the optional file containing the additional authenticated @@ -94,9 +96,6 @@ OPTIONAL FLAGS --skip-integrity-verification Skip integrity verification on request and response API fields. - --version=VERSION - Version to use for encryption. - GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/beta/service-extensions/help b/gcloud/beta/service-extensions/help index 6801db212..7af700921 100644 --- a/gcloud/beta/service-extensions/help +++ b/gcloud/beta/service-extensions/help @@ -12,6 +12,15 @@ GCLOUD WIDE FLAGS Run $ gcloud help for details. +GROUPS + GROUP is one of the following: + + lb-route-extensions + (BETA) Manage Service Extensions LbRouteExtension resources. + + lb-traffic-extensions + (BETA) Manage Service Extensions LbTrafficExtension resources. + NOTES This command is currently in beta and might change without notice. This variant is also available: diff --git a/gcloud/beta/service-extensions/lb-route-extensions/delete b/gcloud/beta/service-extensions/lb-route-extensions/delete new file mode 100644 index 000000000..dfbdad7bb --- /dev/null +++ b/gcloud/beta/service-extensions/lb-route-extensions/delete @@ -0,0 +1,74 @@ +NAME + gcloud beta service-extensions lb-route-extensions delete - delete an + LbRouteExtension resource + +SYNOPSIS + gcloud beta service-extensions lb-route-extensions delete + (LB_ROUTE_EXTENSION : --location=LOCATION) [--async] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Delete the specified LbRouteExtension resource. + +EXAMPLES + To delete an LbRouteExtension resource named my-route-extension in + us-central1, run: + + $ gcloud beta service-extensions lb-route-extensions delete \ + my-route-extension --location=us-central1 + +POSITIONAL ARGUMENTS + LbRouteExtension resource - The ID of the deleted LbRouteExtension + resource. The arguments in this group can be used to specify the + attributes of this resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument lb_route_extension on the command line with a + fully specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + LB_ROUTE_EXTENSION + ID of the LbRouteExtension or fully qualified identifier for the + LbRouteExtension. + + To set the lb_route_extension attribute: + ▸ provide the argument lb_route_extension on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Cloud region in which the resource is located. + + To set the location attribute: + ▸ provide the argument lb_route_extension on the command line with + a fully specified name; + ▸ provide the argument --location on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networkservices/v1beta1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha service-extensions lb-route-extensions delete + diff --git a/gcloud/beta/service-extensions/lb-route-extensions/describe b/gcloud/beta/service-extensions/lb-route-extensions/describe new file mode 100644 index 000000000..0c176d3ce --- /dev/null +++ b/gcloud/beta/service-extensions/lb-route-extensions/describe @@ -0,0 +1,68 @@ +NAME + gcloud beta service-extensions lb-route-extensions describe - describe an + LbRouteExtension resource + +SYNOPSIS + gcloud beta service-extensions lb-route-extensions describe + (LB_ROUTE_EXTENSION : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Show details about an LbRouteExtension resource. + +EXAMPLES + To show details about the LbRouteExtension resource named + my-route-extension located in us-central1. + + $ gcloud beta service-extensions lb-route-extensions describe \ + my-route-extension --location=us-central1 + +POSITIONAL ARGUMENTS + LbRouteExtension resource - The ID of the LbRouteExtension resource. The + arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument lb_route_extension on the command line with a + fully specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + LB_ROUTE_EXTENSION + ID of the LbRouteExtension or fully qualified identifier for the + LbRouteExtension. + + To set the lb_route_extension attribute: + ▸ provide the argument lb_route_extension on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Cloud region in which the resource is located. + + To set the location attribute: + ▸ provide the argument lb_route_extension on the command line with + a fully specified name; + ▸ provide the argument --location on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networkservices/v1beta1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha service-extensions lb-route-extensions describe + diff --git a/gcloud/beta/service-extensions/lb-route-extensions/help b/gcloud/beta/service-extensions/lb-route-extensions/help new file mode 100644 index 000000000..9aa6850bd --- /dev/null +++ b/gcloud/beta/service-extensions/lb-route-extensions/help @@ -0,0 +1,37 @@ +NAME + gcloud beta service-extensions lb-route-extensions - manage Service + Extensions LbRouteExtension resources + +SYNOPSIS + gcloud beta service-extensions lb-route-extensions COMMAND + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Manage Service Extensions LbRouteExtension resources. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + delete + (BETA) Delete an LbRouteExtension resource. + + describe + (BETA) Describe an LbRouteExtension resource. + + import + (BETA) Import an LbRouteExtension resource. + + list + (BETA) List LbRouteExtension resources. + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha service-extensions lb-route-extensions + diff --git a/gcloud/beta/service-extensions/lb-route-extensions/import b/gcloud/beta/service-extensions/lb-route-extensions/import new file mode 100644 index 000000000..31e9f445d --- /dev/null +++ b/gcloud/beta/service-extensions/lb-route-extensions/import @@ -0,0 +1,85 @@ +NAME + gcloud beta service-extensions lb-route-extensions import - import an + LbRouteExtension resource + +SYNOPSIS + gcloud beta service-extensions lb-route-extensions import + (LB_ROUTE_EXTENSION : --location=LOCATION) [--async] [--source=SOURCE] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Import an LbRouteExtension resource defined in a YAML file. + +EXAMPLES + To import an LbRouteExtension resource named my-route-extension from a YAML + file in us-central1, run: + + $ gcloud beta service-extensions lb-route-extensions import \ + my-route-extension --source=my-route-extension.yaml \ + --location=us-central1 + +POSITIONAL ARGUMENTS + LbRouteExtension resource - The ID of the new or updated LbRouteExtension + resource. The arguments in this group can be used to specify the + attributes of this resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument lb_route_extension on the command line with a + fully specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + LB_ROUTE_EXTENSION + ID of the LbRouteExtension or fully qualified identifier for the + LbRouteExtension. + + To set the lb_route_extension attribute: + ▸ provide the argument lb_route_extension on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Cloud region in which the resource is located. + + To set the location attribute: + ▸ provide the argument lb_route_extension on the command line with + a fully specified name; + ▸ provide the argument --location on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --source=SOURCE + Path to a YAML file containing the configuration export data. The YAML + file must not contain any output-only fields. Alternatively, you may + omit this flag to read from standard input. For a schema describing the + export/import format, see: $CLOUDSDKROOT/lib/googlecloudsdk/schemas/... + + $CLOUDSDKROOT is can be obtained with the following command: + + $ gcloud info --format='value(installation.sdk_root)' + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networkservices/v1beta1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha service-extensions lb-route-extensions import + diff --git a/gcloud/beta/service-extensions/lb-route-extensions/list b/gcloud/beta/service-extensions/lb-route-extensions/list new file mode 100644 index 000000000..dc0f75223 --- /dev/null +++ b/gcloud/beta/service-extensions/lb-route-extensions/list @@ -0,0 +1,89 @@ +NAME + gcloud beta service-extensions lb-route-extensions list - list + LbRouteExtension resources + +SYNOPSIS + gcloud beta service-extensions lb-route-extensions list --location=LOCATION + [--filter=EXPRESSION] [--limit=LIMIT] [--page-size=PAGE_SIZE] + [--sort-by=[FIELD,...]] [--uri] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) List all LbRouteExtension resources in the specified location of the + current project. + +EXAMPLES + To list all LbRouteExtension resources in the current project located in + us-central1 region run: + + $ gcloud beta service-extensions lb-route-extensions list \ + --location=us-central1 + +REQUIRED FLAGS + Location resource - The parent location. This represents a Cloud resource. + (NOTE) Some attributes are not given arguments in this group but can be + set in other ways. + + To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. + + To set the location attribute: + ▸ provide the argument --location on the command line. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networkservices/v1beta1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha service-extensions lb-route-extensions list + diff --git a/gcloud/beta/service-extensions/lb-traffic-extensions/delete b/gcloud/beta/service-extensions/lb-traffic-extensions/delete new file mode 100644 index 000000000..3dc251820 --- /dev/null +++ b/gcloud/beta/service-extensions/lb-traffic-extensions/delete @@ -0,0 +1,74 @@ +NAME + gcloud beta service-extensions lb-traffic-extensions delete - delete an + LbTrafficExtension resource + +SYNOPSIS + gcloud beta service-extensions lb-traffic-extensions delete + (LB_TRAFFIC_EXTENSION : --location=LOCATION) [--async] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Delete the specified LbTrafficExtension resource. + +EXAMPLES + To delete an LbTrafficExtension resource named my-traffic-extension in + us-central1, run: + + $ gcloud beta service-extensions lb-traffic-extensions delete \ + my-traffic-extension --location=us-central1 + +POSITIONAL ARGUMENTS + LbTrafficExtension resource - The ID of the deleted LbTrafficExtension + resource. The arguments in this group can be used to specify the + attributes of this resource. (NOTE) Some attributes are not given + arguments in this group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument lb_traffic_extension on the command line with a + fully specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + LB_TRAFFIC_EXTENSION + ID of the LbTrafficExtension or fully qualified identifier for the + LbTrafficExtension. + + To set the lb_traffic_extension attribute: + ▸ provide the argument lb_traffic_extension on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Cloud region in which the resource is located. + + To set the location attribute: + ▸ provide the argument lb_traffic_extension on the command line + with a fully specified name; + ▸ provide the argument --location on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networkservices/v1beta1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha service-extensions lb-traffic-extensions delete + diff --git a/gcloud/beta/service-extensions/lb-traffic-extensions/describe b/gcloud/beta/service-extensions/lb-traffic-extensions/describe new file mode 100644 index 000000000..012477cbe --- /dev/null +++ b/gcloud/beta/service-extensions/lb-traffic-extensions/describe @@ -0,0 +1,68 @@ +NAME + gcloud beta service-extensions lb-traffic-extensions describe - describe an + LbTrafficExtension resource + +SYNOPSIS + gcloud beta service-extensions lb-traffic-extensions describe + (LB_TRAFFIC_EXTENSION : --location=LOCATION) [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Show details of an LbTrafficExtension resource. + +EXAMPLES + To show details about the LbTrafficExtension resource named + my-traffic-extension located in us-central1. + + $ gcloud beta service-extensions lb-traffic-extensions describe \ + my-traffic-extension --location=us-central1 + +POSITIONAL ARGUMENTS + LbTrafficExtension resource - The ID of the LbTrafficExtension resource. + The arguments in this group can be used to specify the attributes of this + resource. (NOTE) Some attributes are not given arguments in this group but + can be set in other ways. + + To set the project attribute: + ◆ provide the argument lb_traffic_extension on the command line with a + fully specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + LB_TRAFFIC_EXTENSION + ID of the LbTrafficExtension or fully qualified identifier for the + LbTrafficExtension. + + To set the lb_traffic_extension attribute: + ▸ provide the argument lb_traffic_extension on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Cloud region in which the resource is located. + + To set the location attribute: + ▸ provide the argument lb_traffic_extension on the command line + with a fully specified name; + ▸ provide the argument --location on the command line. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networkservices/v1beta1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha service-extensions lb-traffic-extensions describe + diff --git a/gcloud/beta/service-extensions/lb-traffic-extensions/help b/gcloud/beta/service-extensions/lb-traffic-extensions/help new file mode 100644 index 000000000..857e6a9bb --- /dev/null +++ b/gcloud/beta/service-extensions/lb-traffic-extensions/help @@ -0,0 +1,37 @@ +NAME + gcloud beta service-extensions lb-traffic-extensions - manage Service + Extensions LbTrafficExtension resources + +SYNOPSIS + gcloud beta service-extensions lb-traffic-extensions COMMAND + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Manage Service Extensions LbTrafficExtension resources. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --help. + + Run $ gcloud help for details. + +COMMANDS + COMMAND is one of the following: + + delete + (BETA) Delete an LbTrafficExtension resource. + + describe + (BETA) Describe an LbTrafficExtension resource. + + import + (BETA) Import an LbTrafficExtension resource. + + list + (BETA) List LbTrafficExtension resources. + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha service-extensions lb-traffic-extensions + diff --git a/gcloud/beta/service-extensions/lb-traffic-extensions/import b/gcloud/beta/service-extensions/lb-traffic-extensions/import new file mode 100644 index 000000000..87d3cabc1 --- /dev/null +++ b/gcloud/beta/service-extensions/lb-traffic-extensions/import @@ -0,0 +1,85 @@ +NAME + gcloud beta service-extensions lb-traffic-extensions import - import an + LbTrafficExtension resource + +SYNOPSIS + gcloud beta service-extensions lb-traffic-extensions import + (LB_TRAFFIC_EXTENSION : --location=LOCATION) [--async] + [--source=SOURCE] [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) Import an LbTrafficExtension resource defined in a YAML file. + +EXAMPLES + To import an LbTrafficExtension resource named my-traffic-extension from a + YAML file in us-central1, run: + + $ gcloud beta service-extensions lb-traffic-extensions import \ + my-traffic-extension --source=my-traffic-extension.yaml \ + --location=us-central1 + +POSITIONAL ARGUMENTS + LbTrafficExtension resource - The ID of the new or updated + LbTrafficExtension resource. The arguments in this group can be used to + specify the attributes of this resource. (NOTE) Some attributes are not + given arguments in this group but can be set in other ways. + + To set the project attribute: + ◆ provide the argument lb_traffic_extension on the command line with a + fully specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + LB_TRAFFIC_EXTENSION + ID of the LbTrafficExtension or fully qualified identifier for the + LbTrafficExtension. + + To set the lb_traffic_extension attribute: + ▸ provide the argument lb_traffic_extension on the command line. + + This positional argument must be specified if any of the other + arguments in this group are specified. + + --location=LOCATION + Cloud region in which the resource is located. + + To set the location attribute: + ▸ provide the argument lb_traffic_extension on the command line + with a fully specified name; + ▸ provide the argument --location on the command line. + +FLAGS + --async + Return immediately, without waiting for the operation in progress to + complete. + + --source=SOURCE + Path to a YAML file containing the configuration export data. The YAML + file must not contain any output-only fields. Alternatively, you may + omit this flag to read from standard input. For a schema describing the + export/import format, see: $CLOUDSDKROOT/lib/googlecloudsdk/schemas/... + + $CLOUDSDKROOT is can be obtained with the following command: + + $ gcloud info --format='value(installation.sdk_root)' + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networkservices/v1beta1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha service-extensions lb-traffic-extensions import + diff --git a/gcloud/beta/service-extensions/lb-traffic-extensions/list b/gcloud/beta/service-extensions/lb-traffic-extensions/list new file mode 100644 index 000000000..6a66dd5aa --- /dev/null +++ b/gcloud/beta/service-extensions/lb-traffic-extensions/list @@ -0,0 +1,90 @@ +NAME + gcloud beta service-extensions lb-traffic-extensions list - list + LbTrafficExtension resources + +SYNOPSIS + gcloud beta service-extensions lb-traffic-extensions list + --location=LOCATION [--filter=EXPRESSION] [--limit=LIMIT] + [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + (BETA) List all LbTrafficExtension resources in the specified location of + the current project. + +EXAMPLES + To list all LbTrafficExtension resources in the current project located in + us-central1 region, run: + + $ gcloud beta service-extensions lb-traffic-extensions list \ + --location=us-central1 + +REQUIRED FLAGS + Location resource - The parent location. This represents a Cloud resource. + (NOTE) Some attributes are not given arguments in this group but can be + set in other ways. + + To set the project attribute: + ◆ provide the argument --location on the command line with a fully + specified name; + ◆ set the property core/project; + ◆ provide the argument --project on the command line. + + This must be specified. + + --location=LOCATION + ID of the location or fully qualified identifier for the location. + + To set the location attribute: + ▸ provide the argument --location on the command line. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +API REFERENCE + This command uses the networkservices/v1beta1 API. The full documentation + for this API can be found at: https://cloud.google.com/networking + +NOTES + This command is currently in beta and might change without notice. This + variant is also available: + + $ gcloud alpha service-extensions lb-traffic-extensions list + diff --git a/gcloud/beta/sql/import/bak b/gcloud/beta/sql/import/bak index c2bb344eb..1420d517e 100644 --- a/gcloud/beta/sql/import/bak +++ b/gcloud/beta/sql/import/bak @@ -5,7 +5,8 @@ NAME SYNOPSIS gcloud beta sql import bak INSTANCE [URI] --database=DATABASE, -d DATABASE [--async] [--bak-type=BAK_TYPE; default="FULL"] [--no-recovery] - [--recovery-only] [--[no-]striped] + [--recovery-only] [--stop-at=STOP_AT] [--stop-at-mark=STOP_AT_MARK] + [--[no-]striped] [--cert-path=CERT_PATH --pvk-path=PVK_PATH (--prompt-for-pvk-password | --pvk-password=PVK_PASSWORD)] [GCLOUD_WIDE_FLAG ...] @@ -52,8 +53,8 @@ OPTIONAL FLAGS complete. --bak-type=BAK_TYPE; default="FULL" - Type of bak file that will be imported, FULL or DIFF. SQL Server only. - BAK_TYPE must be one of: FULL, DIFF. + Type of bak file that will be imported. Applicable to SQL Server only. + BAK_TYPE must be one of: FULL, DIFF, TLOG. --no-recovery Whether or not the SQL Server import is execueted with NORECOVERY @@ -63,6 +64,16 @@ OPTIONAL FLAGS Whether or not the SQL Server import skip download and bring database online. + --stop-at=STOP_AT + Equivalent to SQL Server STOPAT keyword. Used in transaction log import + only. Transaction log import stop at this timestamp. Format: + YYYY-MM-DDTHH:MM:SS. + + --stop-at-mark=STOP_AT_MARK + Equivalent to SQL Server STOPATMARK keyword. Used in transaction log + import only. Transaction log import stop at the given mark. To stop at + given LSN, use --stop-at-mark=lsn:xxx. + --[no-]striped Whether SQL Server import should be striped. Use --striped to enable and --no-striped to disable. diff --git a/gcloud/compute/backend-services/help b/gcloud/compute/backend-services/help index 250628b10..b237be442 100644 --- a/gcloud/compute/backend-services/help +++ b/gcloud/compute/backend-services/help @@ -66,6 +66,9 @@ COMMANDS list List Google Compute Engine backend services. + list-usable + List usable backend services. + remove-backend Remove a backend from a backend service. diff --git a/gcloud/compute/backend-services/list-usable b/gcloud/compute/backend-services/list-usable new file mode 100644 index 000000000..6763fa11b --- /dev/null +++ b/gcloud/compute/backend-services/list-usable @@ -0,0 +1,89 @@ +NAME + gcloud compute backend-services list-usable - list usable backend services + +SYNOPSIS + gcloud compute backend-services list-usable [BACKEND_SERVICE_NAME] + [--global | --region=REGION] [--filter=EXPRESSION] [--limit=LIMIT] + [--page-size=PAGE_SIZE] [--sort-by=[FIELD,...]] [--uri] + [GCLOUD_WIDE_FLAG ...] + +DESCRIPTION + gcloud compute backend-services list-usable retrieves the list of backend + service resources in the specified project for which you have + compute.backendService.get and compute.backendService.use permissions. This + command is useful when you're creating load balancers in a Shared VPC + environment and you want to use cross-project service referencing + (https://cloud.google.com/load-balancing/docs/https#cross-project). You can + use this command to find out which backend services in other projects are + available to you for referencing. + +EXAMPLES + To list all global backend services in a project, run: + + $ gcloud compute backend-services list-usable --global + + To list all backend services in a region, run: + + $ gcloud compute backend-services list-usable --region=REGION + +POSITIONAL ARGUMENTS + [BACKEND_SERVICE_NAME] + Name of the backend service to operate on. + +FLAGS + At most one of these can be specified: + + --global + If set, the backend service is global. + + --region=REGION + Region of the backend service to operate on. Overrides the default + compute/region property value for this command invocation. + +LIST COMMAND FLAGS + --filter=EXPRESSION + Apply a Boolean filter EXPRESSION to each resource item to be listed. + If the expression evaluates True, then that item is listed. For more + details and examples of filter expressions, run $ gcloud topic filters. + This flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --limit=LIMIT + Maximum number of resources to list. The default is unlimited. This + flag interacts with other flags that are applied in this order: + --flatten, --sort-by, --filter, --limit. + + --page-size=PAGE_SIZE + Some services group resource list output into pages. This flag + specifies the maximum number of resources per page. The default is + determined by the service if it supports paging, otherwise it is + unlimited (no paging). Paging may be applied before or after --filter + and --limit depending on the service. + + --sort-by=[FIELD,...] + Comma-separated list of resource field key names to sort by. The + default order is ascending. Prefix a field with ``~'' for descending + order on that field. This flag interacts with other flags that are + applied in this order: --flatten, --sort-by, --filter, --limit. + + --uri + Print a list of resource URIs instead of the default output, and change + the command output to a list of URIs. If this flag is used with + --format, the formatting is applied on this URI list. To display URIs + alongside other keys instead, use the uri() transform. + +GCLOUD WIDE FLAGS + These flags are available to all commands: --access-token-file, --account, + --billing-project, --configuration, --flags-file, --flatten, --format, + --help, --impersonate-service-account, --log-http, --project, --quiet, + --trace-token, --user-output-enabled, --verbosity. + + Run $ gcloud help for details. + +NOTES + These variants are also available: + + $ gcloud alpha compute backend-services list-usable + + $ gcloud beta compute backend-services list-usable + diff --git a/gcloud/compute/security-policies/rules/add-preconfig-waf-exclusion b/gcloud/compute/security-policies/rules/add-preconfig-waf-exclusion index db92d5de7..e503af23c 100644 --- a/gcloud/compute/security-policies/rules/add-preconfig-waf-exclusion +++ b/gcloud/compute/security-policies/rules/add-preconfig-waf-exclusion @@ -5,7 +5,7 @@ NAME SYNOPSIS gcloud compute security-policies rules add-preconfig-waf-exclusion PRIORITY - --target-rule-set=TARGET_RULE_SET + --target-rule-set=TARGET_RULE_SET [--region=REGION] [--request-cookie-to-exclude=[op=OP],[val=VAL]] [--request-header-to-exclude=[op=OP],[val=VAL]] [--request-query-param-to-exclude=[op=OP],[val=VAL]] @@ -60,6 +60,18 @@ REQUIRED FLAGS target for associating request field exclusions. See --target-rule-ids. OPTIONAL FLAGS + --region=REGION + Region of the security policy to add the exclusion configuration for + preconfigured WAF evaluation. If not specified, you might be prompted + to select a region (interactive mode only). + + A list of regions can be fetched by running: + + $ gcloud compute regions list + + Overrides the default compute/region property value for this command + invocation. + --request-cookie-to-exclude=[op=OP],[val=VAL] Adds a request cookie to the request field exclusions associated with the rule set and rule IDs (if given). This specifies a request cookie diff --git a/gcloud/compute/security-policies/rules/create b/gcloud/compute/security-policies/rules/create index 02f1514d1..9ad410316 100644 --- a/gcloud/compute/security-policies/rules/create +++ b/gcloud/compute/security-policies/rules/create @@ -20,6 +20,7 @@ SYNOPSIS [--rate-limit-threshold-count=RATE_LIMIT_THRESHOLD_COUNT] [--rate-limit-threshold-interval-sec=RATE_LIMIT_THRESHOLD_INTERVAL_SEC] [--redirect-target=REDIRECT_TARGET] [--redirect-type=REDIRECT_TYPE] + [--region=REGION] [--request-headers-to-add=[REQUEST_HEADERS_TO_ADD,...]] [--security-policy=SECURITY_POLICY] [GCLOUD_WIDE_FLAG ...] @@ -201,6 +202,17 @@ OPTIONAL FLAGS while --redirect-target is given. REDIRECT_TYPE must be one of: google-recaptcha, external-302. + --region=REGION + Region of the security policy to add. If not specified, you might be + prompted to select a region (interactive mode only). + + A list of regions can be fetched by running: + + $ gcloud compute regions list + + Overrides the default compute/region property value for this command + invocation. + --request-headers-to-add=[REQUEST_HEADERS_TO_ADD,...] A comma-separated list of header names and header values to add to requests that match this rule. diff --git a/gcloud/compute/security-policies/rules/delete b/gcloud/compute/security-policies/rules/delete index 858265cf4..9b1d010b4 100644 --- a/gcloud/compute/security-policies/rules/delete +++ b/gcloud/compute/security-policies/rules/delete @@ -4,7 +4,8 @@ NAME SYNOPSIS gcloud compute security-policies rules delete [PRIORITY ...] - [--security-policy=SECURITY_POLICY] [GCLOUD_WIDE_FLAG ...] + [--region=REGION] [--security-policy=SECURITY_POLICY] + [GCLOUD_WIDE_FLAG ...] DESCRIPTION gcloud compute security-policies rules delete is used to delete security @@ -23,6 +24,17 @@ POSITIONAL ARGUMENTS 2147483647 is the lowest priority. FLAGS + --region=REGION + Region of the security policy to delete. If not specified, you might be + prompted to select a region (interactive mode only). + + A list of regions can be fetched by running: + + $ gcloud compute regions list + + Overrides the default compute/region property value for this command + invocation. + --security-policy=SECURITY_POLICY The security policy that this rule belongs to. diff --git a/gcloud/compute/security-policies/rules/describe b/gcloud/compute/security-policies/rules/describe index 5a14c26f1..a592261b5 100644 --- a/gcloud/compute/security-policies/rules/describe +++ b/gcloud/compute/security-policies/rules/describe @@ -3,7 +3,7 @@ NAME security policy rule SYNOPSIS - gcloud compute security-policies rules describe PRIORITY + gcloud compute security-policies rules describe PRIORITY [--region=REGION] [--security-policy=SECURITY_POLICY] [GCLOUD_WIDE_FLAG ...] DESCRIPTION @@ -23,6 +23,17 @@ POSITIONAL ARGUMENTS 2147483647 is the lowest priority. FLAGS + --region=REGION + Region of the security policy to describe. If not specified, you might + be prompted to select a region (interactive mode only). + + A list of regions can be fetched by running: + + $ gcloud compute regions list + + Overrides the default compute/region property value for this command + invocation. + --security-policy=SECURITY_POLICY The security policy that this rule belongs to. diff --git a/gcloud/compute/security-policies/rules/remove-preconfig-waf-exclusion b/gcloud/compute/security-policies/rules/remove-preconfig-waf-exclusion index 0e4e022fe..b790dab16 100644 --- a/gcloud/compute/security-policies/rules/remove-preconfig-waf-exclusion +++ b/gcloud/compute/security-policies/rules/remove-preconfig-waf-exclusion @@ -5,7 +5,7 @@ NAME SYNOPSIS gcloud compute security-policies rules remove-preconfig-waf-exclusion - PRIORITY --target-rule-set=TARGET_RULE_SET + PRIORITY --target-rule-set=TARGET_RULE_SET [--region=REGION] [--request-cookie-to-exclude=[op=OP],[val=VAL]] [--request-header-to-exclude=[op=OP],[val=VAL]] [--request-query-param-to-exclude=[op=OP],[val=VAL]] @@ -87,6 +87,18 @@ REQUIRED FLAGS to remove request field exclusions regardless of the target. OPTIONAL FLAGS + --region=REGION + Region of the security policy to remove the exclusion configuration for + preconfigured WAF evaluation. If not specified, you might be prompted + to select a region (interactive mode only). + + A list of regions can be fetched by running: + + $ gcloud compute regions list + + Overrides the default compute/region property value for this command + invocation. + --request-cookie-to-exclude=[op=OP],[val=VAL] Removes a request cookie from the existing request field exclusions associated with the rule set and rule IDs (if given). diff --git a/gcloud/compute/security-policies/rules/update b/gcloud/compute/security-policies/rules/update index 3945df14e..0722b21ba 100644 --- a/gcloud/compute/security-policies/rules/update +++ b/gcloud/compute/security-policies/rules/update @@ -19,6 +19,7 @@ SYNOPSIS [--rate-limit-threshold-count=RATE_LIMIT_THRESHOLD_COUNT] [--rate-limit-threshold-interval-sec=RATE_LIMIT_THRESHOLD_INTERVAL_SEC] [--redirect-target=REDIRECT_TARGET] [--redirect-type=REDIRECT_TYPE] + [--region=REGION] [--request-headers-to-add=[REQUEST_HEADERS_TO_ADD,...]] [--security-policy=SECURITY_POLICY] [--expression=EXPRESSION | --src-ip-ranges=[SRC_IP_RANGE,...]] @@ -190,6 +191,17 @@ FLAGS while --redirect-target is given. REDIRECT_TYPE must be one of: google-recaptcha, external-302. + --region=REGION + Region of the security policy to update. If not specified, you might be + prompted to select a region (interactive mode only). + + A list of regions can be fetched by running: + + $ gcloud compute regions list + + Overrides the default compute/region property value for this command + invocation. + --request-headers-to-add=[REQUEST_HEADERS_TO_ADD,...] A comma-separated list of header names and header values to add to requests that match this rule. diff --git a/gcloud/filestore/instances/create b/gcloud/filestore/instances/create index fb7e10cc7..67fcb9702 100644 --- a/gcloud/filestore/instances/create +++ b/gcloud/filestore/instances/create @@ -102,6 +102,9 @@ REQUIRED FLAGS ▸ BASIC_SSD: 2.5TB-63.9TB in 1GB increments or its multiples. ▸ HIGH_SCALE_SSD: 10TB-100TB in 2.5TB increments or its multiples. + ▸ ZONAL: 1TB-100TB: + ▫ 1TB-9.75TB in 256GB increments or its multiples. + ▫ 10TB-100TB in 2.5TB increments or its multiples. ▸ ENTERPRISE: 1TB-10TB in 256GB increments or its multiples. name @@ -217,14 +220,19 @@ OPTIONAL FLAGS ENTERPRISE instances offer the features and availability needed for mission-critical workloads. high-scale-ssd - High Scale instances offer NFS storage system with expanded - capacity and performance scaling capabilities. + High Scale SSD instance, an alias for ZONAL. Use ZONAL instead + whenever possible. premium Premium Filestore instance, An alias for BASIC_SSD. Use BASIC_SSD instead whenever possible. standard Standard Filestore instance, An alias for BASIC_HDD. Use BASIC_HDD instead whenever possible. + zonal + Zonal instances offer NFS storage system suitable for high + performance computing application requirements. It offers fast + performance that scales with capacity and allows you to grow and + shrink capacity. Key resource - The Cloud KMS (Key Management Service) cryptokey that will be used to protect the instance. The 'Filestore Service Agent' service diff --git a/gcloud/filestore/instances/update b/gcloud/filestore/instances/update index 2027c0b3d..dc701a174 100644 --- a/gcloud/filestore/instances/update +++ b/gcloud/filestore/instances/update @@ -147,6 +147,9 @@ FLAGS ▸ BASIC_HDD: 1TB-63.9TB in 1GB increments or its multiples. ▸ BASIC_SSD: 2.5TB-63.9TB in 1GB increments or its multiples. ▸ HIGH_SCALE_SSD: 10TB-100TB in 2.5TB increments or its multiples. + ▸ ZONAL: 1TB-100TB: + ▫ 1TB-9.75TB in 256GB increments or its multiples. + ▫ 10TB-100TB in 2.5TB increments or its multiples. ▸ ENTERPRISE: 1TB-10TB in 256GB increments or its multiples. name diff --git a/gcloud/iam/workload-identity-pools/providers/create-oidc b/gcloud/iam/workload-identity-pools/providers/create-oidc index 1ad918cb4..14f2d3266 100644 --- a/gcloud/iam/workload-identity-pools/providers/create-oidc +++ b/gcloud/iam/workload-identity-pools/providers/create-oidc @@ -217,9 +217,9 @@ OPTIONAL FLAGS "use": "sig", "kid": "", "n": "", - "e": "" - "x": "" - "y": "" + "e": "", + "x": "", + "y": "", "crv": "" } ] diff --git a/gcloud/iam/workload-identity-pools/providers/update-oidc b/gcloud/iam/workload-identity-pools/providers/update-oidc index c6d0113eb..904c70370 100644 --- a/gcloud/iam/workload-identity-pools/providers/update-oidc +++ b/gcloud/iam/workload-identity-pools/providers/update-oidc @@ -216,9 +216,9 @@ FLAGS "use": "sig", "kid": "", "n": "", - "e": "" - "x": "" - "y": "" + "e": "", + "x": "", + "y": "", "crv": "" } ] diff --git a/gcloud/kms/raw-decrypt b/gcloud/kms/raw-decrypt index 2b7da7a8a..431334cae 100644 --- a/gcloud/kms/raw-decrypt +++ b/gcloud/kms/raw-decrypt @@ -3,12 +3,11 @@ NAME SYNOPSIS gcloud kms raw-decrypt --ciphertext-file=CIPHERTEXT_FILE - --plaintext-file=PLAINTEXT_FILE + --plaintext-file=PLAINTEXT_FILE --version=VERSION [--additional-authenticated-data-file=ADDITIONAL_AUTHENTICATED_DATA_FILE] [--initialization-vector-file=INITIALIZATION_VECTOR_FILE] [--key=KEY] [--keyring=KEYRING] [--location=LOCATION] - [--skip-integrity-verification] [--version=VERSION] - [GCLOUD_WIDE_FLAG ...] + [--skip-integrity-verification] [GCLOUD_WIDE_FLAG ...] DESCRIPTION gcloud kms raw-decrypt decrypts the given ciphertext file using the given @@ -54,6 +53,9 @@ REQUIRED FLAGS --plaintext-file=PLAINTEXT_FILE File path of the plaintext file to store the decrypted data. + --version=VERSION + Version to use for decryption. + OPTIONAL FLAGS --additional-authenticated-data-file=ADDITIONAL_AUTHENTICATED_DATA_FILE File path to the optional file containing the additional authenticated @@ -75,9 +77,6 @@ OPTIONAL FLAGS --skip-integrity-verification Skip integrity verification on request and response API fields. - --version=VERSION - Version to use for decryption. - GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/kms/raw-encrypt b/gcloud/kms/raw-encrypt index 25015a489..7a0d47c16 100644 --- a/gcloud/kms/raw-encrypt +++ b/gcloud/kms/raw-encrypt @@ -3,12 +3,11 @@ NAME SYNOPSIS gcloud kms raw-encrypt --ciphertext-file=CIPHERTEXT_FILE - --plaintext-file=PLAINTEXT_FILE + --plaintext-file=PLAINTEXT_FILE --version=VERSION [--additional-authenticated-data-file=ADDITIONAL_AUTHENTICATED_DATA_FILE] [--initialization-vector-file=INITIALIZATION_VECTOR_FILE] [--key=KEY] [--keyring=KEYRING] [--location=LOCATION] - [--skip-integrity-verification] [--version=VERSION] - [GCLOUD_WIDE_FLAG ...] + [--skip-integrity-verification] [GCLOUD_WIDE_FLAG ...] DESCRIPTION Encrypts the given plaintext file using the given CryptoKey containing a @@ -73,6 +72,9 @@ REQUIRED FLAGS --plaintext-file=PLAINTEXT_FILE File path of the plaintext file to encrypt. + --version=VERSION + Version to use for encryption. + OPTIONAL FLAGS --additional-authenticated-data-file=ADDITIONAL_AUTHENTICATED_DATA_FILE File path to the optional file containing the additional authenticated @@ -94,9 +96,6 @@ OPTIONAL FLAGS --skip-integrity-verification Skip integrity verification on request and response API fields. - --version=VERSION - Version to use for encryption. - GCLOUD WIDE FLAGS These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, diff --git a/gcloud/sql/import/bak b/gcloud/sql/import/bak index 8d620121b..eb9bd3df2 100644 --- a/gcloud/sql/import/bak +++ b/gcloud/sql/import/bak @@ -5,7 +5,8 @@ NAME SYNOPSIS gcloud sql import bak INSTANCE [URI] --database=DATABASE, -d DATABASE [--async] [--bak-type=BAK_TYPE; default="FULL"] [--no-recovery] - [--recovery-only] [--[no-]striped] + [--recovery-only] [--stop-at=STOP_AT] [--stop-at-mark=STOP_AT_MARK] + [--[no-]striped] [--cert-path=CERT_PATH --pvk-path=PVK_PATH (--prompt-for-pvk-password | --pvk-password=PVK_PASSWORD)] [GCLOUD_WIDE_FLAG ...] @@ -51,8 +52,8 @@ OPTIONAL FLAGS complete. --bak-type=BAK_TYPE; default="FULL" - Type of bak file that will be imported, FULL or DIFF. SQL Server only. - BAK_TYPE must be one of: FULL, DIFF. + Type of bak file that will be imported. Applicable to SQL Server only. + BAK_TYPE must be one of: FULL, DIFF, TLOG. --no-recovery Whether or not the SQL Server import is execueted with NORECOVERY @@ -62,6 +63,16 @@ OPTIONAL FLAGS Whether or not the SQL Server import skip download and bring database online. + --stop-at=STOP_AT + Equivalent to SQL Server STOPAT keyword. Used in transaction log import + only. Transaction log import stop at this timestamp. Format: + YYYY-MM-DDTHH:MM:SS. + + --stop-at-mark=STOP_AT_MARK + Equivalent to SQL Server STOPATMARK keyword. Used in transaction log + import only. Transaction log import stop at the given mark. To stop at + given LSN, use --stop-at-mark=lsn:xxx. + --[no-]striped Whether SQL Server import should be striped. Use --striped to enable and --no-striped to disable. diff --git a/gcloud/storage/rsync b/gcloud/storage/rsync index 0ef47820f..b7a82bb11 100644 --- a/gcloud/storage/rsync +++ b/gcloud/storage/rsync @@ -72,7 +72,7 @@ EXAMPLES $ gcloud storage rsync dir1 dir2 --recursive - \ --delete-unmatched-destination-objects - To mirror your content across cloud providers: + To mirror your objects across cloud providers: $ gcloud storage rsync gs://my-gs-bucket s3://my-s3-bucket \ --recursive --delete-unmatched-destination-objects @@ -129,7 +129,8 @@ FLAGS --delete-unmatched-destination-objects Delete extra files under DESTINATION not found under SOURCE. By default - extra files are not deleted. + extra files are not deleted. Managed folders are not affected by this + flag. Note: this option can delete data quickly if you specify the wrong source and destination combination. diff --git a/gcloud/storage/sign-url b/gcloud/storage/sign-url index a7c27fc68..02cad0215 100644 --- a/gcloud/storage/sign-url +++ b/gcloud/storage/sign-url @@ -3,10 +3,11 @@ NAME can be used by anyone SYNOPSIS - gcloud storage sign-url URL [URL ...] --private-key-file=PRIVATE_KEY_FILE + gcloud storage sign-url URL [URL ...] [--duration=DURATION, -d DURATION; default=3600] [--headers=[KEY=VALUE,...]] [--http-verb=HTTP_VERB, -m HTTP_VERB; default="GET"] + [--private-key-file=PRIVATE_KEY_FILE] [--private-key-password=PRIVATE_KEY_PASSWORD, -p PRIVATE_KEY_PASSWORD] [--query-params=[KEY=VALUE,...]] [--region=REGION, -r REGION] [GCLOUD_WIDE_FLAG ...] @@ -14,7 +15,10 @@ SYNOPSIS DESCRIPTION gcloud storage sign-url will generate a signed URL that embeds authentication data so the URL can be used by someone who does not have a - Google account. Please see the Signed URLs documentation + Google account. Use the global --impersonate-service-account flag to + specify the service account that will be used to sign the specified URL or + authenticate with a service account directly. Otherwise, a service account + key is required. Please see the Signed URLs documentation (https://cloud.google.com/storage/docs/access-control/signed-urls) for background about signed URLs. @@ -24,26 +28,29 @@ DESCRIPTION returns an error: gcloud storage sign-url gs://some-bucket/some-directory/. EXAMPLES - To create a signed url for downloading an object valid for 10 minutes: + To create a signed url for downloading an object valid for 10 minutes with + the credentials of an impersonated service account: $ gcloud storage sign-url gs://my-bucket/file.txt --duration=10m \ - --private-key-file=key.json + --impersonate-service-account=sa@my-project.iam.gserviceaccount.\ + com - To create a signed url that will bill to my-billing-project: + To create a signed url that will bill to my-billing-project when already + authenticated as a service account: $ gcloud storage sign-url gs://my-bucket/file.txt \ - --query-params=userProject=my-billing-project \ - --private-key-file=key.json + --query-params=userProject=my-billing-project To create a signed url, valid for one hour, for uploading a plain text file via HTTP PUT: $ gcloud storage sign-url gs://my-bucket/file.txt --http-verb=PUT \ --duration=1h --headers=content-type=text/plain \ - --private-key-file=key.json + --impersonate-service-account=sa@my-project.iam.gserviceaccount.\ + com To create a signed URL that initiates a resumable upload for a plain text - file: + file using a private key file: $ gcloud storage sign-url gs://my-bucket/file.txt --http-verb=POST \ --headers=x-goog-resumable=start,content-type=text/plain \ @@ -53,20 +60,19 @@ POSITIONAL ARGUMENTS URL [URL ...] The URLs to be signed. May contain wildcards. -REQUIRED FLAGS - --private-key-file=PRIVATE_KEY_FILE - The service account private key used to generate the cryptographic - signature for the generated URL. Must be in PKCS12 or JSON format. If - encrypted, will prompt for the passphrase used to protect the private - key file (default notasecret). - -OPTIONAL FLAGS +FLAGS --duration=DURATION, -d DURATION; default=3600 Specifies the duration that the signed url should be valid for, default duration is 1 hour. For example 10s for 10 seconds. See $ gcloud topic datetimes for information on duration formats. - The max duration allowed is 7 days when PRIVATE_KEY_FILE is used. + The max duration allowed is 12 hours. This limitation exists because + the system-managed key used to sign the URL may not remain valid after + 12 hours. + + Alternatively, the max duration allowed is 7 days when signing with + either the --private-key-file flag or an account that authorized with + gcloud auth activate-service-account. --headers=[KEY=VALUE,...] Specifies the headers to be used in the signed request. Possible @@ -79,8 +85,19 @@ OPTIONAL FLAGS session, you will need to specify the x-goog-resumable:start header in the request or else signature validation will fail. + --private-key-file=PRIVATE_KEY_FILE + The service account private key used to generate the cryptographic + signature for the generated URL. Must be in PKCS12 or JSON format. If + encrypted, will prompt for the passphrase used to protect the private + key file (default notasecret). + + Note: Service account keys are a security risk if not managed + correctly. Review best practices for managing service account keys + (https://cloud.google.com/iam/docs/best-practices-for-managing-service-account-keys) + before using this option. + --private-key-password=PRIVATE_KEY_PASSWORD, -p PRIVATE_KEY_PASSWORD - Specifies the private key password instead of prompting. + Specifies the PRIVATE_KEY_FILE password instead of prompting. --query-params=[KEY=VALUE,...] Specifies the query parameters to be used in the signed request.